Cookie Policy
Last updated: 16 aprile 2026
This Cookie Policy describes the use of cookies and similar technologies on the Retroverse Srl platform ("Zoowanda"), in compliance with the ePrivacy Directive (2002/58/EC as amended) and the GDPR (Regulation EU 2016/679), as well as the Guidelines of the Italian Data Protection Authority (Garante) of 10 June 2021.
1. What Are Cookies and Tracking Tools
A cookie is a small text file that the website stores on the User's device (computer, smartphone, tablet) and that the browser sends back to the site on each subsequent visit, allowing recognition of the device.
By Tracking Tool we mean any technology (cookies, unique identifiers, web beacons, embedded scripts, fingerprinting) that enables tracking of the User or storage of information on their device. In the following text we use the term "cookie" in an extended sense to refer to such tools.
2. Types of Cookies Used by Zoowanda
Zoowanda uses several categories of cookies and tracking tools. Only technical and preference cookies — strictly necessary for the operation of the Service or to remember explicit User choices — are installed without consent. All other tools (experience, marketing and remarketing) are activated only with consent and can be modified at any time from the "Manage cookies" panel in the footer of every page.
2.1 Essential Technical Cookies
These are necessary for the operation of the Platform and are installed without prior consent, pursuant to Article 122 of the Italian Privacy Code and the Garante Guidelines. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).
| Name | Provider | Type | Duration | Purpose |
|---|---|---|---|---|
| session_id | Zoowanda | HttpOnly cookie | Session | Authentication session management. |
| XSRF-TOKEN | Zoowanda | Cookie | Session | Protection against CSRF attacks. |
| remember_token | Zoowanda | HttpOnly cookie | 20 days | "Remember me" feature. |
| auth_state | Zoowanda | Cookie | Session | Minimum authentication state required for correct interface rendering. |
| cart | Zoowanda | localStorage | Until emptied | Cart for non-authenticated Users. |
| checkout-origin | Zoowanda | sessionStorage | Session | Origin page for return after checkout. |
2.2 Preference Cookies
These store explicit choices made by the User (language, UI preferences). The Italian Garante's 2021 Guidelines qualify them as technical when they merely remember choices made by the User to improve the experience of the requested service.
| Name | Provider | Type | Duration | Purpose |
|---|---|---|---|---|
| i18n | Zoowanda | Cookie | Persistent | Language chosen by the User. |
| user_preferences | Zoowanda | Cookie | 365 days | UI preferences (theme, layout). For authenticated Users synchronized with the server-side profile. |
| cookie-consent / cookie-preferences | Zoowanda | localStorage | Persistent until withdrawal | User's choice on the cookie banner and per-category preferences, for proof of consent. |
2.3 Experience Tools
Zoowanda uses third-party tools that improve the visual and interaction experience of the Platform. These tools issue requests to third-party servers that receive the User's IP address and User-Agent, and are therefore activated only with consent.
| Name | Provider | Type | Duration | Purpose |
|---|---|---|---|---|
| Google Fonts | Google LLC | Third-party server request | Browser cache | Loading of typographic fonts. The request exposes IP and User-Agent to the provider. |
2.4 Marketing and Remarketing Cookies
Zoowanda uses marketing cookies to measure the effectiveness of advertising campaigns and to show personalized ads on third-party platforms. They are activated only with the User's explicit consent.
| Name | Provider | Type | Duration | Purpose |
|---|---|---|---|---|
| _fbp | Meta Platforms Ireland Ltd. | Third-party cookie | 3 months | Remarketing and conversion measurement on Facebook/Instagram. |
| _fbc | Meta Platforms Ireland Ltd. | Third-party cookie | 3 months | Links a click on an ad to a conversion. |
| IDE / NID / _gcl_au | Google LLC | Third-party cookie | Up to 13 months | Conversion measurement and remarketing via Google Ads. |
2.5 Payment Service Cookies
During the payment process the User may be redirected to the pages of the payment provider used by Zoowanda, which sets technical cookies on its own domain for transaction management, payment authentication and fraud prevention.
Such cookies are governed by the privacy notices of the respective providers and Zoowanda has no access to them. The up-to-date list of payment providers used by the Platform is available in Section 5.2 of the Privacy Policy.
3. Consent and Preference Management
3.1 Cookie Banner
On the first visit, Zoowanda displays a banner that allows the User to choose how to handle cookies and any tracking tools. The available options are:
- "Accept all": enables all configurable categories (currently: no category active beyond the mandatory technical/preference ones).
- "Customize": opens a panel with a toggle for each optional category, where the User can choose precisely what to enable.
- From the "Customize" panel it is possible to save the current selection or, alternatively, accept all or limit to strictly necessary cookies only.
3.2 Consent Principles (GDPR)
- Granularity: each cookie category has a separate switch.
- Opt-in: consent is an affirmative act (toggle manually activated by the User, never pre-selected).
- Information: before consent, the User has access to all information about the cookies used.
- Revocability: consent can be modified or withdrawn at any time.
3.3 Consent Duration
Consent given is not subject to automatic time expiration: it remains valid until the User changes or withdraws it.
Zoowanda re-displays the banner only when the list of cookies subject to consent is substantially updated (for example, due to the integration of a new tracking tool), to ensure that consent remains fully informed.
3.4 Withdrawal and Modification of Preferences
The User can modify or withdraw cookie preferences at any time through:
- The "Manage cookies" link in the footer of every page of the Platform.
- Account settings, "Privacy and Consents" section (for authenticated Users).
- Browser settings, following the manufacturer's procedure.
3.5 Synchronization with User Profile
For authenticated Users, the choice expressed in the banner is also saved in the profile (preferences.cookieConsent field) to ensure consistency across devices and sessions. For guest Users the choice is stored exclusively in the browser's local storage.
4. How to Manage Cookies from the Browser
In addition to the Zoowanda panel, the User can manage cookies directly from their browser. Browser settings, however, do not allow granular per-category control.
4.1 Desktop Browsers
- Google Chrome: Settings → Privacy and security → Cookies and other site data.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Apple Safari: Preferences → Privacy → Manage Website Data.
- Microsoft Edge: Settings → Privacy, search, and services → Clear browsing data.
4.2 Mobile Devices
- Android (Chrome): Menu → Settings → Privacy → Clear browsing data.
- iOS (Safari): Settings → Safari → Clear History and Website Data.
4.3 Do-Not-Track (DNT) Signal
If the browser sends a Do-Not-Track signal, Zoowanda respects it by limiting, where technically possible, any third-party tracking tools. The DNT signal is, however, not respected by all providers.
4.4 Interest-Based Advertising
To opt out of third-party behavioral advertising, in addition to Zoowanda's panel the User can rely on industry tools provided by major advertising consortia (for example EDAA — youronlinechoices.eu — and Network Advertising Initiative — networkadvertising.org). These tools allow Users to manage tracking preferences for many of the main advertising providers in a single place.
5. User Rights in Relation to Cookies
In addition to the general GDPR rights (Section 6 of the Privacy Policy), in relation to cookies the User has the right to:
- Know which cookies are installed on their device (transparency).
- Refuse cookies that are not strictly necessary (consent).
- Modify preferences at any time (revocability).
- Access data collected through cookies (Art. 15 GDPR).
- Object to tracking and marketing (Art. 21 GDPR).
6. Cookies and Minors
The Platform is not intended for Users under 18 years of age. The collection of data through consent-based cookies from minors requires the explicit consent of a parent or legal guardian.
7. Cookie Security
- Transmission over an encrypted connection (HTTPS/TLS).
- Session and "Remember me" cookies set as HttpOnly: not accessible from JavaScript (XSS mitigation).
- Security cookies (e.g., XSRF-TOKEN) signed to prevent tampering.
- No cookie contains passwords, payment data or special categories of data.
8. Changes to the Cookie Policy
Zoowanda reserves the right to update this Cookie Policy for regulatory compliance, integration of new tools or change of providers.
Significant changes — particularly the introduction of new consent-based cookies — entail re-presenting the banner to collect updated consent.
9. Contacts
- Retroverse Srl — via dei lecci 10 06131 Perugia PG
- Privacy Email: privacy@retroverse.com
- PEC: retroverse@pec.it
- Italian Garante: https://www.garanteprivacy.it — garante@gpdp.it
10. Regulatory References
- Regulation (EU) 2016/679 (GDPR).
- ePrivacy Directive 2002/58/EC as amended by Directive 2009/136/EC.
- Italian Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018, Article 122.
- Guidelines of the Italian Data Protection Authority (Garante) of 10 June 2021 on cookies and other tracking tools.
11. Definitions
To ease the reading of this Cookie Policy, the main definitions used are listed below, consistently with the GDPR and the Italian Garante Guidelines.
- Cookie: a small text file stored by the browser on the User's device to recognize it on subsequent visits.
- Tracking Tool: any technology (cookies, unique identifiers, web beacons, embedded scripts, fingerprinting, requests to third-party servers) that allows tracking of the User or storage of information on their device.
- Usage Data: information collected automatically, including IP address, URLs visited, browser/device/OS characteristics, dwell times, technical request parameters.
- Data Controller: the entity determining the purposes and means of personal data processing. For Zoowanda this is Retroverse Srl.
- Data Processor: a third party processing personal data on behalf of the Controller under a contract (DPA), for example the providers listed in Section 5.2 of the Privacy Policy.
- Data Subject: the natural person to whom personal data refers (the User or the professional using the Platform).
- Consent: a freely given, specific, informed and unambiguous indication of the data subject's wishes, expressed by an affirmative action of the User.
- First party / Third party: first-party cookies are set directly by Zoowanda; third-party cookies are set by external providers (e.g., Meta, Google) integrated into the Platform.