Privacy Policy

1. Data Controller

The data controller is Shado Srl, based in Roncade, Via Sile 41, tax code and VAT number 04153820263 ("SHADO").

2. Data Collected

The Site does not include contact forms, newsletter sign-up, event registration, or statistical analysis or profiling tools: no identifying data actively provided by Users is therefore collected, and no profiling or analytics cookies are installed.

Each time the Site is accessed, the technical infrastructure hosting it automatically records certain technical browsing data (e.g. IP address, browser and device type, page requested, date and time of the request), as is standard for any web infrastructure. This data is collected automatically and does not require any action on the part of the User.

This data is processed exclusively for technical and security purposes (e.g. detecting and preventing anomalous access or fraudulent activity, ensuring the Site functions correctly) and is not used for profiling or marketing purposes.

3. Cookies

The Site does not use profiling, statistical analysis, or marketing cookies, nor third-party cookies. No prior consent via a cookie banner is therefore required.

The Site may use only technical cookies strictly necessary for the hosting infrastructure to function, for which User consent is not required under applicable law.

4. Purpose and Legal Basis of Processing

Technical browsing data is processed to ensure the security and correct technical functioning of the Site.

The legal basis for processing is Shado's legitimate interest in ensuring the security, stability, and correct functioning of the Site, as well as preventing and detecting any unlawful or anomalous use of it.

5. Data Recipients and Transfers Outside the EU

The Site is hosted on technical infrastructure provided by Amazon Web Services (AWS), which acts as Shado's technical/hosting provider.

Because AWS's content delivery infrastructure (CDN) operates on a global scale, technical browsing data may also be processed outside the European Union. In such cases, the transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission and the additional safeguards adopted by AWS. For further information, please refer to AWS's privacy notice, available at: https://aws.amazon.com/privacy/

The complete list of Data recipients is kept at Shado's registered office and may be consulted upon request, to be sent to the contact details given in point 8 below.

6. Data Protection Officer

The Data Protection Officer (DPO) appointed by Shado is LCA Servizi S.r.l., who can be reached at: Via della Moscova, 18, 20121 Milan, Italy, email: dpo@h-farm.com, or certified email (PEC): lcaservizi@pec.lcaservizi.it.

7. Retention Period

Technical browsing data is retained for the period set by the standard configuration of the hosting infrastructure used (AWS), and in any case for the period strictly necessary to ensure the security and correct functioning of the Site, except where longer retention is required by specific security needs or legal obligations.

8. User Rights. Contacts for Exercising Your Rights

At any time, Users may, to the extent these rights are applicable:

  1. obtain confirmation as to whether or not Data concerning them exists, and access it;
  2. obtain rectification and/or updating of the Data, its erasure, or the restriction of processing;
  3. receive, in a structured, commonly used, and machine-readable format, the Data provided to Shado, and transmit that Data to another data controller without hindrance from Shado (right to data portability);
  4. withdraw their consent at any time, without affecting the lawfulness of processing carried out by Shado on the basis of consent given before such withdrawal;
  5. lodge a complaint with a supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali — the Italian Data Protection Authority) or bring proceedings before the competent judicial authority.

To exercise the rights set out in points a.–d., Users may contact the Data Protection Officer at the contact details given in point 6, or Shado at the following contacts:

9. Links to Other Websites

This notice applies solely to data collected through the Site for the purposes described in point 4, and not to any other websites accessed or accessible via links on the Site. For data processing carried out through those websites, please refer to their respective privacy notices.