Cookie Policy of www.tooa.com
This document informs Users about the technologies that help www.tooa.com to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with www.tooa.com.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
Www.tooa.com uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information – such as the presence of other Trackers - in the linked privacy policies of the respective third-party providers or by contacting the Owner.
How www.tooa.com uses Trackers
Necessary
Www.tooa.com uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Trackers managed by third parties
-
Google reCAPTCHA (Google Ireland Limited)
Personal Data processed: answers to questions, clicks, keypress events, motion sensor events, mouse movements, scroll position, touch events, Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Trackers duration:
- _GRECAPTCHA: duration of the session
- rc::a: indefinite
- rc::b: duration of the session
- rc::c: duration of the session
- rc::f: indefinite
-
Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
-
Google Pay (Google Ireland Limited)
Google Pay is a payment service provided by Google Ireland Limited, which allows users to make online payments using their Google credentials.
Personal Data processed: billing address, email address, first name, last name, payment info, phone number, purchase history, shipping address and Trackers.
Place of processing: Ireland – Privacy Policy.
-
Mastercard (Mastercard Inc.)
Mastercard is a payment service provided by Mastercard Inc. which allows Users to make online payments.
Personal Data processed: billing address, email address, first name, last name, payment info, phone number, purchase history, shipping address, Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
-
Visa (Visa Inc.)
Visa is a payment service provided by Visa Inc. which allows Users to make online payments.
Personal Data processed: billing address, email address, first name, last name, payment info, phone number, purchase history, shipping address, Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
-
Shop Pay (Shopify International Limited)
Shop Pay is a payment management and product checkout page service provided by Shopify International Limited which allows Users to make online payments on www.tooa.com.
Personal Data processed: billing address, data relating to the point of sale, email address, first name, last name, payment info, phone number, privacy choices, purchase history, shipping address, Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
-
American Express (American Express Company)
American Express is a payment service provided by American Express Company which allows Users to make online payments.
Personal Data processed: billing address, email address, first name, last name, payment info, phone number, purchase history, shipping address, Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
-
Shopify (Shopify International Limited)
Shopify is a platform provided by Shopify International Limited that allows the Owner to build, run and host an e-commerce website.
Personal Data processed: billing address, device information, email address, first name, last name, payment info, phone number, shipping address, Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Trackers duration:
- _ab: 3 years
- _customer_account_shop_sessions: 1 month
- _identity_session: 3 years
- _master_udr: duration of the session
- _merchant_essential: 2 years
- _orig_referrer: 14 days
- _pay_session: duration of the session
- _s: 30 minutes
- _secure_admin_session_id: 4 months
- _secure_admin_session_id_csrf: 4 months
- _shopify_country: duration of the session
- _shopify_d: duration of the session
- _shopify_essential: 2 years
- _shopify_essential_: 2 years
- _shopify_evids: duration of the session
- _shopify_fs: 1 year
- _shopify_m: duration of the session
- _shopify_s: 30 minutes
- _shopify_test: 1 minute
- _shopify_tm: duration of the session
- _shopify_tw: duration of the session
- _storefront_u: 1 minute
- _tracking_consent: duration of the session
- _y: 1 year
- auth_state_*: 25 minutes
- c: 2 years
- cart: 14 days
- cart_currency: 14 days
- cart_ver: 14 days
- checkout_queue_checkout_token: 2 years
- checkout_queue_token: 2 years
- checkout_session_token: 21 days
- checkout_worker_session: 3 days
- customer_account_new_login: 20 minutes
- customer_account_preview: 7 days
- customer_auth_provider: indefinite
- customer_auth_session_created_at: indefinite
- discount_code: duration of the session
- keep_alive: duration of the session
- localization: 14 days
- login_with_shop_finalize: 5 minutes
- master_device_id: 2 years
- shopifyChatData: duration of the session
- shopify_pay: 2 years
- source_name: indefinite
- storefront_digest: 2 years
Functionality
Www.tooa.com uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.
Trackers managed by third parties
-
WhatsApp Business customer support (Meta Platforms Ireland Limited)
WhatsApp Business customer support is a customer support service provided by Meta Platforms Ireland Limited.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy.
Measurement
Www.tooa.com uses Trackers to measure traffic and analyze User behavior to improve the Service.
Trackers managed by third parties
-
Google Analytics 4 (Google Ireland Limited)
Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of www.tooa.com, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: browser information, device information, number of Users, session statistics, Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Trackers duration:
- _ga: 2 years
- _ga_*: 2 years
-
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is an analytics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner insights into the traffic and interactions on www.tooa.com.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt out.
Trackers duration:
- _fbp: 3 months
- lastExternalReferrer: duration of the session
- lastExternalReferrerTime: duration of the session
-
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a session recording and heat mapping service provided by Hotjar Ltd.
Hotjar honours generic „Do Not Track” headers. This means the browser can tell its script not to collect any of the User's data. This is a setting that is available in all major browsers. Find Hotjar’s opt-out information here.
Personal Data processed: Trackers, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: Malta – Privacy Policy – Opt Out.
Trackers duration:
- _hjAbsoluteSessionInProgress: 30 minutes
- _hjCachedUserAttributes: duration of the session
- _hjClosedSurveyInvites: 1 year
- _hjDonePolls: 1 year
- _hjFirstSeen: duration of the session
- _hjIncludedInSessionSample: 30 minutes
- _hjLocalStorageTest: duration of the session
- _hjLocalStorageTest: duration of the session
- _hjMinimizedPolls: 1 year
- _hjSession*: 30 minutes
- _hjSessionRejected: duration of the session
- _hjSessionResumed: duration of the session
- _hjSessionStorageTest: indefinite
- _hjSessionTooLarge: 1 hour
- _hjSessionUser*: 1 year
- _hjSessionUser_*: 2 years
- _hjShownFeedbackMessage: 1 year
- _hjTLDTest: duration of the session
- _hjUserAttributesHash: duration of the session
- _hjViewportId: duration of the session
- _hjid: 1 year
-
Microsoft Clarity (Microsoft Corporation)
Microsoft Clarity is a session recording and heat mapping service provided by Microsoft Corporation.
Microsoft processes or receives Personal Data via Microsoft Clarity, which in turn may be used for any purpose in accordance with the Microsoft Privacy Statement, including improving and providing Microsoft Advertising.
Personal Data processed: clicks, country, device information, interaction events, mouse movements, page events, positional information, scroll-to-page interactions, session duration, Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Trackers duration:
- ANONCHK: 10 minutes
- CLID: 1 year
- MR: 7 days
- MUID: 1 year
- SM: duration of the session
- _clck: 1 year
- _clsk: 1 day
- _cltk: indefinite
-
Visual Website Optimizer (Wingify)
Visual Website Optimizer is an A/B testing service provided by Wingify Inc.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Marketing
Www.tooa.com uses Trackers to deliver personalised ads or marketing content, and to measure their performance.
Trackers managed by third parties
-
Meta ads conversion tracking (Meta pixel) (Meta Platforms Ireland Limited)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms Ireland Limited that connects data from the Meta Audience Network with actions performed on www.tooa.com. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt out.
Trackers duration:
- _fbc: 3 months
- _fbp: 3 months
- fr: 3 months
- lastExternalReferrer: duration of the session
- lastExternalReferrerTime: duration of the session
-
Viralize (Viralize Srl)
Viralize is an advertising service provided by Viralize Srl.
Personal Data processed: Trackers and Usage Data.
Place of processing: Italy – Privacy Policy – Opt Out.
Trackers duration:
- sh_uid: 2 years
- u-dnt: 2 years
- u-imp-daily: 2 years
- u-imp-global: 2 years
- u-imp-weekly: 2 years
- u-profile: 2 years
- u-segment: 2 years
- vr_uid: 2 years
-
VIADS ADVERTISING (VIADS ADVERTISING S.L.)
VIADS ADVERTISING is an advertising service provided by VIADS ADVERTISING S.L.
Personal Data processed: Trackers and Usage Data.
Place of processing: Spain – Privacy Policy.
Trackers duration:
-
VisitIQ (DrivenIQ Corporation)
VisitIQ is an advertising service provided by DrivenIQ Corporation.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
-
Klaviyo segmentation and social advertising (Klaviyo Inc.)
Klaviyo segmentation and social advertising is a remarketing and behavioural targeting service provided by Klaviyo Inc.
Klaviyo segmentation and social advertising makes use of tracking technologies to monitor User behaviour. This Data is then used to personalise the User's experience and to provide targeted advertising. Klaviyo segmentation and social advertising may also connect the collected Data with other networks, including advertising networks, and enable these parties to track and target the User. The Owner, unless otherwise specified in this document, has no direct relationship with the third parties that Klaviyo segmentation and social advertising may be including.
To take advantage of the service provided by Klaviyo, the Owner typically shares information about (purchasing) Users, such as for example contact details and shopping histories. Check the indication at “Personal Data processed“ below for an explanation of the extent of the sharing.
Personal Data processed: device information, email address, purchase history, Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out.
Trackers duration:
How to manage preferences and provide or withdraw consent on www.tooa.com
Whenever the use of Trackers is based on consent, users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on www.tooa.com.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
How to control or delete Cookies and similar technologies via your device settings
Users may use their own browser settings to:
- See what Cookies or other similar technologies have been set on the device;
- Block Cookies or similar technologies;
- Clear Cookies or similar technologies from the browser.
The browser settings, however, do not allow granular control of consent by category.
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Consequences of denying consent
Users are free to decide whether or not to grant consent. However, please note that Trackers help www.tooa.com to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, in the absence of the User's consent, the Owner may be unable to provide related features.
Owner and Data Controller
TooA SpA
Via Giovanni Pascoli, 2
60044 - Fabriano (AN)
Owner contact email: info@tooa.com
Since the use of third-party Trackers through www.tooa.com cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by www.tooa.com.