Cookie policy

Information pursuant to Art. 13 of Regulation (EU) 2016/679 – COOKIE DelbonoDesign.com

version no. 1 of 07-05-2026

On this website, we use technologies to collect information useful for improving your online experience.
This policy refers to the use of cookies and how to manage them.

We reserve the right to amend this policy at any time. Any changes to this policy will take effect from the date of publication on the Website.

The Data Controller pays significant attention to the protection of your personal data and, in this document (“Cookie Policy”), provides information regarding the processing of your personal data carried out through cookies. Furthermore, the Data Controller may also process other personal data belonging to you and therefore invites you to also read the full privacy policy available on the website.

Data Controller

KEY5 DI DELBONO NICOLA with registered office at VIA CESARE CANTU’ 47, 25038 Rovato (Brescia), Italy; Phone: 0303375132; Email: info@key5.it; VAT / Tax ID: 02085470983.

Types of Data Processed

Cookies are text files sent by a website to the users' terminals (browsers) that allow the website operator to recognize individual visits made by users.

Cookies, usually present in user browsers in very large numbers and sometimes with long-term persistence, are used for different purposes: computer authentication, session monitoring, storing information on specific configurations concerning users accessing the server, etc.

While browsing a website, users may also receive cookies on their terminal sent from different websites or web servers (so-called “third parties”), on which certain elements may reside (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site they are visiting.

• Cookies: Third-party profiling cookies, Technical cookies, Third-party analytical cookies with anonymized IP;
• Behavioral data: Browsing logs.

Categories of Data Subjects

The processing activities carried out are directed at the following categories of data subjects: Website/application users.

Purposes of Processing and Legal Basis

1. CKS – Use of Profiling/Advertising Cookies

Use of Google AdWords and Facebook advertising platforms to advertise the products/services offered by the Data Controller on third-party websites.
Remarketing activities may consist of running advertising campaigns on the Google search results page, on a site within the Google Display Network (Google AdSense), or within the Facebook social network, targeted at website visitors who have granted consent for this purpose.
Third-party vendors, including Google and Facebook, use cookies to serve ads based on someone's past visits to our website. Naturally, all data collected will be used in accordance with our privacy policy, as well as the privacy policies of Google and Facebook.

Users may revoke their consent at any time using the tools provided by the Data Controller.

Users may also object generally to remarketing advertising campaigns via the following links:
for Google:
– https://support.google.com/ads/answer/2662922?hl=en
– https://adssettings.google.com/authenticated?hl=en#display_optout
for Facebook:
– https://www.facebook.com/ads/website_custom_audiences/

Legal Basis for Processing: Consent – Art. 6, para. 1, lit. a. GDPR

Purpose of Processing: 1) Use of profiling/advertising cookies to set up and manage advertising campaigns carried out on the Facebook platform and Google Display Network.

Cookies Used by the Site: Third-party profiling cookies

Cookies Used by the Site: First-party profiling cookies

Nature of Provision:

Optional – Failure to grant consent will make it impossible for the Data Controller to promote its products/services on third-party websites other than that of the Data Controller.

Personal Data Retention Period:

The operational period of the remarketing cookies used by this site is equal to 30 days for Google Ads and 30 days for the Facebook social network.

Processing Methods:

Processing is carried out mainly using computer systems.

2. CKS – Use of cookies necessary for statistical analysis and technical cookies for site operation

We use, without your consent, cookies necessary for statistical analysis and technical cookies for the operation of the site.

Legal Basis for Processing: Contract Execution – Art. 6, para. 1, lit. b. GDPR

Purpose of Processing: 1) Use of Technical and Session Technical Cookies to ensure the proper functioning of the site/application, as well as to guarantee the provision of services offered by the Data Controller requested by the contracting party or user (cf. Art. 122, paragraph 1 of the Italian Privacy Code); 2) Use of Statistical Technical Cookies with anonymized IP to produce aggregate statistics regarding the use of the site/application by the user; 3) Management of the technical cookie regulating the display of the Cookie Banner as well as recording the consents expressed.

Cookies Used by the Site: First-party analytical cookies

Cookies Used by the Site: Necessary, Session Technical Cookies

Nature of Provision:

Mandatory – Technical cookies are necessary for the website to function. Blocking cookies will make it impossible for the user to use the services of the website/application.

Personal Data Retention Period:

See the type of each cookie used.

Processing Methods:

Processing is carried out mainly using computer systems.

3. GA4 – Statistical processing of visitors using Google Analytics 4 (GA4)

The data processed by the Data Controller refers to the statistical processing of visits made to a specific website or mobile application through the use of Google Analytics 4 (GA4), which does not log or store IP addresses.

Legal Basis for Processing: Contract Execution – Art. 6, para. 1, lit. b. GDPR

Purpose of Processing: 1) The processing aims to collect and process personal data of the website and/or mobile application user in order to conduct statistical evaluations via Google Analytics 4 (GA4).

Cookies Used by the Site: First-party analytical cookies

Cookies Used by the Site: Necessary, Session Technical Cookies

Nature of Provision:

Mandatory – The provision of personal data is necessary to render services through the Data Controller's website.
Statistical processing is strictly related to technical cookies used to record user visits. Blocking cookies will result in the inability to use the services of the website/application.

Personal Data Retention Period:

Data collected for statistical evaluations are retained for 14 months and deleted after that period from the collection date.

Processing Methods:

Processing is carried out using computer tools: during data collection, Google Analytics 4 does not log or store IP addresses.

When Analytics collects measurement data, all IP lookups are performed on servers located within the EU before forwarding traffic to Analytics servers for processing.
Analytics deletes any IP addresses collected from EU users before recording this data via domains and servers located within the EU.
Analytics provides approximate geographic location data by deriving the following metadata from IP addresses: city (plus latitude and longitude derived from the city), continent, country, region, subcontinent (and ID-based equivalents).

Additionally, Analytics provides controls to:
– disable Google Signals data collection by region;
– disable granular location and device data collection by region.

Google Analytics uses regional data centers to ensure measurement data for web and mobile app users are sent to Google Analytics as quickly and securely as possible.
When Analytics establishes a connection with the nearest available Google data collection center, measurement data is transmitted to Analytics via an encrypted HTTPS connection. At collection centers, data is further encrypted before being routed to Analytics processing servers and made available in the Analytics platform.

IP addresses are used to determine the optimal local data center.
In Google Analytics 4, IP addresses are used at the time of collection to determine location information (country, city, latitude, and longitude of the city) and then deleted before data is logged in any data center or server.
Regional data collection improves website and mobile app performance by minimizing the distance and total time required to transmit data via a secure connection to Google data centers.
Regional data collection and Google data center infrastructure also enable redundancy so that, in the unlikely event a local data center becomes unavailable, another in that region can continue providing full service and supporting users.

The Data Controller has excluded user profiling functions and personalized ad functions from GA4 information collection; furthermore, the Controller does not cross-reference data between Analytics statistical calculations and subscribers to services offered by the website.

Data Transfer Outside the EU

Personal data is also processed outside the European Union in: Countries outside the EEA.
Safeguard conditions for the transfer are: Standard Contractual Clauses and ad hoc contractual clauses (Art. 46 GDPR).
To obtain a copy of the safeguard conditions or details on where they are available, a request can be sent to the Data Controller's contact addresses.

Data Recipients

• Data Processor: Cloud Services.

How to Manage Cookies

In any case, the Data Controller informs you that you can prevent the installation of any type of cookie through your browser settings.

However, should you choose to delete or reject session and security cookies, the Data Controller will not be able, for technical, security, and/or fraud prevention reasons, to provide the services available on the website.

We also inform you that it is always possible to delete cookies installed on your device via your browser settings.

To check how to prevent the installation of cookies or delete cookies already on your device, the Data Controller invites you to review the following instructions according to the browser you use.

Chrome

1. Open Chrome on your computer.
2. Click More, then Settings at the top right.
3. Scroll down and at the bottom click Advanced.
4. Click Content settings under the "Privacy and security" section.
5. Click Cookies.
6. From here you can:
   • Turn on cookies: turn on the toggle next to "Blocked".
   • Turn off cookies: turn off Allow sites to save and read cookie data.

For more information, visit https://support.google.com/accounts/answer/61416?hl=en

Mozilla Firefox

1. Open the Mozilla Firefox browser.
2. Click on the menu in the browser toolbar next to the URL input bar.
3. Select Options.
4. Select the Privacy & Security panel.
5. Go to the History section.
6. Under History settings: select "Use custom settings for history".
7. To enable cookies, check "Accept cookies from websites"; to disable them, uncheck the option.

For more information, visit https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Internet Explorer

1. In Internet Explorer, select Tools and then Internet Options.
2. Select the Privacy tab, under Settings select Advanced and choose whether you want to allow, block, or be prompted for first-party or third-party cookies.

For more information, visit
https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

Safari 6

1. Open the Safari browser.
2. Click Safari, select Preferences, and click Privacy.
3. In the Block Cookies section, specify how Safari should accept cookies from websites.
4. To view which sites have stored cookies, click Details.

For more information, visit
https://support.apple.com/en-us/guide/safari/sfri11471/mac

Safari iOS (Mobile Devices)

To choose to block cookies on Safari, select Settings > Safari > Block All Cookies.

For more information, visit https://support.apple.com/en-us/HT201265

Opera

1. Open the Opera browser.
2. Click Preferences, then Advanced, and finally Cookies.
3. Select one of the following options:

• Accept all cookies
• Accept cookies only from the site I visit: third-party cookies and those sent from a domain other than the one being visited will be rejected
• Never accept cookies: no cookies will ever be saved.

For more information, visit https://blogs.opera.com/news/2015/08/how-to-manage-cookies-in-opera/

For further information on how to manage or disable third-party cookies, you can visit www.youronlinechoices.com

Users may revoke consent at any time through the tools made available by the Data Controller.

Data Subject Rights – Complaint to the Supervisory Authority

In relation to the processing described in this Policy, as a data subject, under the conditions provided by GDPR, you may exercise the rights set forth in Articles 15 to 22 of the GDPR, specifically the following rights:

• right of access: right to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to your personal data;
• right to rectification: right to obtain without undue delay the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data;
• right to erasure (right to be forgotten): right to obtain without undue delay the erasure of personal data concerning you. The right to erasure does not apply to the extent processing is necessary for compliance with a legal obligation, for the performance of a task carried out in the public interest, or for the establishment, exercise, or defense of legal claims;
• right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing when: a) the accuracy of personal data is contested by the data subject; b) the processing is unlawful and the data subject opposes erasure and requests restriction instead; c) personal data is required by the data subject for legal claims; d) the data subject has objected to processing pending verification whether legitimate grounds of the controller override those of the data subject;
• right to data portability: right to receive, in a structured, commonly used, and machine-readable format, personal data concerning you and transmit those data to another controller;
• right to object: right to object to processing of personal data concerning you on grounds relating to your particular situation, and in any case to the use of your data for marketing purposes.

Where processing is based on consent, you may withdraw it (withdrawal of consent). You may also withdraw consent given on any occasion as easily as it was provided, without affecting the lawfulness of processing based on consent prior to its withdrawal.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, we may adopt an automated decision if necessary for entering into or performing a contract with us, if authorized by Italian or EU law, or if you have given consent.

In any case, you have the option to contest the decision, express your views, and request human intervention to review it.

You may lodge a complaint at any time with the Data Protection Supervisory Authority: http://www.garanteprivacy.it.

The above rights may be exercised against the Data Controller by contacting the addresses provided above.