This Privacy Policy is provided pursuant to art. 13 of the European Regulation n. 679/2016 and applies exclusively to all data collected through the website www.kimafestival.com. This Privacy Policy is subject to updates which will be published promptly on the Website. This Privacy Policy, together with the Terms and Conditions, any other documents referred to it and the Cookie Policy, establish the basis on which the User’s Personal Data will be processed.
Data Controller
The Data Controller of the Data collected from this Website is Kima S.S.D. A.R.L., with registered office in Santa Maria Nuova (AN), 60030, Piazza Del Torrione n. 23, VAT number 02829790423 email: kimafestival@gmail.com.
Disclosure obligations for public disbursements:
state aid and de minimis aid received by the company are contained in the Registro nazionale degli aiuti di Stato to art. 52 of Law 234/2012 “and available at the following link, inserting as a search key in the tax code field 02829790423
https://www.rna.gov.it/RegistroNazionaleTrasparenza/faces/pages/TrasparenzaAiuto.jspx
Methods of Processing Personal Data
The Personal Data provided or acquired will be subject to processing based on principles of correctness, lawfulness, transparency, and protection of confidentiality pursuant to current regulations. The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
Purpose of the processing of personal data and legal basis
Personal data can be collected independently by the owner or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of the Users, of a technical-IT nature (e.g., the IP address, the type of browser used, the operating system, the name, and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the internet. These data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and / or to check its correct functioning and will be deleted immediately after processing.
The Data that the User chooses to provide spontaneously are collected to allow the Website to provide its services, as well as for the following purposes:
a) to fulfill the obligations arising from the contract stipulated between the User and the Owner for the sale of the Products on the Website and to provide the information requested by the User. This treatment is mandatory for the execution of the contract of which the User is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject;
b) for any registration procedure aimed at purchasing the Products and for the purchase procedure in which to enter your personal data and billing or similar tax profiles. In this case, the Data are processed to execute the Contract stipulated, to contact the User in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management, and termination of the Contract. same. This treatment is mandatory for the execution of the contract of which the User is part of it;
c) to fulfill any type of obligation contemplated and envisaged by current laws, regulations, related regulations, commercial uses, and tax / fiscal matters. This treatment is mandatory to fulfill a legal obligation to which the Data Controller is subject;
d) for other ancillary purposes or related to those indicated above and, in any case, falling within the scope of the Website’s activities;
e) to follow up on the specific requests addressed to the Owner by the User for communications of an informative nature relating to the Services of the same Owner, via e-mail messages or by filling in the contact form and other communication tools such as telephone or instant messaging WhatsApp Business. This processing is optional and based on the User’s consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the Services offered by the Owner;
f) for sending information and promotional and commercial offers sent by e-mail, post, or text message. This treatment is based on the consent freely expressed by the User;
g) for sending promotional and commercial information and offers via the newsletter service to stay updated on the activities carried out by the Data Controller. This treatment is based on the consent freely expressed by the User;
h) for soft spam purposes to allow the Owner to send promotional communications by e-mail to the User concerning Products and / or Services purchased without the need for the User’s express and prior consent, as required by art. 130, paragraph 4, of the Privacy Code, and provided that the user does not exercise the right to object; This treatment is based on art. 130, paragraph 4, of the Privacy Code as amended by Legislative Decree 101 of 2018;
i) to perform statistical analysis on aggregate and anonymous data to analyze the behavior of the User to improve the products and services provided by the Owner as well as meet the User’s expectations;
l) for profiling activities for marketing purposes. This treatment is based on the consent freely expressed by the User.
Category of Personal Data processed
Among the Personal Data processed by this Website, either independently or through third parties, there are Common Data such as: Cookies, Usage Data, name, email, telephone, Tax data useful for purchase and Personal Data useful for the delivery of the Product purchased. The optional, explicit, and voluntary sending of e-mails via the Contact Form or by means of the addresses indicated on this Website, entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the e-mail.
Data communication
In addition to the Data Controller, in some cases, may have access to the Data:
a) categories of specially trained persons involved in the organization of the website (administrative, commercial, marketing, legal, system administrators);
b) external subjects (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Managers, if appointed, can always be requested from the Data Controller;
c) public or private subjects who can access the Data in compliance with legal obligations;
d) subjects who perform ancillary and instrumental tasks with respect to the activity of the Owner;
Processing times
As expressly provided by art. 5, co. 1, lett. e) of the GDPR, the Data are kept for the time necessary to process them in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:
– The data collected for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;
– The data collected for tax / administrative obligations or contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;
– The Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied; The User can obtain further information regarding the legitimate interest pursued by the Owner by contacting the Owner.
– The Data collected on the basis of the User’s consent may be kept until such consent is revoked;
The Data may be kept by the Data Controller for a longer period in compliance with legal obligations or by order of an authority.
At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, cancellation, rectification, and portability of the Data will no longer be exercised.
Cookies
This website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social network functions and analyze traffic. Cookie Policy
Place of processing and transfer of data abroad
The Data are processed at the Data Controller’s operational headquarters. For more information, you can contact the Data Controller. The Data may be processed by natural persons and / or legal entities operating on behalf of the Data Controller and by virtue of specific contractual obligations and based in EU or non-EU member countries. In the case that the Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate data protection.
Tools used for the processing of personal data
CONTACT FORM
By filling in the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal Data collected through Contact Form: Email, Name.
WPForms (WPForms, LLC.)
WPForms is a Form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified by the Privacy Policy of the service. Place of processing: USA – Privacy Policy
OTHER CONTACT TOOLS
WhatsApp Business
WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For the purposes of the processing methods, the WhatsApp Business Data Processing Terms are also referred to, available at the following link: https://www.whatsapp.com/legal/business-data-processing-terms/. User data will transit through WhatsApp Business services according to the terms that WhatsApp reports in the document “WhatsApp Business Terms of Service” at the following link: https://www.whatsapp.com/legal/business-terms/. Personal data collected: telephone number, email address, usage data, cookies. Place of processing: Ireland – Privacy Policy
EMAIL ADDRESS MANAGEMENT
These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time the messages are displayed by the User, as well as to the User’s interaction with them, such as information on clicks on links inserted in messages.
Newsletter
By registering for the newsletter, the User’s email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User’s email address could also be added to this list because of registering on this Site or after making a purchase. The User can choose at any time to unsubscribe from the newsletter by clicking on a specific button that he will find in the emails. After clicking on the delete button, the User Data will be deleted immediately from the “email marketing” software. Personal data collected: email and name. This Website uses the newsletter service provided by:
SendinBlue (SendinBlue SAS)
SendinBlue is a service that organizes and analyzes the distribution of newsletters. If a User does not want their Data to be managed by SendinBlue, they will need to unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter sent. Personal Data collected: Email and Name. Place of processing: FRANCE – Privacy Policy
REVIEW OF PRODUCTS SOLD
The User can provide a review relating to a purchase of a Product made on the Website.
SPAM PROTECTION
These services analyze the traffic of this Website, potentially containing Users’ Personal Data, to filter it from parts of traffic, messages and contents recognized as SPAM.
WP Cerber Security (Cerber Tech, Inc.)
To prevent cyber-attacks and block suspicious users and IP addresses, this Website uses the Wp Cerber Security plugin. Place of processing: USA – Privacy Policy
REGISTRATION TO THE WEBSITE
With the registration service, the User allows the Site to identify him and give him access to dedicated services.
The user registers directly on the site by filling out the form and providing their data.
STATISTICS
The statistical services only allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. This website uses the following services:
1. Google Analytics (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Google may also transfer this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google. The IP address anonymization function is active on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be incorporated into other data already held by Google.
At the following link https://tools.google.com/dlpage/gaoptout?hl=it the browser add-on for deactivating Google Analytics is made available by Google. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
2. Facebook pixel conversion tracking (Meta Platforms, Inc.)
Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel tracks conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage data. Place of processing: Ireland – Privacy Policy.
INTERACTION WITH SOCIAL NETWORKS
These services allow interaction with social networks directly from the pages of this website. The interactions and information acquired from this Website are in any case subject to the User’s privacy settings relating to each social network. In the case that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
1. Facebook (Meta Platforms, Inc.)
The Facebook buttons are services for interacting with the Facebook social network, provided by Meta Platforms, Inc. Personal data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy
2. Instagram (Meta Platforms, Inc.)
The Instagram buttons are services for interacting with the Instagram social network, provided by Meta Platforms, Inc. Personal data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy
3. Youtube (Google Ireland Limited)
Youtube buttons are interaction services with the video content viewing service managed by Google. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
4. Spotify (Spotify AB)
Spotify buttons are interaction services with the service provided by Spotify AB. Personal Data collected: Various types of Data as specified in the Privacy Policy of the service. Place of processing: Sweden – Privacy Policy
REMARKETING AND RETARGETING
These services allow this Website to communicate, optimize and serve advertisements based on the past use of this Website by the User. This activity is carried out by tracking Usage Data and the use of Cookies. This website uses the following services:
Facebook Remarketing (Meta Platforms, Inc.)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which connects the activity of this Website with the Facebook advertising network. This website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel it is possible to understand the actions that people perform on the Website. The data collected can be used for:
– make sure your ads are shown to the right people;
– create audience groups to target advertisements;
– take advantage of the additional advertising tools of the platform on which you advertise
The information collected is anonymous to the operators of this site and cannot be used to identify the identity of a single user. However, the information is saved and analyzed by Facebook, which could link the action to a single profile and use this information for internal Facebook advertising purposes, as outlined in Facebook’s privacy policy. This will allow Facebook to show advertisements both on Facebook and on third-party sites. The Site Owner has no control over how this data is used. For more information on how users can protect their privacy, please refer to the Facebook Privacy Policy.
CONTENT ON EXTERNAL PLATFORMS
These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
In the case that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
This Website uses
1. Youtube (Google Ireland Limited)
Youtube is a video content viewing service managed by Google that allows this website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
2. YITH Event Tickets (Your Inspiration Solutions S.L.U.)
Yith event Tickets is a plug-in that allows the Data Controller to manage the online process of selling tickets for events organized and managed by the same. Personal Data collected: Cookies, Usage Data and various types of Data as specified in the privacy policy of the service. Place of processing: Spain – Privacy Policy
PAYMENT MANAGEMENT
The payment management services allow this Website to process payments by credit card, bank transfer or other tools. The data used for the payment are acquired directly by the manager of the requested payment service without being processed in any way by this site. Some of these services may also allow the scheduled sending of messages to the user, such as emails containing invoices or notifications regarding the payment. This website uses the following services:
PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A Inc.)
PayPal is a payment service provided by PayPal Europe S.à.r.l. et Cie, S.C.A Inc., which allows the User to make online payments using their PayPal credentials. Personal data collected: Cookies and various types of data as specified in the privacy policy of the service. Place of processing: Luxembourg – Privacy Policy
Exercise of the rights of the interested party
The interested party has the right to exercise the faculties provided for in Articles 7, 15-22 of the European Reg. 679/2016. In particular, the interested party has the right to withdraw his consent at any time and, upon simple request to the Data Controller, he may request access to Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments (so-called portability), obtain updating, limitation of processing, rectification of data and cancellation of those processed in breach of current legislation. He has the right, for legitimate reasons, to oppose the processing of personal data concerning him and the processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data. The interested party may exercise his rights by contacting the Data Controller by email at the address: kimafestival@gmail.com.
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, referring to the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the User is required to cease using this Website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that time. The Owner is not responsible for updating all links that can be viewed in this Privacy Policy, therefore whenever a link is not functional and / or updated, Users acknowledge and accept that they must always refer to the document and / or section of the sites. internet accessed from this link.
Privacy Policy updated in March 2022
English 
Italian