Cookie Policy
EXTENDED COOKIE POLICY
Last updated: 2 September 2026
This policy fully replaces the previous version dated 01/11/2018 and complies with the Italian Data Protection Authority (Garante) Guidelines on Cookies and other tracking tools of 10 June 2021 (Official Gazette No. 163 of 9 July 2021, effective from 9 January 2022).
1. Data Controller
Erboristeria Verdi Rimedi
Registered office: via Pleione 26, 30028 Bibione (VE), Italy
R.E.A.: 316179 VE — Venice Chamber of Commerce
VAT / Tax ID: IT03491180273
Email: info@verdirimedi.it
Website: www.verdirimedi.it
The Data Controller is solely responsible for first-party cookies installed directly on the Website. For third-party cookies, please refer to the relevant privacy policies listed in the tables below.
2. What are cookies
Cookies are small text files that websites send to the user's device (computer, smartphone, tablet), where they are stored and retransmitted to the same websites on subsequent visits.
Cookies are classified by:
- Who installs them: first-party cookies (set by the website operator) and third-party cookies (set by other parties).
- Purpose: technical cookies (necessary for website functionality), analytics cookies (for usage statistics) and profiling cookies (for tracking user preferences and delivering targeted advertising).
- Duration: session cookies (deleted when the browser is closed) and persistent cookies (remain until expiry or manual deletion).
3. Types of cookies used on this Website
- Technical cookies (first-party) — necessary for the Website to function. No user consent required. Legal basis: legitimate interest of the Data Controller (Art. 6.1.f GDPR).
- Analytics cookies (third-party — Google Analytics) — used to collect statistical information about Website usage. As they are not anonymised and enable cross-site tracking, prior consent is required. Legal basis: consent (Art. 6.1.a GDPR).
- Profiling/marketing cookies (third-party — Meta/Facebook) — used to track browsing activity and display personalised advertising. Prior consent is required. Legal basis: consent (Art. 6.1.a GDPR).
4. Technical cookies (no consent required)
These cookies are strictly necessary for the Website to function and cannot be disabled.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
PHPSESSID | verdirimedi.it | Maintains the user session (authentication, shopping cart) | Session | 1st party |
language | verdirimedi.it | Stores the selected language | 30 days | 1st party |
currency | verdirimedi.it | Stores the selected currency | 30 days | 1st party |
5. Analytics cookies (consent required)
These cookies are installed only after obtaining the user's explicit consent via the cookie banner.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_ga | Google LLC | Uniquely identifies users for Google Analytics statistics | 2 years | 3rd party |
_gid | Google LLC | Distinguishes users within the last 24 hours | 24 hours | 3rd party |
_ga_LY9JDN3DHM | Google LLC | Maintains session state for Google Analytics 4 | 2 years | 3rd party |
_gat | Google LLC | Throttles request rate to Google Analytics | 1 minute | 3rd party |
Google Privacy Policy: policies.google.com/privacy — Opt-out: tools.google.com/dlpage/gaoptout
6. Profiling and marketing cookies (consent required)
These cookies are installed only after obtaining the user's explicit consent via the cookie banner. They enable cross-site tracking to build interest profiles and deliver personalised advertising.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_fbp | Meta Platforms, Inc. | Tracks visits across websites for Facebook/Instagram advertising | 3 months | 3rd party |
fr | Meta Platforms, Inc. | Uniquely identifies the user for Facebook ad targeting | 3 months | 3rd party |
The Website also loads the connect.facebook.net script (Meta SDK), which may set additional cookies. This script is also activated only after consent.
Meta Privacy Policy: facebook.com/privacy/policy — Ad Preferences: facebook.com/adpreferences
7. How consent is collected
On the first visit to the Website, a cookie banner is displayed, allowing the user to:
- Accept all cookies — by clicking the “Accept all” button.
- Reject all non-technical cookies — by clicking the “Reject all” button. Both buttons have equal visual prominence.
- Customise preferences — by clicking “Customise” to choose which cookie categories to accept or reject.
No analytics or profiling cookies are installed before the user has given consent.
Consent is recorded via a technical cookie that stores the user's preferences for a maximum period of 6 months, after which the banner is displayed again.
In accordance with the Italian Data Protection Authority Guidelines of 10 June 2021:
- Scrolling the page does not constitute consent.
- Continuing to browse without interacting with the banner does not constitute consent.
- Closing the banner (e.g. the × button) does not constitute consent and is equivalent to rejecting non-technical cookies.
- A “cookie wall” (making website access conditional on cookie acceptance) is not used.
8. How to withdraw consent
The user may withdraw or change their consent at any time, as easily as it was given, through:
- The “Cookie Preferences” icon/link in the footer of every page, which reopens the preference management panel.
- Browser settings (see section 9).
Withdrawing consent does not affect the lawfulness of processing based on consent given prior to withdrawal (Art. 7.3 GDPR).
9. Managing cookies via browser
In addition to the Website's preference panel, users can manage cookies through their browser settings:
- Google Chrome: support.google.com/chrome/answer/95647
- Mozilla Firefox: support.mozilla.org - Cookies
- Safari: support.apple.com/guide/safari
- Microsoft Edge: support.microsoft.com - delete cookies in Edge
For behavioural advertising cookies: www.youronlinechoices.com.
Please note: disabling technical cookies may impair the Website's functionality.
10. Data transfers outside the EU
The third-party cookies listed above (Google Analytics, Meta/Facebook) may involve the transfer of personal data to the United States of America.
Such transfers take place under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023), as Google LLC and Meta Platforms, Inc. are certified under that framework.
11. Data subject rights
In relation to processing carried out through first-party cookies, users may exercise the rights provided for in Articles 15–22 of the GDPR:
- Right of access (Art. 15) — obtain confirmation and information about ongoing processing.
- Right to rectification (Art. 16) — obtain the correction of inaccurate data.
- Right to erasure (Art. 17) — obtain the deletion of data.
- Right to restriction (Art. 18) — obtain the restriction of processing.
- Right to data portability (Art. 20) — receive data in a structured format.
- Right to object (Art. 21) — object to processing.
- Right to lodge a complaint — with the Italian Data Protection Authority (Garante).
To exercise your rights, please write to: info@verdirimedi.it.
For third-party cookies, please contact the respective data controllers (sections 5 and 6).
For more information: Privacy Policy.
12. Legal references
- Regulation (EU) 2016/679 (GDPR)
- Italian Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018
- Art. 122 of Legislative Decree 196/2003 (Cookies and tracking tools)
- Italian Data Protection Authority Guidelines on Cookies of 10 June 2021 (Official Gazette No. 163 of 9 July 2021, effective from 9 January 2022)
- Directive 2002/58/EC (ePrivacy Directive)