Cookie Policy

The Data Controller is Archivio Crepax S.r.l., with registered office in Milan (MI), Via Ariberto da Intimiano no. 31, VAT no. 08037820969, email: archiviocrepax@guidocrepax.it.

Archivio Crepax S.r.l., in its capacity as Data Controller, informs users of the website www.guidocrepax.it that it uses cookies or other tracking elements.
The Controller has established this policy to provide users with information and ensure transparency, informing them about:

  • the origin and purpose of the information processed when the user browses the Website;
  • their rights in relation to cookies and other tracking elements used by the Controller, the type of cookies used, and the purposes pursued with the information collected.

 

What is a cookie?

A “cookie” is a small text file created by certain websites on the user’s computer at the moment the user accesses a specific site, with the purpose of storing and transferring information. Cookies are sent by a web server (i.e., the computer hosting the visited website) to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on their computer; they are then resent to the website upon subsequent visits.

Some operations could not be carried out without the use of cookies, which, in some cases, are therefore technically necessary. In other cases, the site uses cookies to facilitate and simplify user navigation or to allow them to use specific services requested.

Cookies can remain in the system for long periods and may contain a unique identification code. This allows sites that use them to track the user’s browsing within the site itself for statistical or advertising purposes, in other words, to create a personalized user profile based on the pages visited and then display and/or send targeted advertising (so-called “Behavioural Advertising”).

 

Types of cookies

Depending on their purpose, cookies can be divided into the following categories:

  1. a) Technical cookies: enable or facilitate user navigation (e.g., automatically recognizing the browsing language) or allow the provision of a service requested by the user (e.g., home banking). They may expire at the end of a browser session (the period between the opening and closing of a browser window) or may be stored for a longer period. Technical cookies include:
  • Session cookies: allow websites to link a user’s actions during a browser session. Session cookies expire when the browser session ends and are therefore not stored for long. For this reason, session cookies are considered less invasive to privacy compared to permanent cookies.
  • Persistent cookies: are stored on a user’s device between different browser sessions and allow the storage of the user’s choices or actions with respect to a website (or, in some cases, to multiple websites).
  1. b) Analytics cookies: a specific type of cookies that website operators use to collect statistical information in aggregated form (e.g., number of visitors to a website).
  2. c) Profiling cookies: monitor the user’s browsing activity in order to build a profile. They make it possible, for example, to see which web pages the user has visited, what has been purchased, etc. Profiling may relate to tastes, habits, consumer choices, and more, or be used to send personalized advertising for a specific product (so-called “Behavioural Advertising”).

 

First-party and third-party cookies

A cookie is defined as “first-party” or “third-party” depending on the website or domain from which it originates.

  • First-party cookies are cookies set by the website visited by the user, i.e., the website displayed in the URL window — in this case, the Website.
  • Third-party cookies are cookies set by a domain other than the one visited by the user. A third-party cookie is set, for example, when a user visits a website and an external company places a cookie through that site.

We use cookies to support the user’s activities within the Website, for example their session (so they do not have to log in every time) or their shopping cart.

Cookies are also used to understand users’ preferences based on their activity within the website (pages visited), language, and country, which allows us to improve the services provided.

While browsing, users may also receive cookies from other websites (so-called “third-party cookies”), set directly by the operators of those websites and used according to their own purposes and methods.

Below is a list of cookies that may be installed on the user’s device while visiting the Website:

 

Necessary cookies for site operation:

Nome Funzione Durata

Reporting and analytics cookies:

Nome Funzione Durata
N/a N/a N/a

 

Third-party cookies

While browsing the Website, users may also receive cookies from websites or web servers of third parties (so-called “third-party cookies”). This happens because the Website may contain elements such as images, maps, sounds, or specific links to web pages of other domains that reside on servers other than the one hosting the requested page. In other words, these cookies are set directly by operators of websites or servers other than the Website.

These third parties may theoretically set cookies while visiting the Website and thus obtain information that you have visited it. More information about the use of such cookies can be found by accessing the relevant link.

If the user decides not to consent to the storage of third-party cookies, they may still use the Website, but only its functions that do not require the storage of such cookies.

source name Characteristics and purposes Duration Link to the site where you can view the third party’s privacy policy and opt out
Google Analytics Service for analyzing site traffic anonymously, through aggregation in Google Analytics. // Privacy |

Opt Out

 

How to disable cookies

Most browsers are initially set to automatically accept cookies. Users may change these settings to block cookies or to prevent certain cookies from being stored on their device. There are various ways to manage cookies. Users can refer to the technical guide or help screen of their browser to manage or change their browser settings.

In the case of different devices (e.g., computers, smartphones, tablets), the user must ensure that the browser settings on each device are configured according to their cookie preferences.

For reference, below are some links to the online documentation of major browsers:

 

User Rights

Regarding the personal data collected, users may exercise, at any time and also through a proxy, the rights provided under Articles 7 and 15 to 22 of the GDPR, in particular the right to request access to their data, rectification or erasure thereof, restriction of processing, and to object to their use by us, as well as the right to request the delivery of some of this data.

Data Subject’s Rights:

  • Right of access: the data subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning them is being processed, and, if so, access to such personal data and the following information:
    a) the purposes of the processing;
    b) the categories of personal data concerned;
    c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, and, if so, the existence of appropriate safeguards;
    d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
    e) the existence of the right to request rectification or erasure of personal data or restriction of processing or to object to such processing;
    f) the right to lodge a complaint with a supervisory authority;
    g) where the data are not collected from the data subject, any available information as to their source;
    h) the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
  • Right to rectification: the data subject has the right to obtain the rectification of inaccurate personal data concerning them without undue delay.
  • Right to erasure: the data subject has the right to obtain the erasure of personal data concerning them without undue delay, and the Data Controller has the obligation to erase personal data without undue delay where one of the following grounds applies:
    a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;
    c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
    d) the personal data have been unlawfully processed;
    e) the personal data must be erased to comply with a legal obligation under Union or Member State law to which the Data Controller is subject.
  • Right to restriction of processing: the data subject has the right to obtain restriction of processing where one of the following applies:
    a) the accuracy of the personal data is contested by the data subject, for a period enabling the Controller to verify the accuracy of the personal data;
    b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
    c) the Data Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims;
    d) the data subject has objected to processing pending verification whether the legitimate grounds of the Data Controller override those of the data subject.
  • Right to object: the data subject has the right to object at any time to the processing of personal data concerning them for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
  • Right to data portability: the data subject has the right to receive the personal data concerning them, which they have provided to a Data Controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another Controller without hindrance, where:
    a) the processing is based on consent or on a contract; and
    b) the processing is carried out by automated means.

In exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one Controller to another, where technically feasible.

You may exercise these rights by contacting the Data Controller using the contact details provided.