Cookie Policy of www.heavenoat.com
This document informs Users about the technologies that help this Website to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Website.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This Website uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.
How this Website uses Trackers
Necessary
This Website uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Trackers managed by third parties
-
Cloudflare (Cloudflare Inc.)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this Website, i.e., communication between this Website and the User's browser, while also allowing analytical data from this Website to be collected.
Personal Data processed: Cookies and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Functionality
This Website uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.
Trackers managed by third parties
-
Facebook Messenger Customer Chat (Facebook Ireland Ltd)
The Facebook Messenger Customer Chat is a service for interacting with the Facebook Messenger live chat platform provided by Facebook Ireland Ltd
Personal Data processed: Cookies, Data communicated while using the service and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
-
Facebook Authentication (Facebook Ireland Ltd)
Facebook Authentication is a registration and authentication service provided by Facebook Ireland Ltd and is connected to the Facebook social network.
Personal Data processed: Tracker and various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy.
-
Facebook Oauth (Facebook Ireland Ltd)
Facebook Oauth is a registration and authentication service provided by Facebook Ireland Ltd and is connected to the Facebook social network.
Personal Data processed: Tracker and various types of Data.
Place of processing: Ireland – Privacy Policy.
Experience
This Website uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
Trackers managed directly by the Owner
-
Data provided via online forms, managed directly (this Website)
This Website makes use of online forms that can be used to collect Data about Users.
Personal Data processed: answers to questions, billing address, city, company name, contact info, country, date of birth, email address, first name, gender, language, last name, marital status, name, payment info, phone number, physical address, profession, profile picture, social media accounts, Trackers, Usage Data, user content and workplace.
Trackers managed by third parties
-
Facebook Comments (Facebook, Inc.)
Facebook Comments is a content commenting service provided by Facebook, Inc. enabling the User to leave comments and share them on the Facebook platform.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
-
YouTube video widget (Google Ireland Limited)
YouTube is a video content visualization service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
- PREF: 8 months
- VISITOR_INFO1_LIVE: 8 months
- YSC: duration of the session
-
Google Maps widget (Google Ireland Limited)
Google Maps is a maps visualization service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy.
-
Facebook Like button and social widgets (Facebook Ireland Ltd)
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook Ireland Ltd
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
-
SurveyMonkey (SurveyMonkey Europe UC)
SurveyMonkey is a survey builder and data collection platform provided by SurveyMonkey Europe UC.
Personal Data processed: country, Data communicated while using the service, date of birth, email address, first name, last name, phone number, physical address, Trackers and Usage Data.
Place of processing: European Union – Privacy Policy.
-
Typeform (TYPEFORM S.L)
Typeform is a form builder and data collection platform provided by TYPEFORM S.L.
Personal Data processed: country, Data communicated while using the service, date of birth, email address, first name, phone number, physical address, Tax ID, Trackers, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: Spain – Privacy Policy.
Measurement
This Website uses Trackers to measure traffic and analyse User behaviour to improve the Service.
Trackers managed by third parties
-
Google Analytics (Universal Analytics) (Google LLC)
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
-
Google Analytics for Firebase
Google Analytics for Firebase or Firebase Analytics is an analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.
In order to understand Google's use of Data, consult Google's partner policy.
Firebase Analytics may share Data with other tools provided by Firebase, such as Crash Reporting, Authentication, Remote Config or Notifications. The User may check this privacy policy to find a detailed explanation about the other tools used by the Owner.
This Website uses identifiers for mobile devices and technologies similar to cookies to run the Firebase Analytics service.
Users may opt-out of certain Firebase features through applicable device settings, such as the device advertising settings for mobile phones or by following the instructions in other Firebase related sections of this privacy policy, if available.
Personal Data processed: Cookies and geography/region.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
-
Google Analytics Demographics and Interests reports (Google Ireland Limited)
Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for this Website (demographics means age and gender Data).
Users can opt out of Google's use of cookies by visiting Google's Ads Settings.
Personal Data processed: Tracker and unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- IDE: 2 years
- _gcl_*: 3 months
- test_cookie: 15 minutes
-
Google Analytics 4
Google Analytics 4 is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Trackers.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- _ga: 2 years
- _ga_*: 2 years
-
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is an analytics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner insights into the traffic and interactions on this Website.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
-
Google Analytics (Universal Analytics) with anonymized IP (Google Ireland Limited)
Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. It works by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
-
Google Optimize (Google Ireland Limited)
Google Optimize is an A/B testing service provided by Google Ireland Limited ("Google").
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
- _gaexp: 3 months
- _opt_awcid: 1 day
- _opt_awgid: 1 day
- _opt_awkid: 1 day
- _opt_awmid: 1 day
- _opt_expid: 10 seconds
- _opt_utmc: 1 day
-
Google Optimize 360 (Google Ireland Limited)
Google Optimize 360 is an A/B testing service provided by Google Ireland Limited ("Google").
This service allows the Owner to target groups of Users on the base of their past use of this Website. Users that opt-out of tracking by Google Analytics will not be included in experiments created in Google Optimize 360.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
- _gaexp: 3 months
- _opt_awcid: 1 day
- _opt_awgid: 1 day
- _opt_awkid: 1 day
- _opt_awmid: 1 day
- _opt_expid: 10 seconds
- _opt_utmc: 1 day
Marketing
This Website uses Trackers to deliver personalized ads or marketing content, and to measure their performance.
Some of the advertising services used by the Owner adhere to the IAB Transparency and Consent Framework, an initiative that facilitates responsible privacy practices across the digital advertising industry - providing Users with enhanced transparency and control over how their data are used for advertising tracking purposes. Users can customize their advertising preferences at any time by accessing the advertising preferences panel from within the cookie notice or via the relevant link on this Website.
This Website participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. This Website uses iubenda (identification number 123) as a Consent Management Platform.
Trackers managed by third parties
-
Meta ads conversion tracking (Meta pixel) (Meta Platforms Ireland Limited)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms Ireland Limited that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt out.
Storage duration:
- _fbp: 3 months
- fr: 3 months
-
Facebook Lookalike Audience (Facebook Ireland Ltd)
Facebook Lookalike Audience is an advertising and behavioral targeting service provided by Facebook Ireland Ltd that uses Data collected through Facebook Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the base of their past use of this Website or engagement with relevant content across the Facebook apps and services.
On the base of these Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audience.
Users can opt out of Facebook's use of Trackers for ads personalization by visiting this opt-out page.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
-
Google Ads conversion tracking (Google Ireland Limited)
Google Ads conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on this Website.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
- IDE: 2 years
- test_cookie: 15 minutes
-
Google Ad Manager (Google Ireland Limited)
Google Ad Manager is an advertising service provided by Google Ireland Limited that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner, unless otherwise specified in this document, has no direct relationship with.
In order to understand Google's use of Data, consult Google's partner policy.
This service uses the “DoubleClick” Cookie, which tracks use of this Website and User behavior concerning ads, products and services offered.
Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- GCL_AW_P: 3 months
- GED_PLAYLIST_ACTIVITY: duration of the session
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- __gads: 2 years
- __gpi: 2 years
- __gpi_optout: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_ag: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_gs: 3 months
- _gcl_ha: 3 months
- ar_debug: 3 months
- id: 2 years
- receive-cookie-deprecation: 6 months
- test_cookie: 15 minutes
-
Shopalyst (Shopalyst Inc)
Shopalyst is an advertising service provided by Shopalyst Inc.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy.
-
Chargeads (Chargeads SRL)
Chargeads is an advertising service provided by Chargeads SRL.
Personal Data processed: Tracker and Usage Data.
Place of processing: Romania – Privacy Policy – Opt out.
Storage duration: indefinite
-
Facebook Custom Audience (Facebook Ireland Ltd)
Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that connects the activity of this Website with the Facebook advertising network.
Users can opt out of Facebook's use of Trackers for ads personalization by visiting this opt-out page.
Personal Data processed: email address and Tracker.
Place of processing: Ireland – Privacy Policy – Opt Out.
-
Facebook Remarketing (Facebook Ireland Ltd)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that connects the activity of this Website with the Facebook advertising network.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
-
Google Ad Manager Audience Extension (Google Ireland Limited)
Google Ad Manager Audience Extension is a remarketing and behavioral targeting service provided by Google Ireland Limited that tracks the visitors of this Website and allows selected advertising partners to display targeted ads across the web to them.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- GCL_AW_P: 3 months
- GED_PLAYLIST_ACTIVITY: duration of the session
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- __gads: 2 years
- __gpi: 2 years
- __gpi_optout: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_ag: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_gs: 3 months
- _gcl_ha: 3 months
- ar_debug: 3 months
- id: 2 years
- receive-cookie-deprecation: 6 months
- test_cookie: 15 minutes
-
Google Ads Remarketing (Google Ireland Limited)
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google Ireland Limited that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
In order to understand Google's use of Data, consult Google's partner policy.
Users can opt out of Google's use of Trackers for ads personalization by visiting Google's Ads Settings.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- GCL_AW_P: 3 months
- GED_PLAYLIST_ACTIVITY: duration of the session
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- __gads: 2 years
- __gpi: 2 years
- __gpi_optout: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_ag: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_gs: 3 months
- _gcl_ha: 3 months
- ar_debug: 3 months
- id: 2 years
- receive-cookie-deprecation: 6 months
- test_cookie: 15 minutes
How to manage preferences on this Website
Users can set or update their preferences via the relevant privacy choices panel available on this Website.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
How to control or delete Cookies and similar technologies via your device settings
Users may use their own browser settings to:
- See what Cookies or other similar technologies have been set on the device;
- Block Cookies or similar technologies;
- Clear Cookies or similar technologies from the browser.
The browser settings, however, do not allow granular control of consent by category.
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Consequences of denying the use of Trackers
Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help this Website to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.
Owner and Data Controller
Heaven S.r.l / Via San Francesco D'Assisi, 15 - 20122 Milan (MI), Italy
Owner contact email: info@heavenoat.com
Since the use of third-party Trackers through this Website cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by this Website.