Cookies policy

Cookies policy provided pursuant to art. 13 of Regulation (EU) no. 2016/679

[https://abrakadabraitaly.com/]

I. Why is this information provided to you?

Because ABK Experience s.r.l. intends to process some of your personal data through a series of cookies (on the website ‘https://abrakadabraitaly.com/’) for the purposes and according to the methods described below, and the regulation requires you to be informed in advance and adequately, as well as protected through initial interaction with a cookie banner. This is distinct from the content of the individual privacy policies linked to each of the aforementioned individual forms, and from the Personal data protection policy, which you can find immediately next to this policy.

II. By whom is this information provided to you?

The data controller is (according to the regulation) the subject who has independently decided both these purposes and these methods, controlling the website in question, and the regulation requires you to know who they are and, above all, how they can be contacted.

In this case, it will be ABK Experience s.r.l., a limited company with VAT number and tax code no. 04783490404, registered with the Business Register under no. RN-440772, located in via Monte Rosa, 11 - Riccione (RN), 47838, and reachable via the company e-mail contact ‘compliance@abrakadabraitaly.com’.

III. What are the repeatedly mentioned purposes of the processing?

The primary task of the data controller is (according to the regulation) to declare what objectives they intend to achieve through the processing of your personal data, depending on whether navigation cookies ('cart_currency', 'cf_clearance' and 'localization'), functional cookies ('CookieConsent'), analytics cookies ('_ga', '_ga_#', '_shopify_analytics', '_shopify_essential', '_shopify_s' and '_shopify_y') and profiling cookies ('_fbp', '_gcl_au', '_ttp' and 'ttcsid') are injected into your browser.

Regarding navigation cookies 'cart_currency', 'cf_clearance' and 'localization', the first [1] purpose [main] is to protect the general usability of its website [legitimate interest]. This cookie allows the data controller to ensure the general functioning of its website.

Regarding the functional cookie ‘CookieConsent’, the first [1] purpose [main] is to protect the specific usability of its website [legitimate interest]. This cookie is your most valuable ally, as it will store your decisions - derived from your interaction with the cookie banner - regarding the other three categories of cookies.

Regarding the analytics cookies ‘_ga’, ‘_ga_#’, ‘_shopify_analytics’, ‘_shopify_essential’, ‘_shopify_s’ and ‘_shopify_y’, the first [1] purpose [main] is to analyze the general use of its website [legitimate interest]. This cookie allows the data controller to make the general management of its website more efficient by generating collective statistics.

Regarding the profiling cookies '_fbp', '_gcl_au', '_ttp' and 'ttcsid', the first [1] purpose [main] is to allow the analysis of the specific use of its website, so as to allow it to guarantee you support in viewing content adapted to your needs, once your free and unequivocal consent has been obtained. This cookie allows the data controller to make the specific management (to your benefit) of its website more efficient, by generating individual statistics, but you can deny your consent through a specific interaction with the cookies banner.

Regardless of the type of cookies injected, the second [2] purpose [ancillary] is to comply with the personal data protection regulations, by conforming to one or more relevant legal obligations. Please read section (no. IV.c.) on your rights carefully to understand what the data controller will be required to do.

Regardless of the type of cookies injected, the third [3] purpose [ancillary] is to eventually protect - although it is hoped that this will not be necessary - its economic interests in out-of-court and/or judicial proceedings [legitimate interest]. Don't worry, it is only the legislator who imposes such a clarification on us...

IV.a. Who will help pursue the purposes of the processing?

The second task of the data controller is (according to the regulation) to declare what methods they intend to adopt for the processing of your personal data: here, in particular, who will have access to your personal data. Please note that a service provider in this context is not a simple software reseller, but the entity that hosts your personal data involved in the use of the same software on its servers.

Internally, regardless of the type of cookies injected, concerning the first [1], second [2] and third [3] purposes, only the sole director (general management area) will be involved.

Externally, limited to the navigation cookies 'cart_currency', 'cf_clearance' and 'localization', regarding the first [1] purpose, only the corporate website hosting service provider (A), authorized to operate as data processor, will be involved.

Externally, limited to the navigation cookies 'cart_currency', 'cf_clearance' and 'localization' and the analytics cookies '_ga' and '_ga_#', regarding the second [2] purpose, the corporate website hosting service provider (A), - possibly - the corporate email hosting service provider (B), - possibly - the secretarial - commercial and technical, compliance, commercial and technical assistance service provider (C), - possibly - the certified corporate email hosting service provider (D) and - possibly - the specifically selected lawyer(s) (E) will be involved, all authorized to operate as data processors, as well as - possibly - the specifically selected lawyer(s) (I), acting as independent data controller(s).

Externally, regardless of the type of cookies injected, regarding the third [3] purpose, - possibly - the corporate email hosting service provider (A), - possibly - the secretarial - commercial and technical, compliance, commercial and technical assistance service provider (B), - possibly - the certified corporate email hosting service provider (C) and - possibly - the specifically selected lawyer(s) (D) will be involved, all authorized to operate as data processors, as well as - possibly - the specifically selected lawyer(s) (I), acting as independent data controller(s).

Externally, limited to the functional cookie 'CookieConsent', regarding the first [1] purpose, the corporate website hosting service provider (A) and the service provider ensuring the specific usability of the corporate website (B), authorized to operate as data processor, will be involved.

Externally, limited to the functional cookie ‘CookieConsent’, for the second [2] purpose, the corporate website hosting service provider (A), the service provider guaranteeing the specific usability of the corporate website (B), - possibly - the corporate email hosting service provider (C), - possibly - the secretarial - commercial and technical, compliance, commercial and technical assistance service provider (D), - possibly - the certified corporate email hosting service provider (E) and - possibly - the specially selected lawyer(s) (F) will be involved, all authorized to operate as data processors, as well as - possibly - the specially selected lawyer(s) (I), acting as independent data controller(s).

Externally, limited to the analytics cookies '_ga' and '_ga_#', for the first [1] purpose, the corporate website hosting service provider (A) and the corporate website analytics service provider I (B) will be involved, all authorized to operate as data processors.

Externally, limited to the analytics cookies ‘_shopify_analytics’, ‘_shopify_essential’, ‘_shopify_s’ and ‘_shopify_y’, for the first [1] purpose, the corporate website hosting service provider (A) and the corporate website analytics service provider II (B) will be involved, all authorized to operate as data processors.

Externally, limited to the analytics cookies ‘_shopify_analytics’, ‘_shopify_essential’, ‘_shopify_s’ and ‘_shopify_y’, for the second [2] purpose, the corporate website hosting service provider (A), the corporate website analytics service provider II (B), - possibly - the corporate email hosting service provider (C), - possibly - the secretarial - commercial and technical, compliance, commercial and technical assistance service provider (D), - possibly - the certified corporate email hosting service provider (E) and - possibly - the specially selected lawyer(s) (F) will be involved, all authorized to operate as data processors, as well as - possibly - the specially selected lawyer(s) (I), acting as independent data controller(s).

Externally, limited to the profiling cookie '_fbp', for the first [1] purpose, the corporate website hosting service provider (A), the corporate website profiling service provider I (B) and the commercial - communication assistance service provider (C) will be involved, all authorized to operate as data processors.

Externally, limited to the profiling cookie '_gcl_au', for the first [1] purpose, the corporate website hosting service provider (A), the corporate website profiling service provider II (B) and the commercial - communication assistance service provider (C) will be involved, all authorized to operate as data processors.

Externally, limited to the profiling cookies '_ttp' and 'ttcsid', for the first [1] purpose, the corporate website hosting service provider (A), the corporate website profiling service provider III (B) and the commercial - communication assistance service provider (C) will be involved, all authorized to operate as data processors.

Externally, limited to the profiling cookie '_fbp', for the second [2] purpose, the corporate website hosting service provider (A), the corporate website profiling service provider I (B), the commercial - communication assistance service provider (C), - possibly - the secretarial - commercial and technical, compliance, commercial and technical assistance service provider (D), - possibly - the corporate email hosting service provider (E), - possibly - the certified corporate email hosting service provider (F) and - possibly - the specially selected lawyer(s) (G) will be involved, all authorized to operate as data processors, as well as - possibly - the specially selected lawyer(s) (I), acting as independent data controller(s).

Externally, limited to the profiling cookie '_gcl_au', for the second [2] purpose, the corporate website hosting service provider (A), the corporate website profiling service provider II (B), the commercial - communication assistance service provider (C), - possibly - the secretarial - commercial and technical, compliance, commercial and technical assistance service provider (D), - possibly - the corporate email hosting service provider (E), - possibly - the certified corporate email hosting service provider (F) and - possibly - the specially selected lawyer(s) (G) will be involved, all authorized to operate as data processors, as well as - possibly - the specially selected lawyer(s) (I), acting as independent data controller(s).

Externally, limited to the profiling cookies '_ttp' and 'ttcsid', for the second [2] purpose, the corporate website hosting service provider (A), the corporate website profiling service provider III (B), the commercial - communication assistance service provider (C), - possibly - the secretarial - commercial and technical, compliance, commercial and technical assistance service provider (D), - possibly - the corporate email hosting service provider (E), - possibly - the certified corporate email hosting service provider (F) and - possibly - the specially selected lawyer(s) (G) will be involved, all authorized to operate as data processors, as well as - possibly - the specially selected lawyer(s) (I), acting as independent data controller(s).

Please note that the corporate website hosting service provider, regardless of the type of cookies injected, for the pursuit of the first [1] and second [2] purposes, will - if operational needs arise - transfer your personal data to Canada (CA) and - possibly - to one or more other non-EU countries, which can still be classified as third countries, adopting as adequate safeguards the adequacy decisions regarding the individual relevant national legal systems concerning personal data protection, pursuant to art. 45, par. 1 of the GDPR and/or the standard contractual clauses for the transfer of personal data referred to in Commission Implementing Decision (EU) 2021/914, pursuant to art. 46, par. 2, lit. c) of the GDPR, as declared at ‘https://www.cloudflare.com/it-it/cloudflare-customer-dpa/’ (section “6. Data transfers from the EEA, Switzerland, and the UK”), unfortunately not currently available in Italian.

Please also note that the corporate website analytics service provider I, limited to the analytics cookies ‘_ga’ and ‘_ga_#’, for the pursuit of the first [1] purpose, will - if operational needs arise - transfer your personal data to one or more non-EU countries, which can be classified as third countries, but will then adopt as adequate safeguards the relevant adequacy decisions and/or the standard contractual clauses for the transfer of personal data referred to in Commission Implementing Decision (EU) 2021/914, as declared at ‘https://business.safety.google/adsprocessorterms/’ (annex “Annex 3: Additional terms relating to the applicable Data Protection Regulations” - section “7. Data transfers”).

Please also note that the corporate website analytics service provider II, limited to the analytics cookies ‘_shopify_analytics’, ‘_shopify_essential’, ‘_shopify_s’ and ‘_shopify_y’, for the pursuit of the first [1] and second [2] purposes, will - if operational needs arise - transfer your personal data to one or more non-EU countries, which can be classified as third countries, but will then adopt as adequate safeguards the relevant adequacy decisions and/or the standard contractual clauses for the transfer of personal data referred to in Commission Implementing Decision (EU) 2021/914, as declared at ‘https://www.shopify.com/it/legal/atd’ (appendix “APPENDIX C: GENERAL DATA PROTECTION REGULATION, UK GENERAL DATA PROTECTION REGULATION AND SWITZERLAND DATA PROCESSING APPENDIX” - section “8. International transfers”).

Please also note that the corporate website profiling service provider I, limited to the profiling cookie '_fbp', for the pursuit of the first [1] and second [2] purposes, will - if operational needs arise - transfer your personal data to the United States of America (US) and - possibly - to one or more other non-EU countries, which can still be classified as third countries, but will then adopt as adequate safeguards the relevant adequacy decisions and/or the standard contractual clauses for the transfer of personal data referred to in Commission Implementing Decision (EU) 2021/914, as declared at ‘https://www.facebook.com/legal/terms/dataprocessing’ (appendix “https://www.facebook.com/legal/EU_data_transfer_addendum/update”).

Please also note that the corporate website profiling service provider II, limited to the profiling cookie '_gcl_au', for the pursuit of the first [1] and second [2] purposes, will - if operational needs arise - transfer your personal data to one or more non-EU countries, which can be classified as third countries, but will then adopt as adequate safeguards the relevant adequacy decisions and/or the standard contractual clauses for the transfer of personal data referred to in Commission Implementing Decision (EU) 2021/914, as declared at ‘https://business.safety.google/adsprocessorterms/’ (annex “Annex 3: Additional terms relating to the applicable Data Protection Regulations” - section “7. Data transfers”).

Finally, please note that the corporate website profiling service provider III, limited to the profiling cookies '_ttp' and 'ttcsid', for the pursuit of the first [1] and second [2] purposes, will - if operational needs arise - transfer your personal data to one or more non-EU countries, which can be classified as third countries, but will then adopt as adequate safeguards the relevant adequacy decisions and/or the standard contractual clauses for the transfer of personal data referred to in Commission Implementing Decision (EU) 2021/914, as declared at ‘https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms’ (appendix “PART B: EUROPEAN ECONOMIC AREA (EEA), SWITZERLAND AND THE UNITED KINGDOM (UK)” - section “2 Data Processing Terms”).

IV.b. How long will it take to pursue the processing purposes?

Limited to the navigation cookie 'cart_currency', for the first [1], second [2] and third [3] purposes, the necessary personal data will be retained for 14 hours from the start of your browsing session.

Limited to the navigation cookie ‘cf_clearance’ and the analytics cookie ‘_shopify_s’, for the first [1], second [2] and third [3] purposes, the necessary personal data will be retained for 30 minutes (0.5 hours) from the start of your browsing session.

Limited to the navigation cookie ‘localization’, for the first [1], second [2] and third [3] purposes, the necessary personal data will be retained for 365 days (1 year) from the start of your browsing session.

Limited to the functional cookie ‘CookieConsent’, for the first [1], second [2] and third [3] purposes, the necessary personal data will be retained for 365 days (1 year) from your interaction with the cookies banner.

Limited to the analytics cookies ‘_ga’ and ‘_ga_#’, for the first [1] purpose, the necessary personal data will be retained for 730 days (2 years) from the start of your browsing session.

Limited to the analytics cookies ‘_ga’ and ‘_ga_#’, for the second [2] purpose, the necessary personal data will be retained for 365 days (1 year) from the start of your browsing session, but subsequently - in a separate and secure location, to ensure the pursuit of the third [3] purpose - for an additional 10 years thereafter.

Limited to the analytics cookies ‘_ga’ and ‘_ga_#’, for the third [3] purpose, the necessary personal data will be retained for 11 years from the start of your browsing session.

Limited to the analytics cookies ‘_shopify_analytics’, ‘_shopify_essential’ and ‘_shopify_y’, for the first [1] purpose, the necessary personal data will be retained for 365 days (1 year) from the start of your browsing session.

Limited to the analytics cookies ‘_shopify_analytics’, ‘_shopify_essential’ and ‘_shopify_y’, for the second [2] purpose, the necessary personal data will be retained for 365 days (1 year) from the start of your browsing session, but subsequently - in a separate and secure location, to ensure the pursuit of the third [3] purpose - for an additional 10 years thereafter.

Limited to the analytics cookies ‘_shopify_analytics’, ‘_shopify_essential’ and ‘_shopify_y’, for the third [3] purpose, the necessary personal data will be retained for 11 years from the start of your browsing session.

Limited to the profiling cookies '_fbs', '_gcl_au', '_ttp' and 'ttcsid', for the first [1] purpose, the necessary personal data will be retained for 90 days (3 months) from your interaction with the cookies banner.

Limited to the profiling cookies '_fbs', '_gcl_au', '_ttp' and 'ttcsid', for the second [2] purpose, the necessary personal data will be retained for 90 days (3 months) from the start of your browsing session, but subsequently - in a separate and secure location, to ensure the pursuit of the third [3] purpose - for an additional 10 years thereafter.

Limited to the profiling cookies '_fbs', '_gcl_au', '_ttp' and 'ttcsid', for the third [3] purpose, the necessary personal data will be retained for 10 years and 3 months from the start of your browsing session.

IV.c. What rights can you exercise before, during and after processing?

Limited to the profiling cookies '_fbs', '_gcl_au', '_ttp' and 'ttcsid', only for the first [1] purpose, you can revoke your consent at any time: this can be done either by interacting again with the cookies banner or by writing to 'compliance@abrakadabraitaly.com'.

Furthermore, regardless of the type of cookies injected, concerning the first [1], second [2] and third [3] purposes, you may access your processed personal data, obtaining information about the processing similar to what you find in this policy, as well as a copy thereof, rectify your processed personal data, for example if you have changed your IP address, have your processed personal data erased, for example if you believe the processing is unlawful, have the processing of your processed personal data restricted, instead of having them erased, for example if you believe the processing is unlawful: this can also be done by writing to ‘compliance@abrakadabraitaly.com’.

Furthermore, limited to the profiling cookies '_fbs', '_gcl_au', '_ttp' and 'ttcsid', for the first [1] purpose, you can obtain the portability of your processed personal data: this can also be done by writing to 'compliance@abrakadabraitaly.com'.

Furthermore, limited to the analytics cookies ‘_ga’, ‘_ga_#’, ‘_shopify_analytics’, ‘_shopify_essential’, ‘_shopify_s’ and ‘_shopify_y’, for the first [1] and third [3] purposes, you may object to the processing of your processed personal data: this can be done either by interacting again with the cookies banner or by writing to ‘compliance@abrakadabraitaly.com’.

However, finally, regardless of the type of cookies injected, concerning the first [1], second [2] and third [3] purposes, you may lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali) at ‘https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524’ or with the national supervisory authority operating within the territory of the EU Member State where you reside and/or work, in any case qualified as the competent supervisory authority: this will be very useful if at any time you consider the processing of your personal data to be unlawful.

IV.d. Is it mandatory to communicate your personal data to the data controller?

The second task of the data controller is (according to the regulation) to declare what methods they intend to adopt for the processing of your personal data: here, in particular, whether there is a pre-contractual or contractual and/or legal obligation that requires the data controller to collect your personal data.

Limited to navigation cookies, functional cookies and analytics cookies, for the first [1] purpose, there is no pre-contractual or contractual and/or legal obligation, and therefore the data controller acts only to satisfy its legitimate interest linked to this purpose, ensuring all necessary guarantees.

Furthermore, limited to profiling cookies, regarding the first [1] purpose, there is no pre-contractual or contractual and/or legal obligation, and therefore the data controller acts only to satisfy its need linked to this purpose, thanks to your prior consent.

Finally, regardless of the type of cookies injected, concerning the third [3] purpose, there is no pre-contractual or contractual and/or legal obligation, and therefore the data controller acts only to satisfy its legitimate interest linked to this purpose, ensuring all necessary guarantees.

Date: 12/01/2026

The legal representative of the data controller: Mr. Valerio MONTANARI

In addition to what has been explained so far, the data controller also wishes to inform you that you still have the right to define, at any time and independently, within a specific section of your browser, the management of cookies available on the website ‘https://abrakadabraitaly.com/’, pursuant to par. 8.1 of prov. (Italian Data Protection Authority) no. 231/2021 and par. 4.2 of prov. (Italian Data Protection Authority) no. 229/2014.

In particular, this right includes your ability both to systematically block the installation of one or more third-party cookies in your browser (although currently not available on the website in question) and to instantly delete one or more first-party and/or third-party cookies (although currently not available on the website in question) previously installed from your browser. In this regard, however, further information is available on the following web pages:

- Apple Safari -> ‘https://support.apple.com/it-it/guide/safari/sfri11471/mac’;

- Google Chrome -> ‘https://support.google.com/chrome/answer/95647?hl=it&p=cpn_cookies’;

- Microsoft Edge -> ‘https://support.microsoft.com/it-it/windows/gestire-i-cookie-in-microsoft-edge-visualizzare-consentire-bloccare-eliminare-e-usare-168dab11-0753-043d-7c16-ede5947fc64d’;

- Mozilla Firefox -> ‘https://support.mozilla.org/it/kb/Gestione%20dei%20cookie’;

- Opera [unfortunately not currently available in Italian] -> ‘https://help.opera.com/en/latest/web-preferences/#cookies’ (section “Manage cookies in pages”).

Date: 12/01/2026

The legal representative of the data controller: Mr. Valerio MONTANARI