Privacy & Cookie Policy

Website: metamedecine.com – shop.metamedecine.com

This privacy notice describes how NamMed S.r.l. processes the personal data of users who browse the website, purchase products or services, register for seminars, or use the services available through the website.

Data Controller

The Data Controller for personal data processing is:

NamMed S.r.l.

Registered office: Corso Porporato, 15 – 10064 Pinerolo (TO), Italy

Tax Code and VAT Number: 13465620014

E-mail: info@metamedecine.com

Types of data collected

In relation to the use of the website, the registration of an account, the purchase of products or services, the registration for seminars and events organized by NamMed, as well as communications with the Data Controller, the following categories of personal data may be collected and processed:

first name and last name;
address and other data necessary for shipping;
billing address;
email address;
telephone number;
Tax Code;
VAT number and, where applicable, company name and other identifying data of the business or organization;
data relating to orders, purchases, and registrations made;
data relating to participation in seminars and events;
data relating to payments and transactions;
username and password, where the registration of a personal account is required;
data contained in communications and requests sent by the User to NamMed;
technical and browsing data, such as IP address, device information, browser used, date and time of access, and information relating to the use of the site;
data collected through cookies and other tracking tools, as described in the relevant Cookie Policy.

Personal data may be provided directly by the User, for example during registration, purchase, enrollment in a seminar, completion of a form, or submission of a request, or may be collected automatically during browsing and use of the site.

The data marked as mandatory in the collection forms are necessary in order to provide the requested service, to conclude or perform the contract, to manage an order or a registration, or to comply with legal obligations. Failure to provide the necessary data may result in the total or partial impossibility of providing the requested service or of concluding the relevant contractual relationship.

Any data indicated as optional may be omitted by the User without affecting the ability to use the services for which such data is not necessary.

Payment data is processed, depending on the chosen payment method, by NamMed and/or by the payment service providers involved in the transaction. When the payment is handled directly by a payment service provider, NamMed does not acquire or store the complete payment card data, but may receive and store the information necessary for managing the order and the related accounting record, such as the outcome of the transaction, the amount, the date, and the identifier of the operation.

For information on the types of cookies and other tracking tools used, their purposes, and how the User can manage their preferences, please refer to the Cookie Policy.

If the User communicates to NamMed personal data relating to third parties, they are required to ensure that they have an appropriate legal basis for such communication and, where required, to have provided the third party with the information required by the regulations on the protection of personal data.

Processing methods

The Data Controller adopts appropriate technical and organizational measures, in relation to the nature of the data and the risks connected to the processing, aimed at ensuring the security of personal data and preventing unauthorized access, disclosure, modification, loss, or destruction.

The processing of personal data is carried out using computer and/or telematic tools, as well as, where necessary, using paper-based tools, according to organizational methods and with logics strictly related to the purposes indicated in this privacy policy.

Personal data may be processed by the Data Controller and by persons authorized to process data who operate under his or her authority, as well as by collaborators and external parties who carry out activities necessary for the management of the website, the organization of seminars and events, the management of orders, payments, shipments, invoicing, user support, and IT and technological services.

Some of these parties, where the necessary conditions are met, may be appointed as Data Processors pursuant to Article 28 of Regulation (EU) 2016/679 (GDPR).

The updated list of parties acting as Data Processors may be requested from the Data Controller at the addresses indicated in this privacy notice.

Legal basis for processing

NamMed S.r.l. processes the User's personal data on the basis of one or more of the following legal bases provided for by Article 6 of Regulation (EU) 2016/679 (GDPR):

performance of a contract or pre-contractual measures, when the processing is necessary to manage registration for a seminar or an event, a purchase, an order, a payment, a request by the User, or to provide the requested services;
compliance with a legal obligation, when the processing is necessary to comply with tax, accounting, administrative obligations or other obligations provided for by applicable law;
consent of the User, when required by applicable law, for example for sending commercial and promotional communications or for the use of certain cookies and non-essential tracking tools;
legitimate interest of the Data Controller or third parties, when the processing is necessary for the pursuit of legitimate interests of NamMed or third parties and such interests do not prevail over the fundamental rights and freedoms of the User, taking into account the specific circumstances of the processing.

The main purposes of the processing and the related legal bases are summarized in this privacy policy in the sections dedicated to the individual processing activities.

When the processing is based on consent, the User has the right to withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

Place of processing

Personal data are processed predominantly within the European Union and the European Economic Area, by means of computer systems and tools used by NamMed S.r.l. and its service providers.

Some service providers used by NamMed may be located or process personal data outside the European Union or the European Economic Area. In such cases, any transfers of personal data to third countries are carried out in compliance with the provisions set out in Articles 44 et seq. of Regulation (EU) 2016/679 and on the basis of an appropriate safeguard provided for by applicable law, such as, where the conditions are met, an adequacy decision of the European Commission, the Standard Contractual Clauses or another mechanism provided for by the GDPR.

For more information regarding transfers to third countries and the related guarantees adopted, the User may contact the Data Controller at the addresses indicated in this privacy policy.

Retention period

Personal data are retained for a period no longer than that necessary to achieve the purposes for which they were collected and processed, in compliance with the principle of storage limitation set out in Regulation (EU) 2016/679 (GDPR).

In particular:

the personal data processed for the management of orders, purchases, registrations for seminars and events and, more generally, for the performance of a contract or pre-contractual measures, are retained for the time necessary for the management of the relationship and, subsequently, for the period necessary to comply with applicable legal obligations and, where necessary, to protect the rights of the Data Controller;
the data contained in orders, invoices, accounting documents, and in the documentation relating to contractual relationships are retained for the periods required by applicable civil, tax, and accounting regulations, generally equal to 10 years pursuant to Article 2220 of the Italian Civil Code, unless different terms are provided for by regulations or are necessary for the protection of the rights of the Data Controller;
the personal data processed on the basis of the legitimate interest of the Data Controller are retained for the time necessary to pursue the identified legitimate interest and, where applicable, for the period necessary to manage any disputes or to protect the rights of the Data Controller;
Personal data processed on the basis of the User's consent for commercial and promotional communication purposes, such as, for example, the sending of newsletters, is retained until consent is withdrawn or, in any case, until it is no longer necessary or appropriate to retain it for that purpose. Withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal. The Data Controller may retain the information necessary to document the consent given and its possible withdrawal, within the limits provided for by applicable regulations.

At the end of the applicable retention periods, personal data will be deleted, anonymized, or, where necessary, further retained exclusively in the cases and within the limits provided for by law.

Retention periods may vary depending on the specific purpose of the processing and the type of data. The User may request further information from the Data Controller regarding the criteria used to determine the retention periods for their personal data.

Purposes of the processing of collected data

The User's personal data are collected and processed by NamMed S.r.l. for the following purposes:

to enable browsing and the proper functioning of the website and its related services;
to manage requests for information, communications, and support requests sent by the User;
to manage the User's registration and any personal account;
to manage registrations for seminars, events, and other activities organized by NamMed, as well as the related organizational and administrative communications;
manage purchases made through e-commerce, including the management of orders, shipments, returns, and any requests related to purchases;
manage payments and related transactions;
issue invoices and accounting documents and fulfill the tax, administrative, and accounting obligations required by applicable regulations;
fulfill the obligations established by laws, regulations, and provisions of the competent authorities;
ensure the security of the website, systems, and services, and prevent or detect any unauthorized access, unlawful use, or fraudulent activities;
exercise, ascertain, or defend a right of the Data Controller, including in judicial or extrajudicial proceedings;
send, subject to the User’s consent where required by applicable law, newsletters and commercial and promotional communications relating to the services, seminars, events, and activities of NamMed;
carry out, where required and in compliance with applicable regulations, statistical analyses and measurement activities regarding the use of the site and its related services;
manage and maintain the IT, technological, platform, hosting, and security services necessary for the operation of the site and the provision of services.

Personal data will not be used for purposes other than those indicated above, unless this is permitted or required by applicable regulations or is compatible with the purpose for which the data was originally collected.

For each of the purposes indicated above, this privacy notice specifies, where necessary, the categories of personal data processed, the relevant legal basis, and the retention periods.

Any profiling, remarketing, personalized advertising, or other forms of tracking for marketing purposes will be carried out exclusively if NamMed uses tools that involve such processing and in compliance with the information obligations and, where required, the acquisition of consent provided for by applicable regulations.

Details on the processing of Personal Data

Contacting the User

Mailing list or newsletter

If the User gives their consent, their email address and any additional data provided for this purpose may be added to the contact list used by NamMed to send newsletters and informational, commercial, and promotional communications regarding NamMed's seminars, events, products, and activities.

Providing the data required to subscribe to the newsletter is optional, and failure to provide it does not affect the ability to use the other services offered by NamMed.

Consent to receive commercial and promotional communications may be revoked at any time, using the methods indicated in the communications received or by contacting NamMed at the addresses indicated in this privacy policy. Revocation of consent does not affect the lawfulness of processing carried out before the revocation.

Subscription to the newsletter and consent to receive promotional communications are separate from registration on the website, the purchase of products, and registration for seminars. Such activities do not automatically entail subscription to the newsletter.

Personal Data processed: name, email address and any additional data voluntarily provided by the User within the scope of the newsletter service.

Newsletter management service: Brevo.

Payment management

For the management of payments relating to purchases, registrations for seminars, events and the other services offered by NamMed, the website uses external payment service providers and payment systems via digital wallets.

Depending on the payment method chosen by the User, the data required to carry out the transaction may be processed directly by the relevant payment service provider. NamMed may receive and store the information necessary for managing the order or registration and for administrative, accounting, and tax obligations, such as, for example, the transaction amount, the date, the payment outcome, and the transaction identifier.

When payment is made directly through an external provider, NamMed does not acquire or store the complete payment card data, such as the full card number and its security code, except as may be necessary and permitted for the management of the transaction.

Stripe (Stripe, Inc.) — electronic payment service that allows payments to be made by credit or debit card and through additional payment methods made available through the platform.

Personal Data processed: identification and contact data, transaction and payment data, and any additional data necessary for managing the transaction, in accordance with the procedures set out by the service.

PayPal (PayPal) — an online payment service that allows the User to make payments through their PayPal account or by means of the payment methods made available by PayPal.

Google Pay (Google Ireland Limited) — a payment service via the Google Pay digital wallet.

Personal Data processed: data relating to the transaction and payment and further data necessary for managing the operation, in accordance with the methods provided by the service.

Apple Pay (Apple Inc.) — payment service via the Apple Pay digital wallet.

Personal Data processed: data relating to the transaction and payment and further data necessary for managing the operation, in accordance with the methods provided by the service.

Satispay (Satispay S.p.A.) — payment service via the Satispay system.

Personal Data processed: identification and contact data possibly necessary for the transaction, data relating to the payment and the transaction and further data necessary for managing the operation, in accordance with the methods provided by the service.

Bank transfer

For detailed information on the data processed by the individual payment service providers and on any processing operations carried out directly by such parties, please refer to their respective privacy policies.

E-commerce order management

The website allows Users to purchase online the products and any services made available by NamMed.

For the management and processing of orders, the personal data necessary to receive and manage the order, carry out the shipment, manage the payment, issue the relevant tax and accounting documentation, provide assistance to the User, and manage any requests for returns, refunds, or disputes are processed.

The data may also be used to send the User communications regarding the status of the order, payment, shipping, and delivery, as well as for the administrative, accounting, and tax obligations required by applicable regulations.

Personal Data processed: first name; last name; email address; phone number; shipping address; billing address; Tax Code; VAT number; company name, where applicable; data relating to the products or services purchased; amount and details of the order; information relating to the status of the order, payment and shipping; any data contained in communications and support requests relating to the order.

Registration and authentication

If the site provides the possibility to create a personal account, registration and authentication allow the User to access their personal area and to use the features made available by WooCommerce, such as viewing order history and managing their own data.

The personal data collected during registration are used to create and manage the account, allow access to the personal area, and ensure the security of the account.

Personal Data processed: first name; last name; email address; username or other account identifier; authentication credentials; address and any additional data possibly associated with the account.

Authentication credentials are managed through the technical systems of the platform used for the website and are protected by appropriate security measures.

Advertising and Statistics

If the User has given the consent required by applicable regulations, the site may use tracking tools and advertising and analytics services that allow NamMed to measure the effectiveness of its advertising campaigns, analyze Users' interactions with the site, and monitor conversions resulting from marketing activities.

Meta Pixel and Meta Ads (Meta Platforms Ireland Limited) — services provided by Meta that make it possible to measure the conversions of advertising campaigns, analyze Users' interactions with the site and, where provided for by the configuration adopted and by the consent given by the User, support personalized advertising and remarketing activities on the Meta platforms, including Facebook and Instagram.

Personal Data processed: data relating to browsing and use of the site, online identifiers, data relating to interactions with the site and conversions, as well as data collected through cookies and other tracking tools.

Place of processing: European Union and third countries, as indicated by Meta in its own privacy policy and in compliance with the guarantees provided by applicable regulations.

Privacy Policy: Meta Platforms – Privacy Policy.

Remarketing and behavioral targeting

If the User has given the consent required by applicable regulations, the site may use Meta's tracking tools and advertising services to enable NamMed to carry out remarketing activities, measure the effectiveness of advertising campaigns, and display, on Meta platforms, advertising content aimed at people who have previously interacted with the site or with NamMed's activities.

Meta Remarketing and Meta Custom Audiences (Meta Platforms Ireland Limited) — services that allow the use of information relating to Users' interactions with the site and with NamMed's activities to create or use custom audiences for advertising purposes and to measure the effectiveness of campaigns. The activities are carried out in compliance with the settings and choices expressed by the User and with applicable regulations.

The data collected through Meta's tools may be associated with online identifiers and, where provided for by the configuration adopted, with information relating to the User. Any data provided to Meta for the creation of custom audiences is processed in accordance with the methods set out by Meta and its relevant privacy documentation.

Personal Data processed: browsing and site usage data; online identifiers; information relating to interactions with the site and conversions; data collected through cookies and other tracking tools; any data necessary for the creation of custom audiences.

Legal basis: consent of the User, where required by applicable law.

Place of processing: European Union and third countries, as indicated by Meta in its own privacy policy and in compliance with the guarantees provided by applicable regulations.

Privacy Policy: Meta Platforms – Privacy Policy.

Platform and hosting services

The website uses technological services and infrastructures necessary for the operation of the site, content management, management of the e-commerce area, and the provision of services to Users.

Joomla! — content management system (CMS) used for the creation and management of the main website.

WordPress / WooCommerce — WordPress is used to manage the e-commerce section, while WooCommerce is the integrated component used to manage the products and services available online, customer accounts, orders and the related e-commerce functionalities.

Netsons — provider of the hosting services and server infrastructure used to host and make accessible the website and its related services.

In the context of the operation of the site and the services indicated above, technical and browsing data, data relating to the account, orders and activities carried out by the User on the site, as well as additional data necessary for the proper functioning, maintenance and security of the services, may be processed.

Personal Data processed: technical and browsing data, IP address, information relating to the device and browser used, data relating to the account and orders, and further personal data processed in the context of the use of the website and the e-commerce services.

The processing carried out through cookies and other tracking tools is described in the relevant Cookie Policy and is subject to the consent methods provided for by the applicable regulations, where required.

Displaying content from external platforms

The site may use third-party services to display content and functionality integrated into its pages. The use of such services may involve the processing of the User's technical and browsing data by the respective providers.

Google Maps (Google Ireland Limited) — a service used to display maps and directions relating to NamMed's locations and places of activity, where a map is embedded in the pages of the site.

Personal Data processed: technical and browsing data, IP address, information relating to the device and browser used and, where provided for by the service, cookies and other online identifiers.

Google Fonts (Google Ireland Limited) — service used to display the typefaces used on the pages of the website, where the fonts are loaded directly from the provider's servers.

Personal Data processed: technical and browsing data, IP address, information relating to the device and browser used, and data necessary for requesting and delivering the fonts.

For information on how Google processes data and on any transfers to third countries, please refer to Google's relevant privacy policy.

User Rights

The User may exercise, in the cases provided for by applicable regulations, the rights recognized by Articles 15 et seq. of Regulation (EU) 2016/679 (“GDPR”) in relation to the Personal Data processed by the Data Controller.

In particular, the User has the right to:

obtain confirmation as to whether or not processing of Personal Data concerning him or her is taking place and, in such case, obtain access to his or her Personal Data and to the information provided for by Article 15 of the GDPR;
obtain the rectification of inaccurate Personal Data and the integration of incomplete ones;
obtain the erasure of your Personal Data, in the cases provided for by art. 17 of the GDPR;
obtain the restriction of processing, in the cases provided for by art. 18 of the GDPR;
object to the processing of your Personal Data, in the cases provided for by art. 21 of the GDPR, including with reference to processing carried out for direct marketing purposes;
receive your Personal Data in a structured, commonly used and machine-readable format and transmit them to another controller, in the cases where the conditions for exercising the right to data portability are met;
withdraw the consent previously given, at any time, where the processing is based on consent. The withdrawal does not affect the lawfulness of the processing carried out before the withdrawal;
not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, in the cases provided for by Article 22 of the GDPR.

The exercise of rights is free of charge, except in the cases provided for by Article 12 of the GDPR.

To exercise their rights, the User may send a request to info@metamedecine.com. The Data Controller will provide a response within the timeframes provided for by applicable law.

The User also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), as the competent supervisory authority in Italy, as well as to take legal action in the cases provided for by the applicable legislation.

Details on the right to object

When Personal Data is processed on the basis of the legitimate interest of the Data Controller, the User has the right to object to the processing on grounds relating to their particular situation, in the cases and under the conditions set out in Article 21 of the GDPR.

If Personal Data is processed for the purposes of direct marketing, including any profiling connected to such marketing, the User may object to the processing at any time, without having to provide any reason. Following the objection, the Personal Data will no longer be processed for such purposes.

How to exercise your rights

To exercise their rights, Users may send a request to the contact details of the Data Controller indicated in this Privacy Policy.

The exercise of rights is generally free of charge. The Data Controller provides a response to the request without undue delay and, in any case, within one month of receiving the request. This period may be extended by a further two months, where necessary, taking into account the complexity and the number of requests; in such a case, the Data Controller will inform the User of the extension and the related reasons within one month of receiving the request.

Cookie Policy

This Cookie Policy describes the use of cookies and other tracking tools by the websites metamedecine.com and shop.metamedecine.com (hereinafter, jointly, the “Site”), managed by NamMed S.r.l.

This Cookie Policy constitutes an integral part of the privacy notice on the processing of personal data provided by NamMed S.r.l. pursuant to Regulation (EU) 2016/679 (“GDPR”).

For more general information on the processing of personal data carried out by NamMed S.r.l., please refer to the Privacy Policy of the Site.

1. Data Controller

The Data Controller for the processing of personal data carried out through the Website is:

NamMed S.r.l. Registered office: Corso Porporato, 15 – 10064 Pinerolo (TO), Italy Tax Code and VAT Number: 13465620014 E-mail: info@metamedecine.com

2. What cookies and other tracking tools are

Cookies are small text files that the websites visited by the User can store on the device used for browsing, such as a computer, smartphone, or tablet, and that can subsequently be transmitted back to the site that installed them.

Cookies can be used, for example, to allow the proper functioning of the Site, to maintain a browsing session, to remember certain preferences, to manage the shopping cart, or to collect information about the use of the Site.

In addition to cookies, the Site may use other tracking tools, such as pixels, scripts, online identifiers, or similar technologies, which allow the collection or use of information relating to browsing and use of the Site.

For the purposes of this Cookie Policy, the term “cookie” also refers, where compatible, to such tracking tools.

3. Types of cookies used

Depending on their purpose, the cookies and tracking tools used by the Site can be divided into the following categories.

3.1 Technical and necessary cookies

These are the tools necessary to allow browsing on the Site, ensure its correct functioning, and provide the services requested by the User.

They are used, for example, to:

manage browsing and the session;
maintain the functionality of the personal account;
manage the cart and e-commerce functionality;
allow the correct execution of the purchase procedure, payment processing, and fraud prevention;
ensure the security of the Site and prevent unlawful use;
store the browsing language chosen by the User;
store preferences relating to cookie management;
ensure the correct functioning of the Joomla!, WordPress, and WooCommerce platforms.

For these tools, the User's consent is not required, as their use is strictly necessary to provide the requested service or to enable communication over the network.

Any blocking of these may compromise the functioning of the Site, the personal area, or the purchasing features.

3.2 Cookies and analytical/statistical tools

Analytical tools allow the collection of information about the use of the Site, for example about the pages visited, browsing methods, the origin of visits, and User interactions, in order to perform statistical analyses and improve the functioning of the services.

Analytical tools may be used without the User's consent only when the conditions set forth by the applicable regulations and by the Italian Data Protection Authority's Guidelines on cookies and other tracking tools of 10 June 2021 are met, including the conditions concerning data minimization and the use of data exclusively to produce aggregated statistics.

Analytical tools that do not comply with these conditions, such as the WooCommerce order attribution feature described in section 4.8, are activated only with the User’s prior consent.

3.3 Cookies and marketing, profiling, and remarketing tools

The Site uses third-party tracking tools for marketing purposes, advertising campaign measurement, remarketing, and personalized advertising.

In particular, NamMed uses Meta Pixel and Meta Ads services to measure the effectiveness of advertising campaigns, detect conversions and, where provided for by the configuration adopted, carry out remarketing activities and personalized advertising on the Meta platforms.

These tools may collect information relating to browsing, interactions with the Site, events and conversions and may associate such information with online identifiers.

Tracking tools used for non-technical purposes are activated only with the User’s prior consent. In the absence of consent, these tools are not activated.

4. Third-party tools and services

The Site uses certain third-party services that may involve the use of cookies or other tracking tools.

4.1 Meta Pixel and Meta Ads

Meta Pixel and Meta Ads are used to:

measure conversions resulting from advertising campaigns;
analyze Users’ interactions with the Site;
measure the effectiveness of campaigns;
carry out remarketing activities, where provided for by the configuration adopted;
create or use custom audiences for advertising purposes, where such functionality is actually enabled.

Meta's tools are activated only with the User's prior consent.

The data may include information relating to browsing, online identifiers, interactions with the Site, events and conversions, and information collected through cookies or similar tools.

The processing may involve transfers to third countries in the manner indicated by Meta in its own privacy documentation and in compliance with the guarantees provided by applicable regulations.

4.2 Brevo

NamMed uses Brevo for the management of its newsletter and of informational, commercial, and promotional communications.

The sending of communications may involve the use of tracking tools within the emails, such as tracking pixels, which can make it possible to detect the opening of communications, clicks on links, or other interactions with the emails.

The processing of data by Brevo is also governed by its own privacy documentation.

4.3 Google Maps and OpenStreetMap

The Site uses Google Maps and OpenStreetMap to display maps relating to NamMed's locations, business venues, and events.

The loading of Google Maps involves the processing of technical and navigation data and may involve the use of cookies or other tracking tools by Google.

4.4 Google Fonts

The fonts used by the Site are hosted directly on the Site's infrastructure. Their loading does not involve connections to Google Fonts servers or the processing of data by Google.

4.5 Google reCAPTCHA

The contact and request forms on the Site are protected by Google reCAPTCHA, a service that makes it possible to distinguish human users from automated systems and to prevent abusive submissions.

The service involves the loading of scripts provided by Google and may involve the processing of technical and interaction data, as well as the use of Google cookies. The processing is carried out by Google in accordance with its own privacy documentation and is managed according to the methods provided by the consent management system and applicable regulations.

4.6 Linguise

The main site uses Linguise for translating content into other languages.

The service may store the language chosen by the User through technical tools and, depending on the configuration, may involve the processing of technical data related to browsing.

The storage of the chosen language is functional to the service requested by the User and does not require consent.

4.7 Payment services

The purchase procedure on the shop allows payment through the following services:

WooPayments, a service provided by Automattic that relies on Stripe's infrastructure, for card payments and via Apple Pay and Google Pay;
PayPal;
bank transfer, which does not involve the use of tracking tools.

To enable payment processing and fraud prevention, WooPayments/Stripe and PayPal load their own scripts into the pages of the purchase process. These scripts may set cookies or similar tools and process technical data such as IP address, device and browser information, and data on interactions with the payment form.

The Apple Pay and Google Pay quick payment buttons are displayed on the checkout page. Using Google Pay involves loading scripts provided by Google. Apple Pay is managed through the User's browser or device and Apple's systems.

These tools are used for purposes strictly related to the execution of the payment requested by the User and the security of the transaction and, therefore, do not require consent.

Payment data is processed by the respective providers in accordance with their own privacy policies. NamMed does not have access to the complete payment card data.

4.8 WordPress and WooCommerce

The e-commerce section of the Site, available at shop.metamedecine.com, uses WordPress and WooCommerce.

Such systems use technical and necessary cookies to enable the correct functioning of the e-commerce, including the management of the cart, the session, the account, and the purchasing procedures. These tools are used without consent, as they are strictly necessary for the requested service.

WooCommerce also includes an order attribution feature (Order Attribution). This feature stores, through first-party cookies, information about the origin of the visit, such as the referring site, any campaign, and the type of device, and associates it with any resulting order. Since this feature is not strictly necessary for providing the service, the related cookies are activated only after the User's consent.

4.9 Joomla!

The main site uses Joomla! as its content management system.

Joomla! and its related components use technical tools necessary for managing navigation, security, and the proper functioning of the Site.

Any tools beyond those strictly necessary are managed in accordance with the consent procedures provided for by applicable regulations.

4.10 Netsons

NamMed uses Netsons for hosting services and for the technological infrastructure necessary to make the Site available.

In the context of such services, technical and browsing data may be processed, such as IP address, information about the device and browser, technical logs, and data necessary for the security and maintenance of the systems.

Such processing activities are also described in the Privacy Policy.

5. First-party and third-party cookies

Cookies may be installed directly by NamMed (“first-party cookies”) or by parties other than NamMed (“third-party cookies”).

Third-party cookies are installed and managed directly by their respective providers, who may process the information collected in accordance with their own policies and terms.

The third-party services used on the Site include, in relation to the features that are actually active:

Meta (Meta Pixel and Meta Ads);
Brevo (newsletter and email communications);
Google (Maps, reCAPTCHA, Google Pay);
Linguise (content translation);
Automattic and Stripe (WooPayments);
PayPal (payments);
Apple (Apple Pay).

The presence of a third-party service does not necessarily imply the use of non-technical cookies: the classification depends on the specific technical configuration of the service, as described in point 4.

6. Consent to the use of cookies

On the first access to each of the Site's domains, a banner for cookie management is displayed. Tools other than those strictly necessary are not activated before the User has given their consent, when such consent is required.

The banner allows the User to:

clearly understand the main purposes of the tools used;
accept all non-essential tools;
reject non-essential tools, including by closing the banner using the designated command, and continue browsing with the default settings;
access a preferences management panel;
give specific and granular consent for each purpose;
change or withdraw their choices at a later time.

The mere continuation of browsing, scrolling the page, or other forms of passive behavior do not, in themselves, constitute a valid expression of consent.

In accordance with the Guidelines of the Italian Data Protection Authority on cookies and other tracking tools of June 10, 2021, consent is free, specific, informed, and unambiguous, and the User may continue browsing without the installation of non-technical tools.

7. Management and modification of preferences

The User may modify or revoke at any time the consent previously given through the «Cookie Preferences» link present on every page of the Site, which reopens the preferences management panel.

The User may also manage cookies through their browser settings. However, disabling technical or necessary cookies may compromise certain functionalities of the Site, the personal area, or the e-commerce.

8. Duration and list of cookies

Cookies can be:

session cookies, which are automatically deleted when the browser is closed;
persistent cookies, which remain stored on the User’s device until they expire or are deleted.

The actual duration of individual cookies depends on the specific tool used and the settings adopted by the relevant provider.

The following table lists the cookies used by the Site, indicating the domain, the entity that installs them, the category, the purpose, and the duration. The list is updated in relation to the actual configuration of the Site.

[TO BE VERIFIED: complete and check the table with the scan of the consent management system; the rows indicated are those expected from the current configuration.]

Cookie	Domain	Provider	Category	Purpose	Duration
Joomla! session cookie (generated alphanumeric name)	metamedecine.com	NamMed (first party)	Technical	Management of the browsing session	Session
wordpress_logged_in_[hash], wordpress_sec_[hash]	shop.metamedecine.com	NamMed (first party)	Technical	Authentication to the personal area	Session, or 14 days if the User selects «Remember me»
wordpress_test_cookie	shop.metamedecine.com	NamMed (first party)	Technical	Verification that the browser accepts cookies	Session
woocommerce_cart_hash, woocommerce_items_in_cart	shop.metamedecine.com	NamMed (first party)	Technical	Cart management	Session
wp_woocommerce_session_[hash]	shop.metamedecine.com	NamMed (first party)	Technical	Association of the cart with the User's session	2 days
sbjs_migrations, sbjs_current_add, sbjs_first_add, sbjs_current, sbjs_first, sbjs_udata, sbjs_session	shop.metamedecine.com	NamMed (first part, WooCommerce)	Statistical, with prior consent	Attribution of orders to the source of the visit	[from scan]
__stripe_mid	shop.metamedecine.com	Stripe (WooPayments)	Technical	Payment fraud prevention	1 year
__stripe_sid	shop.metamedecine.com	Stripe (WooPayments)	Technical	Payment fraud prevention	30 minutes
[from scan]	shop.metamedecine.com	PayPal	Technical	Payment processing and fraud prevention	[from scan]
_fbp	metamedecine.com, shop.metamedecine.com	Half	Marketing, with prior consent	Conversion measurement and advertising	3 months
[from scan]	metamedecine.com, shop.metamedecine.com	Consent management platform	Technical	Storage of cookie preferences	[from scan]

9. Transfers of data to third countries

Some service providers used on the Site may process personal data outside the European Union or the European Economic Area.

In such cases, any transfers of personal data are carried out in compliance with Articles 44 et seq. of the GDPR and on the basis of the safeguards provided for by applicable law, such as, where the conditions are met, adequacy decisions, Standard Contractual Clauses, or other mechanisms provided for by the GDPR.

For further information on international transfers carried out by individual suppliers, please refer to their respective privacy notices.

10. Relationship with the Privacy Policy

The data collected through cookies and other tracking tools may constitute personal data.

For more complete information on the methods of processing personal data, on the legal bases, on the recipients, on the retention periods, on international transfers and on the User’s rights, please refer to the Privacy Policy.

This Cookie Policy specifically concerns the use of cookies and other tracking tools on the Site.

11. User Rights

When cookies or other tracking tools involve the processing of personal data, the User may exercise the rights provided for in Articles 15 and following of the GDPR in the cases and under the conditions established by applicable regulations.

For more information on the User's rights and on how to exercise them, please refer to the Privacy Policy.

Requests can be sent to: info@metamedecine.com

The User also has the right to lodge a complaint with the Data Protection Authority, in the cases provided for by the regulations.

12. Updates to the Cookie Policy

NamMed S.r.l. may amend this Cookie Policy in the event of:

regulatory changes;
measures or instructions from the competent Authorities;
introduction, modification or deletion of cookies or other tracking tools;
technical changes to the Site or to the third-party services used.

The changes will be published on this page, indicating the date of the last update.

If the changes concern tracking tools for which the User's consent must be obtained, NamMed also updates the consent management system.

Last updated: 09/11/2026