Cookie Policy

COOKIE POLICY

A. Gallo Colors ("we", "us", "our") is committed to protecting your privacy. This Cookie Policy describes how we use cookies and similar technologies on our website, www.agallocolors.com ("website"). By using our website, you agree to the use of cookies as described in this policy.

This Cookie Policy complies with Regulation (EU) 2016/679 (GDPR), the ePrivacy Directive, and the Guidelines of the Italian Data Protection Authority (June 10, 2021).

For further details on how we process your personal data, please refer to our Privacy Policy. 

WHAT ARE COOKIES AND HOW WE USE THEM

Cookies are small text files stored on your browser or device when you visit a website. They serve different purposes: some are essential for the proper functioning of the site, while others help enhance performance, remember your preferences, or deliver personalized advertising.

On our website, we use various types of cookies, including both first-party cookies — set directly by our domain (agallocolors.com) — and third-party cookies, which are set by external services such as Google, Meta, and TikTok. We store the personal data collected through cookies only for as long as necessary to fulfill their specific purposes, as outlined below. Once the data is no longer required, it is securely deleted or anonymized.

• Essential (or Strictly Necessary) Cookies — These are primarily first-party cookies that enable core website functionalities, such as secure login, checkout, and language or currency settings. Examples include _shopify_essential, shopify_pay_redirect, keep_alive, and _tracking_consent.
  • Purpose: Ensure the site functions properly and delivers services you have explicitly requested.
  • Consent required: No. These cookies are based on our legitimate interest in providing a functional and user-friendly website.
  • Retention period: Session-based or up to 1 year.

• Functional (or Personalization) Cookies — These cookies enhance your experience by remembering preferences and maintaining session continuity. They may support features like cart retention or managing pop-up behavior. Examples include localization, cart_currency, and popupShown.
  • Purpose: Improve usability and personalize your interaction with the site.
  • Consent required: In some cases, yes (depending on the specific function).
  • Retention period: Persistent, typically up to 1 year unless deleted earlier by the user.

• Analytics Cookies — Analytics cookies help us understand how users interact with the site to improve its structure, usability, and content. These can be either first-party or third-party (e.g., Google Analytics 4). Examples include _ga, _ga_XD9XZ3CSV, _orig_referrer, and _landing_page.
  • Purpose: Gather statistical insights on user behavior and site performance.
  • Consent required: Yes, explicit consent is required.
  • Retention period: Up to 2 years, depending on your preferences.

•  Marketing (or Profiling) Cookies — These third-party cookies track your browsing behavior across websites to deliver relevant advertising and measure campaign performance. We use technologies such as Google AdSense, Meta Pixel, and TikTok Pixel. Examples include _gcl_au, _ttp, ttcid, and _fbp.
  • Purpose: Serve personalized ads and analyze the effectiveness of marketing efforts.
  • Consent required: Yes, always requires your explicit consent.
  • Retention period: Typically, up to 90 days.

We are committed to using cookies responsibly to respect your privacy and give you full control over your data. You can manage your cookie preferences at any time via the “Cookie Settings” link located in the footer of our site.

COOKIE BANNER AND CONSENT MECHANISM

When you first visit our website, a cookie banner is displayed to inform you that we use non-essential cookies only with your prior consent. The banner offers a clear and simple way to make your choice: you can accept all cookies, reject all non-essential ones (by closing the banner or actively choosing to reject), or manage your preferences in a granular way by selecting specific categories.

Consent is never bundled, meaning you have the freedom to choose which types of cookies you want to allow — such as only personalization or analytics cookies — without being forced to accept others. At any time, you can review or modify your preferences through the “Cookie Settings” link, which is permanently available in the footer of the website.

We also store a record of the consent you provide, in compliance with GDPR requirements on accountability and traceability. You have the right to refuse or withdraw your consent to the use of non-essential cookies at any time. You can do this easily by accessing the “Cookie Settings” link available in the footer of our website, allowing you to modify your preferences as you wish.

HOW TO MANAGE COOKIES IN YOUR BROWSER

Cookies can be completely deactivated by your browser using the cookies feature provided in most browsers. You should be aware, however, that if you disable cookies some of the features of the site may not be utilizable. You can find information on how to manage cookies in your browser at the following addresses:

• Microsoft Edge — Support page for managing cookies in Edge available at https://support.microsoft.com/en-us/windows/manage-cookiesin-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
• Safari — Support page for managing cookies in Safari on macOS and iOS, available at https://support.apple.com/en-us/105082
• Chrome — Support page for managing cookies in Chrome available at https://support.google.com/chrome/answer/95647?hl=en
• Firefox — Support page for managing cookies in Firefox available at https://support.mozilla.org/en-US/kb/enhanced-tracking-protectionfirefox-desktop?redirectslug=enable-and-disable-cookies-website-preferences&redirectlocale=en-US

DETAILED LIST OF COOKIES WE USE

Below, we provide a complete overview of the cookies used on our website (www.agallocolors.com). For each cookie, we indicate the name, domain, purpose, type, duration, provider (whether it is a first-party or third-party cookie), and whether it requires user consent.

We share this information to ensure full transparency and to comply with the requirements of the General Data Protection Regulation (GDPR) and the guidelines issued by the Italian Data Protection Authority.

Our goal is to help you make informed choices about your cookie preferences and to give you full control over how your personal data is processed during your visit to our site.

AUTOMATED DECISION-MAKING AND PROFILING

Some of the cookies used on our website, especially marketing cookies, involve profiling to personalize the advertising you see and improve your browsing experience. However, we want to clarify that no automated decision-making based solely on cookie data will produce legal or similarly significant effects on you, as stated under Article 22 of the GDPR. This means that no significant decisions — such as those affecting your legal rights or that might impact you in a similarly meaningful way — will be made automatically without your involvement. You can always opt out of profiling activities through the cookie settings, accessible via the “Cookie Settings” link available in the footer of our website.

SECURITY MEASURES

To protect your personal data, we employ a comprehensive security approach. This includes using robust encryption methods, such as SSL/TLS protocols, to safeguard data during transmission and prevent unauthorized access. Access to your personal data is strictly limited to authorized personnel who require it to perform their duties under the stated purposes. We regularly review and audit our systems to identify and mitigate security risks and ensure that all stored data remains confidential and securely protected on our servers. These measures help maintain a high standard of security for your personal data.

THIRD-PARTY COMMUNICATIONS

In the course of providing personalized advertising and profiling, we collaborate with third-party service providers, including marketing consultants who assist us in developing strategies to personalize the promotional content you see. These providers act as data processors under the terms of Article 28 of the GDPR. They process personal data on our behalf and in accordance with our instructions. Data Processing Agreements (DPAs) have been established with each provider to ensure compliance with applicable data protection standards. Their role is strictly limited to delivering marketing and profiling services that help us optimize the user experience on our website. Our external data processors for marketing and analytics purposes include:

• Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) — Used for Meta Pixel (delivering targeted advertising and measuring ad performance on Meta platforms, such as Facebook and Instagram). Privacy & GDPR information:
  • Meta Pixel GDPR Implementation Guide, available at https://developers.facebook.com/docs/meta-pixel/implementation/gdpr
  • Meta Pixel Terms and Policies, available at https://developers.facebook.com/docs/meta-pixel/guides/terms-and-policies

• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — Used for Google Ads and Google Analytics 4 (measuring site traffic, user behavior, and delivering personalized ads across Google’s network). Privacy & GDPR information:
  • Google Analytics Privacy and Data Handling, available at https://support.google.com/analytics/answer/6004245?hl=en
  • Google Consent Mode, available at https://support.google.com/analytics/answer/9976101?hl=en

• TikTok Technology Limited (10 Earlsfort Terrace, Dublin 2, Ireland) — Used for TikTok Pixel (tracking user interactions and optimizing ad delivery on the TikTok platform). Privacy & GDPR information:
  • TikTok Privacy Policy (EEA), available at https://www.tiktok.com/legal/page/eea/privacy-policy/en

• Shopify International Limited (3rd Floor, 5 Earlsfort Terrace, Dublin 2, Ireland) — Used for our e-commerce platform services including hosting, customer management, and supporting marketing functionalities such as personalized offers, product recommendations, and analytics through integrated tools and apps. Privacy & GDPR information:
  • Shopify Privacy Policy, available at https://www.shopify.com/legal/privacy

TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

Some of our third-party service providers, such as Google, Meta, and TikTok, may transfer personal data collected via cookies outside the European Union (EU) and the European Economic Area (EEA) to countries that do not provide an equivalent level of data protection as required by the GDPR (such as the United States, unless protected by an appropriate mechanism like Standard Contractual Clauses).

In the event that data is transferred outside the EU/EEA, we ensure that adequate safeguards are in place to protect your privacy rights and ensure that your data is processed in compliance with European data protection laws. These safeguards include, but are not limited to:

• Standard Contractual Clauses — The adoption of standard contractual clauses approved by the European Commission to ensure an adequate level of data protection for transferred data.
• Participation in International Data Protection Programs — Third-party service providers may participate in data protection programs such as the Privacy Shield (if applicable) or other certifications ensuring a level of data protection similar to that required by the GDPR.

If you would like more details about how we transfer your data and the safeguards we have in place, you can contact us via the e-mail address provided in the section below.

EXERCISING YOUR RIGHTS

Under the GDPR, you have the right to access, correct, or delete your personal data at any time. You can request to rectify any inaccurate information or ask us to erase your data if it is no longer needed. You also have the right to limit the processing of your data or object to its use, such as for personalized advertising.

If you have given us consent to process your data, including the use of cookies, you can withdraw that consent at any time. This will stop us from processing your data in the ways you initially agreed to, although some processing may still be required for legal or operational purposes.

To exercise any of these rights, simply contact us at privacy.agallocolors@gmail.com. We will respond promptly, typically within one month. If more time is needed, we will inform you of any delays.

Additionally, if you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority, which in Italy is the Garante per la Protezione dei Dati Personali.

DATA CONTROLLER

The Data Controller is A. Gallo Colors S.r.l., with registered office at Via Sandro Pertini, 1 – 06073 Corciano (PG), Italy, VAT number 03750550547.

As the Data Controller, A. Gallo Colors ensures that your personal data is processed in accordance with the applicable data protection laws, including the General Data Protection Regulation (GDPR) and the ePrivacy Directive. If you have any concerns regarding your personal data, including how cookies are used on our website, you may contact us via e-mail at: privacy.agallocolors@gmail.com

CHANGES TO THIS COOKIE POLICY

We may update this Cookie Policy periodically to reflect changes in the law or our cookie practices. Any updates will be noted by revising the "Last updated" date at the bottom of this page. If there are significant changes in how we process your data, we will notify you directly. We recommend reviewing this page regularly to stay informed about how we protect your privacy. By continuing to use our website after changes are made, you accept the updated terms.

A. Gallo Colors is not responsible for the content, services, or personal data processing policies of external websites and pages accessible through links on its own site.
Last updated: July 21, 2025