Privacy Policy
English translation provided for information only. In case of discrepancy, only the Italian version is legally binding.
Privacy Policy of specialistadaily.com
This Website collects certain Personal Data from its Users.
This document can be printed using the print command available in the settings of any browser.
Data Controller
Kefa srls - Via Antonio Gramsci 68/70/72 -Giarre - 95014 (CT)
Data Controller's e-mail address: direzione.kefa@gmail.com
Types of Data collected
Among the Personal Data collected by this Website, either independently or through third parties, are: Trackers; Usage Data; e-mail address; telephone number; first name; last name; physical address; company name; country; state; username; various types of Data; purchase history; billing address; shipping address; payment information; device information; date of birth; city.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by means of specific information notices displayed prior to the collection of such Data.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website are mandatory. Should the User refuse to provide them, it may be impossible for this Website to provide the Service. Where this Website indicates certain Data as optional, Users are free to refrain from providing such Data, without this having any consequence on the availability of the Service or its operation.
Users who are uncertain as to which Data are mandatory are encouraged to contact the Data Controller.
Any use of Cookies - or of other tracking tools - by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy.
The User assumes responsibility for any third-party Personal Data obtained, published or shared through this Website.
Methods and place of processing of the Data collected
Processing methods
The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data.
Processing is carried out by means of IT and/or telematic tools, following organisational procedures and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to other parties involved in the organisation of this Website (administrative, sales and marketing staff, legal advisers, system administrators) or to external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) appointed, where necessary, as Data Processors by the Data Controller. The up-to-date list of Data Processors may be requested from the Data Controller at any time.
Place
The Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one in which the User is located. For further information on the place of processing, the User may refer to the section concerning the details of the processing of Personal Data.
Retention period
Unless otherwise indicated in this document, Personal Data are processed and stored for as long as required by the purpose for which they were collected and may be retained for a longer period owing to any legal obligations or on the basis of the Users' consent.
Purposes of the Processing of the Data collected
The User's Data are collected to enable the Data Controller to provide the Service, comply with its legal obligations, respond to enforcement requests or actions, protect its own rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Analytics, Tag management, User database management, Contact management and sending of messages, Infrastructure monitoring, Platform services and hosting, Remarketing and behavioural targeting, Advertising, Heat mapping and session recording, Interaction with online survey platforms and Interaction with data collection platforms and other third parties.
For detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.
Details on the processing of Personal Data
Personal Data are collected for the following purposes and using the following services:
Contact management and sending of messages
This type of service makes it possible to manage a database of email contacts, telephone contacts or contacts of any other kind, used to communicate with the User.
These services may also make it possible to collect data concerning the date and time at which the messages were viewed by the User, as well as the User's interaction with them, such as information on clicks on the links included in the messages.
Klaviyo (Klaviyo Inc.)
Klaviyo is an address management and email message sending service provided by Klaviyo Inc.
In order to use the service provided by Klaviyo, the Data Controller generally shares information concerning Users (who make purchases), such as contact details and purchase history. For further information regarding the scope of such sharing, please refer to the details set out below under the heading “Personal Data processed”.
Personal Data processed: surname; purchase history; Usage Data; email address; physical address; country; first name; telephone number; company name; state; Tracker; username; various types of Data.
Place of processing: United States – Privacy Policy – Opt out.
HubSpot Email (HubSpot, Inc.)
HubSpot Email is an address management and email message sending service provided by HubSpot, Inc.
Personal Data processed: Usage Data; email address.
Place of processing: United States – Privacy Policy.
User database management
This type of service allows the Data Controller to build user profiles starting from an email address, a name or any other information that the User provides to this Website, as well as to track the User's activities by means of statistical features. This Personal Data may also be cross-referenced with publicly available information about the User (such as social network profiles) and used to build private profiles that the Data Controller can view and use to improve this Website.
Some of these services may also allow the scheduled sending of messages to the User, such as emails based on specific actions performed on this Website.
HubSpot CRM (HubSpot, Inc.)
HubSpot CRM is a User database management service provided by HubSpot, Inc.
Personal Data processed: email address; telephone number; various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Klaviyo CRM (Klaviyo Inc.)
Klaviyo CRM is a user database management service provided by Klaviyo Inc.
Klaviyo CRM may also be used as a means of communication, for exchanging emails or messages by means of this Website.
In order to use the service provided by Klaviyo, the Data Controller generally shares information concerning Users (who make purchases), such as contact details and purchase history. For further information regarding the scope of such sharing, please refer to the details set out below under the heading “Personal Data processed”.
Personal Data processed: city; surname; purchase history; date of birth; Usage Data; email address; physical address; country; first name; telephone number; company name; state; Tracker; various types of Data.
Place of processing: United States – Privacy Policy.
Tag management
This type of service serves the centralised management of the tags or scripts used on this Website.
The use of such services entails the User's Data flowing through them and, where applicable, being retained.
Google Tag Manager (Google LLC)
Google Tag Manager is a tag management service provided by Google LLC.
Personal Data processed: Usage Data; Tracker.
Place of processing: United States – Privacy Policy.
Heat mapping and session recording
Heat mapping services are used to identify the areas of this Website with which Users interact most frequently, in order to detect which of them attract the greatest interest. These services make it possible to monitor and analyse traffic data and serve to keep track of User behaviour.
Some of these services may record sessions and make them available for later viewing.
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a heat mapping and session recording service provided by Hotjar Ltd.
Hotjar honours generic “Do Not Track” headers. This means that the browser can instruct the script not to collect any of the User’s data. This is a setting that is available in all major browsers. Further information on opting out of Hotjar is available here.
Personal Data processed: Usage Data; Trackers; various types of Data as specified in the privacy policy of the service.
Place of processing: Malta – Privacy Policy – Opt Out.
Interaction with online survey platforms
This type of service allows interaction with online survey platforms, operated by third parties, directly from the pages of this Website.
If one of these services is installed, it may collect Usage Data relating to the pages on which it is installed, even if Users do not use the service.
Hotjar Poll & Survey widgets (Hotjar Ltd.)
The Hotjar Poll & Survey widgets are services that enable interaction with the Hotjar platform provided by Hotjar Ltd.
Hotjar honours generic “Do Not Track” headers. This means that the browser can instruct the script not to collect any of the User’s data. This is a setting that is available in all major browsers. Further information on opting out of Hotjar is available here.
Personal Data processed: Usage Data; Trackers; various types of Data.
Place of processing: Malta – Privacy Policy – Opt Out.
Interaction with data collection platforms and other third parties
This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data.
If one of these services is installed, it may collect Usage Data relating to the pages on which it is installed, even if Users do not use the service.
Hotjar Recruit User Testers (Hotjar Ltd.)
The Hotjar Recruit User Testers widget is a service that enables interaction with the Hotjar data collection platform operated by Hotjar Ltd.
Hotjar honours generic “Do Not Track” headers. This means that the browser can instruct the script not to collect any of the User’s data. This is a setting that is available in all major browsers. Further information on opting out of Hotjar is available here.
Personal Data processed: Usage Data; Trackers; various types of Data.
Place of processing: Malta – Privacy Policy – Opt Out.
Infrastructure monitoring
This type of service allows this Website to monitor the use and behaviour of its components so as to improve their performance and functionality, carry out maintenance or troubleshoot issues.
The Personal Data processed depend on the characteristics and mode of implementation of these services, which by their nature filter the activity of this Website.
Sentry (Functional Software, Inc. )
Sentry is a monitoring service provided by Functional Software, Inc. .
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Advertising
Some of the services listed below may use Trackers to identify the User, or use the behavioural retargeting technique, i.e. displaying personalised advertisements based on the User's interests and behaviour, or to measure the performance of advertisements. For more information on this, we suggest that you check the privacy policies of the relevant services. Services of this kind generally offer the possibility of opting out of such tracking. In addition to any opt-out feature provided by any of the services listed in this document, the User may learn more about how to opt out of interest-based advertising in the dedicated section "How to opt out of interest-based advertising" in this document.
Hotjar Form Analysis & Conversion Funnels (Hotjar Ltd.)
Hotjar is an analytics service provided by Hotjar Ltd.
Hotjar honours generic „Do Not Track” headers. This means that the browser can tell the script not to collect any of the User's data. This is a setting that is available in all major browsers. Further information on opting out of Hotjar is available here.
Personal Data processed: Usage Data; Trackers.
Place of processing: Malta – Privacy Policy – Opt Out.
Remarketing and behavioural targeting
This type of service allows this Website and its partners to inform, optimise and serve advertising based on the User's past use of this Website.
This activity is facilitated by tracking Usage Data and by using Trackers to collect information which is then transferred to the partners that manage the remarketing and behavioural targeting activity.
Some services offer a remarketing option based on email address lists.
In addition to the opt-out features offered by the services listed below, the User may opt out by visiting the Network Advertising Initiative opt-out page.
Users may also opt out of certain advertising features through the applicable device configuration options, such as the device advertising settings for mobile devices or generic advertising settings.
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. or by Facebook Ireland Ltd, depending on how the Data Controller manages the processing of Data, that connects the activity of this Website with the Facebook advertising network.
Personal Data processed: Usage Data; Tracker.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Platform services and hosting
These services have the purpose of hosting and running key components of this Website, therefore allowing the provision of this Website from within a unified platform. These platforms provide a wide range of tools to the Owner, such as, for example, analytics tools, tools for user registration management, tools for comment and database management, tools for e-commerce, tools for payment processing etc. The use of such tools involves the collection and processing of Personal Data.
Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.
Shopify (Shopify Inc.)
Shopify is a platform provided by Shopify Inc. that allows the Owner to build, run and host an e-commerce website.
Personal Data processed: surname; Usage Data; email address; billing address; shipping address; payment information; device information; first name; phone number; Tracker.
Place of processing: Canada – Privacy Policy.
Analytics
The services contained in this section enable the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour.
Google Analytics (Universal Analytics) (Google LLC)
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, to prepare reports and to share them with other services developed by Google.
Google may use the Personal Data to contextualise and personalise the ads of its own advertising network.
In order to understand Google's use of data, please consult Google's partner policy.
Personal Data processed: Usage Data; Tracker.
Place of processing: United States – Privacy Policy – Opt Out.
HubSpot Analytics (HubSpot, Inc.)
HubSpot Analytics is an analytics service provided by HubSpot, Inc.
Personal Data processed: Usage Data; Tracker.
Place of processing: United States – Privacy Policy – Opt Out .
Matomo (this Website)
Matomo is an analytics software used by this Website to analyse data directly and without the assistance of third parties.
Personal Data processed: Usage Data; Tracker.
Google Analytics (Universal Analytics) with anonymised IP (Google LLC)
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, to prepare reports and to share them with other services developed by Google.
Google may use the Personal Data to contextualise and personalise the ads of its own advertising network.
This integration of Google Analytics anonymises your IP address. Anonymisation works by shortening Users' IP addresses within the boundaries of the Member States of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google's servers and shortened within the United States.
In order to understand Google's use of data, please consult Google's partner policy.
Personal Data processed: Usage Data; Tracker.
Place of processing: United States – Privacy Policy – Opt Out.
Information on opting out of interest-based advertising
In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more about how to opt out of interest-based advertising in the dedicated section of the Cookie Policy.
Cookie Policy
This Website uses Trackers. To learn more, Users may consult the Cookie Policy.
Further information for Users
Legal basis of processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes.
- the processing is necessary for the performance of a contract with the User and/or for the performance of pre-contractual measures;
- the processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- the processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
In any case, it is always possible to ask the Data Controller to clarify the specific legal basis of each processing operation and, in particular, to specify whether the processing is based on the law, provided for by a contract or necessary for entering into a contract.
Further information on the retention period
Unless otherwise stated in this document, Personal Data shall be processed and stored for as long as required by the purpose for which they were collected and may be retained for a longer period owing to any legal obligations or on the basis of the Users’ consent.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
- Personal Data collected for purposes relating to the legitimate interests of the Data Controller shall be retained until such interests have been fulfilled. The User may obtain further information regarding the legitimate interests pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
Where the processing is based on the User’s consent, the Data Controller may retain the Personal Data for longer, until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in order to comply with a legal obligation or upon the order of an authority.
Once the retention period has expired, the Personal Data shall be erased. Therefore, upon expiry of that period, the right of access, the right to erasure, the right to rectification and the right to data portability can no longer be exercised.
The rights of Users based on the General Data Protection Regulation (GDPR)
Users may exercise certain rights regarding their Data processed by the Data Controller.
In particular, to the extent permitted by law, Users have the right to:
- withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
- object to the processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
- access their Data. Users have the right to obtain information on the Data processed by the Data Controller and on certain aspects of the processing, and to receive a copy of the Data undergoing processing.
- verify and seek rectification. Users have the right to verify the accuracy of their Data and to ask for it to be updated or corrected.
- restrict the processing of their Data. Users have the right to request the restriction of the processing of their Data. In this case, the Data Controller will not process their Data for any purpose other than storing it.
- have their Personal Data deleted or otherwise removed. Users have the right to request the erasure of their Data by the Data Controller.
- receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without any hindrance.
- lodge a complaint. Users have the right to lodge a complaint with their competent data protection supervisory authority or to bring legal proceedings.
Users are also entitled to obtain information on the legal basis for Data transfers abroad, including to any international organisation governed by public international law or set up by two or more countries, such as the UN, and on the security measures taken by the Data Controller to safeguard their Data.
Details about the right to object to processing
Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users may object to such processing on grounds relating to their particular situation.
Users are informed that, where their Data is processed for direct marketing purposes, they may object to that processing at any time, free of charge and without providing any justification. Where Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for such purposes. To learn whether the Data Controller is processing Data for direct marketing purposes, Users may refer to the relevant sections of this document.
How to exercise these rights
Any requests to exercise User rights may be addressed to the Data Controller using the contact details provided in this document. Requests are free of charge and the Data Controller will respond as soon as possible and, in any event, within one month, providing the User with all the information required by law. Any rectification, erasure or restriction of processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the User of those recipients if the User so requests.
Additional information about Data processing
Legal action
The User's Personal Data may be used by the Data Controller for legal purposes, in court or in the stages leading to possible legal action, in order to defend against abuse in the use of this Website or the related Services by the User.
The User declares to be aware that the Data Controller may be required to disclose Data upon request of public authorities.
Additional information about the User's Personal Data
In addition to the information contained in this privacy policy, this Website may, upon request, provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data.
System logs and maintenance
For operation and maintenance purposes, this Website and any third-party services it uses may collect system logs, i.e. files that record interactions and that may also contain Personal Data, such as the User's IP address.
Information not contained in this policy
Further details concerning the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where possible, on this Website and, where technically and legally feasible, by sending a notice to Users via any contact details available to the Data Controller. Users are therefore strongly recommended to check this page often, referring to the date of the last modification indicated at the bottom.
Should the changes affect processing activities performed on the basis of the User’s consent, the Data Controller shall collect new consent from the User, where required.
Definitions and legal references
Personal Data (or Data)
Personal Data means any information that, directly or indirectly, or in connection with any other information, including a personal identification number, renders a natural person identified or identifiable.
Usage Data
Information collected automatically through this Website (including by third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User who connects to this Website, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system used by the visitor, the various time details of the visit (for example, the time spent on each page) and the details of the path followed within the Application, with particular reference to the sequence of pages consulted, and to the parameters relating to the User’s operating system and IT environment.
User
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural or legal person, public administration or any other body that processes Personal Data on behalf of the Data Controller, as described in this privacy policy.
Data Controller (or Controller)
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.
This Website (or this Application)
The hardware or software tool by which the Personal Data of Users is collected and processed.
Service
The Service provided by this Website as defined in the relative terms (if available) on this site/application.
European Union (or EU)
Unless otherwise specified, all references made within this document to the European Union shall be understood to include all current Member States of the European Union and of the European Economic Area.
Cookie
Cookies are Trackers consisting of small sets of data stored in the User’s browser.
Tracker
Tracker means any technology - e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, for example by collecting or saving information on the User’s device.
Legal references
Unless otherwise specified, this policy relates solely to this Website.
Latest update: 8 March 2024
