Privacy & Cookie Policy – Information on the processing of personal data

Version: May 2026

Pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data (hereinafter "GDPR"), the data controller informs about the processing of personal data carried out through this website (hereinafter also abbreviated as the "site") at the address www.fisico.it. This information concerns this website and not other websites that the user may consult by navigating the links on the site, for which reference should be made to the information provided by the other sites regarding their management of users' personal data.

Data Controller and Contact Details

Olmar and Mirta S.p.A.
Headquarters: Via Cocapana 9, 46026 Quistello (MN) Italy
E-mail: info@olmarandmirta.com
Phone: +39 0376 618905

---

Purposes of the Processing and Legal Basis

The personal data collected and processed through the website are used for the following purposes in accordance with the respective legal bases:

• Allowing the correct navigation of the site through technical navigation data or data collected by technical cookies. The legal basis is the legitimate interest of the data controller pursuant to Art. 6 par. 1 f) of the GDPR.
• Analyzing the use of the site through statistical processing of anonymous or aggregated data, including those collected via analytical cookies configured for the collection of anonymized data that do not directly identify the user. The legal basis is the legitimate interest of the data controller pursuant to Art. 6 par. 1 f) of the GDPR.
• Responding to requests for information by filling out forms and allowing the download of content; the legal basis is the execution of contractual agreements, pursuant to Art. 6 par. 1 b) of the GDPR.
• Registering the user account and administering their account (registration is mandatory to make purchases on the site). The legal basis is the execution of contractual agreements pursuant to Art. 6 par. 1 b) of the GDPR.
• Selling our products or services and ensuring the timely execution of obligations arising in the pre-contractual and contractual phase. The legal basis is the execution of contractual agreements pursuant to Art. 6 par. 1 b) of the GDPR.
• Fulfilling the obligations incumbent on the controller provided for by applicable Italian and EU laws, regulations, and/or rules; the legal basis is compliance with a legal obligation pursuant to Art. 6 par. 1 c) of the GDPR.

With the prior and specific consent of the data subject, which represents the legal basis for processing pursuant to Art. 6 par. 1 lit. a) of the GDPR, the data will be processed by the controller to profile the user according to their interests, choices, and preferences, in order to offer better and personalized services. Alternatively, according to the specifically given consent, they will be communicated to third parties for sending their commercial and promotional communications.

With the prior consent of the data subject, which represents the legal basis for processing pursuant to Art. 6 par. 1 lit. a) of the GDPR, transmitting profiling cookies for marketing and advertising purposes, as further specified in the Cookie Policy.

Technical Navigation Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of websites from which access or exit was made, information on the pages visited by users within the site, access time, internal path analysis, and other parameters relating to the user's operating system and IT environment. Such technical data are accessible to the controller in an aggregated and non-identifying manner and are used for the purpose of technical management of the services provided and anonymous statistical analysis of the traffic generated and the pages visited; in the event of computer attacks on the site, crimes, or offenses committed through the site, they may be used for investigation purposes and to ascertain responsibility. The data are kept for the time necessary to fulfill the specified purposes, except where it is necessary to keep the data to ascertain incidents, illicit acts, or crimes, or upon request from Law Enforcement or Authorities.

Data Provided for User Account Registration

The creation of a user account is mandatory to make purchases on the site via the e-commerce platform. Only common personal data, limited and necessary for the processing purposes, are required for registration: name, surname, email address, password, residential/domicile postal address also used for shipments. These will be used to register and administer the user's account, allow access to the reserved area of the site and view notices, manage the electronic shopping cart, view order history, manage any credit notes or purchase vouchers in favor of the user, and modify personal data or the shipping address. The data will be kept for the duration of the user's registration validity until a cancellation or withdrawal request by the user, who subsequently will no longer be able to access their reserved area.

Data Provided for Purchases and Shipments

Sales on the site are reserved for private customers, so-called final consumers of the products they purchase. For purchases made on the site, with the purposes of managing sales, fulfilling contractual and legislative obligations, shipping goods, and issuing legally required documents, the account registration data are used, including the buyer's personal and tax data which are mandatory by law; optionally, a telephone number may be provided to communicate with the customer regarding delivery. The data will be kept for the time required by the purposes and by applicable Italian or EU law.

Information relating to payment by credit card or other electronic payment circuit, or rather the user's data and the credit card or payment method used, will be processed directly by the banking platform for electronic payment transactions connected to our site, which will manage this information autonomously. Therefore, the customer is invited to read the information on the processing of their personal data provided directly by the platform of the payment method chosen by the customer where the payment is executed.

Consent for Data Communication to Third Parties

Subject to specific consent, the user's personal data will be communicated to selected third parties who are our commercial partners, who will use them to send email messages for commercial communications with informative, advertising, commercial, and promotional content about their products or services. The legal basis for the processing is the free, specific, and informed consent, pursuant to Art. 6 par. 1 a) of the GDPR. Consent may be revoked at any time when exercising one's rights, but the revocation will not affect the processing already carried out based on the previous consent.

Consent for Profiling

Subject to specific consent, the user's personal data will be processed for profiling activities based on purchases made and on the user's interests, choices, and preferences, in order to improve and personalize our offer of products and services. The legal basis for the processing is the free, specific, and informed consent given by the user, pursuant to Art. 6 par. 1 a) of the GDPR. Consent may be revoked at any time when exercising one's rights, but the revocation will not affect the processing already carried out based on the previous consent.

Links to Other Sites – Social Network Plugins

On the pages of the site there may be links to visit other third-party websites; the use of such features leads the user to interact with web services offered by third-party sites and implies the exchange of information with such sites; the visitor is redirected to the third-party site leaving our site and, therefore, the management of information is carried out autonomously by the third parties.

The site also incorporates plugins such as "social buttons" with the aim of allowing easy sharing of our site's content on your favorite social networks. To safeguard user privacy, these plugins are programmed so as not to set any cookies when accessing the page, but only when the user makes actual and voluntary use of the plugin, according to the settings of the social network. If the user browses the site while logged into their profile on the social network, they have already consented to the use of cookies conveyed through the social network. The collection and use of information obtained by third parties through the plugin are governed by the respective privacy policies of the social networks, to which please refer.

Cookies – Cookie Policy

Cookies are small files that are saved on the user's device while browsing the website; they serve the purpose of collecting information on the user's use of the site and can be retransmitted or reused during subsequent visits.

Cookies have different characteristics and are used for different purposes, both by the owner of the site being visited (so-called first-party cookies) and by other sites (so-called third-party cookies) if web tools provided by third parties are incorporated into the site. Cookies can be permanently stored on the device or have a variable duration (so-called persistent cookies), otherwise, they are temporary and are deleted when the browser is closed or have a limited duration (so-called session cookies). There are other technologies such as pixel tags, web bugs, web storage, and other similar files and technologies that can perform the same functions as cookies; in this Cookie Policy, we use the term "cookie" also for all these similar technologies.

For detailed and updated information on the cookies used on the site, please read the complete Cookie Policy:

Cookie Management

Upon accessing the site, there is a banner containing a short informative text and a link to this extended policy. The banner allows the visitor to manage the use of cookies and set their choice for optional profiling/tracking cookies; by default, only functional/technical cookies are enabled, which are necessary and cannot be disabled without losing site functionality. Consent to the use of set cookies is recorded with a "technical cookie" saved on the user's device.

Cookie management is also possible by changing browser settings through the following possible solutions, which are examples and others exist:

• Modifying the browser settings, which allow or deny the storage of cookies and usually also allow setting cookie rules so that "third-party" cookies are not accepted.
• Some also allow blocking cookies from certain third parties and not others, through a function that allows indicating from which domains to allow the sending of cookies.
• Through the so-called "do not track", which allows the user to signal to each visited site their desire to be tracked or not during navigation. However, this technical method is not standardized and there is no certainty that this functionality is implemented on all domains that place cookies on the site and for which, being third parties, the controller has no control.

t is possible to disable Google Analytics cookies by visiting the Google web page (Google GaOptOut) and downloading the add-on for the browser used.

Note: By choosing to block all cookies, the full functionality of the website may be compromised.

Processing and Retention Methods

Data will be processed using IT/electronic tools by personnel authorized and instructed by the controller, or also by designated third parties responsible for the relevant processing, always in compliance with the principles of lawfulness of processing and by adopting appropriate security measures to limit data access only to authorized subjects. The data will be kept for the time required by the processing purposes, subject to any mandatory legal timeframes.

The data will be communicated exclusively to authorized and designated subjects for the management of the site and our activities related to the site:

• Internal personnel acting under the authority of the controller.
• Hosting providers, website developers, other internet service providers for the website, professionals, consultants, or companies, for services functional to the management of our activities or for website administration.
• For purchases made on the site, data may be transmitted to transporters, couriers, postal services, shipping and logistics companies, and payment platforms for e-commerce, acting as independent data controllers.

Site users' data are not disseminated and are not transferred outside the European Economic Area. Cookie data will be communicated exclusively to authorized and designated subjects for the management of the site and our activities related to the site:

• Internal personnel acting under the authority of the controller.
• Website developer, other internet service providers for the website.

Data Transfer Outside the EU

Some data from third-party, analytical, or profiling cookies, deposited after the user's specific consent, may be transferred outside the EU to web service providers or suppliers located in the USA, considered an adequate country for the purposes of European legislation on the protection of personal data: these third parties provide guarantees of an adequate level of protection meeting regulatory requirements, with particular regard to security measures adopted pursuant to the GDPR.

Exercise of Data Subject's Rights

Subject to the limitations provided for by the legislation itself, the data subject may at any time contact the controller at the contact details indicated here to exercise the rights guaranteed by the legislation: Access to personal data (GDPR, Art. 15), Rectification (GDPR, Art. 16); Erasure (GDPR, Art. 17); Restriction of processing (GDPR, Art. 18); Objection to processing (GDPR, Art. 21); Data portability (GDPR, Art. 20). Revocation of consent, where provided: the revocation of consent does not affect the lawfulness of the processing based on consent given before the revocation (GDPR, Art. 7); Information on the automated process related to profiling (GDPR, Art. 22);

To exercise their rights, the data subject must contact the controller using the contact details indicated on this page.; The data subject may also lodge a complaint, within the terms and methods provided, with the Supervisory Authority; for further information, the User is invited to consult the Guarantor's website www.gpdp.it .

Updating of this Information

The possible entry into force of new sector regulations, as well as the constant review and updating of services to the user, could entail the need to change the methods of processing personal data through the site: it is possible that our policy will undergo changes over time, and we therefore invite the visitor to periodically consult this page.

Version: May 2026