Privacy policy

Privacy Policy of www.creostop.com

This Website collects some Personal Data of its Users.

This document can be printed using the print command available in the settings of any browser.

Data Controller
Reschimica Srl - VAT: 03764580480
Via Borromini 50 - 50028 - Barberino Tavarnelle (FI)
Data Controller's email address: info@creostop.com

Types of Data collected

Among the Personal Data collected by this Website, independently or through third parties, there are: Tracking Tools; Usage Data; answers to questions; clicks; keypress events; motion sensor events; mouse movements; relative scroll position; touch events; interaction events; email; name; phone number; language; surname; date of birth; company name; profession; country; state; purchase history; number of Users; device information; session statistics; browser information; VAT number; physical address; province; ZIP code; various types of Data; city; Tax ID; business sector; number of employees.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed prior to the data collection itself.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide them, this Website may be unable to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this affecting the availability of the Service or its operation. Users who have any doubts about which Data are mandatory are encouraged to contact the Data Controller.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website.

Methods and location of processing the collected Data

Processing methods
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using computers and/or IT-enabled devices, with organizational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal, system administration personnel) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Location
The Data are processed at the Data Controller's operating offices and in any other places where the parties involved in the processing are located. For further information, contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one in which the User is located. For more information regarding the processing location, the User can refer to the section concerning the details about the processing of Personal Data.

Retention period
Unless otherwise specified in this document, the Personal Data are processed and stored for the time required by the purposes for which they were collected and may be stored for a longer period due to legal obligations or based on the Users' consent.

Purposes of the Processing of the collected Data

User data is collected to allow the Data Controller to provide the Service, fulfill legal obligations, respond to requests or enforcement actions, protect their rights and interests (or those of Users or third parties), detect fraudulent or malicious activities, as well as for the following purposes: Access to third-party service accounts, Statistics, Displaying content from external platforms, Tag management, Spam protection, Heat mapping and session recording, Remarketing and behavioral targeting, Advertising, Platform services and hosting, Contacting the User, Monitoring the infrastructure, and Contacting the User.
For detailed information on the purposes of processing and the Personal Data processed for each purpose, the User can refer to the "Details on the processing of Personal Data" section.

Facebook permissions requested by this Website

This Website may request certain Facebook permissions that allow it to perform actions with the User's Facebook account and to collect information, including Personal Data, from it. This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook Inc.
For more information on the following permissions, please refer to Facebook's permission documentation and privacy policy.
The requested permissions are as follows:

Basic information
Basic information of the User registered on Facebook, which normally includes the following Data: id, name, picture, gender, localization language, and in some cases the "Friends" of Facebook. If the User has made additional data publicly available, it will be available.

Ad management
Provides the ability to manage advertising and call the Facebook Ads API on behalf of the User.

Details on the processing of Personal Data

The Personal Data are collected for the following purposes and using the following services:
Access to third-party service accounts
This type of service allows this Website to access Data from your account on third-party services and perform actions with them.
These services are not activated automatically, but require the express permission of the User.

Access to Facebook account (Meta Platforms, Inc.)
This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook, Inc.
Permissions required: Ad management.
Location of processing: United States – Privacy Policy.

Contacting the User
Contact form (this Website)
By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind of request as indicated by the form’s header.
Personal Data processed: ZIP code; city; Tax ID; last name; date of birth; Usage Data; email address; physical address; country; first name; number of employees; phone number; VAT number; profession; province; company name; business sector; state; various types of Data.

Contact management and message sending
This type of service allows the management of a database of email contacts, phone contacts, or any other contact information used to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the messages.

Brevo
Brevo is an address management and email message sending service provided by Brevo SAS. To use the service provided by Brevo, the Controller generally shares information about Users (who make purchases), such as contact details and purchase history.
For more information regarding the scope of this sharing, please check the information provided below the heading "Personal Data processed".
Personal Data processed: last name; purchase history; date of birth; Usage Data; email address; country; first name; phone number; profession; company name; state.
Location of processing: France – Privacy Policy – Opt out.

Tag management
This type of service enables the centralized management of tags or scripts used on this Website.
The use of such services involves the flow of User Data through them and, if applicable, their retention.

Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Usage Data.
Location of processing: Ireland – Privacy Policy.

Heat mapping and session recording
Heat mapping services are used to identify the areas of this Website with the highest User interaction, in order to detect which ones attract the most interest. These services allow the monitoring and analysis of traffic data and serve to track User behavior.
Some of these services may record sessions and make them available for viewing later.

Microsoft Clarity (Microsoft Corporation)
Microsoft Clarity is a heat mapping and session recording service provided by Microsoft Corporation.
Microsoft processes or receives Personal Data through Microsoft Clarity, which in turn may be used for any purpose in accordance with Microsoft's Privacy Statement, including improving and providing Microsoft Advertising.
Personal Data processed: interaction events.
Location of processing: United States – Privacy Policy.

Infrastructure monitoring
This type of service allows this Website to monitor the usage and behavior of its components, in order to improve performance and functionality, perform maintenance, or address issues.
The Personal Data processed depends on the characteristics and implementation mode of these services, which by their nature filter the activity of this Website.

New Relic (New Relic)
New Relic is a monitoring service provided by New Relic Inc.
The integration methods of New Relic involve filtering all the traffic of this Website, i.e., the communications between this Website and the User's browser or device, also allowing the collection of statistical data on it. Personal Data processed: Usage Data; Tracking Tools; various types of Data as specified in the privacy policy of the service.
Location of processing: United States – Privacy Policy.

SPAM protection
This type of service analyzes the traffic of this Website, potentially containing User Personal Data, in order to filter it from parts of traffic, messages, and content recognized as SPAM.

Google reCAPTCHA (Google Ireland Limited)
Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
The use of the reCAPTCHA system is subject to Google's privacy policy and terms of use.
Personal Data processed: clicks; Usage Data; keypress events; motion sensor events; touch events; mouse movements; scroll position relative to the page; answers to questions; Tracking Tools.
Location of processing: Ireland – Privacy Policy.

Advertising
Some of the services listed below may use Tracking Tools to identify the User or use behavioral retargeting techniques, i.e., display personalized advertisements based on the User’s interests and behavior, or measure the performance of advertisements. For more information, we suggest checking the privacy policies of the respective services. Generally, services of this kind offer the possibility to opt-out of such tracking. In addition to any opt-out feature provided by any of the services listed in this document, Users can learn more about opting out of interest-based advertising in the relevant section "How to opt out of interest-based advertising" in this document.

Meta ads conversion tracking (Meta Platforms Ireland Limited)
Meta ads conversion tracking is a statistics service provided by Meta Platforms Ireland Limited that connects data from the Meta advertising network with actions performed within this Website. The Meta pixel monitors conversions that can be attributed to Facebook, Instagram, and Audience Network ads.
Personal Data processed: Usage Data; Tracking Tools.
Location of processing: Ireland – Privacy Policy – Opt out.

Google Ads conversion tracking (Google Ireland Limited)
Google Ads conversion tracking is a statistics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed within this Website.
Personal Data processed: Usage Data; Tracking Tools.
Location of processing: Ireland – Privacy Policy.

Remarketing and behavioral targeting
This type of service allows this Website and its partners to communicate, optimize, and serve advertising based on the User's past use of this Website.
This activity is facilitated by tracking Usage Data and using Tracking Tools to collect information that is then transferred to partners who manage remarketing and behavioral targeting activities.
Some services offer remarketing options based on email address lists.
Generally, services of this kind offer the possibility to opt-out of such tracking. In addition to any opt-out feature provided by any of the services listed in this document, Users can learn more about opting out of interest-based advertising in the relevant section "How to opt out of interest-based advertising" in this document.

Platform and hosting services These services aim to host and operate key components of this Website, making it possible to deliver this Website from a single platform. These platforms provide the Data Controller with a wide range of tools such as analytical tools, for managing user registration, for managing comments and the database, for e-commerce, for payment processing, etc. The use of such tools involves the collection and processing of Personal Data.
Some of these services operate through servers located geographically in different places, making it difficult to determine the exact location where Personal Data is stored.

PrestaShop (PrestaShop S.A.)
PrestaShop is a platform provided by PrestaShop S.A. that allows the Data Controller to develop, operate, and host a website dedicated to e-commerce.
Personal Data processed: Usage Data; email; language; name; phone number; Tracking Tools; various types of Data as specified in the privacy policy of the service.
Processing Location: France – Privacy Policy.

Statistics
The services in this section allow the Data Controller to monitor and analyze traffic data and are used to track user behavior.

Google Analytics (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network. Personal Data processed: Usage Data; Tracking Tools.
Processing Location: Ireland – Privacy Policy – Opt Out.

Google Analytics with anonymized IP (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network. This Google Analytics integration anonymizes your IP address. Anonymization works by shortening the IP address of Users within the member states of the European Union or in other countries participating in the European Economic Area agreement. Only in exceptional cases will the IP address be sent to Google's servers and shortened within the United States.
Personal Data processed: Usage Data; Tracking Tools.
Processing Location: Ireland – Privacy Policy – Opt Out.

Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can provide the Data Controller with information about traffic and interactions on this Website.
Personal Data processed: Usage Data; Tracking Tools.
Processing Location: Ireland – Privacy Policy.


User ID Extension for Google Analytics (Google Ireland Limited)
Google Analytics on this Website uses a feature called User ID. This allows for more accurate tracking of Users by assigning each one a unique ID for various sessions and devices, but in a way that does not allow Google to personally identify an individual or permanently identify a specific device.
The User ID extension also allows for connecting Data from Google Analytics with other user-related Data collected from this Website. The Opt Out link provided below allows you to disable tracking for the device you are using, but does not exclude further tracking activities carried out by the Controller. To disable these as well, contact the controller via the contact email address. Personal Data processed: Tracking Tools.
Processing Location: Ireland – Privacy Policy – Opt Out.

Google Analytics 4 (Google Ireland Limited)
Google Analytics is a statistics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data center or server. For more information, you can consult Google's official documentation.
Personal Data processed: Usage Data; browser information; device information; number of Users; session statistics; Tracking Tools.
Processing Location: Ireland – Privacy Policy – Opt Out.

Displaying content from external platforms
This type of service allows for displaying content hosted on external platforms directly from the pages of this Website and interacting with them.
This type of service may still collect web traffic data for the pages where the service is installed, even when users do not use it.

Information on how to disable interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users can learn more about how to disable interest-based advertising in the dedicated section of the Cookie Policy.

Cookie Policy

This Website uses Tracking Tools. For more information, Users can refer to the Cookie Policy.

Additional information for users

Legal basis of processing
The Data Controller processes Personal Data concerning the User if one of the following conditions exists:
- the User has given consent for one or more specific purposes.
- processing is necessary for the performance of a contract with the User and/or for the performance of pre-contractual measures;
- processing is necessary to comply with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.
Further information on the storage period
Unless otherwise specified in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to legal obligations or based on Users' consent.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.
Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained until such interests are satisfied. The User can obtain further information about the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User's consent, the Data Controller may retain Personal Data longer until such consent is revoked. Additionally, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the storage period, Personal Data will be deleted. Therefore, upon expiry of this period, the right to access, delete, correct, and the right to data portability can no longer be exercised.

User Rights under the General Data Protection Regulation (GDPR)
Users can exercise certain rights with respect to the Data processed by the Data Controller.
In particular, within the limits prescribed by law, the User has the right to:
- withdraw consent at any time. The User can withdraw consent previously given for the processing of their Personal Data.
- object to the processing of their Data. The User may object to the processing of their Data when it is carried out on a legal basis other than consent.
- access their data.

Users have the right to obtain information about the Data processed by the Controller, about certain aspects of the processing and to receive a copy of the processed Data.
- verify and request rectification. Users can verify the accuracy of their Data and request its update or correction.
- obtain processing restriction. Users can request the limitation of the processing of their Data. In this case, the Controller will not process the Data for any other purpose than their retention.
- obtain the erasure or removal of their Personal Data. Users can request the erasure of their Data by the Controller.
- receive their Data or have them transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. - lodge a complaint. Users can lodge a complaint with the competent data protection supervisory authority or take action in court.

Users have the right to obtain information about the legal basis for the transfer of Data abroad, including to any international organization governed by international law or established by two or more countries, such as the UN, as well as regarding the security measures taken by the Controller to protect their Data.

Details on the right to object
When Personal Data are processed in the public interest, in the exercise of public authority vested in the Controller, or for the purposes of the legitimate interests pursued by the Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are informed that if their Data are processed for direct marketing purposes, they can object to such processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, Personal Data shall no longer be processed for such purposes. To find out whether the Controller processes Data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise rights
To exercise their rights, Users can make a request to the contact details of the Controller indicated in this document. The request is free of charge and the Controller will respond as soon as possible, in any case within one month, providing the User with all the information required by law. Any rectifications, erasures or restrictions of processing will be communicated by the Controller to each of the recipients, if any, to whom the Personal Data have been transmitted, unless this proves impossible or involves a disproportionate effort. The Controller will inform the User of such recipients if requested.

Further information on processing

Legal defense
The User's Personal Data may be used by the Controller in court or in the stages leading to possible legal action arising from improper use of this Website or the related Services by the User. The User declares to be aware that the Controller may be required to reveal the Data upon request of public authorities.

Specific information
Upon request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning specific Services, or the collection and processing of Personal Data.

System logs and maintenance
For operation and maintenance purposes, this Website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy
Additional information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, if technically and legally feasible, by sending a notification to Users through one of the contact details available to the Controller. Therefore, please check this page frequently, referring to the date of the last modification indicated at the bottom.

If the changes affect processing activities for which consent is the legal basis, the Controller shall collect the User's consent again, if necessary.

Definitions and legal references
Personal Data (or Data)
Any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data
Information collected automatically through this Website (including from third-party applications integrated into this Website), including: IP addresses or domain names of the computers used by the Users who connect to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (e.g., the time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the IT environment of the User.
User
The individual who uses this Website, who, unless otherwise specified, coincides with the Data Subject.

Data Subject
The natural person to whom the Personal Data refers.

Data Processor (or Processor)
The natural person, legal entity, public administration, or any other body that processes Personal Data on behalf of the Controller, as outlined in this privacy policy.

Data Controller (or Controller)
The natural person or legal entity, public authority, service, or other body that, alone or together with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including the security measures related to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)
The hardware or software tool through which the User's Personal Data is collected and processed.

Service
The service provided by this Website as described in the relevant terms (if any) on this site/application.

European Union (or EU)
Unless otherwise specified, any reference to the European Union in this document is intended to extend to all current member states of the European Union and the European Economic Area.

Cookies
Cookies are Tracking Tools consisting of small pieces of data stored within the User's browser.

Tracking Tool
By Tracking Tool, we mean any technology - e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting - that allows tracking Users, for example, by collecting or saving information on the User's device.

Legal references
Unless otherwise specified, this privacy policy exclusively concerns this Website.