Cookie Policy of www.slamjam.com
This document informs Users about the technologies that help this Website to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Website.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This Website uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.
Activities strictly necessary for the operation of this Website and delivery of the Service
This Website uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Third-party Trackers
-
Traffic optimization and distribution
This type of service allows this Website to distribute their content using servers located across different countries and to optimize their performance.
Which Personal Data are processed depends on the characteristics and the way these services are implemented. Their function is to filter communications between this Website and the User's browser.
Considering the widespread distribution of this system, it is difficult to determine the locations to which the contents that may contain Personal Information of the User are transferred.
Cloudflare (Cloudflare)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this Website, i.e., communication between this Website and the User's browser, while also allowing analytical data from this Website to be collected.
Personal Data processed: Cookies and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
-
SPAM protection
This type of service analyzes the traffic of this Website, potentially containing Users' Personal Data, with the purpose of filtering it from parts of traffic, messages and content that are recognized as SPAM.
Google reCAPTCHA
Google reCAPTCHA is a SPAM protection service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Storage duration:
- _GRECAPTCHA: duration of the session
- rc::a: indefinite
- rc::b: duration of the session
- rc::c: duration of the session
Other activities involving the use of Trackers
Functionality
This Website uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.
-
Contacting the User
Back in Stock Notification
This privacy policy applies only to Back in Stock's actions for users who request to be notified of the availability of the products featured on this website. It does not extend to any website that can be accessed from this website, including, without limitation, any links we may provide to social media websites or externally facing URLs provided throughout the course of using Back in Stock.
Collected data
Information about people who visit the store and register to receive an availability notification:
-Email address;
-Consent to marketing;
-Web browser language and time zone.
-in any case, in accordance with this privacy policy.
-
Managing support and contact requests
This type of service allows this Website to manage support and contact requests received via email or by other means, such as the contact form.
The Personal Data processed depend on the information provided by the User in the messages and the means used for communication (e.g. email address).
OK Return
APP Ok Return generates the return requests received on shopify and transmits the flow using data collected.
Data Collected:
- id order
- name
- last name
- shipping address
- billing address
- payment method
- product return id and qty
- all other data available to complete the process.
Generate:
- Product return request
- Refund
- Message to the customer
- Trigger communcations
All data are stored on a safety cloud structure that works on private APIs and dedicated IPs. All information transfers are passed through encryption.
Experience
This Website uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
-
Displaying content from external platforms
This type of services allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.
Google Maps widget (Google Inc.)
Google Maps is a maps visualization service provided by Google Inc. that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy.
YouTube video widget (Google Inc.)
YouTube is a video content visualization service provided by Google Inc. that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy.
Storage duration:
- PREF: 8 months
- VISITOR_INFO1_LIVE: 8 months
- YSC: duration of the session
Instagram widget (Instagram, Inc.)
Instagram is an image visualization service provided by Instagram, Inc. that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy.
Vimeo video (Vimeo, LLC)
Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy.
Storage duration:
- player: 1 year
- vuid: 2 years
-
Interaction with external social networks and platforms
This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
The interaction and information obtained through this Website are always subject to the User’s privacy settings for each social network.
This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out from the respective services in order to make sure that the processed data on this Website isn’t being connected back to the User’s profile.
LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services allowing interaction with the LinkedIn social network provided by LinkedIn Corporation.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy.
Storage duration:
- AnalyticsSyncHistory: 1 month
- JSESSIONID: duration of the session
- UserMatchHistory: 1 month
- bcookie: 1 year
- bscookie: 1 year
- lang: duration of the session
- lidc: 1 day
- lissc: 1 year
- lms_ads: 1 month
- lms_analytics: 1 month
Facebook Like button and social widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy.
Storage duration:
Twitter Tweet button and social widgets (X Corp.)
The Twitter Tweet button and social widgets are services allowing interaction with the Twitter social network provided by Twitter, Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
- personalization_id: 2 years
Measurement
This Website uses Trackers to measure traffic and analyze User behavior to improve the Service.
-
Analytics
The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
Display Advertising extension for Google Analytics (Google Inc.)
Google Analytics on this Website might use Google's Interest-based advertising, 3rd-party audience data and information from the DoubleClick Cookie to extend analytics with demographics, interests and ads interaction data.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out.
Storage duration:
- IDE: 2 years
- _gcl_*: 3 months
- test_cookie: 15 minutes
User ID extension for Google Analytics (Google Inc.)
Google Analytics on this Website makes use of a feature called User ID. This setup allows for a more accurate tracking of Users by associating that User with the same ID over various sessions and devices. It is set up in a way that doesn’t allow Google to personally identify an individual or permanently identify a particular device.
The User ID extension might make it possible to connect Data from Google Analytics with other Data about the User collected by this Website.
The opt-out link below will only opt you out for the device you are on, but not from tracking performed independently by the Owner. Contact the Owner via the email address provided in this privacy policy to object to the aforementioned tracking as well.
Personal Data processed: Cookies.
Place of processing: US – Privacy Policy – Opt Out.
Google Analytics Demographics and Interests reports
Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for this Website (demographics means age and gender Data).
Users can opt out of Google's use of cookies by visiting Google's Ads Settings.
Personal Data processed: Tracker and unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- IDE: 2 years
- _gcl_*: 3 months
- test_cookie: 15 minutes
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is an analytics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner insights into the traffic and interactions on this Website.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
-
Anonymized analytics services
The services contained in this section allow the Owner, through the use of third-party Trackers, to collect and manage analytics in an anonymized form.
Google Analytics (Universal Analytics) with anonymized IP
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. It works by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
Marketing
This Website uses Trackers to deliver personalized marketing content based on User behavior and to operate, serve and track ads.
-
Advertising
This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Trackers for identifying Users, behavioral retargeting i.e. displaying ads tailored to the User’s interests and behavior, or to measure ads performance. For more information, please check the privacy policies of the relevant services.
Services of this kind usually offer the possibility to opt out of such tracking. In addition to any opt-out feature offered by any of the services below, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section "How to opt-out of interest-based advertising" in this document.
Meta ads conversion tracking (Meta pixel)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Storage duration:
- _fbp: 3 months
- fr: 3 months
Google Ads conversion tracking
Google Ads conversion tracking is an analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Google Ads advertising network with actions performed on this Website.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Storage duration:
- IDE: 2 years
- test_cookie: 15 minutes
Facebook Lookalike Audience
Facebook Lookalike Audience is an advertising and behavioral targeting service provided by Facebook, Inc. or by Facebook Ireland Ltd, depending on how the Owner manages the Data processing, that uses Data collected through Facebook Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the base of their past use of this Website or engagement with relevant content across the Facebook apps and services.
On the base of these Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audience.
Users can opt out of Facebook's use of cookies for ads personalization by visiting this opt-out page.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
-
Commercial affiliation
This type of service allows this Website to display advertisements for third-party products or services. Ads can be displayed either as advertising links or as banners using various kinds of graphics.
Clicks on the icon or banner posted on the Application are tracked by the third-party services listed below, and are shared with this Website.
For details of which data are collected, please refer to the privacy policy of each service.
CJ Affiliate
CJ Affiliate is a commercial affiliation service provided by Commission Junction LLC (part of Publicis Groupe) or by Epsilon International UK Ltd (part of Publicis Groupe), depending on how the Owner manages the Data processing.
Personal Data processed: purchase history, Trackers and Usage Data.
Place of processing: United States – Privacy Policy; United Kingdom – Privacy Policy.
Storage duration:
-
Managing contacts and sending messages
This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.
Form Builder by HulkApps.com
By filling in the contact form with their data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header.
Collected data
E-mail
First name
Surname
Various types of data
-
Remarketing and behavioral targeting
This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User.
This activity is facilitated by tracking Usage Data and by using Trackers to collect information which is then transferred to the partners that manage the remarketing and behavioral targeting activity.
Some services offer a remarketing option based on email address lists.
In addition to any opt-out feature provided by any of the services below, Users may opt out by visiting the Network Advertising Initiative opt-out page.
Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.
Google Ads Remarketing (Google Inc.)
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
Users can opt out of Google's use of cookies for ads personalization by visiting Google's Ads Settings.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out.
Storage duration:
- AID: 2 years
- ANID: 2 years
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- TAID: 14 days
- __gads: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_ag: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_gs: 3 months
- _gcl_ha: 3 months
- id: 2 years
- test_cookie: 15 minutes
Facebook Custom Audience (Facebook, Inc.)
Facebook Custom Audience is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.
Personal Data processed: Cookies and email address.
Place of processing: US – Privacy Policy – Opt Out.
Storage duration:
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out.
Storage duration:
Remarketing with Google Analytics (Google Inc.)
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects the tracking activity performed by Google Analytics and its Cookies with the Google Ads advertising network and the Doubleclick Cookie.
Personal Data processed: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out.
Storage duration:
- test_cookie: 15 minutes
- IDE: 2 years
- _gcl_*: 3 months
Google Signals
This Website uses Google Signals, a feature of Google Analytics, which will associate the visitation information that it collects from this Website with Google information from accounts of signed-in Google-account users who have consented to this association for the purpose of ads personalization. This Google information may include User location, search history, YouTube history and Data from sites that partner with Google – and is used to provide aggregated and anonymized insights into Users' cross device behaviors.
If a User falls under the described association, they may access and/or delete such Data via My Activity provided by Google.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Activities that do not fit the above categorizations
-
Elastick
Elastick is a connector between shopify and ERP. Elastick is composed by two section to manage the Product Information Management and Order Management System.
The OMS processes all orders received on shopify and transmits them to the internal management system.
Data Collected
id order
name
last name
shipping address
billing address
payment method
all other data available to complete the process.
All OMS data are stored on a safety cloud structure that works on private APIs and dedicated IPs. All information transfers are passed through encryption.
-
Ometria
Emails
Each Ometria email includes an email tracking pixel which will track email opens (if the receiver has
images enabled in their email client/mailbox). This is the standard approach for measuring open and click rates, and is used by all email platforms in the market.
All links in Ometria emails are proxied through a link redirection service that records data for each link clicked. This leads to a set of events which includes:
● Event type (delivery, bounce, open, click, spam complaint, unsubscribe)
● Email address of the recipient (already known to us as we sent it)
● IP address of the recipient (in the case of open and click)
● GEO location based on IP address (city level) (in the case of open and click)
● Device type (mobile/computer/tablet) and browser (ie/firefox/chrome/safari)
It is important that the retailer understands that consent is required for the collection and storage of all information since PECR is not limited, as the GDPR is, to personal data. This general lack of
understanding is something the ICO recently highlighted in a report relating to adtec and real time biddingplatforms.
Cookies
PECR is also well known for imposing an obligation on controllers to bring to the individual’s attention the cookies that it uses.
Website interaction data
In the case of Ometria, the retailer installs a small Javascript file on their pages (served from a static file CDN to minimize load time) which sends a small HTTP request to Ometria’s fleet of tracking servers when an event occurs.
Once an event is recorded in the persistent log store, it is processed by the ‘real time’ system. This
system records a small in-memory object for each active visitor across all the sites being tracked. This per visitor information includes:
● Country (IP geolocation)
● Number of pages viewed (stored in a persistent cookie)
● Time on site (stored in a persistent cookie)
● Time of last interaction (stored in a persistent cookie)
● Unique visitor ID (stored in a persistent cookie)
● Number of previous visits from this visitor ID
● Landing page URL
● Last page viewed URL
● Products and categories viewed in a visit
● Channel that sent the visit (e.g. search, CPC, referral) along with contextual information about the
source (e.g. search keywords, referring page URL)
● Device type (mobile/computer/tablet) and browser (ie/firefox/chrome/safari)
● Contents of shopping basket (id, products, quantity and value) (stored in a persistent cookie)
● Previous visitor information (e.g. identity and customer information)
● Each incoming event updates the active session record for the visitor that sent the event. Details
about active sessions (lists and aggregations by dimension) can be extracted from the real time
system via REST API from the web application servers and are used to power the real-time
dashboard.
● Visits (sessions) are said to be 'complete' after 30 minutes of inactivity. So if no page view (or other) events have been received for 30 minutes the visit is 'closed' and sent to the ingestion queues for further processing. Only after this point are abandoned baskets and profile identification events
processed.
Ometria’s cookie
The Ometria javascript tracking library uses first party cookies (set to the domain of the retailer's page).
Data stored inside this cookie includes:
● Unique visitor ID (random ID)
● Email address of contact if they identified / logged in
● Basket contents when navigating the site Traffic source for this visit and first visit Number of pages
viewed
● Time of first and last event
This cookie is called "ometria" and data stored in the cookie is appended to the 'interaction tracking data' described above. The cookie has a 1 year lifetime, which is renewed each time it is updated as a result of an interaction by the customer. Thus, if the first interaction is 01/02 the cookie will persist until 31/01 in the following year. However, if there is subsequent interaction on 01/06, the cookie will then persist until 31/05 in the following year.
-
Push Owl
By filling in the contact form with their data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header.
In the event that this service is installed, it is possible that, even if the Users do not use the service, it collects Usage Data relating to the pages in which it is installed.
How to manage preferences and provide or withdraw consent
There are various ways to manage Tracker related preferences and to provide and withdraw consent, where relevant:
Users can manage preferences related to Trackers from directly within their own device settings, for example, by preventing the use or storage of Trackers.
Additionally, whenever the use of Trackers is based on consent, Users can provide or withdraw such consent by setting their preferences within the cookie notice or by updating such preferences accordingly via the relevant consent-preferences privacy widget, if available.
It is also possible, via relevant browser or device features, to delete previously stored Trackers, including those used to remember the User’s initial consent preferences.
Other Trackers in the browser’s local memory may be cleared by deleting the browsing history.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
Locating Tracker Settings
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Consequences of denying the use of Trackers
Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help this Website to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.
Owner and Data Controller
Slam Jam S.r.l UNIPERSONALE, Via Francesco Luigi Ferrari, n. 37/A, 44122 – Ferrara (FE)
Owner contact email: help@slamjam.com
Since the use of third-party Trackers through this Website cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by this Website.