Privacy Policy

1. Privacy Statement - Disclosure pursuant to EU Regulation 2016/679 (GDPR)

This Privacy Policy describes how your personal information is collected, used and shared by NVL Srl ("NVL") the data controller, located at Via Napoli 131 80013 Casalnuovo di Napoli (NA), when you visit or make a purchase from nvl.it (the "Site").

2. Personal information we collect

When you visit the Site, we automatically collect certain information about your device, such as your browser, IP address, time zone and some of the cookies installed on your device. In addition, as you browse the Site, we collect information about the individual web pages or products you view, which websites or search terms directed you to the Site, and how you interact with it. We refer to this automatically collected information as "Device Information".

We collect information on devices using the following technologies:

• Cookies" are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information on how we use cookies on the Site, please see our cookie policy below. For more general information about cookies and how to disable them, please visit http://www.allaboutcookies.org.
• "Log files" keep track of actions that occur on the site and collect data including IP address, browser type, Internet service provider, entry/exit pages and date/time.
• "Web beacons', 'tags' and 'pixels' are electronic files used to record information about how you explore the site.

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, email address and telephone number. We refer to this information as "Order Information". The Site does not collect, store or have access to your credit card information. The only payment method for the Site is PayPal, which is responsible for collecting and processing credit card information. More information about PayPal, how they use, store and protect your data can be found at the following link: https://www.paypal.com/it/webapps/mpp/ua/privacy-prev

The Site may also use information that you have provided offline, which may include your name, telephone number, email address, date of birth, postal code, and the place and date that such information was collected. We refer to this information as "Offline Data". This Offline Data was collected exclusively at Nuvola Store locations through information cards in which you explicitly consented to receive marketing information. These information cards are then sent to NVL S.r.l. Via Napoli 131, Casalnuovo di Napoli, NA 80013, Italy, where they are manually uploaded into a private, password-protected database stored on site. The physical cards are then stored in a secure environment.

While browsing the Site, you can choose to provide your name and email address to receive our email newsletter and/or personalised online advertising, via MailChimp.

When we talk about "Personal Information" in this privacy policy, we are talking about Device Information, Order Information, Offline Data and data provided by the user for the Site's email newsletter and Personalised Online Advertising.

3. How do we use your personal information?

We use the Order Information we collect to fulfill any order you place through the Site (including arranging for shipment and providing you with invoices and/or order confirmations). In addition, we use this Order Information to:

• Communicating with you;
• Examine our orders for potential risks or fraud;
• If in line with the preferences you have shared with us, provide information or personalised online advertising

We use the Device Information we collect to help us identify potential risks and fraud (in particular, your IP address) and, more generally, to improve and optimise our Site (for example, by generating analytics about how our customers navigate and interact with the Site and to assess the success of our marketing and advertising campaigns). Where explicit consent has been provided, we also use Device Information, in the form of cookies, to provide you with personalised online advertising and/or retargeting via Facebook and/or Google.

If you have provided Offline Data, we only use this information to communicate with you.

4. Sharing your personal information

NVL acts as a data controller in that we determine the purpose and means of processing your personal information. We share your personal information with third party data processors, who process your personal information on our behalf, to help us use it as described above. We use WebFlow as the platform for our online shop: you can read more about WebFlow and how they use, store and protect your personal information here: https://webflow.com/legal/eu-privacy-policy

We use MailChimp to communicate with you via our email newsletter. - You can read more about MailChimp and how they use, store and protect your personal information here: https://mailchimp.com/legal/privacy.

We use Google Analytics to help us understand how our customers use the Site: you can read more about Google and how they use, store and protect your Personal Information here: https://www.google.com/intl/it/policies/privacy/.

You can also deactivate the operation of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other legal request for information we receive, or to otherwise protect our rights.

5. Personalised online advertising and retargeting

As described above, where explicit consent has been provided, we use personal information to provide you with targeted advertising or marketing communications that we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative ("NAI") education page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can deactivate targeted advertising using the following links:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous

In addition, you can opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal at: http://optout.aboutads.info/.

6. Do not trace

Please note that we do not alter our site's data collection and usage practices when we see a Do Not Track signal from your browser.

7. Your rights

If you are a European resident, you have the right to access the personal information we hold about you and to request that your personal information be corrected, updated or deleted. If you wish to exercise this right, please contact us via the contact information below.

Alternatively, if you receive our email newsletter you can change the information you have provided to MailChimp or unsubscribe from the email newsletter using the links provided in the footer of each newsletter.

In addition, if you are located in Europe, please note that the Site will require processing of your information by WebFlow in order to fulfill contracts we may have with you if you place an order through the Site, by MailChimp if you have explicitly consented to receive marketing communications (the email newsletter) or otherwise to pursue our legitimate business interests. Also, please note that your information will be transferred outside of Europe, including to Canada and the United States. The links above provide more information about PrestaShop and MailChimp and the protections that apply to data transferred outside of Europe.

8. Data retention

When you place an order through the Site, we will retain information about the order for our records unless and until you ask us to delete this information.

Offline Data, both physical cards and electronic database entries, will be retained until you ask us to delete and destroy this information. It is necessary to retain these documents, as in the future we may need to prove that you have explicitly consented to receive marketing information.

If you have consented to receive marketing information (email newsletters), the Personal Information shared with MailChimp will be deleted after 3 years of inactivity.

9. Changes

We may update this privacy policy from time to time to reflect, for example, changes in our practices or for other operational, legal or regulatory reasons.

10. Contact us

For more information about our privacy practices, if you have any questions, or if you would like to make a complaint, please contact us by e-mail at store@nvl.it or by mail at the following address:

‍

NVL S.r.l.

Attn: privacy compliance

Via Napoli 131

80013 Casalnuovo di Napoli, NA

Italy