One-to-One Privacy Policy Summary

This Privacy Policy outlines the methods and purposes of the processing carried out by Selle Royal Group S.p.A., as the data controller ("Controller", "we", or “us") of the personal data ("Data") of individuals ("User", "you") who operate through this Application ("App") when placing orders at authorized retailers of the Controller's products or when interacting with us or our authorized retailers through our call centers, customer service including live chats and email communications, social media channels, or retail stores, including our dealerships ("Services"). In technical and commercial relationships with our authorized retailers of customized products (saddles) made through the mapping and electronic detection in situ of the cyclist's morphological characteristics, the terms "User", "you" refer also to said retailers, and this Privacy Policy is applicable to them as well, mutatis mutandis.
This document can be printed using the print command in any browser's settings.

Data Controller

The Data Controller is Selle Royal Group S.p.A. - Via Vittorio Emanuele, 119 - 36050 Pozzoleone (Vicenza). The Data Protection Officer can be contacted at the following address: privacy@selleroyal.com

Data Processor

The Data Processor, under the control of the Controller, in accordance with articles 4(8) and 28 of the Regulation (EU) 2016/679 (GDPR), is also the authorized retailer of Selle Royal to whom the consumer turns for the creation and purchase of customized saddles through the mapping and electronic detection in situ of the cyclist's morphological characteristics. This summary translates and simplifies the key elements of the Privacy Policy provided, focusing on the roles of the data controller and processor, as well as the context in which personal data is collected and processed.

1.TYPES OF DATA COLLECTED

The personal information we process about you falls into the following categories:
1. Information you provide us with:
-Contact information: Name, address, email, phone number, tax code provided when first entered in the App, for purposes such as product purchasing, marketing, newsletters, order status information, and any other request and/or question.
-User profile information: Contact information (as defined above), username, age, gender, bicycle model, data related to the mapping of pressure on the saddle, and any other further information suitable for the correct application and refinement of the algorithm for choosing the saddle.

2. Information we automatically collect:
-Device information: Information from and about the device (whether it's a PC, phone, or tablet) you use when you use our service, including IP address, telephone operator, browser type and language, and operating system.
-Location information: Depending on how you use the service and your device's settings, type, and connectivity, we may collect location-based information, including IP address, GPS location, city, postal code, region, and the device's proximity to Bluetooth networks and/or other proximity systems.
This section outlines the scope of personal data collected by Selle Royal Group S.p.A., both provided directly by users and collected automatically, emphasizing the company's commitment to understanding user needs and preferences to enhance its service offerings and user experience.

3. Information Collected from Third Parties ("Third Parties”): -Third-Party Applications: If you access our service through third-party applications, such as the Apple Store, Google Play App Store, or through social networks like Instagram, Twitter, Facebook, we may collect information about you from third-party applications that you have made public through your privacy settings. This may include your name, App store username, location, gender, date of birth, and email.

4. Information Collected Using Cookies and Similar Technologies: -We use cookies and similar tracking technologies, like pixel tags/web beacons, and social media widgets ("cookies") to collect and use personal information about the user, including for analytical purposes and to offer interest-based advertising. For more information on the types of cookies we use, the reasons, and how to control cookies, users can consult Selle Royal's Cookie Policy. Unless specified otherwise, all Data requested by the Controller are mandatory. If the User refuses to communicate them, it may be impossible for the Controller to provide the Service. Where the Controller indicates some Data as optional, Users are free not to communicate such Data, without this having any consequence on the availability of the Service or its operation. Users who have doubts about which Data are mandatory are encouraged to contact the Controller.

2. HOW WE USE PERSONAL INFORMATION

We use your information for the following purposes:

• To provide the user with Services: Including user identity verification and account setup, selecting the saddle model and its precise configuration according to the user's morphological characteristics, and processing product orders.
• To communicate with you, including administrative matters (such as account management and technical support), and to respond to any question, comment, or request from you about our services.
• To send you technical and marketing materials: including phone calls, emails, mail, or SMS with information about products, news, offers and/or services that might interest you, as allowed by applicable law.
• For analysis, research, and product and services improvement: including conducting research/surveys to understand how products and services are used and how they can be improved.
• For quality assurance purposes: Including monitoring communications and interactions with you to ensure the quality of our technical assistance services and addressing your complaints. We will provide notification and consent options for monitoring communications as required by applicable law.
• To ensure the security and integrity of the products provided to you and our services: including detecting and combating any misuse or harmful activity, fraud, spam, and illegal activities affecting our services.
• To comply with any applicable law and/or regulation.
• For any other legitimate business purpose: including any ancillary commercial purpose related or connected to one of the above, or for any other purpose communicated to the user at the time of collecting their personal data.

For detailed information on the purposes of processing and the Data processed for each purpose, the User can refer to the section "Details on the Processing of Personal Data" (Point 6).

2. DATA PROCESSING IN THE CASE OF MINORS

The Data Controller commits to protecting the privacy of minors under the age of 16 ("Minors") and to implement reasonable precautions to identify orders received from Minors. The Controller or connected third parties bear no responsibility if the Minor has concealed their minor status or otherwise deceived to hide it. The Controller allows the parental authority to create an account for Minors under their care. This policy also explains how we collect, use, share, and process the personal data of Minors to create such an account.

Information We Collect from Minors When a parental guardian creates an account for a Minor, the retailer visited collects only limited personal information, including username, date of birth, saddle model, data related to saddle pressure mapping, and any additional information necessary for the correct application of the algorithm for saddle configuration.

Information We Automatically Collect

• Device Information Information from and about the device (whether it's a PC, phone, or tablet) used when our services are utilized, including the IP address, telephone operator, browser type and language, and operating system.
• Location Information Depending on how the services are used and the device's settings, type, and connectivity, we may collect location-based information, including the IP address, GPS location, city, postal code, region, and the device's proximity to Bluetooth networks and/or other proximity systems.

How We Use the Personal Information of Minors

• We may share the information we collect through our retailers essential for providing the Controller's services.
• We may disclose personal information if permitted or required by law (i) in response to a court order or legal proceeding; (ii) in response to a law enforcement or public agency request (including schools or child services); (iii) if we believe disclosure may prevent the instigation of a crime, facilitate an investigation related to public safety or protect the safety of Minors using our App; (iv) to protect the security and integrity of our sites, applications, and other technologies, as well as our retailers' technology; or (v) to enable us to take precautions against misuse.
• The Controller does not sell Minors' information to third parties and does not share such information with third parties for purposes not expressly authorized (including targeted advertising and promotional activities).

Data Security and Retention

• We strive to ensure that information about Minors is processed securely and in accordance with this policy. Unfortunately, the transmission of information via the internet is not completely secure. While the Controller does its best to protect this information, such as through encryption, the security of information transmitted through the App cannot be guaranteed; users are aware of the risks of information transmitted through the App.
• The Controller has reasonably appropriate technical and organizational measures to ensure a level of security appropriate to the most serious risks to users' rights and freedoms. We maintain and periodically modify these technical and organizational measures to improve the overall security of our systems.
• We retain information about Minors for as long as reasonably necessary to fulfill the purpose for which it was collected. Retention periods vary based on several criteria, such as the type of information and the purposes for which we use it.
• The Controller may transfer Minors' information to its servers or centers that may be located in a country different from where the user is located.

Rights and Choices

• A parent or guardian may submit a request for knowledge, access, deletion, or correction of information collected about the Minor under their responsibility, as well as a complaint or appeal against a decision made regarding such a request, by contacting us through the web form or physical address provided in the Contacts section. A parent or guardian has the right to know what personal information we have collected about the Minor, the commercial purpose for collecting or disclosing personal information, the categories of third parties with whom we share personal information, and the specific personal information we have collected about the Minor.
• The Controller will respond to requests in accordance with applicable law and after proper verification. We will verify a parent or guardian's request by requiring the completion of an access form, in addition to limited additional information if necessary for verification. We do not discriminate based on the exercise of privacy rights that a user, parent, or guardian may have.

3. HOW WE STORE DATA

The Data Controller stores personal information received as long as the user utilizes our Services or as necessary to fulfill the purposes for which it was collected, to provide our Services, to resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. When we are no longer required to retain personal information as described above, we will destroy, delete, or de-identify it. Furthermore, the Data Controller may be obliged to retain Data for a longer period in compliance with a legal obligation or by order of an authority. Specifically: · Data collected for purposes related to the execution of a contract between the Data Controller and the User will be retained until the execution of such contract is completed. · Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until the satisfaction of such interest. The User can obtain more information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller. When processing is based on the User's consent, the Data Controller may retain the Data longer until such consent is revoked. · In addition to the Data Controller, in some cases, other parties involved in the organization of the Data Controller (administrative, sales, marketing, legal, system administrators personnel) or external subjects (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by Selleroyal.com, may have access to the Data. The updated list of Data Processors can always be requested from the Data Controller. · We adopt measures to ensure that user information is processed securely and in accordance with this Privacy Policy. We maintain commercially reasonable administrative, technical, and physical security measures (which vary depending on the sensitivity of the personal information) aimed at protecting against unauthorized use, disclosure, or access to personal information. · The Data is processed at the operating offices of the Data Controller and in any other places where the parties involved in the processing are located. For more information, contact the Data Controller. · The User's Data may be transferred to a country different from where the User is located. For more information on the place of processing, the User can refer to the section "Details on the Processing of Personal Data" (point 6). The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or constituted by two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data. The User can check if any of the described transfers have taken place by examining the section "Details on the Processing of Personal Data" (point 6) or by asking for information from the Data Controller using the contact details provided at the beginning.

4. LEGAL BASIS FOR PROCESSING

The Data Controller processes User Data if one of the following conditions applies: • The User has given consent for one or more specific purposes. Note: In some jurisdictions, the Data Controller may be authorised to process personal data without the need for the User's consent or any other of the specified legal bases as long as the User does not "opt-out" of such processing. However, this is not applicable when the processing of personal data is governed by European data protection legislation; • The processing is necessary for the performance of a contract with the User and/or for taking pre-contractual steps; • The processing is necessary to comply with a legal obligation to which the Data Controller is subject; • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller; • The processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party. It is always possible to request the Data Controller to clarify the specific legal basis of each processing activity and in particular to specify whether the processing is based on the law, required by a contract, or necessary to conclude a contract.

6. DETAILS ON THE PROCESSING OF PERSONAL DATA

The Data is collected for the following purposes using the following services:

Contacting the User Mailing List or Newsletter (SelleRoyal.com) By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, related to SelleRoyal.com, may be sent. The User's email address might also be added to this list as a result of registering on SelleRoyal.com or after making a purchase. Personal Data processed: last name; email; first name. Contact Form (SelleRoyal.com): By filling in the contact form with their Data, the User agrees to its use to respond to requests for information, quotes, or any other kind of request as indicated by the form’s header. Personal Data processed: last name; email; country; first name; various types of Data as specified by the service's privacy policy.

Payment Management Payment management services allow SelleRoyal.com to process payments by credit card, bank transfer, or other means. The data used for payment are acquired directly by the requested payment service operator without being processed by SelleRoyal.com in any way. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment. PayPal (Paypal): PayPal is a payment service provided by PayPal Inc., which allows users to make online payments. Adyen (Adyen B.V.): Adyen is a payment service provided by Adyen B.V. Place of processing: Netherlands – Privacy Policy. Apple Pay (Apple Inc.): Apple Pay is a payment service provided by Apple Inc., which allows users to make payments using their mobile phone. Place of processing: United States – Privacy Policy. Google Pay: Google Pay is a payment service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the Data processing, which allows users to make online payments using their Google credentials. Place of processing: United States – Privacy Policy; Ireland – Privacy Policy. Klarna (Klarna AB): Klarna is a payment service provided by Klarna AB. Place of processing: Sweden – Privacy Policy.

Tag Management This type of service is functional to the centralized management of the tags or scripts used on SelleRoyal.com. The use of these services involves the flow of User Data through them and, if necessary, their retention. Google Tag Manager (Google LLC) Google Tag Manager is a tag management service provided by Google LLC. Personal Data processed: Cookies; Usage Data. Place of processing: United States – Privacy Policy.

Support and Contact Request Management This type of service allows SelleRoyal.com to manage support and contact requests received via email or other tools, such as the contact form. The Personal Data processed depends on the information provided by the User within the messages and the tool used for communication (e.g., the email address). Zendesk (Zendesk, Inc.): Zendesk is a support and contact request management service provided by Zendesk, Inc. Place of processing: United States – Privacy Policy.

Address Management and Email Message Sending This type of service allows managing a database of email addresses, telephone contacts, or any other contact information to communicate with the User. These services might also allow collecting data related to the date and time when the message was viewed by the User, as well as the User's interaction with them, such as information on clicks on links included in messages. Mailchimp (The Rocket Science Group, LLC.) Mailchimp is an email address management and message sending service provided by Intuit Inc. Place of processing: USA – Privacy Policy. Amazon Simple Email Service (Amazon) Amazon Simple Email Service is an address management and message-sending service provided by Amazon.com Inc. Personal Data processed: email Place of processing: United States – Privacy Policy.

Hosting and Backend Infrastructure This type of service has the function of hosting Data and files that allow SelleRoyal.com to operate, allow its distribution, and provide a ready-to-use infrastructure to deliver specific features of SelleRoyal.com. Some of these services work through geographically dispersed servers, making it difficult to determine the exact location where the Personal Data are stored. Amazon Web Services (AWS) (Amazon) Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Services, Inc. Personal Data processed: various types of Data as specified by the service's privacy policy. Place of processing: Consult Amazon's privacy policy – Privacy Policy.

Interaction with Data Collection Platforms and Other Third Parties This type of service allows Users to interact with data collection platforms or other services directly from the pages of SelleRoyal.com for the purpose of saving and reusing data. Even if Users do not use the service, it may still collect Usage Data related to the pages where it is installed. Mailchimp Widget (Intuit Inc.) The Mailchimp widget allows interaction with the email address management and message sending service provided by Intuit Inc. Personal Data processed: Tracking Tools. Place of processing: United States – Privacy Policy.

Interaction with Social Networks and External Platforms This type of service allows for interactions with social networks or other external platforms directly from the pages of SelleRoyal.com. The interactions and information obtained by SelleRoyal.com are always subject to the User’s privacy settings for each social network. This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it. It's recommended to log out from the respective services to ensure that data processed on SelleRoyal.com is not linked back to the User's profile. Like Button and Facebook Social Widgets (Facebook, Inc.) The "Like" button and Facebook social widgets are services for interacting with the Facebook social network, provided by Facebook, Inc.

Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy. ShareThis (Sharethis Inc.) ShareThis is a service provided by ShareThis Inc. that displays a widget allowing interaction with social networks and external platforms and the sharing of contents from SelleRoyal.com. Depending on the configuration, this service may display widgets owned by third parties, for example, the managers of the social networks on which to share interactions. In this case, the third parties providing the widget will also be informed of the interaction and Usage Data related to the pages where this service is installed. Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy.

Spam Protection This type of service analyzes the traffic of SelleRoyal.com, potentially containing Users' Personal Data, in order to filter it from parts of traffic, messages, and content recognized as SPAM. Google reCAPTCHA Google reCAPTCHA is a SPAM protection service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the Data processing. The use of the reCAPTCHA system is subject to Google's privacy policy and terms of use. Personal Data processed clicks; Usage Data; keypress events; motion sensor events; touch events; mouse movements; scroll position; responses to questions; Tracking Tools. Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.

Advertising This type of service allows the use of User Data for commercial communication purposes. These communications are displayed on SelleRoyal.com in the form of banners and other advertising forms, also in relation to the User's interests. This does not mean that all Personal Data are used for this purpose. Data and conditions of use are specified below. Some of the services listed below may use Tracking Tools to identify the User or employ behavioral retargeting techniques, which means displaying personalized ads based on the User's interests and behavior, even detected outside of SelleRoyal.com. For more information, we suggest checking the privacy policies of the respective services. Generally, these types of services offer the option to deactivate such tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can read more about how to deactivate interest-based advertising in the specific section "How to deactivate interest-based advertising" in this document. Direct Email Marketing (DEM) (SelleRoyal.com) SelleRoyal.com uses User Data to send commercial proposals related to services and products provided by third parties or unrelated to the product or service provided by SelleRoyal.com. Personal Data processed: email. Facebook Lookalike Audience: Facebook Lookalike Audience is an advertising and behavioral targeting service provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited, depending on how the Data Controller manages the Data, which uses Data collected through the Facebook Custom Audience service to display ads to Users with behavior similar to Users who are already in a Custom Audience list based on their previous use of SelleRoyal.com or their interaction with relevant content through Facebook applications and services. Based on these Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audience. Users can choose not to use Facebook's Tracking Tools for ad personalization by visiting this opt-out page. Personal Data processed: Usage Data; Tracking Tools. Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out. Clerk.io (Clerk.io ApS): Clerk.io is an advertising and behavioral targeting service provided by Clerk.io ApS that offers statistics and allows SelleRoyal.com to display search results, suggestions, and personalized content. Personal Data processed: Tracking Tools. Place of processing: Denmark – Privacy Policy.

Collection of Privacy Preferences This type of service allows SelleRoyal.com to collect and save Users' preferences regarding the collection, use, and processing of their personal information, as required by applicable privacy legislation. iubenda Cookie Solution (iubenda srl) The iubenda Cookie Solution allows the Data Controller to collect and save Users' preferences related to the processing of personal data and, in particular, the use of Cookies and other Tracking Tools on SelleRoyal.com. Personal Data processed: Tracking Tools. Place of processing: Italy – Privacy Policy.

Registration and Authentication By registering or authenticating, the User allows SelleRoyal.com to identify them and give them access to dedicated services. Depending on what is outlined below, registration and authentication services may be provided with the aid of third parties. If this occurs, SelleRoyal.com may access some Data stored by the third-party service used for registration or identification. Some of the services listed below may collect Personal Data for targeting and profiling purposes; for more information, please refer to the description of each service. Facebook OAuth Facebook OAuth is a registration and authentication service provided by Meta Platforms, Inc., or Meta Platforms Ireland Limited, depending on how the Data Controller manages the Data, and is connected to the Facebook network. Personal Data processed: Tracking Tools; various types of Data. Place of processing: United States – Privacy Policy; Ireland – Privacy Policy. Instagram Authentication Instagram Authentication is a registration and authentication service provided by Meta Platforms, Inc., or Meta Platforms Ireland Limited, depending on how the Data Controller manages the Data, and is connected to the Instagram social network. Personal Data processed: various types of Data as specified by the service's privacy policy. Place of processing: United States – Privacy Policy; Ireland – Privacy Policy. Google OAuth Google OAuth is a registration and authentication service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the Data, and is connected to the Google network. Personal Data processed: various types of Data as specified by the service's privacy policy. Place of processing: United States – Privacy Policy; Ireland – Privacy Policy. Facebook Authentication (Meta Platforms Ireland Limited) Facebook Authentication is a registration and authentication service provided by Meta Platforms Ireland Limited and is connected to the Facebook social network. Personal Data processed: Tracking Tools; various types of Data as specified by the service's privacy policy. Place of processing: Ireland – Privacy Policy.

Direct Registration and Authentication by SelleRoyal.com By registering or authenticating, the User allows SelleRoyal.com to identify them and give them access to dedicated services. Personal Data is collected and stored exclusively for the purpose of registration or identification. The Data collected are only those necessary to provide the service requested by the User. Direct Registration (SelleRoyal.com) The User registers by filling in the registration form and providing their Personal Data directly to SelleRoyal.com. Personal Data processed: various types of Data.

Remarketing and Behavioral Targeting These types of services allow SelleRoyal.com and its partners to communicate, optimize, and serve advertisements based on the User's past use of SelleRoyal.com. This activity is facilitated by tracking Usage Data and using Tracking Tools to collect information that is then transferred to partners managing remarketing and behavioral targeting activities. Some services offer a remarketing option based on email lists. In addition to the opt-out features offered by the services listed below, Users can opt out by visiting the Network Advertising Initiative's opt-out page. Users may also choose not to participate in certain advertising features through the corresponding device configuration options, such as mobile device advertising settings or generic advertising configuration. Remarketing with Google Analytics (Google Inc.) Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the Data processing. This service links the tracking activity carried out by Google Analytics and its Cookies with the Google Ads advertising network and the DoubleClick Cookie. Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy – Opt Out. Facebook Remarketing (Facebook, Inc.) Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of SelleRoyal.com with the Facebook advertising network. Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy – Opt Out. Facebook Custom Audience (Facebook, Inc.) Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of SelleRoyal.com with the Facebook advertising network. Personal Data processed: Cookies; email. Place of processing: USA – Privacy Policy – Opt Out. Remarketing Google Ads (Google LLC) Remarketing Google Ads is a remarketing and behavioral targeting service provided by Google LLC that links the activity of SelleRoyal.com with the Google Ads advertising network and the DoubleClick Cookie. Users can opt out of Google cookies for ad personalisation by visiting Google's Ad Settings. Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy – Opt Out. Users have the option to opt out of Google's use of cookies for ad personalisation by visiting Google's Ad Settings. This choice allows users to control how their data is used by Google to display advertisements tailored to their interests. Personal Data processed: Cookies; Usage Data. Place of processing: United States – Privacy Policy – Opt Out.

Statistics The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. Google Analytics (Google Inc.) Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of SelleRoyal.com, compiling reports, and sharing them with other Google-developed services. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy – Opt Out. Facebook Ads conversion tracking (Facebook pixel) (Facebook, Inc.) Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Facebook, Inc. that links data from the Facebook advertising network with actions taken within SelleRoyal.com. The Facebook pixel monitors conversions that can be attributed to Facebook, Instagram, and Audience Network ads. Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy. Google Ads conversion tracking (Google Inc.) Google Ads conversion tracking is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the Data processing, which links data from the Google Ads advertising network with actions taken within SelleRoyal.com. Personal Data processed: Cookies; Usage Data. Place of processing: USA – Privacy Policy. Data originating from the Google Ads advertising network is linked with actions taken within SelleRoyal.com. Personal Data processed: Cookies; Usage Data. Place of processing: United States – Privacy Policy – Opt Out. Google Analytics with Anonymized IP (Google LLC) Google Analytics is a web analytics service provided by Google LLC ("Google"). Google uses the Personal Data collected to track and examine the use of SelleRoyal.com, compile reports, and share them with other Google-developed services. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP address of Users within the borders of the European Union member states or other countries participating in the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google's servers and shortened within the United States. Personal Data processed: Cookies; Usage Data. Place of processing: United States – Privacy Policy – Opt Out.

Online Sale of Goods and Services Data processed following an order Some Data will also be processed for order processing, execution, and shipping. Among these data are: Name, Surname, email, Address, Postal Code, State, Province, City, Telephone, Tax Code.

7. YOUR RIGHTS

7.1 Consent

• If we have collected and processed your Data with your consent (including sensitive or special category data), you can withdraw your consent at any time by contacting us using the "Details on the Processing of Personal Data" section (point 6).
• Withdrawing consent does not affect the lawfulness of any processing we carried out before the withdrawal, nor does it affect the processing of your Data conducted on legal grounds other than consent (see point 4 "Legal basis of processing").

7.2 Direct Marketing

• We may send marketing communications for purposes notified to the User (including those specified in point 2 above) and, where required by applicable law, with the User's consent. You can unsubscribe from direct marketing at any time by contacting us using the details provided in point 6. We will process your request within a reasonable time after receipt, in accordance with applicable laws.
• You can unsubscribe from email communications at any time. To stop receiving our promotional emails, contact us using the details provided in point 6. We will process your request as soon as possible after receiving it, in accordance with the laws in force. Please note that you will continue to receive transactional emails related to products or services you have requested. We may also send you certain non-promotional communications related to our Services and, to the extent permitted by law, you cannot opt out of such communications (e.g., communications regarding updates to our Terms or this Privacy Policy).

7.3 Do not track
Do Not Track ("DNT") is a privacy preference that users can set in some web browsers. DNT is a way for users to inform websites and web services that they do not want certain information about their webpage visits collected over time and across websites or online services. SelleRoyal.com does not support "Do Not Track" requests.

7.4 Rights of Access and Management of Personal Data
We recognize the importance of your personal information and provide you with simple ways to exercise the following rights: access (right to know), portability, rectification (correction or update), deletion (erasure), objection, and limitation of the processing of your data by contacting us using the details provided in point 6.

7.5 Exercising Your Rights
To exercise your rights, you can make a request to the contact details of the Data Controller indicated in this document. Requests are submitted free of charge and are processed by the Data Controller as quickly as possible, in any case within one month.

8. UPDATES TO OUR PRIVACY POLICY

We may update our Privacy Policy from time to time. In such cases, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any significant changes to the Privacy Policy if and where this is required by applicable data protection laws. You can check the date of the last update of this Privacy Policy by checking the "last updated" date displayed at the bottom of this policy.

Legal References This privacy statement is drafted based on multiple legislative systems, including Regulation (EU) 2016/679 (GDPR).