Privacy policy

Privacy Policy of www.mercatinodininni.it

Welcome to the privacy policy of www.mercatinodininni.it. This policy will help you understand which data we collect, why we collect it, and what your rights are regarding it.

Last modified: 18 November 2025

Data Controller

Mercatino di Ninni
Via De' Federighi n. 11r 50123 Florence, Italy

Email address of the Data Controller: ilmercatinodininni@gmail.com

Types of Data Collected

Among the Personal Data collected by this Application, autonomously or through third parties, are:

• Tracking Tools
• Usage Data
• email
• payment information
• first name
• last name
• store-related data
• device information
• number of Users
• session statistics
• phone number
• Data communicated while using the service
• answers to questions
• user-generated content
• message or email content
• profile picture
• message date
• time the message was sent
• message sender
• geographical location

Full details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the Data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application. Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from communicating such Data without consequences on the availability or functioning of the Service.

Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller. The possible use of Cookies — or other tracking tools — by this Application or by third-party service providers used by this Application has the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application.

Methods and Place of Processing the Collected Data

Processing Methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, following organizational methods and logic strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Application (administrative, commercial, marketing, legal staff, system administrators) or external subjects (such as third-party technical service providers, postal carriers, hosting providers, IT companies, communication agencies) may have access to the Data. These subjects may also be appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller.

Place

Data is processed at the operational headquarters of the Data Controller and in any other place where the parties involved in processing are located. For further information, contact the Data Controller.
The User’s Personal Data may be transferred to a country different from the one where the User is located. To obtain more information on the place of processing, the User may refer to the section containing details on the processing of Personal Data.

Retention Period

Unless otherwise stated in this document, Personal Data is processed and stored for the time required to fulfill the purpose for which it was collected and may be stored for a longer period due to legal obligations or based on the Users’ consent.

Purposes of Processing the Collected Data

The User's Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, and for the following purposes:

• Payment management
• Traffic optimization and distribution
• Platform and hosting services
• Statistics
• Displaying content from external platforms
• Tag management
• Contacting the User
• Interaction with live chat platforms
• Location-based interactions
• Advertising

Details on Personal Data Processing

Contacting the User

Mailing list or newsletter
Personal Data processed: Usage Data +2

Contact form
Personal Data processed: Usage Data +1

Payment Management

Unless otherwise specified, this Application processes all payments by credit card, bank transfer, or other means through external payment service providers. In general, and unless otherwise indicated, Users are asked to provide payment details and personal information directly to such providers.

This Application is not involved in the collection or processing of such information and receives only a notification from the payment service provider regarding the completed transaction.

American Express
Company: American Express Company
Place of processing: United States
Personal Data processed: Usage Data +3

Mastercard
Company: Mastercard Inc.
Place of processing: United States
Personal Data processed: Usage Data +3

Google Pay
Company: Google LLC
Place of processing: United States
Personal Data processed: last name +5

PayPal
Company: PayPal
Place of processing: Refer to PayPal's privacy policy
Personal Data processed: Usage Data +3

Shop Pay
Company: Shopify Inc.
Place of processing: Canada
Personal Data processed: Usage Data +3

Visa
Company: Visa Inc.
Place of processing: United States
Personal Data processed: Usage Data +3

Klarna
Company: Klarna AB
Place of processing: Sweden
Personal Data processed: Usage Data +2

Tag Management

This type of service allows the Data Controller to manage the necessary tags or scripts on this Application centrally. As a result, the User’s Data may be processed by these services, possibly being stored.

Google Tag Manager
Company: Google LLC
Place of processing: United States
Personal Data processed: Usage Data +1

Interaction with Live Chat Platforms

This type of service allows interaction with third-party live chat platforms directly from the pages of this Application, enabling contact with the support service of this Application.

Even if the User does not use the service, the live chat tool may collect Usage Data related to the pages where it is installed. Additionally, chat conversations may be recorded.

WhatsApp Business Chat Widget
Company: Meta Platforms, Inc.
Place of processing: United States
Personal Data processed: last name +11

Location-based Interactions

Non-continuous geolocation
Personal Data processed: geographical location

Traffic Optimization and Distribution

This type of service allows this Application to distribute its content through servers located across different territories and optimize its performance.

Cloudflare
Company: Cloudflare, Inc.
Place of processing: United States
Personal Data processed: Tracking Tools +1

Advertising

This type of service allows the use of the User's Data for commercial communication purposes. These communications are displayed on this Application in the form of banners and other advertisements, also based on the User's interests.
This does not mean that all Personal Data is used for this purpose. Specific information and conditions of use are indicated below.

Some of the services listed below may use Tracking Tools to identify the User or use behavioral retargeting techniques, i.e., displaying personalized ads based on the User's interests and behavior, or measuring the performance of advertising campaigns.
For more information, please refer to the privacy policies of the respective services.
Services of this type usually allow Users to opt-out of this tracking. Users can learn how to opt-out of interest-based advertising by visiting the dedicated opt-out section of this document.

Google Ad Manager
Company: Google LLC
Place of processing: United States
Personal Data processed: Usage Data +1

Google Ads Conversion Tracking
Company: Google LLC
Place of processing: United States
Personal Data processed: Usage Data +1

Meta Ads Conversion Tracking (Meta Pixel)
Company: Meta Platforms, Inc.
Place of processing: United States
Personal Data processed: Usage Data +1

Remarketing and Behavioral Targeting

Google Ads Remarketing (Google LLC)
This service allows the Site to communicate, optimize, and display ads based on the User’s past use of the Site.
Google uses cookies and other identifiers to track User interactions and display personalized ads across its advertising network.

Personal Data processed: cookies, online identifiers, usage data.
Purpose: remarketing, behavioral advertising.
Place of processing: USA.
Privacy policy: https://policies.google.com/technologies/ads
Opt-out: https://www.google.com/settings/ads

Meta Custom Audiences / Facebook Remarketing (Meta Platforms Inc.)
This service allows User activity on the Site to be used to display personalized ads within Meta platforms (Facebook and Instagram).
Meta uses cookies, pixels, and similar identifiers to link Site visits with its advertising system.

Personal Data processed: cookies, usage data, unique identifiers, any data provided to Meta for Custom Audience creation.
Purpose: remarketing, behavioral advertising.
Place of processing: USA / EU depending on operational location.
Privacy policy: https://www.facebook.com/privacy/explanation
Opt-out: https://www.youronlinechoices.com

Platform and Hosting Services

These services are intended to host and operate key components of this Application, enabling the provision of this Application from a single platform. These platforms provide the Data Controller with a wide range of tools such as analytics, user registration management, comment management, database management, e-commerce tools, payment processing, etc.
The use of such tools involves the collection and processing of Personal Data.
Some of these services operate through geographically distributed servers, making it difficult to determine the exact location where Personal Data is stored.

Shopify
Company: Shopify Inc.
Place of processing: Canada
Personal Data processed: Usage Data +2

Statistics

The services in this section enable the Data Controller to monitor and analyze traffic data and track User behavior.

Google Analytics 4
Company: Google LLC
Place of processing: United States
Personal Data processed: Usage Data +3

Displaying Content from External Platforms

This type of service allows the display of content hosted on external platforms directly from the pages of this Application and interaction with such content. These services are often referred to as widgets—small elements integrated into a website or application that provide specific information or perform a particular function. Interaction with such content is often possible.

These services might still collect web traffic data related to the pages where they are installed, even when Users do not use them.

Google Fonts
Company: Google LLC
Place of processing: United States
Personal Data processed: Usage Data +1

Google Maps Widget
Company: Google LLC
Place of processing: United States
Personal Data processed: Usage Data +1

Information on Opting Out of Interest-Based Advertising

In addition to any opt-out function provided by the services listed in this document, Users can learn more about how to disable interest-based advertising in the dedicated section of the Cookie Policy.

Cookie Policy

This Application uses Tracking Tools. To learn more, Users may consult the Cookie Policy.

Additional Information for Users in the European Union

Legal Basis of Processing

The Data Controller processes Personal Data relating to the User when one of the following conditions applies:

• the User has given consent for one or more specific purposes;
• processing is necessary for the performance of a contract with the User and/or pre-contractual measures;
• processing is necessary to comply with a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
• processing is necessary for the legitimate interests pursued by the Data Controller or by a third party.

Users may request the Data Controller to clarify the concrete legal basis of each processing activity, and to specify whether processing is based on legal requirements, contractual necessity, or needed to conclude a contract.

Additional Information on Retention Time

Unless otherwise stated in this document, Personal Data is processed and stored for the time required for the purpose for which it was collected, and may be stored longer due to legal obligations or based on User consent.

Therefore:

• Personal Data collected for purposes related to contract performance between the Data Controller and the User will be retained until the contract has been fully executed.
• Personal Data collected to fulfill the Data Controller’s legitimate interest will be retained until such interest is satisfied. Users may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User's consent, the Data Controller may retain Personal Data until consent is withdrawn. Additionally, the Data Controller may be obliged to retain Personal Data longer due to legal obligations or orders from authorities.

At the end of the retention period, Personal Data will be deleted. Therefore, once this period expires, rights of access, deletion, rectification, and data portability can no longer be exercised.

User Rights Under the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Data Controller.
In particular, within the limits of the law, Users have the right to:

• withdraw consent at any time;
• object to the processing of their Data;
• access their Data;
• verify and request rectification;
• obtain restriction of processing;
• obtain deletion or removal of their Personal Data;
• receive their Data and have it transferred to another controller;
• lodge a complaint with the competent data protection authority or bring legal action.

Users also have the right to obtain information about the legal basis for Data transfers abroad, including to any international organization governed by public international law or formed by multiple countries (e.g., the UN), and about the security measures adopted by the Data Controller to protect their Data.

Details on the Right to Object

When Personal Data is processed in the public interest, in the exercise of official authority, or for legitimate interests pursued by the Data Controller, Users may object to such processing for reasons related to their particular situation.
Users are reminded that when their Data is processed for direct marketing purposes, they may object at any time, free of charge and without providing any justification. If Users object to processing for direct marketing, Personal Data will no longer be processed for such purposes.
To find out whether the Data Controller processes Data for direct marketing, Users may refer to the relevant sections of this document.

How to Exercise Rights

Requests to exercise User rights may be addressed to the Data Controller using the contact details provided in this document.
Requests are free of charge and the Data Controller will respond as quickly as possible, in any case within one month, providing the User with all legally required information. Any rectifications, deletions, or processing restrictions will be communicated by the Data Controller to each recipient, if any, to whom Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform Users of these recipients if requested.

Additional Information for Users in Switzerland

This section applies to Users in Switzerland and replaces any other conflicting information contained in this privacy policy.
Further details on the categories of Data processed, processing purposes, categories of recipients (if any), retention periods, and other information regarding Personal Data can be found in the section titled “Detailed Information on Personal Data Processing” within this document.

User Rights Under the Swiss Federal Act on Data Protection (FADP)

Users may exercise certain rights regarding their Data within the limits of the law, including:

• right of access to Personal Data;
• right to object to the processing of their Personal Data (including the right to request restriction of processing, deletion or destruction of Personal Data, and prohibition of disclosure to third parties);
• right to receive their Personal Data and transfer it to another Data Controller (data portability);
• right to request correction of inaccurate Personal Data.

How to Exercise These Rights

Requests to exercise User rights may be addressed to the Data Controller using the contact details provided in this document.
These requests are free of charge, and the Data Controller will respond as quickly as possible, providing Users with all the information required by law.

Further information for Users in the United States

This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”). The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana.

For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy. This part of the document uses the term Personal Information (and Sensitive Personal Information).

Notice at collection

The following Notice at collection provides you with timely notice about the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information. While such categorization of Personal Information is mainly based on California privacy laws, it can also be helpful for anyone who is not a California resident to get a general idea of what types of Personal Information are collected.

Identifiers

Personal Data processed: Strumenti di tracciamento; Dati di utilizzo; Email; Varie tipologie di dati secondo quanto specificato dalla privacy policy del servizio + 10

Personal Information collected or disclosed:

• Tracking Tools
• Usage Data
• email
• various types of Data as specified in the service’s privacy
• policy
• first name
• last name
• phone number
• Data provided while using the service
• answers to questions
• user-generated content
  
• profile picture
• message date
• time the message was sent
• message sender

Sensitive Personal Information collected or disclosed payment information, message or email content

Purposes:

• Payment management
• Traffic optimization and distribution
• Contacting the User
• Interaction with live chat platforms

Retention period: for the time necessary to fulfill the purpose

Sold or Shared: No

Targeted Advertising: No

Third-parties: American Express Company, Cloudflare, Inc., Mastercard Inc., Google LLC, Paypal, Visa Inc., Meta Platforms, Inc.

Commercial information

Personal Data processed: Tracking Tools; Usage Data; Email; First name +2

Personal Information collected or disclosed:

• Tracking Tools
• Usage Data
• email
• first name
• last name
• store-related data

Sensitive Personal Information collected or disclosed
payment information

Purposes:

• Payment management

Retention period: for the time necessary to fulfill the purpose

Sold or Shared: No

Targeted Advertising: No

Third-parties: American Express Company, Mastercard Inc., Google LLC, Paypal, Shopify Inc., Visa Inc., Klarna AB

Internet or other electronic network activity information

Personal Data processed: Tracking Tools; Usage Data; Email; Various types of data as specified in the service’s privacy policy +14

Personal Information collected or disclosed:

• Tracking Tools
• Usage Data
• email
• various types of Data as specified in the service’s privacy policy
• first name
• last name
• store-related data
• device information
• number of Users
• session statistics
• phone number
• Data communicated while using the service
• answers to questions
• user-generated content
• profile picture
• message date
• time the message was sent
• message sender

Sensitive Personal Information collected or disclosed
payment information, message or email content

Purposes:

• Payment management
• Traffic optimization and distribution
• Platform and hosting services
• Statistics
• Displaying content from external platforms
• Tag management
• Contacting the User
• Interaction with live chat platforms
• Advertising

Retention period: for the time necessary to fulfill the purpose

Sold or Shared: No

Targeted Advertising: No

Third-parties: American Express Company, Cloudflare, Inc., Mastercard Inc., Google LLC, Paypal, Shopify Inc., Visa Inc., Klarna AB, Meta Platforms, Inc.

Audio, electronic, visual, thermal, olfactory, or similar information

Personal Data processed: First name; Last name; Phone number; Data communicated while using the service +7

Personal Information collected or disclosed:

• first name
• last name
• phone number
• Data communicated while using the service
• answers to questions
• user-generated content
• profile picture
• message date
• time the message was sent
• message sender
• Tracking Tools

Sensitive Personal Information collected or disclosed
message or email content

Purposes:

• Interaction with live chat platforms

Retention period: for the time necessary to fulfill the purpose

Sold or Shared: No

Targeted Advertising: No

Third-parties: Meta Platforms, Inc.

Inferences drawn from other personal information

Personal Data processed: First name; Last name; Phone number; Data communicated while using the service +7

Personal Information collected or disclosed:

• first name
• last name
• phone number
• Data communicated while using the service
• answers to questions
• user-generated content
• profile picture
• message date
• time the message was sent
• message sender
• Tracking Tools

Sensitive Personal Information collected or disclosed
message or email content

Purposes:

• Interaction with live chat platforms

Retention period: for the time necessary to fulfill the purpose

Sold or Shared: No

Targeted Advertising: No

Third-parties: Meta Platforms, Inc.

Geolocation data

Personal Data processed: Geographic location

Personal Information collected or disclosed:

• geographic location

Purposes:

• Location-based interactions

Retention period: for the time necessary to fulfill the purpose

Sold or Shared: No

Targeted Advertising: No

You can read the definitions of these concepts inside the “Definitions and legal references section” of the privacy policy. To know more about your rights to limit the use of your sensitive personal information (“Limit the Use of My Sensitive Personal Information”) you can refer to the “Your privacy rights under US state laws” section of our privacy policy. For more details on the collection of Personal Information, please read the section “Detailed information on the processing of Personal Data” of our privacy policy.

We won’t process your Information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.

What are the sources of the Personal Information we collect?

We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use this Application.

For example, you directly provide your Personal Information when you submit requests via any forms on this Application. You

also provide Personal Information indirectly when you navigate this Application, as Personal Information about you is automatically observed and collected.

Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of this Application and features thereof.

Your privacy rights under US state laws

You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:

• the right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
• the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
• the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
• the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible;
• the right to opt out from the Sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
• the right to non-discrimination.

Additional rights for Users residing in California

In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have:

• The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising;
• The right to request to limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as is reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as, when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.

Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana

In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana you have

• The right to opt out of the processing of your personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• The right to freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer. In Maryland, your Sensitive Personal Information will be collected or processed only if strictly necessary to provide or maintain a specific product or service requested by you.

In Minnesota and Maryland Users also have the right to obtain a list of the specific third parties to which the controller has disclosed the consumer's personal data

* Note that in some states like Minnesota you have the following specific rights connected to profiling:

• The right to question the results of the profiling;
• The right to be informed of the reason that the profiling resulted in the decision; if feasible
• The right to be informed of what actions the consumer might have taken to secure a different decision and the actions that the consumer might take to secure a different decision in the future;
• The right to review personal data used in the profiling
• If inaccurate, the right to have the data corrected and the profiling decision reevaluated based on the corrected data;

Additional rights for users residing in Utah and Iowa

In addition to the rights listed above common to all Users in the United States, as a User residing in Utah and Iowa, you have:

• The right to opt out of the processing of your Personal Information for Targeted Advertising;
• The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.

How to exercise your privacy rights under US state laws

To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.

For us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and therefore confirm the Personal Information in our possession relates to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification and shall not further disclose the Personal Information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.

If you are an adult, you can make a request on behalf of a child under your parental authority.

How to exercise your rights to opt out

In addition to what is stated above, to exercise your right to opt-out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on this Application.

If you want to submit requests to opt out of Sale or Sharing and Targeted Advertising activities via a user-enabled global privacy control, such as for example the Global Privacy Control (“GPC”), you are free to do so and we will abide by such request in a frictionless manner.

How and when we are expected to handle your request

We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. Should we need more time, we will explain to you the reasons why, and how much more time we need. Should we deny your request, we will explain to you the reasons behind our denial (where envisaged by applicable law you may then contact the relevant authority to submit a complaint).

We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive and in all other cases where it is permitted by the applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.

Further information about the processing

Legal defense

The User’s Personal Data may be used by the Controller in legal proceedings or in the preparatory stages leading to potential legal action, for the purpose of defending against abuse in the use of this Application or related Services by the User.

The User declares to be aware that the Controller may be required to disclose the Data upon order of public authorities.

Specific information

Upon User request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual disclosures regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

Further information regarding the processing of Personal Data may be requested at any time from the Controller using the contact details provided herein.

Changes to this privacy policy

The Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where technically and legally feasible, through this Application and/or by sending a notice to Users using any of the contact details available to the Controller.
Users are therefore advised to frequently check this page, referring to the date of the last modification indicated at the bottom.
If changes affect processing activities whose legal basis is consent, the Controller will collect the User’s consent again, where required.

Definitions and legal references

Personal Data (or Data) / Personal Information

Any information that directly or indirectly, even when combined with any other information — including a personal identification number — makes a natural person identified or identifiable.

Sensitive Personal Information

Sensitive Personal Information means all Personal Information that is not publicly available and that reveals information considered sensitive under the applicable privacy laws.

Usage Data

Usage Data is information collected automatically through this Application (or through third-party integrations within this Application), including: IP addresses or domain names of the computers used by the User connecting to this Application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server’s response status (successful outcome, error, etc.), the User’s country of origin, browser and operating system characteristics, the various time details of the visit (e.g., time spent on each page), and details about the path followed within the Application, with special reference to the sequence of pages visited, as well as parameters related to the User’s operating system and IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Processor (or Data Processor)

The natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Controller, as described in this privacy policy.

Controller (or Data Controller)

The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures regarding the operation and use of this Application.
Unless otherwise specified, the Controller is the owner of this Application.

This Application

The hardware or software tool by which the Users’ Personal Data is collected and processed.

Service

The service provided by this Application as described in the relevant terms (if available) on this website/application.

Sale

“Sale” means any exchange of Personal Information by the Owner to a third party for monetary or other valuable consideration, as defined under applicable U.S. state privacy laws.
Please note that the exchange of Personal Information with a service provider under a written contract that meets the requirements of applicable law does not constitute a Sale of your Personal Information.

Sharing

“Sharing” means any sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, electronically, or by other means, a consumer’s Personal Information by the business to a third party for cross-context behavioral advertising, whether or not money is exchanged, including business-to-third-party transactions for cross-context behavioral advertising that do not involve monetary consideration, as defined under California privacy laws.
Please note that exchanging Personal Information with a service provider under a written contract that satisfies the requirements of California privacy laws does not constitute Sharing of the User’s Personal Information.

Targeted Advertising

“Targeted Advertising” means displaying advertisements to a consumer where the advertisement is selected based on Personal Information obtained from that consumer’s activities over time and across non-affiliated websites or online applications to predict preferences or interests, as defined under applicable U.S. state privacy laws.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document is understood to include all current member states of the European Union and of the European Economic Area.

Cookie

Cookies are Tracking Tools consisting of small pieces of data stored in the User’s browser.

Tracking Tool

A Tracking Tool refers to any technology — e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting — that enables the tracking of Users, for example by collecting or storing information on the User’s device.

Legal references

This privacy notice is drafted based on multiple legislative systems.
Unless otherwise specified, this privacy policy relates exclusively to this Application.

 

Cookie Policy of www.mercatinodininni.it

For further information regarding California consumers and their privacy rights, Users may consult the privacy policy.

For further information regarding Virginia consumers and their privacy rights, Users may consult the privacy policy.

For further information regarding Colorado consumers and their privacy rights, Users may consult the privacy policy.

For further information regarding Connecticut consumers and their privacy rights, Users may consult the privacy policy.

For further information regarding Utah consumers and their privacy rights, Users may consult the privacy policy.

This document contains information regarding the technologies that allow this Application to achieve the purposes described below.
These technologies allow the Owner to collect and store information (for example through the use of Cookies) or to use resources (for example by running a script) on the User’s device when the User interacts with this Application.

For simplicity, these technologies are collectively referred to in this document as “Tracking Tools”, unless a distinction is necessary.
For example, although Cookies may be used in both web and mobile browsers, it would be inappropriate to refer to Cookies in the context of mobile device applications, since Cookies require a browser. For this reason, in this document the term Cookie is used only to indicate that specific type of Tracking Tool. Some of the purposes for which Tracking Tools are used may also require the User’s consent. If consent is given, it can be freely withdrawn at any time by following the instructions provided in this document.

This Application uses Tracking Tools managed directly by the Owner (“first-party” Tracking Tools) and Tracking Tools that enable services provided by third parties (“third-party” Tracking Tools). Unless otherwise specified, such third parties have access to their respective Tracking Tools.
The duration and expiry of Cookies and similar Tracking Tools may vary depending on the settings established by the Owner or by each third-party provider. Some expire at the end of the User’s browsing session.

In addition to the information provided in the descriptions of each category listed below, Users may obtain more detailed and updated information on the duration and any other relevant details—such as the presence of additional Tracking Tools—in the privacy policies of the respective third-party providers (via the provided links) or by contacting the Owner.

How this Application uses Tracking Tools

Necessary

This Application uses so-called “technical” Cookies or similar Tracking Tools to carry out activities strictly necessary to ensure the operation or provision of the Service.

Third-party Tracking Tools

American Express (American Express Company)

American Express is a payment service provided by American Express Company that allows the User to make online payments.

Personal Data processed: Usage Data, email, payment information and Tracking Tools.
Place of processing: United States – Privacy Policy.

Mastercard (Mastercard Inc.)

Mastercard is a payment service provided by Mastercard Inc. that allows the User to make online payments.

Personal Data processed: Usage Data, email, payment information and Tracking Tools.
Place of processing: United States – Privacy Policy.

Google Pay (Google LLC)

Google Pay is a payment service provided by Google LLC that allows Users to make online payments using their Google credentials.

Personal Data processed: last name, Usage Data, email, payment information, first name and Tracking Tools.
Place of processing: United States – Privacy Policy.

PayPal (PayPal Inc.)

Personal Data processed: Usage Data, email, payment information and Tracking Tools.
Place of processing: See PayPal’s privacy policy – Privacy Policy.

Tracking Tool duration:

• LANG: 8 hours
• paypal_storage: indefinite
• akavpau_ppsd: session duration
• enforce_policy: session duration
• l7_az: session duration
• nsid: session duration
• ts: session duration
• tsrce: session duration
• x-cdn: session duration
• x-pp-s: session duration

Shop Pay (Shopify Inc.)

Shop Pay is a payment and checkout management service provided by Shopify Inc. allowing Users to make online payments on this Application.

Personal Data processed: Usage Data, store-related data, payment information and Tracking Tools.
Place of processing: Canada – Privacy Policy.

Visa (Visa Inc.)

Personal Data processed: Usage Data, email, payment information and Tracking Tools.
Place of processing: United States – Privacy Policy.

Klarna (Klarna AB)

Personal Data processed: Usage Data, payment information and Tracking Tools.
Place of processing: Sweden – Privacy Policy.

Cloudflare (Cloudflare, Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
Cloudflare integration filters all traffic to this Application—i.e., communication between this Application and the User’s browser—allowing the collection of statistical data.

Personal Data processed: Tracking Tools and various types of Data as specified in the service’s privacy policy.
Place of processing: United States – Privacy Policy.

Tracking Tool duration:

• _cfuvid: indefinite
• cf_clearance: 30 minutes

Shopify (Shopify Inc.)

Shopify is a platform that allows the Owner to build, operate and host an e-commerce website. This service may install trackers on the User’s device. For the most up-to-date and comprehensive information, please refer to the official service documentation.

Personal Data processed: Usage Data, device information and Tracking Tools.
Place of processing: Canada – Privacy Policy.

Duration of Tracking Tools:

• _ab: 3 years
• _customer_account_shop_sessions: 1 month
• _identity_session: 3 years
• _master_udr: session duration
• _merchant_essential: 2 years
• _orig_referrer: 14 days
• _pay_session: session duration
• _s: 30 minutes
• _secure_admin_session_id: 4 months
• _secure_admin_session_id_csrf: 4 months
• _shopify_country: session duration
• _shopify_d: session duration
• _shopify_essential: 2 years
• _shopify_essential_: 2 years
• _shopify_evids: session duration
• _shopify_fs: 1 year
• _shopify_m: session duration
• _shopify_s: 30 minutes
• _shopify_test: 1 minute
• _shopify_tm: session duration
• _shopify_tw: session duration
• _storefront_u: 1 minute
• _tracking_consent: session duration
• _y: 1 year
• auth_state_*: 25 minutes
• c: 2 years
• cart: 14 days
• cart_currency: 14 days
• cart_ver: 14 days
• checkout_queue_checkout_token: 2 years
• checkout_queue_token: 2 years
• checkout_session_token: 21 days
• checkout_worker_session: 3 days
• customer_account_new_login: 20 minutes
• customer_account_preview: 7 days
• customer_auth_provider: indefinite
• customer_auth_session_created_at: indefinite
• discount_code: session duration
• keep_alive: session duration
• localisation: 14 days
• login_with_shop_finalise: 5 minutes
• master_device_id: 2 years
• shopifyChatData: session duration
• shopify_pay: 2 years
• source_name: indefinite
• storefront_digest: 2 years

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC.

To learn about Google's use of Data, please refer to their partner policy and their Commercial Data Page

Personal Data processed: Usage Data and Tracking Tools.

Place of processing: United States – Privacy Policy.

Functionality

This Application uses Tracking Tools to allow simple interactions and enable features that allow Users to access certain resources and simplify communication with the Owner.

Third-party Tracking Tools

Mailing list or newsletter

By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list that may receive email messages containing information—including commercial and promotional content—related to this Application.

Personal Data processed: Usage Data, email and Tracking Tools.

WhatsApp Business Chat Widget (Meta Platforms, Inc.)

Personal Data processed: last name, message or email content, user-generated content, message date, Data provided while using the service, profile picture, message sender, first name, phone number, time the message was sent, answers to questions and Tracking Tools.
Place of processing: United States – Privacy Policy.

Experience

Tracking Tools are used to improve the User experience and enable interaction with external content, networks and platforms.

Google Fonts (Google LLC)

Personal Data processed: Usage Data and Tracking Tools.
Place of processing: United States – Privacy Policy.

Google Maps Widget (Google LLC)

Personal Data processed: Usage Data and Tracking Tools.
Place of processing: United States – Privacy Policy.

Measurement

Tracking Tools are used to measure traffic and analyze User behavior to improve the Service.

Google Analytics 4 (Google LLC)

Personal Data processed: Usage Data, User numbers, session statistics and Tracking Tools.
Place of processing: United States – Privacy Policy – Opt out.

Tracking Tool duration:

• _ga: 2 years
• ga*: 2 years

Marketing

Tracking Tools are used to deliver advertising and marketing content and to measure performance.

Google Ad Manager (Google LLC)

Google Ad Manager is an advertising service provided by Google LLC with which the Data Controller can conduct advertising campaigns in conjunction with external advertising networks with which the Data Controller, unless otherwise specified in this document, has no direct relationship. This service uses the ‘DoubleClick’ cookie, which tracks the use of this Application and the User's behaviour in relation to advertisements, products and services offered.

The User may decide at any time to disable all DoubleClick cookies by going to: Ad Settings.

To learn about Google's use of data, please refer to their partner policy and their Commercial Data Page

Personal Data processed: Usage Data and Tracking Tools.

Place of processing: United States – Privacy Policy.

Duration of Tracking Tools:

• Conversion: 3 months
• DSID: 14 days
• FCNEC: 1 year
• FLC: 10 seconds
• FPAU: 3 months
• FPGCLAW: 3 months
• FPGCLDC: 3 months
• FPGCLGB: 3 months
• GCL_AW_P: 3 months
• GED_PLAYLIST_ACTIVITY: session duration
• IDE: 2 years
• NID: 6 months
• RUL: 1 year
• __gads: 2 years
• __gpi: 2 years
• __gpi_optout: 2 years
• __gsas: 2 years
• _gac_: 3 months
• _gac_gb_: 3 months
• _gcl_ag: 3 months
• _gcl_au: 3 months
• _gcl_aw: 3 months
• _gcl_dc: 3 months
• _gcl_gb: 3 months
• _gcl_gf: 3 months
• _gcl_gs: 3 months
• _gcl_ha: 3 months
• ar_debug: 3 months
• id: 2 years
• receive-cookie-deprecation: 6 months
• test_cookie: 15 minutes

Google Ads Conversion Tracking (Google LLC)

Google Ads conversion tracking is a statistics service provided by Google LLC that links data from the Google Ads ad network with actions taken within this Application. To learn about Google's use of Data, please refer to their partner policy and their Commercial Data Page

Personal Data processed: Usage Data and Tracking Tools.

Place of processing: United States – Privacy Policy.

Duration of Tracking Tools:

• IDE: 2 years
• test_cookie: 15 minutes

Meta Ads Conversion Tracking (Meta Pixel) (Meta Platforms, Inc.)

Meta ads conversion tracking (Meta pixel) is a statistics service provided by Meta Platforms, Inc. that links data from the Meta ad network with actions taken within this Application. The Meta pixel tracks conversions that can be attributed to Facebook, Instagram and Audience Network ads.

Personal Data processed: Usage Data and Tracking Tools.

Place of processing: United States – Privacy Policy – Opt out.

Duration of Tracking Tools:

• _fbc: 3 months
• _fbp: 3 months
• fr: 3 months
• lastExternalReferrer: session duration
• lastExternalReferrerTime: session duration

Managing preferences on this Application

How to Manage Preferences on this Application

Users can set or update their preferences through the relevant privacy choices panel available on this Application.

Regarding third-party Tracking Tools, Users can manage their preferences by visiting the related opt-out link (if available), using the tools described in the third party’s privacy policy or by contacting the latter directly.

How to control or delete Cookies and similar technologies through your device settings

Users can use their browser settings to:

• See which Cookies or other similar technologies have been set on the device;
• Block Cookies or similar technologies;
• Delete Cookies or similar technologies from the browser.

Browser settings, however, do not allow for granular, category-based consent controls.

Users can, for example, find information on how to manage Cookies in some of the most widely used browsers at the following addresses:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Brave
• Opera

Users can also manage certain Tracking Tools for mobile applications by disabling them through the specific device settings, such as mobile advertising settings or general tracking settings (Users may check their device settings to identify the relevant one).

How to disable interest-based advertising

Without prejudice to the above, Users are informed of the possibility to make use of the information provided on YourOnlineChoices (EU and UK), Network Advertising Initiative (USA) and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan) or other similar services. Through these services, it is possible to manage tracking preferences for most advertising tools. The Owner therefore recommends that Users use these resources in addition to the information provided in this document.

The Digital Advertising Alliance also provides an application called AppChoices that helps Users control behavioral advertising on mobile applications.

Consequences of refusing the use of Tracking Tools

Users are free to decide whether or not to allow the use of Tracking Tools. However, please note that Tracking Tools allow this Application to provide Users with a better experience and advanced functionalities (in line with the purposes described in this document). Therefore, if the User decides to block the use of Tracking Tools, the Owner may not be able to provide the related functionalities.

Data Controller

Mercatino di Ninni

Via De' Federighi no. 11r 50123 Florence, Italy

Owner’s email address: ilmercatinodininni@gmail.com

Since the use of third-party Tracking Tools within this Application cannot be fully controlled by the Owner, any specific reference to third-party Tracking Tools is to be considered indicative. To obtain complete information, Users are kindly invited to consult the privacy policies of the respective third-party services listed in this document.

Given the objective complexity of identifying tracking technologies, Users are invited to contact the Owner should they wish to receive further information regarding the use of such technologies on this Application.

Definitions and Legal References

Personal Data (or Data)

Any information that, directly or indirectly, even when linked with any other information—including a personal identification number—makes a natural person identified or identifiable.

Usage Data

Information collected automatically through this Application (or through third-party applications integrated into this Application), including: IP addresses or domain names of the computers used by the User who connects to this Application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server response status (successful, error, etc.), the country of origin, the browser and operating system characteristics used by the visitor, the various time details of the visit (e.g., time spent on each page) and details relating to the path followed within the Application, with particular reference to the sequence of pages visited, the parameters related to the User’s operating system and computer environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the Owner, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, service or other organization which, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including security measures concerning the operation and use of this Application. Unless otherwise specified, the Data Controller is the owner of this Application.

This Application

The hardware or software tool by which Users’ Personal Data is collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if available) on this website/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document is understood to include all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Tracking Tools consisting of small sets of data stored in the User’s browser.

Tracking Tool

Tracking Tool refers to any technology—e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting—that enables the tracking of Users, for example by collecting or saving information on the User’s device.

Legal References

This privacy notice is prepared based on multiple legislative systems.

Unless otherwise specified, this privacy notice applies exclusively to this Application.

Last modification: 18 November 2025