Cookie and tracking technologies policy
Last updated: 9 October 2026
This policy explains which cookies and similar technologies the website cesarecremonini.shop (the “Site”) uses, what they are for, who manages them, how long they stay on your device, and how you can choose which ones to allow and change your choice at any time. It is provided under Article 122 of the Italian Personal Data Protection Code (Legislative Decree 196/2003), Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and the Guidelines on cookies and other tracking tools of the Italian Data Protection Authority (Garante per la protezione dei dati personali) of 10 June 2021. It supplements the privacy policy of the Site.
1. Who processes the data
The data controllers are, jointly under Article 26 GDPR:
- VR|46 RACING APPAREL S.r.l., registered office in Pesaro, via Rosselli 46, 61100, Italy, VAT number 02495180412;
- EASYREPLICA INTERNATIONAL SRL, registered and operating office in via Toscana 34, 61122 Pesaro (PU), Italy, VAT number and tax code 02568220418, registered with the Pesaro Companies Register, REA PS-192173,
(together, the “Joint Controllers”). The relationship between the Joint Controllers is governed by a written agreement, whose essential content is available on request. For any question about this policy and to exercise your rights you can write to support@cesarecremonini.shop, which is also the address of the Data Protection Officer of EASYREPLICA INTERNATIONAL SRL, or send a registered letter with acknowledgement of receipt to via Toscana 34, 61122 Pesaro (PU), Italy.
For the management of advertising campaigns (Google Ads, Meta) and of the Site statistics (Google Analytics, Google Tag Manager) the Joint Controllers rely on IAWEB (DIGITALWEB S.R.L.), appointed as data processor under Article 28 GDPR, which accesses the data collected by these tools on behalf of the Joint Controllers and according to their instructions. The full list of data processors can be requested at the address above.
2. What cookies and similar technologies are
Cookies are small text files that a website stores in the browser of your device and reads again on later visits. “Similar technologies” are tools with comparable functions: the browser’s local memory (local storage and session storage), scripts and pixels that send information about the visit to an external service, and requests the Site sends directly from its own server to an external service.
- First-party cookies are set by the Site; third-party cookies are set by another party (for example Google or Meta) through the Site.
- Session cookies are deleted when you close the browser; persistent cookies remain until their expiry or until you delete them.
3. Categories used by the Site and their legal basis
Necessary (technical)
They are needed for the Site to work and for the services you request: cart, payment, account sign-in, chosen language, security and protection of forms from abuse, and the record of your cookie choice. They are always active and do not require consent (Article 122(1) of the Italian Code): without them the Site could not sell or work properly. They include the cookies of the payment services (PayPal, and Stripe for card payments, Apple Pay and Google Pay handled by WooPayments), which are used only when you pay, to complete the payment and prevent fraud.
Statistics
They measure how the Site is used (pages visited, products viewed, where visits come from, purchases) in order to improve it. The Site uses Google Analytics 4, provided by Google. Since the data are also processed by Google and are not anonymised, these measurements take place only with your consent (Article 122 of the Italian Code, Article 6(1)(a) GDPR).
Marketing
They measure the results of the Site’s advertising and show you ads based on your interests, also on other websites and social networks. They are used only with your consent (Article 122 of the Italian Code, Article 6(1)(a) GDPR). In particular:
- Google Ads: measures purchases made after a click on a Google ad. If you allow this category, at the time of purchase Google may receive the email address you entered, in encrypted (hashed) form, to link the purchase to the ad (“user-provided data” feature).
- Meta Pixel and Meta Conversions API (Facebook, Instagram): measure actions on the Site (for example viewing a product, adding to cart, purchasing) and allow relevant ads to be shown to you. Events may be sent to Meta both from the browser and from the Site’s server: in both cases only after your consent to the Marketing category.
- Mailchimp: links your visit and your cart to the email campaign or newsletter you came from.
- Visit source (WooCommerce and FunnelKit features): records where you came from (search engine, campaign, other website, first page viewed) in order to attribute any order to its source.
Preferences
The Site does not currently use cookies in this category, so it is not offered in the banner.
Social networks
The social network icons on the Site are plain links: they do not load content from the social networks and do not send them any data until you click them.
4. How the choice works
- On your first visit the Site shows a banner. Before you choose, no cookie or technology other than the necessary ones is used: statistics and marketing tools stay blocked.
- You can accept all cookies, reject all of them or choose individual categories. The three options are equally prominent.
- If you close the banner with the X, only the necessary cookies stay active, as if you had rejected.
- Scrolling the page or continuing to browse does not count as consent.
- Your choice is stored in the
easycc_consentcookie. The banner is shown again after 12 months if you gave consent and after 6 months if you refused it, or earlier if the tools or purposes described here change significantly. - The Site passes your choice to Google services through Google Consent Mode and to the other plugins of the Site through the WP Consent API, so that each of them respects the categories you allowed.
5. How to change or withdraw your choice
You can change your choice at any time, as easily as you made it, from the “Manage consent” tab at the bottom right of every page or from this link: Manage consent
If you withdraw consent for a category, the Site deletes the cookies of that category stored on its own domain and reloads the page. Withdrawal does not affect the lawfulness of processing based on consent given before. Cookies that third parties stored on their own domains (for example google.com or facebook.com) can be deleted from your browser settings (see section 9) or with the tools provided by those third parties.
6. Consent records
To be able to demonstrate consent, as required by Article 7(1) GDPR, the Site records each choice made in the banner: date and time, a random code for the choice, the categories allowed or refused, how you chose (for example “Accept all” or closing with the X), the language, the page, the IP address with its last part removed and the browser type. The record is not linked to your account or your orders and is kept for 24 months, then deleted automatically. Legal basis: the obligation to demonstrate consent (Article 6(1)(c) and Article 7(1) GDPR).
7. List of cookies
The list below is generated by the Site from the tools actually active and is updated when they change. The durations of third-party cookies are those stated by the respective providers.
Necessary
Needed for the site to work: cart, checkout, security, language and the record of your choices. Always active.
| Cookie | Service | Purpose | Duration |
|---|---|---|---|
easycc_consent | cesarecremonini.shop | Stores your cookie choices, so that the notice is not shown again. | 12 months |
wp_consent_* | WP Consent API | Tells the other plugins of the site which cookie categories you allowed. | 30 days |
wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie, wp-settings-* | WordPress | Keep you signed in to your account. Only for those who sign in. | Session, or 14 days with "Remember me" |
pll_language | Polylang | Remembers the language of the site you chose. | 1 year |
wp_woocommerce_session_* | WooCommerce | Keeps the cart and the checkout data while you shop. | 2 days |
woocommerce_cart_hash, woocommerce_items_in_cart | WooCommerce | Tell the site that the cart changed, to show it up to date. | Session |
__stripe_mid, __stripe_sid | Stripe (privacy policy) | Prevent fraud in card payments. Set by the payment form. | 1 year (__stripe_sid: 30 minutes) |
Cookies of paypal.com | PayPal (privacy policy) | Show the PayPal buttons and messages, process the payment and prevent fraud. | Set by PayPal |
Statistics
Measure how the site is used, so that it can be improved. The data are processed by third parties, such as Google Analytics.
| Cookie | Service | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics (privacy policy) | Count the visits and measure how the site is used. | 2 years |
Marketing
Show advertising based on your interests and measure its results, also on other sites. The data are processed by third parties, such as Google Ads and Meta.
| Cookie | Service | Purpose | Duration |
|---|---|---|---|
sbjs_* | WooCommerce (Sourcebuster) | Record where your visit comes from (search engine, campaign, other site), to attribute the order to it. | Session (sbjs_session: 30 minutes) |
_gcl_* | Google Ads (privacy policy) | Measure the results of the advertising on Google (purchases after a click on an ad). | 90 days |
_fbp, _fbc | Meta (Facebook, Instagram) (privacy policy) | Measure the results of the advertising on Facebook and Instagram and show you ads based on your visits. | 90 days |
mailchimp_* | Mailchimp (privacy policy) | Link your visit and your cart to the newsletter campaign you came from. | 28 days |
wffn_* | FunnelKit | Record where your visit comes from (campaign parameters, first page), to attribute the order to it. | 2 days |
8. Third parties and transfers of data outside the European Union
The third parties listed below receive data through the tools of the Site. For the statistics and marketing tools they act, depending on the case, as processors on behalf of the Joint Controllers or as independent controllers for their own purposes; for the collection and transmission of data through the Meta Pixel and the Conversions API, the Joint Controllers and Meta are joint controllers. Please read their policies:
- Google (Google Analytics, Google Ads) – Google Ireland Limited, Ireland: policy, how Google uses data from sites that use its services;
- Meta (Facebook, Instagram) – Meta Platforms Ireland Limited, Ireland: policy;
- Mailchimp – The Rocket Science Group LLC (Intuit), United States: policy;
- PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg: policy;
- Stripe (card payments, Apple Pay and Google Pay through WooPayments) – Stripe Payments Europe Limited, Ireland: policy;
- Cloudflare (Turnstile, protection of forms from automated abuse) – Cloudflare, Inc.: policy.
Some of these providers, or companies of their groups, may process data in the United States. The transfer takes place on the basis of the European Commission adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, for the companies that participate in it, or of the standard contractual clauses approved by the European Commission (Article 46 GDPR).
9. Browser settings
In addition to the choices in the banner, you can block or delete cookies from your browser settings. If you block all cookies, including the necessary ones, some features of the Site, such as the cart and payment, will not work. Official instructions for the most common browsers:
10. Your rights
Within the limits and under the conditions of Articles 7 and 15 to 22 GDPR you may at any time: withdraw your consent; obtain confirmation of whether data concerning you are being processed and access them; obtain their rectification or erasure; request restriction of processing; receive the data in a structured, commonly used and machine-readable format; object to processing. To exercise these rights write to support@cesarecremonini.shop: you will receive a reply without delay and in any case within one month. If you believe the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Article 77 GDPR), as explained on www.garanteprivacy.it, or with the supervisory authority of the EU country where you live or work.
11. Updates
This policy may be updated, for example when the tools used by the Site change. The date of the last update is shown at the top. If the changes concern tools or purposes that require consent, the banner will be shown to you again.