Cookie Policy

Last updated: January 1, 2023

We take your privacy seriously. This Privacy Policy outlines how we collect and use your personal information as part of our business activities, including when you access or use our Website, mobile sites, mobile applications, and other digital services and products controlled by Accorax that link to this Privacy Policy. We believe in being transparent about our data collection and use practices, and we strive to ensure that your personal information is treated with the utmost care and respect. This Privacy Policy explains what personal information we collect, how we use it, who we may disclose it to, and your rights and choices in relation to your personal information. Please note that this Privacy Policy does not apply to third-party websites linked from our Digital Services. We encourage you to read this Privacy Policy carefully to understand our data collection and use practices. By accessing or using our Digital Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Digital Services.

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our site. We use a number of different cookies, including Functional, Performance, Advertising, and Social media or Content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you wouldn't have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance, whether it’s their first time visiting or if they are frequent visitors.

We use the following cookies to optimize your site experience and provide our services.

[Be sure to check this list against Shopify’s current list of cookies on the merchant storefront: https://www.shopify.com/legal/cookies ]

1.1 Technical Cookies (Essential)
Cookies in this category allow the Website to function properly.

1.2 Statistical cookies

The Website also uses statistical cookies created directly by the Data Controller, or provided by third parties.  

With the statistical cookies created directly by the Data Controller, Accorax will carry out statistical analyses on various domains, websites or apps that can be traced back to Accorax, and will carry out its own statistical processing, without such analyses being aimed at making commercial decisions. 

With third-party statistical cookies, means have been taken to reduce their identifying power, for example by masking significant portions of the IP addresses processed. In case of use of third-party statistical cookies, the third party has contractually committed to the Data Controller to use them exclusively for the provision of the service, to store them separately and not to “enrich” or “cross-reference” them with other information they have.

Navigation data and environmental variables

The Website automatically acquires some Personal Data relating to your navigation.  This category of data includes, for example:

• the IP addresses of the computer You are using;
• the number of accesses;
• the pages used;
• the date and time of access;
• the URL where the browser was before viewing the Website;
• the type of browsing browser
• the operating system used.
  
  

1.3 Marketing cookies 

Marketing cookies are non-technical cookies that allow the Data Controller to carry out marketing activities. Accorax uses the listed marketing cookies.  

1.4 Profiling cookies

Profiling cookies are non-technical cookies that allow the Data Controller to provide You with services tailored to your needs. Accorax uses the listed profiling cookies.

2. Delete and disable cookies 

You can configure your browser to prevent the processing of cookies, or delete them immediately after browsing. Below, We list how to disable and delete cookies with the main browsers:

3. Information You Voluntarily Provide to Us 

At our website, we respect your autonomy and appreciate the information you provide to us voluntarily. You have the choice to share your personal data with us by sending an email to the addresses mentioned on our website. We will only process the personal data you provide to us for the purpose of corresponding with you and will not use it for any other reason.

4. Purpose, legal basis of the processing, optional consent and consequences of lack of consent

• Personal data processed while browsing the website: We process personal data to ensure the full functioning of our website. The provision of personal data is a contractual obligation for us to provide you with our services. If you do not provide the necessary personal data, we will not be able to make our website fully available to you.
• Personal data processed with technical cookies: We also use technical cookies to provide a smooth browsing experience on our website. The provision of personal data is again a contractual obligation for us to provide you with our services.
• Personal data processed with statistical cookies: We use statistical cookies for analyzing our website's performance. Providing personal data for statistical cookies is optional. However, if you do not provide it, we will not be able to carry out statistical analysis
• Personal data processed with marketing cookies: We use marketing cookies to inform you about our services and offerings. Providing personal data for marketing cookies is optional. However, if you do not provide it, we will not be able to inform you about our services and offerings.
• Personal data processed with profiling cookies: We use profiling cookies to offer you personalized services. Providing personal data for profiling cookies is optional. However, if you do not provide it, we will not be able to offer you personalized services.
• Personal data provided voluntarily via email or form: If you provide us with personal data via email or forms, we will process it to respond to your requests. Providing personal data for this purpose is purely optional. However, if you do not provide it, we will not be able to respond to your requests.

You can express your consent to the processing of Personal Data with non-technical cookies by clicking on a specific box presented within a banner.

5. Automated decision-making and profiling   

If you choose to provide your consent for processing through profiling cookies to benefit from personalized services, your personal data may be subject to an automated decision-making process using a specific algorithm. This process will help us decide which communications are best suited to your profile or which ones might interest you the most. The expected outcomes of this processing include receiving highly targeted commercial communications, discounts, and invitations to events that may interest you.

As per Article 22 GDPR, you have the right to:

• Request human intervention in the decision-making process by the Data Controller.
• Express your opinion regarding the decision-making process.
• Obtain an explanation of the decision reached by the Data Controller.
• Challenge the decision itself.

We respect your rights to privacy and ensure that your personal data is handled responsibly and with the utmost security. Our goal is to provide you with the best possible experience and services that are tailored to your preferences and interests.

 6. Source and categories of Personal data 

we take the privacy and security of your personal data seriously. The Data Controller will only process the Personal Data provided by you in accordance with our Cookie Policy. This data will be collected through the Website or by sending you an email. We will not process any data obtained from publicly available sources.

We recognize the importance of sensitive information and will not process any special Personal Data as referred to in Article 9 of the GDPR. You can rest assured that your personal data will be handled with the utmost care and will only be used for the purposes you have given consent for.

7. Recipients and possible categories of recipients of Personal Data
Recipients of Personal Data may include:

• Communications companies that carry out commercial communication and profiling activities on behalf of the Data Controller, where consent has been given, and which have the status of data processors;
• Companies offering information society services, including, in particular, those offering hosting services;
• Marketing, advertising, and analytics providers, if consent has been given;
• Audit firms;
• Partner companies of the Data Controller;
• Technical and operational service providers and business partners; and
• Potential purchasers within the context of a business transaction.

8. Data transfer 
At times, it may be necessary for the Data Controller to transfer your Personal Data to entities outside the European Union or to international organizations. These entities could include communications companies, information society service providers, marketing and analytics providers, audit firms, partner companies, technical and operational service providers, and potential purchasers in a business transaction.

Please rest assured that any transfer of Personal Data will only be carried out if the European Commission has made an adequacy decision, verifying that the third country or international organization in question provides sufficient protection for your rights. In the absence of such a decision, we will enter into separate agreements with these entities, requiring them to adopt adequate security measures to protect your rights.

We want to specifically inform you that Google Inc. has a contractual obligation to ensure the protection of your rights, and your data may be transferred to the United States of America.

If you wish to obtain a copy of your Personal Data or where it has been made available, please send your request to the Data Controller at the addresses provided above.

9. Data retention period

We want you to know that the Data Controller will keep your Personal Data safe and secure. Technical cookies will be used to ensure that you can use the Website correctly for a period not exceeding 12 (twelve) months from the date of individual collection, as stated in point 2.1 of our Cookie Policy.

Furthermore, personalized services will be provided through statistical, marketing, and profiling cookies for a period not exceeding 12 (twelve) months from the date of individual collection, in accordance with points 3.2, 3.3, and 3.4 of the Cookie Policy.

If you provide us with your Personal Data voluntarily via email or form, we will process it to respond to your requests. We will keep this information only for the time required to achieve this purpose and for no longer than 12 (twelve) months from the date of individual collection.

Please note that the Data Controller may ask you to renew your consent to process or verify the consents you have already expressed. This is to ensure that we continue to handle your Personal Data in accordance with your preferences and in compliance with applicable laws and regulations.

10. Data Subject’s rights: right to object 

As a Data Subject, You have the right to object to the processing of your Personal Data at any time, for reasons relating to your particular situation, pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions.

If You exercise your right to object, the Data Controller will cease processing your Personal Data, unless there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

If your Personal Data is being processed for direct marketing purposes, You have the right to object to such processing at any time, including profiling related to direct marketing. If You object to processing for direct marketing purposes, your Personal Data will no longer be processed for such purposes.

You may object to the processing of your Personal Data for direct marketing purposes in whole or in part. For example, You may object only to receiving promotional communications by automated and/or digital means, or to receiving paper or telephone communications.

If your Personal Data is being processed for scientific, historical research, or statistical purposes pursuant to Article 89(1) of the GDPR, You have the right to object to the processing of Personal Data relating to You, for reasons relating to your particular situation, unless the processing is necessary for the performance of a task carried out in the public interest.

11. Data subject’s rights: other rights

As a Data Subject, You have the following rights in relation to your Personal Data processed by the Data Controller:

Right of access: You have the right to confirm whether or not your Personal Data is being processed by the Data Controller and, if so, to access that information in accordance with Article 15 of the GDPR.

Right of rectification: You have the right to request the rectification of any inaccurate or incomplete Personal Data concerning You without undue delay, in accordance with Article 16 of the GDPR.

Right to erasure: You have the right to request the erasure of your Personal Data without undue delay if one of the grounds listed in Article 17 of the GDPR applies.

Right to restriction of processing: You have the right to request the restriction of processing of your Personal Data if one of the grounds listed in Article 18 of the GDPR applies.

Right to data portability: You have the right to receive the Personal Data concerning You, which You have provided to the Data Controller, in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance, in the cases and under the conditions specified by Article 20 of the GDPR.

Right to human intervention and challenge of automated decision-making: You have the right to obtain human intervention in the decision-making process by the Data Controller, express your opinion, obtain an explanation of the decision reached by the Data Controller, and challenge the decision itself, in accordance with Article 22 of the GDPR.

Right to object to commercial communications: You have the right to object to receiving commercial communications from the Data Controller, free of charge, at any time.

Right to lodge a complaint with the Data Protection Authority: You have the right to lodge a complaint with the Data Protection Authority, to complain about a violation of the rules on the protection of Personal Data, in accordance with Article 77 of the GDPR.

12. How to exercise your rights

You may exercise the rights indicated in the Cookie Policy by addressing your requests directly to the Data Controller at the e-mail address privacy@accorax.com

You may lodge a complaint with Your competent Data Protection Authority, in accordance with the terms of their official websites. 

13. Accessibility  

The Privacy Policy can be accessed online and at the office of the Data Controller. If You specifically request it, the Data Controller may provide the information to You orally, subject to proof of identity, with a telephone request directed to the Data Controller. 

14. Changes
The Data Controller reserves the right to modify the Cookie Policy in order to comply with national and/or European Union legislation or technological innovations. Any new versions of the Cookie Policy will be made available on the Website. We encourage You to periodically review the Cookie Policy. Any changes will be communicated to You through a pop-up on the Website or by other means and/or computer tools. If the Data Controller substantially modifies the Cookie Policy, providing for new processing purposes and/or categories of Personal Data processed or changing the third parties, the Data Controller will inform You, requesting the necessary consents, through a special banner. In case it is not possible for the Data Controller to check the storage of cookies on your device during your next visit to the Website, for example in the case of deletion of installed cookies, the Data Controller will inform You and request your consent through a banner. If at least 6 (six) months have passed since the banner was last displayed on the Website, the Data Controller will inform You through a banner asking for your consent.