This Application collects some Personal Data from its Users.

Data Controller and Owner

Sanctuary of Joy

Daniele Muscetta
Contrada San Pietro, 134
01038 Soriano nel Cimino (VT) – Italy

Types of Data collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Cookies, Usage Data and email address.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
The Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.
All Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without any consequences on the availability or the functioning of the service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of providing the service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published or shared through this Application and confirm that they have the third party’s consent to provide the Data to the Owner.

Mode and place of processing the Data

Methods of processing

The Data Controller processes the Data of Users in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.

Place

The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.

Retention time

The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.

The use of the collected Data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Interaction with external social networks and platforms, Analytics and Managing contacts and sending messages.

The Personal Data used for each purpose is outlined in the specific sections of this document.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Processing of your IP address by the web server

Services on the Internet can only be used from a technical perspective if your IP address is disclosed. This is processed by the web servers delivering the websites in question. Your IP address is stored together with other, non-identifiable information in technical protocol files, known as log files. We shall only use these files in order to be able to analyse the reason and impact in situations where a fault arises. The log files are deleted on a weekly basis. Non-identifiable information includes i.a. the following:

the names and size (Bytes) of the web pages you have visited
the name of the browser you are using
the name and version of your operating system
the device type of your computer (or mobile telephone or tablet)
date and time of access
any search engines used via which you have reached our website
the names and size (Bytes) of any downloaded files
user agent (Browser)

Apart from this processing by the web server, we shall only use or store your IP address in anonymous form (for more information on this see Google Analytics section). The legal basis for the storage is Art 6 no 1 lit f) GDPR, our legitimate interest in investigating technical errors and correcting them.

Contacting the User

The Owner or the Application may use Personal Data submitted via our Contact Forms and Order Forms to contact the User, in order to provide the services requested or respond to the User’s inquiries. We will never intentionally share without your consent Personal Data submitted via our Contact Forms and Order Forms with third parties. However, to protect our Site against spam we use Akismet Anti-Spam (Automattic’s Privacy Policy applies) and Google’s reCAPTCHA v3 (Google’s privacy policy and terms of service apply) that may pass some of your data to those external servers to process.

Order form (this Application)

By filling in the order form with their Data, the User authorizes this Application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

Personal Data collected: first name, last name, date of birth, email address, address, city, country and ZIP/Postal code.

Contact form (this Application)

By filling in the contact form with their Data, the User authorizes this Application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

Personal Data collected: first name, last name and email address.

Handling payments

Payment processing services enable this Application to process payments by credit card, bank transfer or other means. To ensure greater security, this Application shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.
Some of these services may also enable the sending of timed messages to the User, such as emails containing invoices or notifications concerning the payment.

Stripe (Stripe Inc.)

Stripe is a payment service provided by Stripe Inc., which allows users to make conduct online payment transactions.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

PayPal (PayPal Inc.)

PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments using their PayPal credentials.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Managing contacts and sending messages

This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

ZOHO Campaigns (Zoho Corporation Pvt. Ltd.)

ZOHO Campaigns is an email address management and message sending service provided by Zoho Corporation Pvt. Ltd.

Personal Data collected: email address.

Place of processing: US – Privacy Policy

Cloudflare.com

To improve the availability and reliability of this application we use external scripts from cloudflare.com, a service operated by CloudFlare, Inc., 101 Townsend St., San Francisco, CA 94107. These scripts are downloaded from CloudFlare’s servers when our web pages are loaded. Your IP address is then transmitted to CloudFlare’s servers. CloudFlare also determines in this context which websites you have already visited.
CloudFlare will also store this information where necessary. Further information on the use of transmitted data by CloudFlare can be found in CloudFlare’s Privacy Policy. Legal basis for the use is Art 6 lit f GDPR. Our legitimate interest is the use of professional, finished scripts as part of our website, in order to keep the development costs for such scripts low.

The transmission to Google Inc. and CloudFlare LLC (both are residing in the US) are based on the privacy shield agreement which both companies are part of (see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active and https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active)

Interaction with external social networks and platforms

This type of service allows interaction with social networks or other external platforms directly from the pages of this Application.
The interaction and information obtained through this Application are always subject to the User’s privacy settings for each social network.
This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.

Facebook Like button and social widgets (Facebook, Inc.)

The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.