Privacy Policy of giuliaiosco.com
Data Controller
Giulia Iosco Atelier
A company incorporated under Italian law, registered with the Rome Chamber of Commerce.
Registered office: Via Angelo Brunetti 36, 00186 Rome – Italy
VAT Number: 17530601008
Email: info@giuliaiosco.com
Certified email (PEC): giuliaiosco@pec.it
Giulia Iosco Atelier collects certain personal data from its users to ensure the proper execution of contractual obligations and to maintain the highest standard of service during and after the transaction.
Privacy Policy Overview
Personal Data Processed for the Following Purposes Using These Services:
Analytics
- Google Analytics (Universal Analytics)
Personal Data: cookies (trackers); usage data. - Google Analytics 4
Personal Data: browser information; city; device data; city latitude and longitude; number of users; session statistics; cookies; usage data.
Privacy Preferences Management
• Cookieyes by Usercentrics A/S (Company reg. no. 34624607 – Denmark)
Personal Data: cookies.
User Contact Management
• Contact Form
Personal Data: first name; last name; email address; phone number.
Displaying Content from External Platforms
• Relaway Fonts
Personal Data: cookies; usage data.
Payment Processing
• PayPal, Visa, Mastercard
Personal Data: billing address; email; first and last name; password; payment information; purchase history; phone number; device data; cookies.
Hosting and Backend Infrastructure
• Hetzner Hosting
Personal Data: cookies; usage data; various types of data as specified in the service’s privacy policy.
Interaction with External Social Networks and Platforms
• PayPal Buttons and Widgets
Personal Data: cookies; usage data.
• Mailchimp : personal data for customer experience
Registration and Authentication Provided Directly by This Application
• Direct Registration
Personal Data: billing address; city; company name; country; province/state; date of birth; email; first and last name; password; phone number; physical address; tax code; VAT number; postal/ZIP code; various data types.
Tag Management
• Google Tag Manager
Personal Data: cookies; usage data.
Privacy Preferences Management
- Cookieyes by Usercentrics A/S (Company reg. no. 34624607 – Denmark)
Personal Data: cookies.
User Contact Management - Contact Form
Personal Data: first name; last name; email address; phone number.
Displaying Content from External Platforms - Relaway Fonts
Personal Data: cookies; usage data.
Payment Processing - PayPal, Visa, Mastercard
Personal Data: billing address; email; first and last name; password; payment information; purchase history; phone number; device data; cookies.
Hosting and Backend Infrastructure
- Hetzner Hosting
Personal Data: cookies; usage data; various types of data as specified in the service’s privacy policy.
Interaction with External Social Networks and Platforms
- PayPal Buttons and Widgets
Personal Data: cookies; usage data. - Mailchimp : personal data for customer experience
Registration and Authentication Provided Directly by This Application
- Direct Registration
Personal Data: billing address; city; company name; country; province/state; date of birth; email; first and last name; password; phone number; physical address; tax code; VAT number; postal/ZIP code; various data types.
Tag Management
- Google Tag Manager
Personal Data: cookies; usage data.
Additional Information on Personal Data Processing
Sale of Goods and Services Online
The Personal Data collected is used to provide services to the User or to sell products, including payment and delivery. Data collected for payment purposes may include credit card details, bank account information, or other payment methods, depending on the system used.
Types of Data Collected
Among the types of Personal Data this Application collects, either independently or through third parties, are
- Usage data
- Cookies (trackers)
- First name, last name
- Email address
- Password
- Phone number
- Payment information
- Purchase history
- Billing address
- Device information
- Number of users
- City
- Session statistics
- City latitude and longitude
- Browser information
- Date of birth
- Physical address
- VAT number
- Company name
- Tax code
- Country, state, province
- Postal/ZIP code
- Street number
- Various other data types
Full details on each category of collected Personal Data are provided in the specific sections of this Privacy Policy or through dedicated information texts displayed prior to data collection.
Personal Data may be freely provided by the User, or, in the case of usage data, collected automatically during use of this Application.
Unless otherwise specified, all data requested by this Application is mandatory. Failure to provide such data may result in the inability of this Application to deliver its services. In cases where this Application specifically states that certain data is not mandatory, Users are free to withhold such information without affecting service availability or functionality.
Users who are unsure which Personal Data is mandatory are encouraged to contact the Data Controller.
The use of cookies—or other tracking tools—by this Application or by third-party service providers is intended to supply the service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy.
Users are responsible for any third-party Personal Data obtained, published, or shared through this Application.
Methods and Place of Data Processing
Methods of Processing
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Data processing is carried out using IT and/or telematic tools, following organizational procedures and logics strictly related to the stated purposes.
In addition to the Data Controller, in some cases, access to the Data may be granted to other subjects involved in the operation of this Application (such as administrative, commercial, marketing, legal personnel, and system administrators), or to external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Data Controller.
An up-to-date list of these parties can be requested from the Data Controller at any time.
Place of Processing
The Data is processed at the operational offices of the Data Controller and in any other location where the parties involved in the processing are located.
Depending on the User’s location, data transfers may involve the transfer of Personal Data to a country other than the User’s own.
For further information about the location of processing of such transferred Data, Users may refer to the relevant section in this document concerning the processing of Personal Data.
Data Retention Period
Unless otherwise specified in this document, Personal Data is processed and stored for as long as required to fulfill the purposes for which it was collected. It may also be retained for a longer period in accordance with legal obligations or based on the User’s consent.
Purpose of Processing
User Data is collected to allow the Data Controller to provide its services, comply with legal obligations, respond to requests from authorities, protect its own rights and interests (or those of its Users or third parties), detect fraudulent or malicious activities, and for the following purposes:
- Order and shipping management
- Tag management
- Interaction with external social networks and platforms
- Hosting services and backend infrastructure
- Displaying content from external platforms
- Invoicing and legal obligations
- Sending transactional emails
- Remarketing
- Handling customer service requests
- Registration and authentication managed directly by this Application
- Web analytics
- Payment processing
- Managing privacy preferences
- Contacting the User
For more detailed information on the specific Personal Data used for each purpose, Users can refer to the section “Detailed Information on the Processing of Personal Data” in this document.
Detailed Information on the Processing of Personal Data
- Analytics
These services allow the Data Controller to monitor and analyze web traffic and may be used to track User behavior.
Google Analytics (Universal Analytics) – Google Ireland Limited
Google Analytics is a web analysis service provided by Google Ireland Limited (“Google”).
Google uses the collected Data to track and examine the use of this Application, to prepare reports, and to share them with other Google services.
Google may use the collected Data to personalize ads within its own advertising network.
For more information, consult the Google Partner Policy.
Processed Data: browser information; usage data; cookies (trackers); session statistics; city; device information; number of users; latitude and longitude of city.
Data location: Ireland – Privacy Policy – Opt Out.
Google Analytics 4 – Google Ireland Limited
Google Analytics 4 is an updated version of Google’s web analytics tool.
IP addresses are only used at the moment of collection and then discarded before data is stored in data centers.
Processed Data: same as above.
Data location: Ireland – Privacy Policy – Opt Out. - Managing Privacy Preferences
This type of service allows the Application to store and manage Users’ privacy preferences in compliance with applicable privacy legislation.
Cookieyes – Usercentrics A/S
Cookieyes is a trademark of Usercentrics A/S (Denmark – Company reg. no. 34624607).
It allows the Data Controller to manage cookie consent and tracking preferences.
Processed Data: cookies (trackers).
Data location: Italy – Privacy Policy. - Contacting the User
Contact Form (this Application)
By filling in the contact form with their Data, Users authorize this Application to use such information to respond to requests for information, quotes, or any other inquiries indicated in the form header.
Processed Data: name; surname; email address; phone number. - Displaying Content from External Platforms
These services allow the display of content hosted on external platforms directly from the pages of this Application and enable interaction with them.
Even if not actively used, such services may still collect web traffic data for the pages on which they are installed.
Processed Data: cookies (trackers); usage data.
Data location: United States – see respective Privacy Policies.
Payment Processing
Unless otherwise specified, payments are managed by external service providers.
Users provide their payment information directly to such providers. This Application does not process or store this data directly, but only receives confirmation that a payment was successful.
PayPal – PayPal Inc.
A widely used online payment platform.
Processed Data: billing address; device information; email; name; surname; password; payment information; phone number; purchase history; cookies.
Data location: see PayPal Privacy Policy.
- Hosting and Backend Infrastructure
These services host data and files that allow this Application to function and provide services.
Some services use geographically distributed servers, which may make it difficult to determine the exact location where the Data is stored.
HETZNER Hosting
Hosting service provided by Hetzner.
Data location: Germany – Privacy Policy.
- Interaction with Social Networks and External Platforms
These services allow interaction with social networks directly from the Application.
Collected data is subject to the User’s privacy settings on each platform.
To prevent tracking, it is advised to log out of such platforms before use.
PayPal Buttons and Widgets – PayPal Inc.
Allow interaction with the PayPal platform.
Processed Data: cookies (trackers); usage data.
Data location: see PayPal Privacy Policy. - Registration and Authentication (Directly via this Application)
By registering or authenticating, Users allow the Application to identify them and provide access to dedicated services. Personal Data is collected solely for the purpose of user identification and account management.
Direct Registration (this Application)
Users register by filling out the registration form and providing their Personal Data directly to the Application.
Processed Data: billing address; city; company name; country; province; date of birth; email; name; surname; password; phone number; physical address; tax code; VAT number; ZIP/postal code; street number; usage data; other types of data as specified. - Tag Management
These services allow the Data Controller to manage tags and scripts on this Application in a centralized way.
As a result, User Data may pass through these services and potentially be stored.
Google Tag Manager – Google Ireland Limited
Processed Data: cookies (trackers); usage data.
Data location: Ireland – Privacy Policy.
Additional Information on Data Processing
Data Protection Officer (DPO)
A DPO has not been appointed. For further information or inquiries regarding data processing, you may contact us at: info@giuliaiosco.com.
Personal Data collected is used to provide the User with services or to sell products, including payment and delivery management.
Data collected for payment purposes may include credit card details, bank account information (for wire transfers), or other relevant payment methods, depending on the system used.
Cookie Policy
CookieYes is a trademark of Usercentrics A/S. Usercentrics A/S is registered in Denmark, Company Reg. No.: 34624607.
This Application uses tracking tools (“Trackers”).
At Giulia Iosco Atelier, we take your privacy seriously. When you visit www.giuliaiosco.com, we and our third-party partners automatically collect certain information through technologies such as cookies, web beacons (including client-side and server-side pixels and tags), server logs, analytics tools, and other similar technologies (collectively referred to as “Cookies”).
This Cookie Policy explains how we use Cookies, the purposes for which we use them, and how you can manage your preferences. Our use of Cookies may involve the processing of personal data.
A “cookie” is a text file that websites send to a user’s computer or other internet-connected device to uniquely identify the user’s browser or to store information or settings within the browser. A “web beacon” (also called an internet tag, pixel tag, or clear GIF) links web pages to web servers and may be used to transmit information collected through Cookies back to a web server. For the purposes of this policy, all such technologies will be collectively referred to as “Cookies.”
The information we collect via Cookies may include traffic data, geolocation, logs, IP address, device identifiers, connected device types, operating system, browser type and characteristics, device attributes, language and country preferences, referring and exit pages, clickstream data, error information, and timestamps of site visits.
Some Cookies may also collect personal information such as name, email address, phone number, gender, physical address, postal code, date of birth, and user interactions with our website (e.g. viewing a product, creating an account, subscribing to a newsletter, adding items to the cart or wishlist, or making a purchase).
Strictly Necessary Cookies
These Cookies are essential for the operation of our website. For example, they help us manage your privacy preferences, remember saved items, add items to your cart, log in to your account, or fill in forms. These Cookies cannot be disabled.
They are generally deleted when the browser session ends or shortly thereafter.
You may configure your browser to block or alert you about these Cookies, but certain parts of the site may not function properly as a result.
Functional Cookies
Functional Cookies enhance the functionality and personalization of the website. They collect information about your preferences and choices, allowing us to deliver relevant content and tailor the site experience.
For instance, they allow us to remember pages viewed, preferred currency and region, purchase information, transaction IDs, IP address, items added to the cart, web pages visited, language selection, and viewed products—helping us improve your browsing experience.
These Cookies may be set by us or by third-party providers whose services we use.
They are usually deleted at the end of the session or shortly afterward.
If you do not allow these Cookies, some or all of these services may not function correctly.
Analytics Cookies
We use third-party analytics services, such as Google Analytics and Adobe Experience Cloud, to collect data on how users interact with our website. This includes:
- Pages visited
- Time spent on pages
- Page load performance and errors
- IP address
- Demographics and interest data
- Location
- Device identifiers
- Device type and OS
- Browser type and characteristics
- Language and country preferences
- Referring and exit pages
- Clickstream data
- Timestamps of visits
- On-site interactions (e.g. product views, account creation, newsletter subscription, adding items to the cart or wishlist, completing a purchase)
The data may be collected directly by these third-party services or shared with them.
Analytics Cookies help us improve the usability and performance of our website. They allow us to identify the most and least popular pages and understand how visitors navigate the site. All collected data is aggregated.
Some analytics Cookies are persistent and remain stored after a session ends unless manually deleted. Learn more about Google Analytics
To opt out: Google Opt-out Tool
Learn more about Adobe Experience Cloud
To opt out: Adobe Opt-out
Sizmek: http://www.sizmek.com/about-us/privacy
We also use Contentsquare, a third-party session replay service that records user interactions such as clicks, mouse movements, and scrolls.
Advertising and Social Media Cookies
Advertising Cookies are used to manage and display targeted advertisements, including interest-based advertising and social media ads.
They may be set by us or by our advertising and social media partners, such as Meta, Snap, TikTok, Pinterest, Google, and Microsoft, to:
- Create a profile of your interests
- Show you relevant ads on other websites
- Measure the effectiveness of campaigns
- Limit the number of times you see an ad
- Track interactions with ads
These Cookies are only set with your consent. If you decline, you may still see ads, but they will be less relevant.
In certain cases, we collaborate with third-party platforms to connect with users via social media and offer features such as embedded videos. These partners may collect information through Cookies, plugins, and widgets on our site to deliver personalized content.
We also use Google AdWords and similar Google personalization tools.
To learn more about how Google uses information: Google Partners Policy
Some partners such as Meta, Snap, TikTok, and Pinterest may act as independent data controllers or joint controllerswith Giulia Iosco Atelier.
- Meta: Meta Privacy Policy
- TikTok: TikTok Privacy Policy
- Pinterest: Pinterest Privacy Policy
We enter into joint controllership agreements with these third parties to outline respective responsibilities under applicable data protection laws.
Giulia Iosco Atelier is responsible for providing users with information on joint processing activities. The third parties are responsible for enabling data subject rights under Articles 15–20 of the GDPR in relation to the personal data they process.
Your Choices
We do not use non-essential Cookies unless you provide consent via our Cookie Banner.
You can also prevent Cookies from being downloaded to your device by adjusting your web browser settings. Most browsers allow you to:
- Block new Cookies
- Notify you when a new Cookie is being set
- Disable existing Cookies
However, without Cookies, you may not be able to fully experience all features of our website.
Learn how to manage Cookies in popular browsers:
- Google Chrome
- Microsoft Edge
- Mozilla Firefox
- Internet Explorer
- Opera
- Apple Safari
In addition to browser settings, you can manage third-party Cookies via:
- www.aboutads.info/choices/
- www.youronlinechoices.eu
For mobile devices, adjust your device privacy and security settings to control data sharing.
Additional Information for Users
Legal Basis for Processing
The Data Controller may process Personal Data under one or more of the following legal bases:
- The User has given explicit consent for one or more specific purposes
- Processing is necessary for the performance of a contract with the User or for pre-contractual obligations
- Processing is required to comply with a legal obligation
- Processing is related to a task carried out in the public interest or in the exercise of official authority
- Processing is necessary for the legitimate interests pursued by the Data Controller or a third party
We are happy to clarify the specific legal basis upon request.
To manage all cookies on our Site, including those served directly by us, you can adjust your
browser settings. For additional information on managing cookies, visit www.allaboutcookies.org.
Data Retention
Unless otherwise stated, Personal Data will be processed and stored only as long as necessary to fulfill the purposes for which it was collected and may be retained longer due to legal obligations or User consent.
- Data collected for contractual purposes will be retained until the contract is fully performed
- Data processed based on legitimate interests will be retained until those interests are fulfilled
- If processing is based on consent, data will be retained until consent is withdrawn
Once the retention period has expired, data will be deleted.
User Rights Under the General Data Protection Regulation (GDPR)
Users are entitled to exercise specific rights, within the limits established by applicable law:
- Withdraw consent at any time.
- Object to the processing of their data when it is carried out on a legal basis other than consent.
- Access their personal data, including the right to receive details and a copy of the data held.
- Verify and request rectification of inaccurate data.
- Restrict the processing of their data (in which case the data will be stored but not processed).
- Request erasure of their personal data.
- Receive their data in a structured, machine-readable format and, where technically feasible, request transmission to another controller.
- Lodge a complaint with the competent data protection authority.
Users also have the right to be informed about any international transfers of their data and the safeguards in place to protect it.
Right to Object to Processing
Where personal data is processed for the performance of a task carried out in the public interest, in the exercise of official authority, or on the basis of legitimate interests, users may object to such processing by providing grounds related to their particular situation.
In the case of direct marketing, users may object at any time, without providing any justification, and free of charge.
Once an objection to direct marketing is submitted, the user’s data will no longer be processed for that purpose.
How to Exercise Your Rights
Requests to exercise user rights should be addressed to the Data Controller using the contact details provided in this document.
All requests are free of charge and will be processed within one month, in accordance with legal requirements.
Any rectification, erasure, or restriction of processing will be communicated to any recipients of the data (where applicable), unless this proves impossible or involves disproportionate effort.
Upon request, the Data Controller will also inform the user of such recipients.
Additional Information on Data Collection and Processing
Legal Action
The User’s Personal Data may be used by the Data Controller in legal proceedings or in the stages leading to possible legal action arising from misuse of this Application or the related Services.
The User acknowledges that the Data Controller may be required to disclose personal data upon request of public authorities.
Additional Information About the User’s Personal Data
In addition to the information contained in this privacy policy, this Application may provide Users, upon request, with contextual and additional information concerning specific Services or the collection and processing of Personal Data.
System Logs and Maintenance
For operational and maintenance purposes, this Application and any third-party services it uses may collect system logs—files that record interactions—or use other personal data (such as the IP address) for this purpose.
Information Not Contained in This Policy
Further details regarding the collection or processing of personal data may be requested at any time from the Data Controller.
Please refer to the contact information provided at the beginning of this document.
Changes to This Privacy Policy
The Data Controller reserves the right to modify this privacy policy at any time, by informing Users on this page and, where technically and legally feasible, by providing a notification through the Application or via one of the contact methods available to the Data Controller.
Users are advised to check this page frequently, referring to the “Last Updated” date at the bottom.
Where changes concern processing activities based on consent, the Data Controller will seek to renew the User’s consent if required.
Definitions and Legal References
Personal Data (or Data)
Any information that directly or indirectly, including in connection with other data (such as a personal identification number), allows the identification of a natural person.
Usage Data
Information collected automatically through this Application (or through third-party services employed), which may include: IP addresses or domain names of users’ computers, URI (Uniform Resource Identifier) addresses, request timestamps, the method used to submit the request to the server, the size of the file received in response, the server’s response code (success, error, etc.), country of origin, browser and operating system characteristics, time spent per visit (e.g., time spent on each page), navigation path within the Application (with specific reference to the sequence of pages visited), and other parameters relating to the User’s operating system and IT environment.
User
The individual using this Application, who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller, as described in this privacy policy.
Data Controller (or Controller, or Owner)
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, including the security measures concerning the operation and use of this Application.
Unless otherwise specified, the Data Controller is the owner of this Application.
This Application
The hardware or software tool by which the Personal Data of the User is collected and processed.
Service
The service provided by this Application as described in the relevant terms (if available) on this website/application.
European Union (or EU)
Unless otherwise stated, any reference to the European Union in this document includes all current Member States of the European Union and the European Economic Area (EEA).
Cookies
Cookies are tracking tools consisting of small data files stored in the User’s browser.
Tracking Tool (or Tracker)
Any technology—such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags, or fingerprinting—that enables the tracking of Users, for example, by accessing or storing information on the User’s device.
Legal Notice
This privacy notice applies exclusively to this Application, unless otherwise specified within this document.
Last Updated: September 16, 2025
