PRIVACY POLICY

The company Scorpion Bay S.p.A., owner of the web portal www.scorpionbay.com, (hereinafter, for the sake of brevity, “Scorpion Bay” or the “Company”), is aware of the importance of protecting its users’ rights to privacy with regard to personal data processing. In conformity with the European and Italian privacy laws, Scorpion Bay informs its users that this website uses cookies to facilitate browsing thereon and that the personal data acquired by way of these tools will be processed in compliance with the personal data protection laws. 

With reference to the methods used to manage and process the personal data of the users that consult this website, pursuant to Article 13 of EU Regulation no. 679/2016, Scorpion Bay provides the following information:

 

1. Type of data collected, purpose and legal basis of the processing and data retention period

• Cookies

What are cookies?

Cookies are small pieces of texts that the websites visited by the user send to the user’s terminal (usually the browser), where they are memorised so that they can later be sent back to the same websites during the next visit by the same user.

To revoke your consent for the installation of all cookies and disable them, click [].

Types of cookies used by www.scorprionbay.com

1. Technical and analytical cookies with limited identifying potentials.

Technical cookies are cookies only used for the purpose of sending a communication on a digital communication network, or in the measure strictly necessary in order to enable the provision of that service by the service provider of the company from which the information has been explicitly requested by the subscriber or user. Instead, analytical cookies are used to analyse and measure how the website is used by its users. The analytical cookies are combined with the technical cookies when used directly by the website manager to collect information in aggregated form, about the number of website users and how they visit the website. The legal basis that justifies the personal data processing performed for this purpose can be found in the theory envisaged by Article 6 paragraph 1, letter b) of EU Regulation no. 679/2016, that is, to enable the user to use the requested service.

The technical and analytical cookies used by the website are:

- Cookie Name: _RequestVerificationToken

Technical cookie: this tool is used to ensure that the user can use and browse on the website normally; it is essential in order to prevent the data in the forms from being sent to another website.

Type of personal data processed: session data.

Cookie expires: at the end of the session.

- Cookie Name: ckp

Technical cookies: this tool is used to save the user’s consent to the installation of the cookies.

Type of data processed: data about how the website is used - general personal data.

Cookie expires: at the end of the session.

- Cookie Name: crt

Technical cookie: this tool is used to ensure that the user can use the website, specifically with regard to the cart.

Type of data processed: data about how the website is used.

Cookie expires: 1 month.

- Cookie Name: rwp

Technical cookie: this tool is used to memorise the products viewed and repropose them as products “Recently Viewed”.

Type of data processed: data about how the website is used.

Cookie expires: 20 days.

- Cookie Name: webinf1

Technical cookie: this tool is used to authenticate the users who log in to the website.

Type of personal data processed: session data.

Cookie expires: 2 days

- Cookie Name: webinf2

Technical cookie: this tool is used to authenticate the users who log in to the website.

Type of personal data processed: session data.

Cookie expires: 10 minutes.

Analytical cookies of Google with limited identifying potentials. To revoke your consent to their installation and disable them, click [].

- Cookie Name: _ga

Google Analytics cookies: this cookie enables users to be identified, information to be collected and statistics generated regarding the use of the website. 

Type of data processed: anonymous data regarding the use of the service with partially hidden IP addresses.

Cookie expires: 2 years.

Privacy Policy.

- Cookie Name: _gat

Google Analytics cookies: this cookie enables the collection of data on websites with a high user traffic to be restricted.

Type of data processed: anonymous data regarding the use of the service with partially hidden IP addresses.

Cookie expires: 1 minute.

Privacy Policy.

- Cookie Name: _gid

Google Analytics cookies: this cookie allows an unequivocal ID to be registered, used to generate statistical data on how the visitor uses the website.

Type of data processed: anonymous data regarding the use of the service with partially hidden IP addresses.

Cookie expires: 24 hours.

Privacy Policy.

1. Third party profiling cookies. To revoke your consent to their installation and disable them, click [].

Profiling cookies are designed to created profiles of the user and used to send advertising messages in line with the preferences expressed by the same when browsing online. This is a processing operation which will not, under any circumstances, generate discrimination or negative effects for the Data Subject. This activity also enables the Data Controller to assess its services, and therefore to improve them, making them more efficient and easier to use by third parties. The legal basis that justifies the personal data processing performed for this purpose can be found in the theory envisaged by Article 6 paragraph 1 letter a) of EU Regulation no. 679/2016, as the user has granted their consent for the installation of profiling cookies.

The third party profiling cookies used by the website are:

- Cookie Name: IDE

Google Double Click cookie: this cookie enables Google DoubleClick to register and produce reports about the user’s actions on the website after viewing or clicking on an advertiser’s advert, with a view to measuring the effectiveness of the latter advert and presenting user-targeted adverts.

Type of data processed: data about how the service is used.

Cookie expires: 1 year.

Privacy Policy.

- Cookie Name: 1P_JAR

Google AdWords cookies: used by the Google services to register and produce reports about the user’s actions on the website after viewing or clicking one of the advertiser’s adverts with a view to measuring the effectiveness of an advert and presenting user-targeted adverts.

Type of data processed: data about how the service is used.

Cookie expires: 1 month.

Privacy Policy.

- Cookie Name: CONSENT

Google AdWords cookies: used by the Google services to register and produce reports about the user’s actions on the website after viewing or clicking one of the advertiser’s adverts with a view to measuring the effectiveness of an advert and presenting user-targeted adverts.

Type of data processed: data about how the service is used.

Cookie expires: 20 years.

Privacy Policy.

- Cookie Name: NID

Google AdWords cookies: used by the Google services to register and produce reports about the user’s actions on the website after viewing or clicking one of the advertiser’s adverts with a view to measuring the effectiveness of an advert and presenting user-targeted adverts.

Type of data processed: data about how the service is used.

Cookie expires: 6 months.

Privacy Policy.

- Cookie Name: DV

Google AdWords cookie: this tool is used to save the user’s consent to the use of the services provided by Google. 

Type of data processed: data about how the service is used.

Cookie expires: at the end of the session.

Privacy Policy.

 

Disabling cookies.

All modern browsers enable their users to decide whether to block the installation of cookies on their terminals, and to cancel any that may already be installed. This is also true for the cookies installed as a result of the user browsing this website. In this case, browsing the website could prove difficult or even impossible.

Here are the procedures to follow in order to deactivate cookies on the most modern browsers:

 

Google Chrome.

• Select the Chrome menu icon.
• Select Settings.
• At the bottom of the page, select Show advanced settings.
• In the “Privacy” section, select Contents Settings.
• Select Prevent sites from configuring data.
• Select End.

For further information visit this page.

 

Internet Explorer

• In the “Settings” section, select the button “View advanced settings”;
• In the field “Cookies” choose the option “Block all cookies” or “Block only third party cookies”.

For further information visit this page.

 

Apple Safari

• Visit the Preferences page.
• From the Privacy panel choose the option for blocking the cookies.
• To erase cookies that have already been filed, press the button “Remove all website data”.

For further information visit this page.

 

Apple Safari for mobile devices

• Press the button Settings>Safari>Block cookies.
• Choose the option “Always allow”, “Allow only from the websites I visit”, “Allow only from the current website” or “Always block”. In IOS 7 or less recent versions, choose “Never”, “From third parties and advertisers” or “Always”.

For further information visit this page.

 

Mozilla Firefox

• Click on the menu button and select preferences.
• Select the Privacy panel.
• Under the heading History settings: select use personalised settings.
• To enable cookies, check the heading Accept cookies from websites; to disable them, uncheck the heading.
• If you are encountering problems with cookies, also ensure that the option Accept third party cookies is not set on Never.
• Choose for how long the cookies can remain memorised:
• Save them until: their expiry: the cookies will be removed when their reach their expiry date (date set by the website that sends the cookies).
• Save them until: Firefox is closed: the cookies memorised on your computer will be removed when Firefox is closed.
• Save them until: ask each time: the user views a warning each time a website tries to set a cookie and is asked whether they want it to be saved.
• Close the page. Any changes made will be saved automatically.

For further information visit this page.

 

Opera

• Go to the Preferences area.
• Select the area “Advanced” and enter the “Cookies” section.
• To stop the browser from memorising the cookies, select the setting “Never accept cookies”.

For further information visit this page.

 

Without prejudice to that stated above, the Data Controller informs the User that they can use Your Online Choices. By way of this service, they can manage their tracking preferences for most advertising tools. Therefore, the Data Controller recommends that Users use this resource in addition to the information provided herein.

 

1. Data retention period

The personal data collected and processed following a browsing session on the website www.scorpionbay.com will be retained for the entire period during which the service is provided and then immediately erased. The cookies installed via the website are temporary and are erased automatically upon their expiry as indicated herein. The data collected using Google services (for example Google AdWords) will be retained for a period of 14 months.

 

1. Processing methods

The collected personal data will be processed, retained and developed using electronic tools and will be memorised both on IT and paper media, organised in databases and on any other type of suitable medium.

Specific security measures are abided by to prevent the loss, unlawful or improper use of and unauthorised access to the data.

The personal data processing performed by Scorpion Bay does not involve any automated decision-making processes.

 

1. Personal data communication

The communication of the browsing data is a requisite necessary for the provision of the requested service (browsing on the website) and therefore mandatory for said purpose: failure to communicate the personal data on the part of the Data Subject will make it impossible for Scorpion Bay to enable the Data Subject to browse on the website www.scorpionbay.com. The communication of data for the other purposes is optional: failure to communicate data in these cases will have no consequences for the Data Subject. The installation of the technical, analytical and third party cookies by the website www.scorpionbay.com is optional (it can be prevented by changing the settings of the browser) but could make the website or some of its services unusable.

 

1. Parties to whom the personal data may be communicated

The collected personal data will not be disseminated and can be communicated to those whose right to access or interest in accessing your personal data is based on the law, secondary and/or European laws, and also to the internal staff of the data Controller, and to companies, associations or professional studios that provide services and activities on behalf of the Data Controller in the capacity of Data Supervisors to ensure the fulfilment of legal obligations and for all organisational and administrative requirement needed to provide the requested services.

The names of other parties who may come to know your personal data in their capacity as “Data Supervisors” are included in an updated list available at Scorpion Bay (to be requested using the contact details indicated in point 9).

 

1. Transfer of data outside the European Union or to international organisations

Scorpion Bay does not transfer the Data Subject’s personal data collected through the website www.scorpionbay.com and the tools envisaged therein to countries located outside the European union or international organisations.

 

1. Links to third party websites or services

This note is only provided for the processing of personal data performed through this website or the tools envisaged by the same, and not for any other websites that may be consulted by the user through links, the managers of which operate in the capacity as autonomous Data Controllers. The users are therefore invited to read carefully the privacy notes of this parties before using their services. 

 

1. Rights of the Data Subject

In relation to the above-mentioned personal data processing, the Data Subject shall be entitled to exercise the rights envisaged by EU Regulation no. 679/2016 at any time, including, for example, the right to know:

• the source of their personal data;
• the purposes and methods of the processing;
• the logic applied to the processing, if the latter is carried out with the aid of electronic means;
• the data identifying the Data Controller, Data Supervisors and the representative designated.

The Data Subject shall have the right to:

• access their data, have them data updated, corrected or, where interested therein, integrated;
• request that their data be erased, anonymised or blocked when these may have been unlawfully processed;
• have the processing of their personal data limited, or request that the Data Controller or Data Supervisor reduce the purposes or the methods with which their data is processed.

The Data Subject can also request a copy of their data in a standard format (so-called “Right to data portability”).

Finally the party to whom the data refer is entitled to object, at any time and at no cost, fully or partially:

• on legitimate grounds, to the processing of personal data concerning them, even though it may be relevant to the purpose of the collection;
• to the processing of their personal data performed pursuant to Article 6, paragraph 1 of the GDPR, letter e. (when “the processing is required for the execution of a task of public interest or when connected to the exercising of the public powers with which the Data Controller is invested”) or f. (when “the processing is required for the pursuance of the legitimate interest of the Data Controller or of third parties”) including profiling based on said provisions;
• to the processing of personal data concerning them, where this is carried out for the purpose of sending advertising materials or making direct sales, or for the performance of market research or commercial communication (direct marketing), including profiling, to the extent to which this is related to the same.

The Data Subject is entitled to revoke their consent to the processing when this is based on the hypothesis envisaged by Article 6 paragraph 1 letter a. (when “the Data Subject has expressed their consent to the processing of their personal data for one or more specific purposes”) or by Article 9 paragraph 2 letter a. (when “the Data Subject has granted their explicit consent to the processing of said personal data for one or more specific purposes”) of EU Regulation 679/2016, at any time, without compromising the lawfulness of the processing based on the consent granted before revocation.

Should the Data Subject consider that the processing of their personal data breaches the legislation in force, they shall be entitled to submit a complaint to a supervisory body, markedly in the member State in which they habitually live or work or in the place in which the alleged breach took place. The Italian Data Protection Authority can be reached using the contact details onits website.

 

1. Data Controller - Contact details

The Data Controller is Scorpion Bay S.p.A., with registered office in Via Sottoprovinciale 24, 24021 Albino (BG), VAT no. 00640480166, in the person of its pro tempore legal representative. The Company can also be contacted at the mail address privacy@scorpionbay.com.

To exercise the rights listed above, the Data Subject can request to do so by sending an email to privacy@scorpionbay.com. 

Scorpion Bay reserves the right to update this Note on personal data processing.