COOKIE POLICY

AC Commerce and Services

This Cookie Policy is drafted in accordance with Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and the ePrivacy Directive.

1. Data Controller

The Data Controller is:

AC Commerce and Services
Kmeti 21
52470 Kmeti, Umag
Croatia
Email: ac.servicesdoo@gmail.com

2. What Are Cookies

Cookies are small text files that websites visited by the user send to their device (computer, smartphone, or tablet), where they are stored to be transmitted back to the same websites upon the next visit.

Cookies allow the website to recognize the user’s device, improve the browsing experience, and provide advanced features, including for statistical and marketing purposes.

3. Types of Cookies Used

3.1 Technical (Necessary) Cookies

These cookies are essential for the proper functioning of the website and any related e-commerce services. They allow, for example:

• browsing and use of website features;

• access to restricted areas;

• management of the shopping cart and purchase operations;

• saving browsing preferences.

Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).

👉 These cookies do not require user consent.

3.2 Analytical Cookies

The website may use Google Analytics, a web analytics service provided by Google LLC, to collect statistical information about how users interact with the website.

The data collected may include, for example:

• number of visitors;

• pages visited;

• duration of browsing sessions;

• approximate geographic origin.

Data are processed in aggregated form and, where possible, with IP address anonymization.

Legal basis: user consent (Art. 6(1)(a) GDPR), unless full anonymization compliant with applicable regulations applies.

3.3 Profiling and Marketing Cookies

These cookies are used to:

• display personalized advertisements;

• measure the effectiveness of advertising campaigns;

• create user profiles based on preferences and browsing behavior.

The website may use marketing and social media tools, including:

• Meta Platforms Inc. (Facebook and Instagram);

• any additional connected advertising platforms.

Legal basis: explicit user consent (Art. 6(1)(a) GDPR).

👉 Profiling cookies are installed only after the user has provided consent through the cookie banner.

4. Third-Party Cookies

While browsing, users may receive cookies from third parties other than the Data Controller.

The Data Controller has no direct control over third-party cookies. Their management is governed by the respective privacy and cookie policies of the providers, which can be consulted on their websites.

Main third parties potentially used:

• Google LLC – Google Analytics

• Meta Platforms Inc. – Facebook and Instagram

5. Transfer of Data Outside the EU

The use of third-party services (e.g., Google and Meta) may involve the transfer of data to countries outside the EU, particularly the United States.

Such transfers take place in compliance with Articles 44 et seq. of the GDPR, through:

• adequacy decisions of the European Commission (e.g., Data Privacy Framework, where applicable);

• Standard Contractual Clauses (SCCs);

• additional safeguards provided by applicable legislation.

6. Duration of Cookies

Cookies may be:

• Session cookies, which are automatically deleted when the browser is closed;

• Persistent cookies, which remain stored on the device until their expiration date or manual deletion.

The specific duration of each cookie is indicated within the settings of the cookie management system used by the website.

7. Consent Management

Users may:

• accept or reject non-essential cookies through the cookie banner;

• customize their choices at any time;

• withdraw previously given consent without affecting the lawfulness of processing based on consent before withdrawal.

Disabling technical cookies may compromise the proper functioning of the website and any related e-commerce services.

8. Managing Cookies Through the Browser

Users may also manage or disable cookies through their browser settings.

The procedures vary depending on the browser used (e.g., Chrome, Firefox, Safari, Edge).

9. User Rights

Pursuant to Articles 15–22 of the GDPR, users have the right to:

• obtain access to their personal data;

• request rectification or erasure;

• obtain restriction of processing;

• object to processing;

• request data portability;

• lodge a complaint with the competent Data Protection Authority.

Requests may be sent to the contact details provided in Section 1.

10. Updates to This Cookie Policy

This Cookie Policy may be subject to changes or updates.
Users are encouraged to review it periodically.