1) COOKIE INFORMATION
The EU Regulation 2016/679 of April 27, 2016, on the protection of natural persons regarding the processing of personal data ("Regulation") and Legislative Decree 196/2003 as subsequently amended by Legislative Decree 101/2018 ("Privacy Code" and collectively with the Regulation, the "Privacy Legislation") applies to this policy. The Privacy Legislation requires that the processing of Personal Data respects the fundamental rights and freedoms of individuals, particularly their right to confidentiality and the protection of their personal data ("Personal Data").
Società per Azioni Esercizi Aeroportuali S.E.A. (the "Company"), as the Data Controller, provides you with the following information regarding the processing of your Personal Data through cookies installed on the website www.milanairports-shop.com (referred to as the "Website"). The Website uses its own and third-party technical cookies as well as third-party profiling cookies. Below, we provide the information required by the applicable legislation.
1. WHAT ARE COOKIES?
Cookies are small text strings sent to the user's terminal (usually the browser) by the sites they visit. These cookies are stored and then transmitted back to the same sites during the user's next visit.
During navigation, the user may also receive cookies from other websites or web servers ("Third Parties"), which may contain elements (e.g., images, maps, sounds, specific links to pages from other domains) embedded in the visited site.
Cookies can be categorized as follows:
Technical and analytical cookies that do not require consent.
Cookies requiring consent, such as analytical and advertising cookies or those improving user experience.
2. TECHNICAL AND ANALYTICAL COOKIES THAT DO NOT REQUIRE CONSENT
Technical cookies are used solely to "transmit a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service." They are not used for other purposes and are typically installed directly by the Company managing the Websites.
They can be divided into:
- Navigation or session cookies, which ensure the normal navigation and use of the Websites (for instance, enabling purchases or user authentication to access restricted areas);
- Analytics cookies, which are assimilated to technical cookies when used directly by the Company without involving Third Parties, to collect aggregated information on the number of users and how they visit the Website. Analytics cookies are also assimilated to technical cookies when provided by third parties and the Company has implemented specific precautions to ensure data is not collected in a non-aggregated form;
- Functionality cookies, which allow the user to navigate based on a series of selected criteria (e.g., language or selected products for purchase) to improve the service provided to the user.
For the installation of technical cookies — and those assimilated to them as described above — prior user consent is not required.
However, it remains mandatory to provide a Cookie Policy as per Privacy Regulations. If the Company uses only such devices, it may provide the Cookie Policy in the manner it deems most appropriate.
The technical and first-party and third-party analytical cookies used are:
JSESSIONID: session cookie created by the server to maintain the session.
BIGIPSESSION : session duration.
_GRECAPTCHA: cookie set by Google reCAPTCHA, a security service that helps protect websites from spam and abuse.
flx1_session_id_22487: 15 minutes.
646732388891117: undefined.
storage_test: undefined.
AIRPORT_AI_LS_DETECT: undefined.
AIRPORT_AI_LS_DETECT: undefined
3. COOKIES REQUIRING CONSENT
These cookies are used for marketing and profiling purposes and require your explicit consent before they can be utilized.
3.1 Third-Party Cookies Aimed at Enhancing the User Experience
The Company uses tools to interconnect with external sites and features to provide a better user experience (e.g., Google Maps). These cookies are often associated with a graphical element on the site, such as an action button or a specific logo (e.g., the Google button), and are used to integrate functionalities from other sites into the one you are browsing. These cookies are the responsibility of their respective operators, and you can object to their use directly on the informational pages of the respective operators.
3.2 Third-Party Cookies for Analysis and Advertising
a) Google Analytics: We use Google Analytics to gather information about how users interact with our website. This data is used to improve our website and services. Google Analytics uses cookies to collect this information.
- ga: Cookie created by Google Analytics, used to collect information and generate statistics about website usage without providing Google with personal data about individual visitors. It has a validity period of 2 years.
- gat: Cookie created by Google Analytics, used to collect information and generate statistics about website usage without providing Google with personal data about individual visitors. It has a validity period of 10 minutes.
- _gid: Cookie created by Google Analytics, used to collect information and generate statistics about website usage without providing Google with personal data about individual visitors. It has a validity period of 24 hours.
- DV: Cookie set by Google, used to distinguish unique users by assigning a randomly generated number as a client identifier.
For more information about Google Analytics and its cookies, refer to Google's Privacy Policy: https://policies.google.com/privacy
b) Google Ads: We use Google Ads to display advertisements on our website. Google Ads uses cookies to monitor the effectiveness of ads and to target users with relevant advertisements.
For more information about Google Ads and its cookies, please refer to Google's Privacy Policy: https://policies.google.com/privacy.
- GCL_AU: Cookie created by Google Ads, used to collect information and generate statistics about website usage without providing Google with personal information about individual visitors. It has a validity period of 90 days.
- test_cookie: A third-party cookie used by Google Analytics to verify if the user's browser is enabled to accept cookies.
For more information about cookies, visit: https://business.safety.google/adscookies/
- Mapp cookies (more information listed above can be found at the following link: https://mapp-wiki.atlassian.net/wiki/spaces/DMPCustomers/pages/426132/Privacy+Compliance#Privacy&Compliance-CookiesandDomains)
- id - This cookie represents the cookie ID set and used by the data management platform (DMP) for user recognition and synchronisation with partner systems. Synchronising the user ID allows the DMP to use the data outside the platform. It lasts for two years.
- ans3, dbm1, check, r - This cookie is used by the DMP. It contains data indicating whether a cookie ID is synchronised with the DMP. Synchronising the user ID allows the DMP to use the data outside the platform. It lasts for two days.
- flx1_pages_viewed_within_visit - This cookie collects the pages viewed during a user’s visit. Only put in place when custom events are configured within the DMP. It lasts for one session.
- flx1_time_on_site - This cookie collects the time the user has been on the site. Only put in place when custom events are configured within the DMP. It lasts for one session.
- flx1_conversion_count_{ID} - This cookie keeps track of the number of custom events per user. It is only put in place when custom events are configured within the DMP and a value is set for ‘deduplication’. Its duration is customised to the user.
- flx1_conversion_count_{ID}_expires - This cookie keeps track of when the cookie expires. It is only put in place when custom events are configured within the DMP and a value is set for ‘expiry’. Its duration is customised to the user.
- flx1_session_id_{ID} - This cookie stores a unique value that can be used to identify multiple DMP events for a single session. It lasts for the session (15 minutes).
4) ACCEPTING AND DECLINING COOKIES
By clicking on the "Accept" button, the User consents to the installation of cookies on their device for the Website on which they are browsing. If you do not accept cookies by leaving the navigation, there is no "I do not accept" button, but the cookies on the Website will not be installed on your device. Cookies, if any, already registered locally in the browser will remain registered there but will no longer be read or used by the Company until a subsequent and possible acceptance of the use of cookies. There is always the option of removing these cookies at any time, in the ways described over the next few paragraphs.
4.1 Purposes of Personal Data processing
We use cookies on our above websites for the following purposes:
a) Execution of IT authentication
b) Session monitoring
c) Definition of user profile according to preferences expressed during browsing.
4. 2. Nature of Personal Data conferral and consequences of a potential refusal to respond
With reference to points a) and b) pursuant to paragraph 1 above, the installation of these cookies is not subject to prior user consent, as they are strictly necessary to transmit the communication on an electronic communication network. Without these cookies, some areas of the Websites may not be accessible or may not function properly. With reference to point c) pursuant to paragraph 1. above, user consent is necessary in connection with the installation of these cookies and a potential refusal does not in any way preclude website browsing.
4.3 Scope of disclosure and dissemination of Personal Data
For the above purposes, Personal Data may be communicated by the Company:
- to all parties whose right of access to such Personal Data is recognized by virtue of regulatory provisions and/or Authorities;
- to our collaborators, employees, consultants and suppliers, within the scope of their respective duties.
The updated list of third party companies, appointed as external data processors pursuant to article 28 of the Regulations, is available at the Company's registered office.
In any case, except as provided for above, Personal Data will not be disclosed, specifically they will not be disclosed to the public or, in any case, to an indeterminate number of parties.
Personal Data collected by SEA is not processed outside the European Economic Area.
4.4 Identification details of the Data Controller and Data Protection Officer
The Data Controller in accordance with the Code is Società per Azioni Esercizi Aeroportuali S.E.A., with registered office in Segrate (Milan) at Milan Linate Airport.
It is possible to contact the Data Protection Officer, also for the exercise of the rights of data subjects pursuant to articles 15-22 of the Regulation, by sending an email to: privacy@seamilano.eu.
4.5. Rights pursuant to Arts. 15-22 of the Regulation
With regard to the processing of the Personal Data collected, you are entitled, pursuant to Articles 15 to 22 of the Regulation and where applicable, to obtain from the Company the rectification, integration or erasure (the "right to be forgotten") of your Personal Data; the right to obtain the limitation of the processing and the right to the portability of your Personal Data; the right to object to the processing of your Personal Data, including profiling; and finally, the right to lodge a complaint with the Guarantor Authority. You may exercise these rights by sending your request to the Data Protection Officer at the following address privacy@seamilano.eu or by ordinary mail addressed to the Data Protection Officer - 20054 Segrate (Milan), at Milan Linate Airport. For a more extensive and complete version of the disclosure, you can refer to the website's Privacy Notice.
5. HOW TO DISABLE COOKIES AND MANAGE PREFERENCES
When any of the website pages are accessed, a banner is displayed giving a brief disclosure. By clicking on "I agree", you give your consent to the use of cookies. Any refusal to use profiling cookies does not in any way prevent you from browsing the website; below are instructions on how to disable cookies.
1. How can I disable Third Party cookies?
Advertising companies allow you to opt out of receiving targeted ads if you so wish. This does not prevent the setting of cookies, but does suspend the use and collection of some Personal Data by said companies.
For further information on the cookies installed on your browser (including the possibility of accessing the information of Third Parties regarding the cookies installed by them through the Websites) and the possibility of opting out, please visit www.youronlinechoices.eu/it/
2. How can I disable cookies from the major browsers?
Most browsers (Internet Explorer, Firefox, Chrome, etc.) are configured to accept cookies. The cookies saved to the hard disk of your device can in any case be deleted and cookies can also be disabled by following the instructions given by the main browsers; links to the instructions offered by the major browsers are listed below:
Chrome
Firefox
Internet Explorer
Opera
Safari