Activities strictly necessary for the operation of certy.me and the provision of the Service
Certy.me uses Cookies commonly called ‘technical’ Cookies or similar Trackers to carry out activities strictly necessary for its operation or the provision of the Service.
Third-party Trackers
Tag management
These services enable centralised management of the tags or scripts used on certy.me.
Using these services involves User Data passing through them and, where applicable, being retained.
Google Tag Manager
Google Tag Manager is a tag management service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages Data processing.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Traffic optimisation and distribution
These services allow certy.me to distribute its content through geographically distributed servers and optimise its performance.
The Personal Data processed depends on the features and implementation of these services, which by their nature filter communications between certy.me and the User’s browser.
Given the distributed nature of this system, it is difficult to determine where content that may contain the User’s Personal Data is transferred.
Cloudflare (Cloudflare Inc.)
Cloudflare is a traffic optimisation and distribution service provided by Cloudflare Inc.
Cloudflare is integrated in a way that filters all certy.me traffic, namely communications between certy.me and the User’s browser, and also enables statistical data about that traffic to be collected.
Personal Data processed: Cookies and various types of Data as specified in the service’s privacy policy.
Place of processing: United States – Privacy Policy.
Other activities involving the use of Trackers
Basic interactions and functionalities
Certy.me uses Trackers to enable basic interactions and features that allow Users to access certain resources of the Service and facilitate communication with the Owner.
Tag management
These services enable centralised management of the tags or scripts used on certy.me.
Using these services involves User Data passing through them and, where applicable, being retained.
Google Tag Manager
Google Tag Manager is a tag management service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages Data processing.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Segment (Twilio, Inc.)
Segment is a tag management service provided by Twilio, Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
- __storejs__: undefined
- __tld__: session duration
- ajs%3Acookies: session duration
- ajs%3Atest: session duration
- ajs_anonymous_id: 1 year
- ajs_group_id: 1 year
- ajs_group_properties: undefined
- ajs_user_id: 1 year
- ajs_user_traits: undefined
- seg_first_url: 1 year
- seg_first_utm: 1 year
- segmentio*: undefined
Registration and authentication
By registering or authenticating, the User allows certy.me to identify them and provide access to dedicated services.
Depending on the information below, registration and authentication services may be provided with the assistance of third parties. Where this occurs, certy.me may access some Data stored by the third-party service used for registration or identification.
Some of the services listed below may also collect Personal Data for targeting and profiling purposes. Please refer to each service’s description for further information.
Stripe OAuth (Stripe Inc)
Stripe OAuth is a registration and authentication service provided by Stripe, Inc. and connected to the Stripe network.
Personal Data processed: Trackers and various types of Data as specified in the service’s privacy policy.
Place of processing: United States – Privacy Policy.
Storage duration:
- __stripe_mid: 1 year
- __stripe_sid: 30 minutes
Experience enhancement
Certy.me uses Trackers to provide a personalised user experience, enabling better management of personal settings and interaction with external networks and platforms.
Interaction with social networks and external platforms
These services allow interaction with social networks or other external platforms directly from certy.me pages.
Interactions and information obtained by certy.me are always subject to the User’s privacy settings for each social network.
These services may still collect traffic data for the pages on which they are installed, even when Users do not use them.
Users are advised to log out of the relevant services to ensure that data processed on certy.me is not linked to their profile.
PayPal button and widgets (PayPal)
The PayPal button and widgets are services for interacting with the PayPal platform, provided by PayPal Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: See PayPal’s privacy policy – Privacy Policy.
Storage duration:
- akavpau_ppsd: session duration
- ts: session duration
Displaying content from external platforms
These services allow content hosted on external platforms to be displayed directly on certy.me pages and enable interaction with that content.
These services may still collect web traffic data relating to the pages on which they are installed, even when Users do not use them.
YouTube video widget (privacy-enhanced mode) (Google LLC)
YouTube is a video content display service operated by Google LLC that allows certy.me to embed that content in its pages.
This widget is configured so that YouTube does not store information or Cookies about Users on certy.me unless they play the video.
Personal Data processed: Usage Data, Universally Unique Identifier (UUID) and Trackers.
Place of processing: United States – Privacy Policy.
Google Maps widget (Google LLC)
Google Maps is a map display service operated by Google LLC that allows certy.me to embed that content in its pages.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Font Awesome (Fonticons, Inc.)
Font Awesome is a font display service operated by Fonticons, Inc. that allows certy.me to embed that content in its pages.
Personal Data processed: Usage Data and Trackers.
Place of processing: United States – Privacy Policy.
Google Fonts (Google Ireland Limited)
Google Fonts is a font display service operated by Google Ireland Limited that allows certy.me to embed that content in its pages.
Personal Data processed: Usage Data and Trackers.
Place of processing: Ireland – Privacy Policy.
Measurement
Certy.me uses Trackers to measure traffic and analyse User behaviour with the aim of improving the Service.
Analytics
The services in this section allow the Data Controller to monitor and analyse traffic data and track User behaviour.
Hotjar Form Analysis & Conversion Funnels (Hotjar Ltd.)
Hotjar is an analytics service provided by Hotjar Ltd.
Hotjar respects generic ‘Do Not Track’ headers. This means that the browser can instruct the script not to collect any User Data. This setting is available in all major browsers. Further information about opting out of Hotjar is available here.
Personal Data processed: Cookies and Usage Data.
Place of processing: Malta – Privacy Policy – Opt Out.
Storage duration:
- _hjAbsoluteSessionInProgress: 30 minutes
- _hjCachedUserAttributes: session duration
- _hjClosedSurveyInvites: 1 year
- _hjDonePolls: 1 year
- _hjFirstSeen: session duration
- _hjIncludedInPageviewSample: 30 minutes
- _hjIncludedInSessionSample: 30 minutes
- _hjLocalStorageTest: session duration
- _hjMinimizedPolls: 1 year
- _hjRecordingEnabled: session duration
- _hjRecordingLastActivity: session duration
- _hjSession*: 30 minutes
- _hjSessionRejected: session duration
- _hjSessionResumed: session duration
- _hjSessionTooLarge: session duration
- _hjSessionUser*: 1 year
- _hjShownFeedbackMessage: 1 year
- _hjTLDTest: session duration
- _hjUserAttributesHash: session duration
- _hjViewportId: session duration
- _hjid: 1 year
Facebook Ads conversion tracking (Facebook pixel) (Meta Platforms, Inc.)
Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Meta Platforms, Inc. that links data from the Meta advertising network with actions performed within certy.me. The Facebook pixel tracks conversions that can be attributed to advertisements on Facebook, Instagram and Audience Network.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
- _fbp: 3 months
- fr: 3 months
Google Analytics 4 (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited (‘Google’). Google uses the Personal Data collected to track and examine the use of certy.me, compile reports and share them with other services developed by Google.
Google may use Personal Data to contextualise and personalise advertisements on its own advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before data is recorded in any data centre or server. For further information, please consult Google’s official documentation.
Personal Data processed: city, Usage Data, browser information, device information, latitude (of the city), longitude (of the city), number of Users, session statistics and Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- _ga: 2 years
- _ga_*: 2 years
Targeting and advertising
Certy.me uses Trackers to deliver commercial content personalised according to the User’s behaviour and to manage, serve and track advertisements.
Some of the services used by the Owner participate in the IAB Transparency and Consent Framework, an initiative promoting responsible data processing practices in digital advertising and giving Users greater transparency and control over the use of their data for advertising tracking. Users can express their preferences regarding advertising services at any time by accessing the advertising tracking settings panel directly from the cookie notice or through the dedicated link on certy.me.
Certy.me participates in the IAB Transparency and Consent Framework and complies with its Specifications and Policies. Certy.me uses iubenda (identification number 123) as its consent management software (‘Consent Management Platform’).
Advertising
These services allow User Data to be used for commercial communications. These communications appear on certy.me as banners and other advertisements, including advertisements related to the User’s interests.
This does not mean that all Personal Data is used for this purpose. The Data and conditions of use are set out below.
Some of the services listed below may use Trackers to identify the User or use behavioural retargeting, meaning that they display advertisements personalised according to the User’s interests and behaviour, including behaviour observed outside certy.me. For further information, please consult the privacy notices of the relevant services.
Services of this kind generally offer an option to disable this tracking. In addition to any opt-out function offered by the services listed in this document, Users can read more about disabling interest-based advertising in the dedicated ‘How to opt out of interest-based advertising’ section of this document.
Facebook Lookalike Audience (Meta Platforms, Inc.)
Facebook Lookalike Audience is an advertising and behavioural targeting service provided by Meta Platforms, Inc. It uses Data collected through Facebook Custom Audience to show advertisements to Users whose behaviour is similar to that of Users already on a Custom Audience list, based on their previous use of certy.me or their interaction with relevant content through Facebook applications and services.
Based on this Data, personalised advertisements will be shown to Users suggested by Facebook Lookalike Audience.
Users may opt out of the use of Facebook Trackers for ad personalisation by visiting this opt-out page .
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- _fbp: 3 months
Remarketing and behavioural targeting
These services allow certy.me and its partners to communicate, optimise and serve advertisements based on the User’s previous use of certy.me.
This activity is facilitated by tracking Usage Data and using Trackers to collect information that is then transferred to partners managing remarketing and behavioural targeting activities.
Some services offer remarketing based on email address lists.
In addition to the opt-out features provided by the services listed below, Users may opt out by visiting the Network Advertising Initiative opt-out page.
Users may also opt out of certain advertising features through the corresponding device settings, such as mobile device advertising settings or general advertising settings.
Facebook Custom Audience (Meta Platforms, Inc.)
Facebook Custom Audience is a remarketing and behavioural targeting service provided by Meta Platforms, Inc. that connects certy.me activity with the Facebook advertising network.
Users may opt out of the use of Facebook Trackers for ad personalisation by visiting this opt-out page.
Personal Data processed: Cookies and email address.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
Facebook Remarketing (Meta Platforms, Inc.)
Facebook Remarketing is a remarketing and behavioural targeting service provided by Meta Platforms, Inc. that connects certy.me activity with the Facebook advertising network.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
AdRoll (NextRoll, Inc.)
AdRoll is an advertising service provided by NextRoll, Inc. AdRoll may display personalised advertisements on any device attributable to the User by processing their email address, using a security technology called ‘hashing’.
AdRoll may also automatically collect certain types of data to provide personalised content to the User, as described in the service’s privacy policy.
Personal Data processed: purchase history, Usage Data, unique device identifiers for advertising (for example, Google Advertiser ID or IDFA), device information, Trackers and various types of Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- __adroll: 14 hours
- __adroll_bounce_closed: 5 years
- __adroll_bounced3: 5 years
- __adroll_consent_data: undefined
- __adroll_consent_params: session duration
- __adroll_fpc: 2 years
- __adroll_load_stats: 1 month
- __adroll_shared: 2 years
- __adroll_tcf_banner_seen: undefined
How to manage preferences and give or withdraw consent
There are several ways to manage Tracker preferences and give or withdraw consent where required:
Users can manage Tracker preferences directly through their device settings; for example, they can prevent Trackers from being used or stored.
In addition, whenever the use of Trackers depends on consent, Users can give or withdraw consent by setting their preferences in the cookie notice or updating them through the tracking settings widget, where available.
Dedicated browser or device features can also be used to remove previously stored Trackers.
Other Trackers stored in the browser’s local memory can be removed by clearing the browsing history.
For third-party Trackers, Users can manage preferences and withdraw consent by visiting the relevant opt-out link, where available, using the tools described in the third party’s privacy policy or contacting the third party directly.
Finding Tracker settings
For example, Users can find information about managing Cookies in some of the most widely used browsers at the following addresses:
Users can also manage some Trackers for mobile applications by disabling them through the relevant device settings, such as mobile advertising settings or general tracking settings. Users can consult their device settings to find the appropriate option.
How to opt out of interest-based advertising
Without prejudice to the above, Users are informed that they can use the information available on YourOnlineChoices (EU), Network Advertising Initiative (USA) and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan), or other similar services. These services allow tracking preferences to be managed for most advertising tools. The Owner therefore recommends using these resources in addition to the information provided in this document.
The Digital Advertising Alliance also provides an application called AppChoices that helps Users control behavioural advertising in mobile applications.
Consequences of refusing consent
Users are free to decide whether or not to give consent. However, please note that Trackers allow certy.me to provide a better experience and advanced features to Users, in line with the purposes described in this document. Without the User’s consent, the Owner may therefore be unable to provide the related features.
Data Controller
Certy s.r.l. – Piazza Deffenu, 12 – 09125 Cagliari (Italy)
Owner’s email address: amministrazione@certy.me
As the Owner cannot fully control the use of third-party Trackers on certy.me, any specific reference to third-party Trackers should be considered indicative. For complete information, Users are kindly invited to consult the privacy policies of the third-party services listed in this document.
Given the objective complexity of identifying tracking technologies, Users are invited to contact the Owner if they would like further information about the use of these technologies on certy.me.
