Website Cookie Policy

Tecnica Group S.p.A. (hereinafter, “Data Controller” or “Company”), pursuant to Article 13 of General Data Protection Regulation No. 2016/679 (hereinafter, “GDPR”), communicates you the following information regarding the processing of your personal data, carried out through cookies, web beacons, web bugs, clear GIFs and similar technologies present within the pages of the website www.moonboot.com (hereinafter, the “Site”).

1.    Data controller and contact information
The data controller is Tecnica Group S.p.A., with registered office in via Fante d’Italia, 56 – 31040, Giavera del Montello (TV), Italy, C.F. e P. IVA 00195810262.
E-mail: privacy@tecnicagroup.com

2.    Contact information of the Data Protection Officert (DPO)
The Data Controller has appointed a Data Protection Officer (DPO), who can be reached at the following e-mail address: privacy@tecnicagroup.com

3.    Definitions, features, and regulations regarding cookies
Cookies are small text files that sites visited by the user send and store on the user’s computer or mobile device, only to be transmitted back to the same sites on the next visit. Cookies allow the site to remember the user’s actions and preferences (e.g. login data, language chosen, font size, etc.), so that they do not have to be indicated again when the user returns to visit said site or navigates from one page to another of it. Cookies, therefore, are used to perform computer authentication, session tracking and storage of information regarding the activities of users accessing a site. They may also contain a unique identification code that allows tracking of the user's navigation within the site itself for statistical or advertising purposes.

During the browsing of the site, the user may receive on his or her computer so-called “first-party” cookies - where installed directly by the operator of the site -, but also cookies from sites or web servers other than the one he or she is visiting (“third-party” cookies), installed on the terminal by a party other than the operator of the site itself.
Some operations could not be accomplished without the use of cookies, which in some cases are therefore technically necessary for the operation of the site.

There are various types of cookies, depending on their features and functions, which can remain on the user’s computer for different periods of time. In this sense, we distinguish so-called session cookies, which are automatically deleted when the browser is closed, and so-called persistent cookies, which instead remain on the user's equipment until a predetermined expiration date.
Under the current Italian regulation, the use of cookies does not always require the user’s express consent. In particular, the so-called “technical cookies”, i.e. those used for the sole purpose of carrying out the transmission of a communication over an electronic communication network, or to the extent strictly necessary to provide a service explicitly requested by the user, do not require such consent. These are, in other words, cookies that are indispensable for the operation of the site or necessary to perform activities requested by the user.

Among technical cookies, which do not require express consent for their use, the Italian Data Protection Authority also includes:

– analytical cookies: where used directly by the site operator to collect information, in aggregate form, about the number of users and how they visit the site; 
– navigation or session cookies: instrumental in ensuring normal navigation and use of the website (allowing, for example, authentication to access restricted areas); 
– functionality cookies: which allow the user to navigate according to a set of selected criteria (e.g., language, products selected for purchase) in order to improve the service rendered to the user. 

For profiling cookies, vice versa, i.e., those aimed at creating profiles related to the user and used in order to send advertising messages in line with the preferences expressed by the same in the context of web browsing, prior user consent is required.
There are also so-called “web beacons” on the Site, which are tools that are generally intended to track users’ behavior by checking whether they have accessed certain content.
Otherwise referred to as “tracking pixels”, web beacons are single-pixel-sized transparent images (1x1 images, usually a GIF file) that, when requested from the server, allow tracking of the fact that the user is viewing the page containing it. Tracking pixels are generally installed for the purpose of user profiling for commercial reasons.

4.    Types of cookies used by the Site
The Site uses the following types of first and third-party cookies, which can be selected and de-selected, in a granular way, through the control panel provided at the cookie banner on the Site’s homepage.
In particular, the Site uses:

– Technical cookies; 
– Functionality cookies (included among technical cookies); 
– Analytical cookies; 
– Profiling cookies. 
 

With particular reference to third-party cookies, the user may refer to the relevant disclosures, which can be accessed via the links below:

• Google
• Google Analytics
• Adroll
• Riskified
• Criteo
• Hotjar
• Google Adsense
• Google Doubleclick 
• Forter
• Cloudflare
• .linksynergy.com
• Casale media
• pubmatic
• adnxs
• bidswitch 

In detail, the cookies sent by the Data Controller through the Site are outlined below:

Technical Cookies

 

Cookie

Duration & Description

__cf_bm

30 min – If visitors pass a Cloudflare validation page, the cookie prevents additional challenges for up to 30 minutes. This cookie is a session cookie that lasts for up to 30 minutes from the time an End User connects with the site.
This is a third-party cookie belonging to CloudFlare. Their privacy policy can be found here

__cfruid

Session – The __cfruid cookie is strictly necessary to support Cloudflare Rate Limiting products. As part of our Rate Limiting solution, this cookie is required to manage incoming traffic and to have better visibility on the origin of a particular request.
This is a third-party cookie belonging to CloudFlare. Their privacy policy can be found here

_Secure-sc

3 hours – Cookie used to store the hashed user authentication token.
This is a first-party cookie belonging to Moon Boot.

csi

15 days – Cookie used to store client session identifier, used for pixels, to identify a specific client machine independent of session.
This is a first-party cookie belonging to Moon Boot.

ctx

14 days – Gives context about users.
This is a first-party cookie belonging to Moon Boot.

forterToken

5 years – This cookie stores the Forter-generated device identifier. It identifies the browser between browsing sessions.
This is a third-party cookie belonging to Forter. Their privacy policy can be found here

ftr_blst_1h

70 minutes – Third-Party Cookie set by forter - used to assist with fraud detection on the website.
Their privacy policy can be found here

lastRskxRun

2 years – Fraud prevention.
This is a third-party cookie belonging to Riskified. Their privacy policy can be found here

PugT

1 month – This cookie tracks when cookies were updated on the browser, in order to limit the number of calls to the server-side cookie store.
This is a third-party cookie belonging to PubMatic. Their privacy policy can be found here

rcookie

2 years – Fraud prevention.
This is a third-party cookie belonging to Riskified. Their privacy policy can be found here

rskxRunCookie

1 year – Fraud prevention.
This is a third-party cookie belonging to Riskified. Their privacy policy can be found here

Analytical Cookies

__ar_v4

1 year – Store and Track Conversions.
This is a third-party cookie belonging to DoubleClick (by Google). Their privacy policy can be found here

_gcl_au

3 months – Used by Google AdSense for experimenting with advertisement efficiency across websites using their services.
This is a third-party cookie belonging to Google. Their privacy policy can be found here

_gid

1 day – Associated with Google Universal Analytics. Provides statistics on the use of the website.
This is a third-party cookie belonging to Google. Their privacy policy can be found here

_hjAbsoluteSessionInProgress

30 min – Used to detect the first pageview session of a user. This is a True/False flag set by the cookie.
This is a third-party cookie belonging to Hotjar. Their privacy policy can be found here

_hjFirstSeen

1 hour – Identifies a new user’s first session. Used by Recording filters to identify new user sessions.
This is a third-party cookie belonging to Hotjar. Their privacy policy can be found here

_hjIncludedInSessionSample_{site_ID}

30 min – Set to determine if a user is included in the data sampling defined by site's daily session limit
This is a third-party cookie belonging to Hotjar. Their privacy policy can be found here

_hjSession_{site_ID}

30 min – Holds current session data and ensures subsequent requests in the session window are attributed to the same session.
This is a third-party cookie belonging to Hotjar. Their privacy policy can be found here

_hjSessionUser_{site_ID}

1 year – Set when a user first lands on a page, persists the Hotjar User ID which is unique to that site and ensures data from subsequent visits to the same site are attributed to the same user ID.
This is a third-party cookie belonging to Hotjar. Their privacy policy can be found here

anj

3 months – This cookie contains data denoting whether a cookie ID is synced with an AppNexus partner.
This is a third-party cookie belonging to Xandr. Their privacy policy can be found here

CMID

1 year – Collects anonymous data related to the user’s visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.
This is a third-party cookie belonging to Casale Media. Their privacy policy can be found here

CMPRO

90 days – Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement – This also allows the website to limit the number of times that the visitor is shown the same advertisement.
This is a third-party cookie belonging to Casale Media. Their privacy policy can be found here

CMPS

90 days – Collects anonymous data related to the user’s visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.
This is a third-party cookie belonging to Casale Media. Their privacy policy can be found here

tuuid

1 year – stores a unique ID to determine what adverts the users have seen if they have visited any of the advertiser's websites. The information is used to decide when and how often users will see a certain banner.
This is a third-party cookie belonging to Demandbase. Their privacy policy can be found here

tuuid_lu

1 year – Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimize advertisement relevance and ensure that the visitor does not see the same ads multiple times.
This is a third-party cookie belonging to Demandbase. Their privacy policy can be found here

Profiling Cookies

__adroll

29 days – This cookie is used to identify the visitor across visits and devices. It is used by real-time bidding for advertisers to present relevant advertisements.
This is a third-party cookie belonging to AdRoll. Their privacy policy can be found here

__adroll_shared

13 months – Collects data on the user across websites – This data is used to make advertisement more relevant.
This is a third-party cookie belonging to AdRoll. Their privacy policy can be found here

cto_bundle

13 months – Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.
This is a third-party cookie belonging to Criteo. Their privacy policy can be found here

IDE

13 months in the European Economic Area (EEA), Switzerland and the United Kingdom (UK), and 24 months everywhere else – Doubleclick, Google's real time bidding advertising exchange.
This is a third-party cookie belonging to DoubleClick (by Google). Their privacy policy can be found here

KRTBCOOKIE_10

3 months – Registers a unique ID that identifies the user’s device during return visits across websites that use the same ad network. The ID is used to allow targeted ads.
This is a third-party cookie belonging to PubMatic. Their privacy policy can be found here

KRTBCOOKIE_97

1 month – build a profile of user interests and to show relevant ads.
This is a third-party cookie belonging to PubMatic. Their privacy policy can be found here

rmuid

1 year – Stores website user ID, traffic source Ids, page view and order count for affiliate program
This is a third-party cookie belonging to Rakuten. Their privacy policy can be found here

uid

13 months – Used to distinguish users.
This is a third-party cookie belonging to AddThis. Their privacy policy can be found here

uuid2

3 months – Registers a unique ID that identifies a returning user’s device. The ID is used for targeted ads.
This is a third-party cookie belonging to Xandr. Their privacy policy can be found here

5.    Cookie-related settings

Users, through the specific functions of their Browser, can block or delete (in whole or in part) the cookies on the Site. We remind you, however, that not authorizing technical cookies may result in the inability to use the Site, view its contents and take advantage of related services. Inhibiting functionality cookies, on the other hand, may result in some services or certain features of the Site not being available or not working properly, and you may be forced to change or manually enter certain information or preferences each time you visit the Site.

You, in particular, can authorize, block, or delete (all or part of) cookies through the specific functions of your Browser. For more information on how to set preferences on the use of cookies through your Browser, you can consult the following instructions:

• – Internet Explorer
• – Google Chrome
• – Safari
• – Firefox

6.    Methods for collecting and managing the consent for cookies

At the first access, the Site shows to the users the banner containing a brief cookie policy. The user, therefore, is immediately given the opportunity to express his or her preferences and intentions regarding cookies. In particular:

• – by clicking “I ACCEPT ALL”, you consent to the setting up, on your device, of all cookies and other technologies operating on the Site; 
• – by clicking on “X” at the top right of the banner, the user does not consent to the setting up of analytical and profiling cookies, for which consent is required. Therefore, only anonymized technical or analytical cookies are setting up on the user’s device, without the consent of the user; 
• – by clicking on “SHOW DETAILS”, the user has the opportunity to view the individual cookies on the Site, categorized by type. 

Users, in any case, can change their cookie preferences at any time by opening the “Cookie Policy” link, which leads back to this extended policy (either directly from the banner or, later, through appropriate link in the footer of the Site) and employing the appropriate buttons below: 
Edit Consent  |  Whithdraw Consent   

7.    Transfer of personal data

Personal data collected by first-party cookies - i.e. installed by the Controller - present on the Site, are not subject to transfer outside the European Union. In any case, it is understood that, should it become necessary, the Data Controller may also transfer personal data to countries outside the EU in compliance with the applicable legal provisions and therefore entering into, if and to the extent necessary, specific agreements that guarantee an adequate level of protection of personal data, or in any case adopting the standard contractual clauses provided by the European Commission for the transfer of personal data outside the EU.

8.    Categories of recipients
Personal data collected through cookies may be shared with:

• – persons authorized by the Controller to process personal data who have received appropriate operational instructions, have committed to confidentiality, or are subject to an appropriate legal obligation of confidentiality;
• – parties delegated and/or appointed by the Data Controller to the performance of activities strictly related to the pursuit of specific purposes (by way of example but not limited to, technical maintenance work on the systems), rightly appointed as Data Processors.

9.    Rights of the data subject
According to the provisions of the GDPR, you have the right to request from the Data Controller, at any time, access to, rectification or erasure of your Personal Data or to object to its processing. The GDPR allows you to exercise your right to request the restriction of processing in the cases provided for by Article 18 of the GDPR, as well as to obtain in a structured, commonly used and machine-readable format the Data concerning you, in the cases provided for by Article 20 of the GDPR.

The requests can be addressed to the e-mail address: privacy@tecnicagroup.com 
Lastly, we would like to remind you that you always have the right to lodge a complaint with the competent supervisory authority (Data Protection Authority), pursuant to Article 77 of the GDPR, if you believe that the processing of your personal data is contrary to the legislation in force.