Personal Data processed for the following purposes and using the following services:

• • Access to third-party accounts

    • Facebook account access

      Permissions: Access private data; Email; Photos

    • Twitter account access

  • Advertising

    • Hotjar Form Analysis & Conversion Funnels, Microsoft Advertising, Google Ads conversion tracking and Meta ads conversion tracking (Meta pixel)

      Personal Data: Trackers; Usage Data

    • Google Ad Manager and Google AdSense

      Personal Data: Tracker; Usage Data

    • Facebook Audience Network

      Personal Data: Tracker; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data

    • Google Campaign Manager 360

      Personal Data: geographic position; Trackers; Usage Data

  • Analytics

    • Google Analytics

      Personal Data: Tracker; Usage Data

    • Google Analytics (Universal Analytics) with anonymized IP and Meta Events Manager

      Personal Data: Trackers; Usage Data

    • Google Analytics 4

      Personal Data: browser information; city; device information; session statistics; Trackers; Usage Data

  • Contacting the User

    • Mailing list or newsletter

      Personal Data: country; date of birth; first name; last name; physical address

    • Contact form

      Personal Data: city; country; date of birth; first name; last name; physical address; ZIP/Postal code

  • Content commenting

    • Facebook Comments

      Personal Data: Tracker; Usage Data

  • Displaying content from external platforms

    • YouTube video widget, Google Fonts and Video Vimeo

      Personal Data: Tracker; Usage Data

    • Google Maps widget

      Personal Data: Trackers; Usage Data

  • Handling payments

    • Android Pay, Apple Pay, PayPal, Braintree, Gestpay Banca Sella and Stripe

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Heat mapping and session recording

    • Hotjar Heat Maps & Recordings

      Personal Data: Tracker; Usage Data; various types of Data as specified in the privacy policy of the service

  • Hosting and backend infrastructure

    • Amazon Web Services (AWS)

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Infrastructure monitoring

    • New Relic

      Personal Data: Tracker; Usage Data; various types of Data as specified in the privacy policy of the service

  • Interaction with data collection platforms and other third parties

    • Hotjar Recruit User Testers

      Personal Data: Tracker; Usage Data; various types of Data

  • Interaction with external social networks and platforms

    • YouTube button and social widgets

      Personal Data: Usage Data

    • Facebook Like button and social widgets, Twitter Tweet button and social widgets and Pinterest “Pin it” button and social widgets

      Personal Data: Tracker; Usage Data

  • Interaction with online survey platforms

    • Hotjar Poll & Survey widgets

      Personal Data: Tracker; Usage Data; various types of Data

  • Location-based interactions

    • Geolocation

      Personal Data: geographic position

  • Managing contacts and sending messages

    • Mailchimp

      Personal Data: country; date of birth; first name; last name; physical address

  • Managing data collection and online surveys

    • Hotjar surveys

      Personal Data: country; date of birth; first name; last name; physical address

    • Meta lead ads

      Personal Data: city; country; Data communicated while using the service; date of birth; email address; first name; gender; last name; phone number; physical address; Usage Data; ZIP/Postal code

  • Registration and authentication

    • YouTube OAuth, Twitter OAuth and Google OAuth

      Personal Data: various types of Data as specified in the privacy policy of the service

    • Facebook Authentication

      Personal Data: Tracker; various types of Data as specified in the privacy policy of the service

  • Registration and authentication provided directly by this Application

    • Direct registration

      Personal Data: billing address; city; country; date of birth; email address; first name; gender; house number; language; last name; physical address; picture; Tax ID; Trackers; Usage Data; various types of Data; VAT Number; ZIP/Postal code

  • Remarketing and behavioral targeting

    • Google Ad Manager Audience Extension and Google Ads Remarketing

      Personal Data: Trackers; Usage Data

    • Meta Custom Audience

      Personal Data: email address; Trackers

  • SPAM protection

    • Google reCAPTCHA

      Personal Data: answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; Tracker; Usage Data

  • Tag Management

    • Google Tag Manager

      Personal Data: Usage Data

  • Traffic optimization and distribution

    • Cloudflare

      Personal Data: Tracker; various types of Data as specified in the privacy policy of the service

  • User database management

    • Intercom

      Personal Data: Data communicated while using the service; email address; Tracker; Universally unique identifier (UUID); Usage Data; various types of Data as specified in the privacy policy of the service

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Contact information

• • Owner and Data Controller

    FLAT di Carloni Leonardo
    Corso della Repubblica 36
    60044 Fabriano (AN)
    IT01856080435

    Owner contact email: info@flatshop.it