Cookie Policy
Last updated: July 21, 2026
1. Data Controller
The Data Controller for personal data collected through cookies and other tracking tools on the website fim-merchandising.com is:
Stegip 4communication S.r.l.
Via degli Olmetti 36
00060 Formello (RM), Italy
VAT ID 11240771003
E-mail: info@fim-merchandising.com
2. Subject of the Cookie Policy
This Cookie Policy describes the use of cookies and any similar technologies on the website fim-merchandising.com
“Cookies” are small text files that visited websites send to the user's device and that can be read or updated during a subsequent visit.
The site may also use other tools with similar functions, such as pixels, tags, web beacons, identifiers in the browser's local memory, scripts, and other technologies that allow for the collection or storage of information on the user's device.
In this Cookie Policy, these technologies are collectively referred to as "cookies and other tracking tools."
3. First-party and third-party cookies
Cookies can be:
- first-party, when they are installed and managed directly by the domain visited by the user;
- third-party, when they are installed or managed by parties other than the Data Controller through features, services, applications, or content integrated into the site.
For third-party tools, the table in this Cookie Policy identifies, where applicable, the relevant provider and contains a link to their personal data processing policy.
4. Categories of cookies that can be used
4.1 Strictly necessary cookies
Strictly necessary cookies enable the site to function and provide the services explicitly requested by the user.
They can be used, for example, to:
- maintain the browsing session;
- manage the shopping cart and purchasing process;
- allow access to the account;
- ensure site security and prevent fraud;
- balance traffic and ensure service stability;
- store preferences expressed in the cookie banner.
These tools can be used without the user's consent, as they are necessary to provide the site or a requested service. Their use is, however, described in this policy.
4.2 Functionality and preference cookies
These cookies allow certain user choices to be remembered, such as language, country, currency, or other display settings.
Depending on the specific function performed and the technical configuration, these cookies may be necessary to provide a requested functionality or may only be activated after the user's consent. The applicable classification for each tool is indicated in the table in section 7.
4.3 Analytics cookies
Analytics cookies allow for the collection of statistical information on the use of the site, such as pages visited, traffic source, visit duration, browsing events, and any errors encountered.
Analytics tools can only be equated to technical cookies when they are configured and used in compliance with the conditions provided by applicable law, particularly through aggregated and minimized data and without combining information with other data or using it for further purposes.
When these conditions are not met, analytics cookies and other measurement tools are activated only after the user's consent.
4.4 Advertising, profiling, and remarketing cookies
These tools can be used to:
- analyze user interactions with the site;
- create or enrich profiles related to interests and behaviors;
- display personalized advertising communications;
- measure the effectiveness of advertising campaigns;
- carry out remarketing activities;
- link activities performed on the site with those performed on other sites, applications, or devices.
Advertising, profiling, and remarketing cookies are activated only after the user's consent.
4.5 Third-party content and functionality
The site may integrate content or functionality made available by third parties, such as videos, maps, social buttons, chats, support tools, or embedded content.
When these functionalities involve the installation of non-necessary cookies or the activation of tracking tools, they are blocked until the user's consent is obtained.
This Cookie Policy lists only the services actually present and detected on the site. Any references to Meta Pixel, Google Analytics, Google Ads, YouTube, LinkedIn, Klaviyo, Shopify Audiences or other services should only be included if the relative integration is actually active.
5. Legal basis for processing
The legal basis for the use of strictly necessary cookies is the need to transmit a communication over an electronic communication network or to provide a service explicitly requested by the user.
For analytics cookies not classifiable as technical cookies, for non-essential functionality cookies, for advertising, profiling, remarketing cookies, and for other tracking tools, the legal basis is the user's consent.
Failure to consent to non-essential tools does not prevent normal browsing and the use of essential functions of the site. However, it may make some optional features unavailable or prevent the display of content provided by third parties.
6. How consent is collected and managed
Upon first accessing the site, before the user makes a choice, only strictly necessary cookies and tools remain active.
The cookie banner allows the user to:
- accept all cookies and tracking tools;
- reject all non-essential tools;
- access the personalization area to choose individual categories or, when technically available, individual providers.
The "Accept all" and "Reject all" commands must be presented clearly, easily accessible, and with comparable prominence.
Closing the banner without giving consent maintains the default settings and does not activate cookies or tools other than those strictly necessary.
The selection made by the user applies only to the enabled categories. Simply using the "Save preferences" command does not imply generalized consent: only the tools corresponding to the user's choices are activated.
The choice is recorded by means of a strictly necessary cookie or another suitable technical system to document the preferences expressed.
The banner may be presented again when:
- the purposes of processing or the providers involved change significantly;
- it is no longer possible to verify the previously recorded choice, for example because the user has deleted cookies;
- at least six months have passed since the previous banner presentation;
- a new manifestation of choice is necessary based on applicable law.
7. List of cookies and tracking tools
| Cookie/tool | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| _shopify_y | Shopify | Collects statistical data on store usage | Analytics | 1 year |
| _shopify_s | Shopify | Identifies the combination of browser session and store for statistical purposes | Analytics | 30 minutes from last use |
| _fbp | Meta | Identifies the browser for advertising measurement, remarketing, and campaign analysis | Marketing | 90 days |
| _tracking_consent | Shopify | Stores user preferences regarding cookies and tracking | Necessary | 1 year |
The list includes cookies detected on the site as of the last update date. The presence, duration, and domain of cookies may vary due to changes in the platform, installed applications, or user preferences.
8. Modification and revocation of consent
Consent to cookies and other non-essential tools can be modified or revoked at any time via the “Cookie preferences” link in the footer of the website.
Revocation does not affect the lawfulness of processing carried out on the basis of consent prior to revocation.
After modifying preferences, the site stops activating tools that are no longer authorized. Some cookies already stored on the device may need to be deleted through browser settings, according to the instructions provided by the respective manufacturer.
Management through the browser is an additional tool and does not replace the ability to directly modify preferences using the link on the site.
Disabling or deleting strictly necessary cookies may compromise the proper functioning of the site, shopping cart, account, or purchasing process.
9. Data processed by cookies and tracking tools
Depending on the tools actually used and the preferences expressed by the user, information such as:
- IP address;
- online identifiers and device identifiers;
- information about the browser, operating system, and device;
- language, country, and technical settings;
- date and time of visit;
- pages viewed and navigation paths;
- referring page and exit page;
- interactions with products, content, and functionalities;
- items added to the cart;
- purchases, conversions, or other events, when applicable;
- consent preferences;
- statistical information on site usage.
The exact nature of the data processed depends on the individual tool and must be apparent from the table in section 7 and the policy of the relevant provider.
10. Recipients and providers
Data collected through cookies and tracking tools may be processed:
- by the Data Controller and authorized individuals;
- by technical providers who manage the e-commerce platform, hosting, security, and site maintenance;
- by analytics, advertising, communication, or support service providers actually used;
- by consultants and other data processors appointed pursuant to Article 28 of the GDPR;
- by entities operating as independent data controllers, where indicated in their respective policies;
- by competent authorities, in cases provided for by law.
Individual providers who use cookies or other tracking tools must be identified in the table in section 7.
11. Data transfers outside the European Economic Area
Some providers may process personal data in countries located outside the European Economic Area.
When an international data transfer occurs, it takes place in compliance with the conditions set out in the GDPR, based, as appropriate, on:
- an adequacy decision by the European Commission;
- standard contractual clauses;
- other appropriate safeguards provided by law;
- one of the applicable derogations in permitted cases.
For each affected provider, the table in section 7 must indicate any transfer, the countries involved or relevant information, and a link to the provider's privacy policy.
Further information on international transfers carried out within the framework of the site's services is available in the Privacy Policy.
12. Cookie duration and information retention
The duration of each cookie or tool is indicated in the table in section 7.
Session cookies are deleted when the browser is closed or the session ends, unless there are different technical configurations. Persistent cookies remain stored for the period indicated in the table or until they are deleted by the user.
Information related to expressed preferences and consent documentation may be retained for the period necessary to manage user choices, demonstrate compliance with regulations, and protect the Data Controller's rights.
13. Newsletter and promotional communications
Subscribing to the newsletter constitutes processing distinct from cookie management.
The choice regarding advertising or analytics cookies is not equivalent to subscribing to the newsletter, and consent to the newsletter does not automatically authorize the use of profiling cookies.
Clear information about the promotional purpose of the processing, a link to the Privacy Policy, and, when required, a specific, unchecked consent acquisition mechanism must be provided alongside the subscription form.
The user can withdraw consent to promotional communications at any time using the unsubscribe link contained in the received communications or by contacting the Data Controller.
14. Data subject rights
In the cases provided for by the GDPR, the data subject can exercise the following rights:
- obtain confirmation of the existence of personal data concerning them and access it;
- request the rectification of inaccurate data or the integration of incomplete data;
- request the erasure of data;
- request the restriction of processing;
- object to processing in the cases provided for;
- receive data in a structured format and transmit it to another controller, where applicable;
- withdraw consent at any time;
- lodge a complaint with the Data Protection Authority.
To exercise their rights or request information on the use of cookies, the data subject can contact the Data Controller at:
15. Coordination with the Privacy Policy
This Cookie Policy integrates the website's Privacy Policy, to which reference is made for further information regarding:
- the purposes and legal bases of other processing activities;
- the site's providers and partners;
- personalized advertising;
- any processing carried out across multiple sites or services;
- international transfers;
- retention periods;
- the exercise of data subject rights.
In case of changes to providers, purposes, or tracking tools, the Cookie Policy, Privacy Policy, banner, and consent management platform must be updated and kept consistent with each other.
16. Cookie Policy Updates
The Data Controller may update this Cookie Policy as a result of regulatory, technical, or organizational changes, or the installation, removal, or modification of applications and services.
The date of the last update is indicated at the beginning of the document. In the event of substantial changes, users may be asked to express their preferences again.