{"id":3,"date":"2025-07-07T14:18:57","date_gmt":"2025-07-07T14:18:57","guid":{"rendered":"https:\/\/www.nepeta.it\/?page_id=3"},"modified":"2025-11-29T01:17:17","modified_gmt":"2025-11-29T01:17:17","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.nepeta.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

Extended information on privacy management<\/h2>\n\n\n\n

This section contains information relating to the processing of data of Nepeta.it Users.<\/p>\n\n\n\n

This information is also valid for the purposes of Article 13 of Legislative Decree no. 196\/2003, the Personal Data Protection Code, and for the purposes of Article 13 of EU Regulation no. 2016\/679, relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data, for those who interact with Nepeta.it and can be reached at the address corresponding to the home page: www.nepeta.it<\/p>\n\n\n\n

This information applies only to Nepeta.it and not to other websites that may be accessed by the User via links contained therein.<\/p>\n\n\n\n

The purpose of this document is to provide information on the methods, timing, and nature of the information that data controllers must provide to the User when connecting to the Nepeta.it web pages, regardless of the purpose of the connection itself, in accordance with Italian and European legislation.<\/p>\n\n\n\n

If the User is under 16 years of age, pursuant to art. 8, paragraph 1 of EU Regulation 2016\/679, he or she must legitimize his or her consent through the authorization of his or her parents or legal guardians.<\/p>\n\n\n\n

Ownership of data processing<\/h3>\n\n\n\n

The data controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. It also deals with security aspects.<\/p>\n\n\n\n

With regard to this website, the Data Controller<\/strong> is: Nepeta SRL; for any clarification or to exercise their rights, the User may contact them at the following email address: info@nepeta.it<\/a> .<\/p>\n\n\n\n

The data controller is the natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller. Unless otherwise specified in this document, pursuant to Article 28 of EU Regulation No. 2016\/679, the data controller for the Nepeta.it website is: Nepeta SRL.<\/p>\n\n\n\n

Subjects or categories of subjects who can access the data or become aware of it<\/h4>\n\n\n\n

Direct access to the User's data is, in principle, permitted to the Data Controller indicated above.<\/p>\n\n\n\n

In some cases, however, categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the User's data. <\/p>\n\n\n\n

The hosting service provider is Aruba SpA<\/strong>, with registered office at Via San Clemente, 53 \u2013 24036 Ponte San Pietro (BG). It may potentially have access to the data exclusively for technical reasons of necessity and urgency that require intervention in order not to compromise the functionality and security of the Site.<\/p>\n\n\n\n

Other services are or may be offered by other companies: please refer to the following sections where the aforementioned services are discussed in relation to the other parties who may access the User's data. <\/p>\n\n\n\n

Place of treatment<\/h3>\n\n\n\n

The data processing generated by the use of Nepeta.it takes place at the Data Controller\u2019s operational headquarters, i.e. in Contrada Sarculla \u2013 SP24 -96017 Testa Dell\u2019acqua, Noto, Siracusa<\/strong>.<\/p>\n\n\n\n

Specific services used by this Site may collect the User's personal data outside the Data Controller's operational headquarters. Please refer to the following sections where the aforementioned services are discussed regarding the location of data storage.<\/p>\n\n\n\n

Data transfer to non-EU countries<\/h4>\n\n\n\n

This site may share some of the data collected with services located outside the European Union. This transfer is authorized and strictly regulated by Article 45, paragraph 1 of EU Regulation 2016\/679, so no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield<\/a>.<\/p>\n\n\n\n

Data will never be transferred to third countries that do not comply with the conditions set out in Article 45 et seq. of the EU Regulation.<\/p>\n\n\n\n

Processed data<\/h3>\n\n\n\n

Like all websites, this site also uses log files to store information collected automatically during the User's visits. The information collected may include the following:
\u2013 Internet Protocol (IP) address;
\u2013 Browser type and device parameters used to connect to the site;
\u2013 Name of the Internet Service Provider (ISP);
\u2013 Date and time of visit;
\u2013 Web page from which the visitor originates (referral) and exits;
\u2013 Possibly the number of clicks.<\/p>\n\n\n\n

The aforementioned information is processed automatically and collected exclusively in aggregate form to verify the correct functioning of the site and for security reasons. This information will be processed based on the legitimate interests of the data controller.<\/p>\n\n\n\n

For security purposes (spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the site itself or other Users, or otherwise engage in harmful or criminal activities. This data is never used to identify or profile the User, but only to protect the site and its visitors. This information will be processed based on the legitimate interests of the data controller.<\/p>\n\n\n\n

Any information that the Site User deems appropriate to make public through the services and tools made available to them is provided by the User knowingly and voluntarily, exempting this Site from any liability for any violations of law. It is the User's responsibility to ensure they have permission to enter third-party personal data or content protected by national and international laws.<\/p>\n\n\n\n

The data used for security purposes (blocking attempts to damage the site) are retained for the time strictly necessary to achieve the purpose indicated above.<\/p>\n\n\n\n

As indicated above, the optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.<\/p>\n\n\n\n

Comments<\/h4>\n\n\n\n

When the User leaves a comment, the Site automatically detects and records some identifying data shown in the form, such as the email address, as well as the IP address and browser user agent string to facilitate spam detection. This data is voluntarily provided by the User when requesting the service. By entering a comment or other information, the User expressly accepts the privacy policy, and in particular consents to the content entered being freely disseminated to third parties. The data received will be used exclusively to provide the requested service and only for the time necessary to provide the service. <\/p>\n\n\n\n

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https:\/\/automattic.com\/privacy\/<\/a>. After your comment is approved, your profile picture, if any, is visible to the public in the context of your comment.<\/p>\n\n\n\n

Personal data collected<\/strong>: Name (and possibly Surname), Email and optionally Website.<\/p>\n\n\n\n

Account<\/h4>\n\n\n\n

For users who register on this website, all the personal information they provide in their profile is stored. All users can view, edit, or delete their personal information at any time (except their username, which cannot be changed). Website administrators can also view and edit this information.<\/p>\n\n\n\n

Media<\/h4>\n\n\n\n

If you upload images to the website, you should avoid uploading images that include embedded location data (EXIF GPS). Website visitors can download and extract any location data from images on the website.<\/p>\n\n\n\n

Contact forms<\/h4>\n\n\n\n

By filling out the contact forms on the Site with their Data, the User consents to the owner using them for the sole purpose of responding to requests for information, job applications, or any other type of request indicated in the form header.<\/p>\n\n\n\n

Personal data collected<\/strong>: Name and Surname, Email, Telephone.<\/p>\n\n\n\n

Mailing list or newsletter<\/h4>\n\n\n\n

By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this site may be sent. The User's email address may also be added to this list as a result of registering on this site or after making a purchase.<\/p>\n\n\n\n

The data is processed through the platform and IT tools offered by the \"MailChimp\" service, operated by the American company The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308. Therefore, if you subscribe to the newsletter service, your data may be transmitted to and accessed by this American company providing the service, which adheres to the European Commission's adequacy decision called \"Privacy Shield,\" thereby guaranteeing the respect of the personal data being processed and acting as data controller for this service. The data is retained until the interested party requests to object to the sending of newsletters or opts out of receiving them, and in any case for no longer than five years from the date of registration of the personal data. Any defensive needs are reserved, for which the data may be retained even beyond the indicated terms.<\/p>\n\n\n\n

Mailchimp<\/strong> is an email address management and message sending service provided by the American company The Rocket Science Group, LLC<\/strong>.
Personal data collected<\/strong>: Name, Email
Place of processing<\/strong>: USA \u2013 Privacy Policy<\/a>.<\/p>\n\n\n\n

SPAM Protection<\/h4>\n\n\n\n

This type of service analyzes the traffic of this site, potentially containing Users' Personal Data, in order to filter it from parts of traffic, messages and contents recognized as SPAM.<\/p>\n\n\n\n

Selling goods and services online<\/h4>\n\n\n\n

The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or other payment instruments. The payment data collected by this Application depends on the payment system used.<\/p>\n\n\n\n

Payment Management<\/h4>\n\n\n\n

Payment management services allow this site to process payments by credit card, bank transfer, or other means. The payment data is acquired directly by the payment service provider without being processed in any way by this site.<\/p>\n\n\n\n

Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.<\/p>\n\n\n\n

PayPal<\/strong> is a payment service provided by PayPal Inc., which allows the User to make online payments.
Personal data collected<\/strong>: various types of Data as specified in the service's privacy policy.
Place of processing<\/strong>: See the PayPal privacy policy<\/a>.<\/p>\n\n\n\n

Stripe<\/strong> is a payment service that allows the User to make online payments using credit cards.
Personal data collected<\/strong>: various types of Data as specified in the service's privacy policy.
Place of processing<\/strong>: See the Stripe privacy policy<\/a>.<\/p>\n\n\n\n

Embedded content from other websites<\/h4>\n\n\n\n

Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.<\/p>\n\n\n\n

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with them, including tracking your interaction with embedded content if you have an account and are logged in to those websites.<\/p>\n\n\n\n

Google Fonts (Google Inc.) <\/strong>is a font display service managed by Google Inc. that allows this website to integrate such content within its pages.
Personal data collected<\/strong>: usage data and various types of data as specified in the service's privacy policy.
Place of processing<\/strong>: USA \u2013 Privacy Policy<\/a>.<\/p>\n\n\n\n

Statistics (Analytics)<\/h4>\n\n\n\n

The services contained in this section allow the data controller to monitor and analyze traffic data and are used to track User behavior.<\/p>\n\n\n\n

Google Analytics<\/strong> is a web analytics service provided by Google Inc. (\u201cGoogle\u201d). Google uses the personal data collected to track and examine the use of this website, compile reports, and share them with other Google services. Google may use personal data to contextualize and personalize the ads of its own advertising network.<\/p>\n\n\n\n

In order to function, Google Analytics requires the presence of a so-called tracking code on the pages of the Site. The purpose of this code is to identify, for the purposes outlined below, the pages you visit during your browsing session on the Site.
In addition to the pages visited, the data collected may also include, by way of example and not limited to, the domain names and browser type of the computers used to connect to the Site, the URI (Uniform Resource Identifier) \u200b\u200baddresses of the requested resources, the time of the request, and parameters relating to the operating system and IT environment you use.
This data, however, does not allow us to identify the User due to its nature and the methods of its processing and is therefore considered anonymous. Anonymization works by shortening the IP address of users within the borders of the member states of the European Union or in other countries participating in the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States.<\/p>\n\n\n\n

Personal data collected:<\/strong> cookies<\/em> and usage data.
Place of processing:<\/strong> USA \u2013 Privacy Policy \u2013 \u200b\u200bOpt Out<\/a>.<\/p>\n\n\n\n

Tag Management<\/h4>\n\n\n\n

This type of service is functional to the centralized management of the tags or scripts used on this site. The use of these services involves the flow of User Data through them and, if applicable, their retention.<\/p>\n\n\n\n

Google Tag Manager (Google LLC) <\/strong>is a tag management service provided by Google LLC.
Personal Data collected:<\/strong> Cookies and Usage Data.
Place of processing<\/strong>: USA \u2013 Privacy Policy<\/a>.<\/p>\n\n\n\n

Data retention period<\/h3>\n\n\n\n

The data are processed and stored for the time strictly required by the purposes for which they were collected and in any case no longer than 5 years<\/strong>.<\/p>\n\n\n\n

At the end of the retention period, personal data will be deleted. Therefore, upon expiration of this period, the rights to access, erasure, rectification, and data portability can no longer be exercised. <\/p>\n\n\n\n

If you have an account and log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.<\/p>\n\n\n\n

When you log in, we will set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If \"Remember Me\" is selected, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.<\/p>\n\n\n\n

If the user edits or publishes an article<\/strong>, an additional cookie will be saved in the browser. This cookie includes no personal data and simply indicates the post ID of the article just edited. It expires after 1 day<\/strong>.<\/p>\n\n\n\n

If a user leaves a comment, the comment and its metadata are retained indefinitely so that any subsequent comments can be automatically recognized and approved instead of being held in a moderation queue. Furthermore, if you leave a comment on the site, you can choose to save your name, email address, and website in cookies. These are used for your convenience, so that you don't have to re-enter your information if you leave another comment. These cookies will last for one year.<\/p>\n\n\n\n

The User may request the interruption of the Processing or the deletion of the Data at any time.<\/p>\n\n\n\n

Purpose of processing the collected data<\/h3>\n\n\n\n

The User's data is collected to allow the Owner to provide its Services, as well as for the following purposes: access to accounts on third-party services, interaction with social networks and external platforms, viewing content from external platforms, and traffic optimization and distribution.<\/p>\n\n\n\n

The IP address may, in some cases, be used for the exclusive purpose of blocking attempts to damage the Site itself, as well as activities constituting a crime under applicable laws.<\/p>\n\n\n\n

Data processing methods<\/h3>\n\n\n\n

This site processes User data lawfully and correctly, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of data. Processing is carried out using computerized and\/or electronic means, using organizational methods and logic strictly related to the purposes indicated above.<\/p>\n\n\n\n

Specific processing methods are set out in this document in relation to particular services offered by the Site or software used by it for its correct functioning. <\/p>\n\n\n\n

User Rights <\/h3>\n\n\n\n

Article 13, paragraph 2 of EU Regulation 2016\/679 lists the User's rights.<\/p>\n\n\n\n

In particular, the User of the Nepeta.it website has the right to:<\/p>\n\n\n\n