Privacy Policy

1. Subject

The yearofthemonkey.it website (hereafter the “Site”) is managed by Erika Serravalle (hereafter “YearOfTheMonkey”) and the security and privacy measures applicable to this Site have been defined and developed to guarantee that all personal data is managed correctly in accordance with the local and international security and privacy regulations and standards.
This policy highlights how YearOfTheMonkey collects and/or uses personal data, directly or through its subsidiaries, how such data is shared and how it is possible to access, amend or erase personal data.
YearOfTheMonkey acknowledges and respects the privacy rights of individuals concerning their personal data. To demonstrate its commitment to Privacy aspects, YearOfTheMonkey has defined this policy to provide a global privacy management model to ensure that such compliance with privacy requirements becomes a cornerstone of the corporate culture endorsed by YearOfTheMonkey.
All personal data you provide pursuant to this Site shall be used exclusively for the purposes described below.
1.1 Data Processing Responsibility
All personal data provided or collected on visiting the Site shall be processed by YearOfTheMonkey in its capacity as Data Controller.
Personal data will be processed by YearOfTheMonkey personnel assigned to the management of personal data collected as a result of your visit to this Site including (but not limited to):

• personnel authorised to manage the Site and provide relative services, for instance customer care service, management of YearOfTheMonkey It systems;
• administration staff;
• marketing division staff.

Furthermore, YearOfTheMonkey may request its service providers to perform certain data processing operations on its behalf and according to the instructions provided by YearOfTheMonkey each time. Such providers shall process the personal data in their capacity as Data Processors based on contractual commitments.
YearOfTheMonkey provides the individuals assigned to such activities with operational instructions and a code of conduct specifically related to the processing of personal data in accordance with this Privacy Policy.

2. Data collection procedures

YearOfTheMonkey collects user personal data via the Site. There are a variety of procedures through which it is possible to obtain such information, such as for instance:

• Site registration;
• browsing information on users visiting the Site;
• participation in competitions, promotions, events available on the Site;
• contacting the customer care service or other form of contact with YearOfTheMonkey.

3. Type of information collected, processing purpose and procedures

3.1 Sources of personal data
YearOfTheMonkey processes different types of user data, collected from different sources, such as for instance, information provided directly from the user and information obtained from automatic tracking systems when using the Site and its services.
3.2 Type of personal data
YearOfTheMonkey may collect and process the following user personal data:

• Information concerning your social network profile, if public. If you decide to access the Site via social network applications or connect your YearOfTheMonkey account to your public profile available on social networks, and share your activity on the Site on such channels using the relative plug-ins (e.g. Facebook Connect, Like, Share on Facebook etc.), some data you publish on your social network will be collected by the Site and processed for the corresponding functions. The use of said plug-ins implies the sharing of the corresponding actions and information on the relative social networks;
• Information concerning the use of the Site by users. For security reasons, we process the session log files every time you access your account;
• Navigation data. When you navigate the Site we use certain technologies that automatically collect specific information on the way in which you use our products and services, such as the IP address or other unique device code (PC, mobile phone or other device uses) you use to navigate the Site, identification of registered and new users, technical information that can include the previous URL visited by a user before landing on the Site, browser and language information etc.) This information helps us to continuously improve your navigation experience and monitor the correct functioning of the Site. This information only includes statistical data on user actions and are not designed to be linked to any user identification data.

3.3 Nature of conferral of personal data
When users are requested to provide personal data, for instance when they register with the Site, YearOfTheMonkey informs them which personal information is mandatory for registration purposes, and which is optional. Failure to provide certain information may make it impossible to create the account (e.g. name and surname). Conferral of other information is completely optional but, if certain information is not provided, some specific elements of the services provided by YearOfTheMonkey may be restricted or unavailable.
3.4 Use of cookies
We use cookies to make it easier for visitors to use our website.
a cookie is a small file, typically of letters and numbers, downloaded on to a device when the user accesses certain websites. Cookies allow a website to recognise a user’s device and track users as they navigate different pages on a website and to identify users returning to a website. Cookies do not contain any information that personally identifies you, but personal information that we store about you may be linked, by us, to the information stored in and obtained from cookies.

For further information on cookies, please read the Cookies Policy.

3.5 Underage user data
The Site is not intended for use by users under 18 years of age and YearOfTheMonkey does not intentionally collect their personal data.
If any data on underage users is accidentally collected and retained, YearOfTheMonkey shall promptly erase all personal data belonging to these minors.

4. Purposes of the Processing

The information we collect, including personal data, is used for the following purposes:

• to provide the services available on the Site (e.g. registration process and account access management, account management);
• to allow the technical management of the Site and its operational functions (such as logistics), including the troubleshooting of technical problems, statistical analysis, testing and research;
• to prevent or detect fraudulent activities or improper use which is detrimental to our web site or could compromise the security of transactions;
• to manage promotions and competitions;
• to satisfy user requests (e.g. information request management);
• to manage promotions or competitions available on the Site each time;
• to communicate with users for purposes related to the provision of services;
• to promote YearOfTheMonkey products, services and brands, including the mailing of commercial, promotional or informative communications and periodic updates (e.g. by email, telephone, SMS/MMS, post and via social networks) on YearOfTheMonkey products, services, initiatives and events organised by, or in collaboration with YearOfTheMonkey. If you grant your consent to the processing of your data for marketing purposes, such data may be processed to conduct statistical analysis, surveys and market research on YearOfTheMonkey products and services by post, telephone or email.

5. Opt in/out

During the registration process, you can explicitly and freely consent to the collection, processing and transfer of your personal data in accordance with the provisions of this Privacy Policy, for marketing purposes, including the mailing of commercial, promotional or informative communications and periodic updates (e.g. by email, telephone, SMS/MMS, post and via social networks) on YearOfTheMonkey products, services, initiatives and events organised by, or in collaboration with YearOfTheMonkey. If you grant your consent to the processing of your data for marketing purposes, such data may be processed to conduct statistical analysis, surveys and market research on YearOfTheMonkey products and services by post, telephone or email. You may amend your consent (opt-out) as required by accessing your YearOfTheMonkey account profile or by sending relative communication to the customer care service.
If you receive email messages from the Site but do not want to receive any more in future (opt-out), please follow the instructions contained in the messages themselves or the procedures illustrated earlier on in this section.
YearOfTheMonkey undertakes to promptly process all opt-out requests received, but you may continue to receive communications from us for a maximum of ten working days while your request is being processed.

6. Transfer and sharing of data

6.1 Sharing with other Group enterprises and third-parties
In addition to the persons and bodies listed in section 2, YearOfTheMonkey may share some personal data acquired directly and indirectly from users, both within the YearOfTheMonkey to manage intercompany services (e.g. commercial communications) and with third-parties (public authorities, carriers, insurance companies) so as to perform activities required to provide the services regulated by this Privacy Policy, manage any query, conduct data analyses and provide marketing support services. All third-parties will be required to process such data in accordance with the applicable rules and regulations.
In addition, user data may also be shared with third-parties for the following reasons:

• to facilitate a merger, acquisition, spin-off or disposal of all or part of our corporate assets;
• to comply with specific proceedings;
• to comply with the requisites of the laws in force, to protect the security of an individual, to protect YearOfTheMonkey’s rights and property and to prevent fraud or technical or security related problems;
• to inform commercial partners on how to use the Site and how to purchase the products available on the same, using aggregated statistics or other format that does not disclose the identity of the user.

The use of data by third-parties that do not belong to the YearOfTheMonkey, or third-parties that do not operate on behalf of the YearOfTheMonkey or under its instructions, does not fall within the scope of this Privacy Policy.
6.1.1 Social media plugins
This Site uses social media plugins provided by the main social networks (e.g. facebook.com and twitter.com). When you visit the Site, the navigation data may be transferred directly to the relative social network, without any direct interaction on your part. You are hereby informed and acknowledge that the functions of social network plugins are managed directly by the company that manage the same. When you use the plugins made available on the Site (e.g. when you login with your account credentials to a social network or connect your YearOfTheMonkey account to your social network account, or you click the “Like” or “Share” buttons in Facebook), your browser establishes a direct connection to the social network server that sends the contents of the plugin directly to your browser.
YearOfTheMonkey may therefore receive your data, in accordance with the terms of use and the privacy policy of the social network, and may add such information to the user data already collected via its own services. If you decide to share information with the social network, YearOfTheMonkey will share such data with them, according to your preferences. Any data communicated to the social network will be subject to the privacy policy and the terms and conditions of such social network.
To prevent the social network from collecting your personal data, please check the conditions on the web site of the relative social network.
6.2 Transfer of data outside the EU
YearOfTheMonkey may transfer the data collected via this Site to YearOfTheMonkey companies or third-parties located in other countries, also outside the European Union, to perform the activities required to provide the services listed in this Privacy Policy (e.g. hosting services). If personal data is transferred to countries that do not guarantee the same level of protection or, in any case, a suitable level of protection for personal data (e.g. the USA), we will ensure that each service provider undertakes to comply with specific contractual obligations according to the legislation applicable to the protection of personal data (including the implementation of the Standard Contractual Clauses approved by the European Commission), except where it is possible to refer to any other legal basis pursuant to the transfer of personal data.

7. Security and protection of personal data

YearOfTheMonkey undertakes to protect the personal data of its users. YearOfTheMonkey emphasises that the password is one of the account protection mechanisms, you are therefore invited to use a unique and secure password, keep it in a secure place, restrict access to the access on your computers and browsers, and logout after visiting the Site. YearOfTheMonkey also monitors Site activities to prevent unauthorised circulation of credit card numbers or other personal data. YearOfTheMonkey uses the SSL standard (Secure Sockets Layer) to protect the confidentiality of your personal data.
YearOfTheMonkey undertakes to protect the personal data collected from its users. All collected personal data is stored on secure servers and in YearOfTheMonkey’s internal systems. YearOfTheMonkey implements appropriate security measures to protect the data against unauthorised access or unauthorised amendments, circulation or distribution of data. YearOfTheMonkey uses adequate physical, electronic and management procedures to safeguard and protect the information and the data stored on its system, in order to prevent unauthorised access, maintain the accuracy of data and guarantee correct use of such data.
Although no IT system is 100% secure, YearOfTheMonkey is convinced that the measures it has put into place reduce the possibilities of encountering security problems to a level that is appropriate for the type of data in question.

8. Data storage and erasure

YearOfTheMonkey accesses, uses, processes, saves and stores the personal data collected for the sole purposes described in this document pursuant to the express consent of the user.
More specifically, YearOfTheMonkey stores personal data according to:

• the purposes for which it was collected;
• the consent received from the user;
• local and international standards.

Personal data is stored and erased in accordance with the YearOfTheMonkey security policy for the time needed to fulfil the purposes for which the data was collected and processed, including any retention times foreseen by applicable laws (e.g. retention of accounting documentation).
You can request the erasure of your data and deletion of your account, where appropriate; in this case, YearOfTheMonkey will comply with your request on the condition that it is not required to retain such personal data by any applicable laws or regulations in force.

9. User rights concerning personal data

Pursuant to article 7 of Legislative Decree no. 196/2003 on data protection (“Italian Personal Data Protection Code” or other applicable legislation), YearOfTheMonkey grants you certain rights which are listed below for ease of reference.
You have the right to request confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form.
In particular, you have the right to obtain indications on :

• the source of the personal data;
• the purpose and processing methods;
• the logic applied to processing if the same is carried out with the use of electronic means;
• the personal data of the Controller, the persons in charge and the designated representatives pursuant to Art.5 paragraph 2 of the Italian Privacy Law;
• the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data.

You have the right to obtain:

• updating, rectification or, where interested therein, integration of the data;
• erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is necessary for the purpose for which they were collected or subsequently processed;
• certification to the effect that the operations indicated in the items above have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right that is to be protected.

You are entitled to oppose, totally or partially:

• for legitimate reasons, the processing of your personal data, despite them being relevant to the purpose of the collection;
• the processing of your personal data for the distribution of advertising materials or direct sales or for market research or business communications.

In order to exercise these rights and request information on the user data in our possession, please complete the form found on the web pagehttp://www.yearofthemonkey.it/contact-us YearOfTheMonkey will respond within a reasonable time, after verifying the identity of the sender.

DATA CONTROLLER

The Data Controller under section 28 of the Italian Privacy Code, or other applicable legislation, is Erika Serravalle, a company with registered office at via Nongole, 200 32100 Belluno in the person of its pro tempore legal representative.

Contact details

If you have any queries or comments on this Privacy Policy, please contact us using the form found on the following web page: http://www.yearofthemonkey.it/contact-us

Amendments to the Privacy Policy

This Privacy Policy may be subject to amendment; we therefore recommend you check the Privacy Policy on a regular basis. Users will be notified via the Site when YearOfTheMonkey makes any amendments deemed significant by the company.

Links to third-party websites

You may encounter contents that connect to third-party websites when navigating the Site. YearOfTheMonkey can not access or control the cookies or other functions used by third-party websites and the procedures of such external web sites do not fall within the scope of our Privacy Policy. You should therefore contact and/or consult the third-parties in question for further information on their own Privacy protection procedures.