Privacy Policy

PRIVACY NOTICE

In this section, in accordance with the new European legislation introduced by EU Regulation 679/2016 and Italian legislation (Legislative Decree No. 196/2003), information is provided regarding the processing of the personal data of Users who browse the pages of the website www.miriaci.com (hereinafter, the “Website”) or who use the purchasing services made available on it (hereinafter, the “Users” or “Data Subjects”).

This privacy notice is provided exclusively for the Website and not for any other websites that users may access through links on the Website.

Data controller 

Email address for contacting the data controller and requesting the deletion of your data, if collected, subject to your consent: info@miriaci.com.

***

A - Types of data processed

I. Identifying data

In accordance with the new European legislation introduced by EU Regulation 679/2016 and Italian legislation (Legislative Decree No. 196/2003), browsing the Website and any purchase of products sold on the Website may involve the processing of data capable of directly or indirectly identifying a natural person, such as: first name, last name, residential address, email address, telephone number, and IP address. 

The Website does not require the Data Subject to provide so-called “special categories of data,” namely, pursuant to the GDPR (Article 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, or data concerning the person's health, sex life, or sexual orientation. If the requested service requires the processing of such data, the Data Subject will receive specific information in advance and will be asked to provide explicit consent.

II. Banking data

When purchasing the products available on the Website, banking data will also be processed, such as the card number or bank account number provided to make the payment, and the cardholder and bank account holder's name.

III. Browsing data

Browsing data is data collected automatically by the systems and programs responsible for operating the Website and is necessary to use the web services [e.g., IP addresses, the browser used, the domain names of the systems used by users to connect to the web portal, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the operating system and the user's IT environment].

Such data are also collected when the User has not registered with the Site or requested information.

Browsing data are used exclusively in aggregate form to compile anonymous statistics on visits to the Site and to check its proper functioning; they do not make it possible to identify the users concerned and are also deleted immediately after being processed anonymously.

They may, however, be used to establish liability in the event of cybercrimes committed against the website.

IV. Data voluntarily provided by the user

The personal data voluntarily provided by the User, such as their first name, last name, and email address, for the purpose of sending messages to the Site and/or purchasing the products made available, are used solely to respond to the data subject’s needs and comply with legal obligations. 

The legal basis for this processing is the performance of services related to the requests made and purchases completed, as well as compliance with legal obligations.

Information that the Site User chooses to make public through the services and tools provided by the Site is supplied knowingly and voluntarily by the User, releasing the Site from any liability for possible violations of the law. 

The User is responsible for verifying that they have permission to enter personal data of third parties or content protected by national and international laws.

V. Data collected through analytics cookies

The Site also collects data relating to the user through the use of cookies.

For more information about the data processed through cookies, the types of active cookies, and how to disable them, please refer to the cookie policy.

These cookies are used to track the user’s browsing preferences and collect statistical data. The user may disable these cookies by accessing their browser settings, as indicated in the Site’s cookie policy.

***

B - Purposes of processing

The personal data collected are used for:

• enabling the shipment of products purchased by the User; 
• obtaining anonymous statistical information on the use of the web portal;
• to check the proper functioning of the web portal;
• sending communications and newsletters, in both paper and electronic format, to the email address provided by the user;
• establishing liability in the event of alleged cybercrimes affecting the website;
• compliance with any other legal obligation not included in the purposes above.

Data may be disclosed only following a request from the Judicial Authority in accordance with the law.

***

C - Legal basis for processing

I. Performance of a contract

The legal basis for processing personal data is the performance of obligations arising from the relationship established through the purchase of products, acceptance of the Terms and Conditions, compliance with legal obligations, and the Website’s legitimate interest in carrying out processing necessary for these purposes.

II. Consent of the data subject

The optional, explicit, and voluntary sending of emails, messages, or any type of communication to the contact details indicated on this Website entails the subsequent acquisition of the sender’s address, telephone number, or any other personal data, which will be used to respond to requests. Such processing is based on the data subject’s consent. 

It is assured that such processing will be based on the principles of lawfulness, fairness, transparency, adequacy, relevance, and necessity set out in Article 5, paragraph 1 of the GDPR. Specific summary notices will progressively be included or displayed on the pages of the websites prepared for particular services requested by users.

III. Fulfillment of legal obligations

Personal data may be processed without the data subject’s consent where the Controller must fulfill a legal obligation.

IV. Voluntary nature of providing the data

Except as specified for the performance of the contract or legal obligations, cookies, and browsing data, users are free to provide or not provide their personal data. However, failure to provide the data may make it impossible to obtain the service.

***

D - Methods and duration of processing

Personal data are processed using IT tools and in compliance with EU Regulation No. 679/2016 and Legislative Decree No. 196/2003.

The processed data will be retained for the time necessary to fulfill the purposes described in this privacy notice and, therefore, for the minimum period necessary or until an explicit request is made by the data subject, and in any event in compliance with the time limits imposed by law.

The Controller undertakes to adopt all appropriate security measures to prevent the loss and alteration of personal data, as well as any unlawful or unauthorized use thereof.

The data will be processed exclusively by persons authorized by the Controller, including any data processors, representatives, and public entities for the fulfillment of legal obligations, which carry out their respective processing activities as independent data controllers.

The persons authorized by the Controller who may process the data include, by way of example: commercial and legal department staff, as well as third-party technical service providers, hosting providers, and IT companies (this list is not exhaustive). The processed data will not, in any event, be disclosed to unspecified recipients.

Lastly, the data may also be handled by third-party companies for product shipping.

The Company relies for shipments on the services of “Yiwu Cute Jewelry Co., Ltd.” (https://cjdropshipping.com/blog/post/privacy-policy) 

The security of the information collected cannot be guaranteed against potential hacker attacks and, in general, breaches of the security measures implemented to protect the data. 

In the event of attacks or breaches, they will in any case be reported to the data subjects and the competent authorities in accordance with the law.

***

E - Place of processing

Processing relating to the web portal services is carried out by identified personnel expressly appointed according to the specific purposes of the requested and subscribed services.

For the processing activities in question, the Controller may rely on external companies, consultants, consortia, and software and service providers operating through identified and authorized personnel, within the scope of the stated purposes and in a manner that ensures maximum data security and confidentiality. In other cases, the personal data collected will not be disclosed to third parties, unless the data subject has given express consent, except where disclosure to third parties is necessary to comply with obligations imposed by laws, regulations, or measures issued by supervisory authorities, or is essential to protect the rights of other users or the website itself.

Personal data will be processed and stored, exclusively for the purposes indicated above and to keep and archive it securely, on remote servers managed by leading providers in the sector that ensure compliance with high data protection standards for the processing of personal data.

This may entail the transfer of data to non-EU countries, where all or some of the aforementioned servers may be located. 

In particular, personal data may be transferred outside the European Union to the company “Shopify” (https://it.shopify.com/ and https://it.shopify.com/legal/privacy), an e-commerce plug-in used by the website operated by the Controller.

The processing and storage of data by the aforementioned provider will take place in an “adequate” third country pursuant to the decision adopted by the European Commission, in particular the decision on the adequacy of the protection provided by Canadian law on the protection of personal information and electronic documents (Canadian Personal Information Protection and Electronic Documents Act) or Privacy Shield Privacy Shield (USA) certification, or on the basis of a contractual instrument or standard contractual clauses approved by the European Commission, or binding corporate rules approved through the specific procedure referred to in Article 47 GDPR.

For transfers of data to non-EU countries, it is generally not necessary to await authorization from the national Data Protection Authority. However, authorization from the Data Protection Authority will still be necessary if a Data Controller wishes to use specific contractual clauses that have not been recognized as adequate by a decision of the European Commission, or administrative arrangements concluded between public authorities.

With regard to the data collected for shipping services, the personal data may be processed by “Yiwu Cute Jewelry Co., Ltd.” (https://cjdropshipping.com/blog/post/privacy-policy).  

F - Rights of data subjects

While the data is being processed, the data subject may exercise the following rights at any time:

• to obtain confirmation as to whether or not such data exists and, if so, to learn its content and origin; 
• to verify their accuracy, request the rectification of inaccurate data, the completion of incomplete data, or the updating of outdated data; 
• to obtain restriction of processing where one of the circumstances provided for by Article 18 of the GDPR applies; 
• to request the erasure of data processed in breach of the law, or where one of the other conditions provided for by Article 17(1)(a), (b), (c), (e), and (f) of the GDPR applies;
• to object at any time, on legitimate grounds, to their processing, or to object to processing in the other cases provided for by Article 21(2) and (3) and Article 22 of the GDPR;
• to withdraw at any time their freely given consent to the processing of personal data for the purposes specified below;
• to obtain the release of the personal data being processed in a format compatible with standard computer applications, to allow its transfer to other platforms of their choice, without preventing the direct transmission of the processed data to another Data Controller, where such direct transmission is technically feasible (the so-called right to data portability).

Requests relating to the exercise of the aforementioned rights should be sent to the Data Controller by email (info@miriaci.com).

If the Data Controller fails to respond, or responds only partially, to the aforementioned requests, the data subject shall have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) or judicial appeal within the prescribed time limits and according to the procedures provided for under Articles 77 et seq. of EU Regulation 2016/679 (GDPR).

G - Updates to the privacy notice

Future regulatory updates may lead to changes to this privacy notice, which was uploaded to the Site on 19.01.2022.

In the event of changes, the Data Controller will notify users on the Site.

 

-------------------------------------------------------------------------------------

 

Cookie

Cookies are small text files stored on the user’s device when they browse certain websites using their preferred browser; they are stored in the browser’s file directory. They are used by server-side web applications to store and retrieve information on the client side.

Cookies are divided into “technical,” “analytics,” and “profiling” cookies. Cookies may also be divided into “first-party” and “third-party” cookies.

The Site’s use of cookies and similar technologies complies with national and European legislation, as well as with the Italian Data Protection Authority’s Provision of May 8, 2014, entitled “Identification of simplified procedures for the information notice and acquisition of consent for the use of cookies.”

The Site is hosted on the platform owned by Shopify, Inc. For more information about the cookies used by this platform and to disable them, please refer to the following link: https://it.shopify.com/legal/privacy .

The Site uses the following cookies:

I. Technical Cookies.

The main purpose of technical cookies is to make browsing the Site easier. Almost all browsers are set to accept cookies; however, users can independently change their browser settings or use specific add-ons to block them. In that case, access to the web portal and use of some services may be limited.

Technical cookies are in turn divided into  “session” and “persistent” cookies: both are stored on the user’s device, but the former are deleted when the browser is closed, while the latter remain stored until they expire.

The Site uses technical “session” cookies to enable navigation within the pages, such as allowing authentication in restricted areas or storing the user’s temporary preferences; these cookies are deleted once the browser is closed.

The use of session cookies (which, in any case, are not stored persistently on the user’s computer and are automatically deleted as soon as the browser is closed) is strictly limited to transmitting data (consisting of random numbers generated by the server) that identify the specific session and are necessary to enable safe and efficient browsing. 

In some cases, the Website also uses “persistent” technical cookies to store users’ choices relating, for example, to language or device type.

Persistent cookies are stored on users’ devices between separate browser sessions and allow the user’s actions on a website to be remembered. Persistent cookies may be used for a variety of purposes, including remembering the user’s preferences (e.g. the website language) when using a website.

II. Analytics cookies

These cookies are used to track users’ browsing preferences and to collect data anonymous statistical data. 

The Website uses only third-party analytics cookies from other websites. 

Users can disable these cookies by accessing their browser settings.

See the links for the individual browsers:

• Internet Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies ;
• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences?redirect=no;
• Safari: https://www.apple.com/legal/privacy/it/;
• Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en;
• Opera: https://blogs.opera.com/news/2015/08/how-to-manage-cookies-in-opera/

In addition, you can disable cookies on websites by downloading suitable software (such as Ghostery http://www.ghostery.com) or activate “incognito browsing” mode: this is a function that allows you to browse without leaving browsing data in the browser. This function only prevents browsing data from being retained in the browser.

Analytics cookies used by the Website

Please note that the Website uses the following analytics services to obtain statistical data relating to the use of the website:

• Analytics service provided by BugSnag Inc. https://docs.bugsnag.com/legal/privacy-policy/  
• Analytics service provided by Akami.com https://www.akamai.com/ 
• “Google Analytics” provided by Google Inc. In this case, the personal data collected are retained by Google as an independent data controller for the relevant processing.

For more information, see https://support.google.com/analytics/topic/2919631?hl=it&ref_topic=1008008

 

Social network plug-in cookies

The Website may also use third-party social network plug-in cookies to enable you to share content on different social networks. They allow users to interact through social networks (e.g. the share function on Facebook, Twitter, YouTube, or LinkedIn). These cookies can be disabled through your browser settings (see the links above).

Social network cookies are not necessary for browsing. For further information about social networks’ cookie usage policies, you can consult their respective privacy and cookie policies:

Facebook: https://it-it.facebook.com/about/privacy/

Google: http://www.google.com/intl/it/policies/privacy/

Twitter: https://twitter.com/it/privacy

Instagram: https://help.instagram.com/1896641480634370?ref=ig

LinkedIn: https://www.linkedin.com/legal/cookie-policy

ShareThis: https://sharethis.com/privacy/#sthash.oNiQUPLd.dpbs

YouTube: https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=it

Third-party profiling cookies only.

 Profiling cookies are used to track the user's browsing and create a profile based on their behavior, which may then be used to send advertising messages to the user's device. Third-party profiling cookies are cookies originating from other websites or advertising networks (Google AdSense, etc.) that may be sent to the user's device following browsing on the Website.

Facebook Pixel

The Facebook Pixel is a service provided by FacebookInc. 1601 S. California Ave., Palo Alto, CA 94204, USA ("Facebook"), which enables the tracking of user behavior after clicking on a Facebook ad and routing to the respective operator's website. Conversion measurement makes it possible to measure, analyze, and optimize the effectiveness of Facebook ads for statistical research and market research purposes. The data collected on the Website using the conversion Pixel does not allow the Website to draw any conclusions about the user's identity. The data collected (for example, the respective user's IP address) is transmitted through the conversion Pixel, and Facebook stores and processes the data for conversion measurement purposes. The Website receives anonymous reports from Facebook, and these reports contain no reference to the identity of the respective users. However, it cannot be ruled out that Facebook may link other individual data relating to the user (for example, user information from a Facebook account) to the user data transmitted through the Website, or that Facebook may use the information for its own purposes.

The Visitor Tracking Pixel is a service provided by a third-party company (Facebook), and the Website cannot control or influence a third-party company's data processing operations. You can find information about Facebook's privacy policies here https://www.facebook.com/about/privacy.

Facebook, together with its partners, allows online advertising to be placed both within and outside Facebook's web space. For this purpose, a cookie may also be stored on the user's computer.

To give consent to the use of the Conversion Pixel, the user must be over 13 years of age. The user hereby declares that they are of legal age to give such consent, or that they have asked a parent or legal guardian(s), who have decided to give their consent to the Consent Declaration in advance.

You may withdraw your consent to the use of conversion measurement at any time. To do so, please use the following link: https://www.facebook.com/ads/website_custom_audiences/.

Alternatively, you can also refuse the use of the corresponding cookies by disabling the use of cookies by third-party providers by visiting the Network Advertising Initiative's opt-out page:

http://www.networkadvertising.org/choices/

and selecting the appropriate settings using the measures provided there.

Finally, Users are informed that they can visit the following websites: YourOnlineChoices (EU), Network Advertising Initiative (USA), Digital Advertising Alliance (USA), and DAAC (Canada) to understand and manage tracking preferences for most advertisements. 

To offer you Klarna's payment methods, we may  transmit your personal data to Klarna in the form of contact details and order information at checkout, so that Klarna can assess your eligibility for its payment methods and customize them. The personal data transferred about you is processed in accordance with Klarna's privacy policy.

Processing in the context of electronic withdrawal
When you exercise your right of withdrawal electronically using the provided function, we process the personal data necessary to manage your declaration. This includes, in particular, your name, contact details, and contract information (e.g., order number). The processing is based on Art. 6(1)(b) GDPR for managing the withdrawal and related communication. The data is retained only for as long as necessary to process the withdrawal and comply with statutory retention obligations.

Mobile Terms of Service
Miriaci
Last updated: October 1, 2024

Miriaci’s mobile messaging service (the “Service”) is operated by Miriaci (“Miriaci,” “we,” or “us”). Your use of the Service constitutes your acceptance of these terms and conditions (the “Mobile Terms”). We reserve the right to modify or discontinue the Service or any of its features without notice. To the extent permitted by applicable law, we also reserve the right to modify these Mobile Terms at any time; your continued use of the Service after the effective date of such changes constitutes your acceptance of them.

By consenting to Miriaci’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Miriaci through your mobile phone operator at the mobile number provided, even if that number is registered on any state or federal “Do Not Call” list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages may include updates, alerts, and information (e.g., order updates, account alerts, etc.). Promotional messages may include promotions, special offers, and other marketing offers (e.g., cart reminders).

You acknowledge that you are not required to enroll in this program to make purchases and that your consent is not a condition of any purchase from Miriaci. Participation in this program is entirely voluntary.

The Service is free, but you are responsible for all text messaging costs and fees charged by your mobile carrier. Message frequency varies. Message and data rates may apply. Check your rate plan and contact your mobile carrier for more details. You are solely responsible for all SMS/text messaging costs, including those charged by your mobile carrier.

You may opt out of the Service at any time. Text the keyword STOP to Miriaci or click the unsubscribe link (where available) in any text message to cancel your subscription. You will receive a one-time confirmation text message confirming your opt-out. No further messages will be sent to your mobile device unless you request them. If you have enrolled in other Miriaci mobile messaging programs and wish to unsubscribe, unless applicable law provides otherwise, you must unsubscribe from those programs separately by following the instructions provided in their respective mobile terms of service.

For assistance or support relating to the Service, text HELP to Miriaci or email info@miriaci.com

We reserve the right to change any short code or phone number used to operate the Service at any time, and we will notify you of such changes. You acknowledge that any messages, including “STOP” or “HELP” requests, sent to a short code or phone number that we have changed may not be received, and that we will not be responsible for responding to requests contained in such messages.

The mobile carriers supported by the Service are not responsible for delayed or undelivered messages. You agree to provide us with a valid mobile phone number. If you obtain a new mobile phone number, you must register for the program using the new number.

To the extent permitted by applicable law, you agree that we will not be responsible for the failure to deliver, delay, or incorrect transmission of any information sent through the Service, for any errors in such information, and/or for any action you may or may not take based on the information or the Service.