This document is a translation of the Italian original. In case of any discrepancy between the two versions, the Italian version prevails.
Last updated: 9 September 2026. Version: 2.0.

This notice explains which cookies and tracking tools are used on stefaniadeirossi.com, what they do and how you can manage them. It supplements the Privacy Policy, which covers everything not expressly set out here.

1. Data Controller

Stefania Dei Rossi, sole proprietor trading as Oro & Disegni.
Registered office: Piazza Benco 4, 34122 Trieste (TS), Italy.
Shop and atelier: Campo Santa Maria Nova, Sestiere Cannaregio 6043/B, 30121 Venice, Italy.
Italian tax code: DRSSFN91P65L424Z | VAT number: 01317500328
Email: info@stefaniadeirossi.com | Certified email: s.deirossi@pec.it

2. What cookies are

Cookies are small text files that websites store on your device while you browse. They keep the site working, remember your preferences and, in some cases, collect information about your behaviour. Alongside cookies there are other tracking tools with similar functions, such as pixels and SDKs, to which the same rules apply.

Depending on who installs them, cookies are first-party, when set directly by this website, or third-party, when set by an external provider.

3. Technical cookies (no consent required)

These are necessary for the website to work and are installed automatically. Without them the site does not function properly. They include cookies handling the browsing session, the cart and the purchase process, security and fraud prevention, language and currency selection, and storing the cookie preferences you have expressed.

First-party analytics cookies are treated as technical cookies where they are used only to produce aggregate statistics, with the IP address masked and without being combined with other data sources.

4. Analytics and profiling cookies (consent required)

These are installed only after you have given consent through the banner, and remain disabled until then. They measure how the website performs and show you advertising in line with your interests, including on websites and platforms other than this one.

Consent is optional: you may refuse it and continue browsing and purchasing as normal.

5. List of cookies used

The cookies and tracking tools active on the website are detailed below, broken down by type and purpose.

Technical cookies

Name Type Purpose Duration Provider
_shopify_s First party Manages the current user browsing session on the site. 30 minutes Stefania Dei Rossi
_shopify_essential First party Stores essential technical data required for store and checkout functionality. 1 year Stefania Dei Rossi
_shop_app_essential Third party Manages authentication session and security features for Shop Pay. 1 year Shopify Inc. (Privacy Policy)

Analytics and profiling cookies

Name Type Purpose Duration Provider
_ga Third party Generates anonymous statistical data on website usage via Google Analytics. 13 months Google (Privacy Policy)
_ga_5N3KBXYHED Third party Maintains session state for Google Analytics 4. 13 months Google (Privacy Policy)
_fbp Third party Tracks visits to measure and optimize Meta advertising campaigns. 3 months Meta Platforms (Privacy Policy)
_clck Third party Stores a unique user ID for behavioral analytics and heatmaps. 1 year Microsoft Clarity (Privacy Policy)
_clsk Third party Combines page views from a single user into a single Clarity session record. 1 day Microsoft Clarity (Privacy Policy)
_shopify_analytics First party Collects user interaction data for general statistical and analytical purposes. 1 year Stefania Dei Rossi
_shopify_marketing First party Stores preferences for tracking marketing communications. 1 year Stefania Dei Rossi
_shopify_y First party Tracks visits over time using Shopify Analytics. 1 year Stefania Dei Rossi
_shop_app_analytics Third party Collects usage metrics regarding Shop Pay button and app integration. 1 year Shopify Inc. (Privacy Policy)
privacy_signal Third party Stores consent status expressed within the Shop Pay ecosystem. 1 year Shopify Inc. (Privacy Policy)
__Secure-* / ENID Third party Ad profiling and personalization (Google/DoubleClick). Up to 2 years Google (Privacy Policy)
EDGE_SSID / ANONA Third party Tracking and ad effectiveness measurement on the Bing/Microsoft network. Session / 1 year Microsoft (Privacy Policy)

6. Third parties and transfers outside the European Economic Area

Third-party cookies are installed by providers acting as independent data controllers: to understand how they use the data you should consult their own notices, linked in the table under section 5.

Some of these providers are based, or hold servers, in the United States. In that case the transfer takes place on the basis of the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, for providers certified under it, or on the basis of the standard contractual clauses approved by the European Commission, pursuant to Articles 45 and 46 GDPR.

7. How to give, change or withdraw consent

On your first visit a banner appears allowing you to accept all cookies, refuse them all, or choose in detail which categories to enable. Until you make a choice, only technical cookies are installed. Closing the banner without choosing counts as a refusal.

You can change your mind at any time through the dedicated link in the footer of every page, where you can amend your preferences or withdraw consent already given. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Alternatively you can manage and delete cookies through your browser settings. Note that deleting cookies also deletes the one storing your preferences, so the banner will reappear on your next visit. Blocking technical cookies entirely may prevent the site and the purchase process from working properly.

8. Your rights

You may exercise the rights under Articles 15 to 22 GDPR at any time, including access, rectification, erasure, restriction, portability and objection, by writing to info@stefaniadeirossi.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it. Full details of your rights are set out in the Privacy Policy.

9. Updates

This notice is updated whenever the tools installed on the website change. The version in force is the one published at stefaniadeirossi.com, showing the date it was last updated at the top.