Privacy & Cookie Policy

General information

This notice describes the processing of personal data carried out through the website https://www.mistralspecialparts.it/ pursuant to Regulation (EU) 2016/679 (GDPR). It does not cover any external websites accessible through links on its pages.

Data Controller

The Data Controller is Mistral Special Parts, with registered office at Via Rogola 64 Mandello del Lario (LC). Email: info@mistralspecialparts.it Phone: +39 0341 504482

Data processed through the website

Browsing data

The IT systems that enable the website to operate automatically collect certain technical data, such as IP address, device and browser information, date and time of the request, requested resource and technical connection data. Such data is processed to ensure the operation and security of the website and, where applicable, to obtain aggregated statistics on its use. The legal basis is the necessity to provide the service requested by the user and, for activities relating to security and proper technical management of the website, the legitimate interest of the Data Controller. The retention periods or the criteria used to determine them must be specified by the Data Controller.

Voluntarily provided data

Sending emails or requests through any contact forms involves the processing of data provided by the user exclusively for the purpose of responding to the request. Any data collected by the website is transmitted to the Data Controller and is not used by the website for marketing or profiling purposes, unless specific information is provided and separate consent is obtained. The legal basis is the implementation of measures requested by the data subject or, in other cases, the legitimate interest of the Data Controller in responding to communications received. The actual retention periods for requests and communications must be specified by the Data Controller.

Provision of data

Providing data via email or contact forms is optional. Any data indicated as required is used exclusively to enable the Data Controller to receive and manage the request; failure to provide such data may make it impossible to provide a response.

Data relating to purchases and e-commerce services

When the website uses WooCommerce, data necessary for managing accounts, shopping carts, orders, payments, shipping and customer support may be collected. Processing is carried out to perform the contract or pre-contractual measures requested by the user and to comply with applicable legal obligations. The data required to complete and manage an order must be provided in order to use the relevant e-commerce features; failure to provide such data may prevent completion of the purchase. Data is retained for the period necessary to manage the contractual relationship and for any additional periods required by law. For information on internal procedures for managing, retaining and accessing commercial or administrative data, the Data Controller may be contacted directly.

Services used by the website

The following sections concern the services selected by the Data Controller, also based on the technical results of the scan. Non-essential services must be configured so that they are activated only when the conditions required by law are met and, where necessary, after obtaining consent. For non-essential services, the legal basis is the user’s consent. Services strictly related to security and protection against abuse may be used on the basis of the Data Controller’s legitimate interest in protecting the website, without prejudice to any consent required for cookies or other non-technical tools. Cookie durations are indicated in the dedicated table.

Google Analytics

Google Analytics is a statistical analysis service provided by Google LLC that enables the website owner to understand how visitors use the pages, which content they view and how they interact with the website. It may collect information about visits, sessions, devices used and browsing events. Notice: Privacy Policy

Sourcebuster JS

WooCommerce uses Sourcebuster JS for first-party analytics and traffic source attribution. Information such as traffic source, referrer, landing page and data relating to the first or current visit is stored on the website’s domain to attribute sessions and orders, distinguishing this collection from analytics provided by third parties. Notice: Privacy Policy

WPML

WPML is a WordPress plugin for multilingual management. It may store the current language, language redirection preferences and other information necessary to correctly display the appropriate language version of the website. Notice: Privacy Policy

YITH WooCommerce Wishlist

YITH WooCommerce Wishlist adds a wishlist feature to the online store. It may retain a wishlist session and the information necessary to preserve saved items, including for unauthenticated visitors. Notice: Privacy Policy

Google reCAPTCHA

Google reCAPTCHA is a security and spam protection service provided by Google, used to protect forms and other website functions against spam, automated submissions and attempted abuse. To distinguish legitimate interactions from automated activity, it may analyse technical information about the device and connection, IP address and the manner in which the user interacts with the page. Notice: Privacy Policy

Google Maps

Google Maps is a mapping service provided by Google LLC for displaying interactive maps and locations. Loading the map establishes a connection to Google’s servers and may transmit the IP address and technical browser data. Notice: Privacy Policy

WooCommerce

WooCommerce is an e-commerce platform used to manage products, shopping carts, shopping sessions, orders and other features necessary for online sales. To maintain the contents of the shopping cart and recognise the user’s session, it uses technical and functional cookies necessary to provide the requested service. Notice: Privacy Policy

Retention periods

Personal data retention periods vary according to the purposes of processing and applicable obligations. Before publication, the Data Controller must specify the actual retention periods or the criteria used to determine them.

Recipients and data transfers

Data may be processed by technical service providers acting on behalf of the Data Controller or, in the case of the external services indicated in this notice, by the respective providers in accordance with their roles and terms. Any transfers of data outside the European Economic Area must be assessed for each provider, specifying the safeguards actually applicable (for example, an adequacy decision or, where relevant, standard contractual clauses). Information about the applicable safeguards and, where provided for, the procedures for obtaining a copy may be requested from the Data Controller or found in the providers’ privacy notices indicated on this page.

Data subject rights

In the cases provided for by the GDPR, the data subject may exercise the rights of access, rectification, erasure, restriction, portability and objection, as well as withdraw previously given consent without affecting the lawfulness of processing carried out before its withdrawal. Requests concerning the exercise of rights may be sent to info@mistralspecialparts.it. A complaint may also be lodged with the competent supervisory authority; in Italy, the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Cookie policy

This Cookie Policy applies to the website https://www.mistralspecialparts.it/ and is provided by the Data Controller Mistral Special Parts, with registered office at Via Rogola 64 Mandello del Lario (LC), who can be contacted at info@mistralspecialparts.it.

Cookies and tracking technologies

Cookies are small text files that a website may store on the user’s device and may be used to ensure the proper functioning of the website, maintain its security, remember preferences, obtain statistics or, subject to consent, measure advertising activities and perform profiling or remarketing functions. They may be first-party cookies, when managed directly by the website being visited, or originate from third-party services integrated into the pages, and may last only for the browsing session or remain stored for a specified period. Technical and strictly necessary cookies are those essential for the operation of the website or for providing functions requested by the user and do not require prior consent. Analytics cookies, on the other hand, are used to measure website traffic and usage: they may be treated as technical cookies only when the conditions established by law and the guidelines of the competent Authority are met; in other cases, they are used subject to consent. Profiling and marketing cookies and other technologies used for remarketing, advertising measurement or ad personalisation are activated exclusively after the user has given consent. Some features may also use third-party services: being a “third party” does not in itself determine the purpose of the cookie or technology, which instead depends on the specific service used and its corresponding category. Information about the cookies actually present, their purposes and their duration is provided in the dedicated table and in the descriptions of the services used by the website.

Consent management

When the use of cookies or other tracking technologies requires consent, the user may give, refuse or withdraw it at any time through the preference management panel or widget available on the website. Withdrawal does not affect the lawfulness of processing carried out before the preferences were changed. For technologies managed by third parties, users may also use any opt-out tools provided by the relevant supplier, consult the instructions contained in the service’s privacy policy or contact the provider directly.

First-party and third-party technologies

The website may use technologies managed directly by the Data Controller and technologies associated with services provided by third parties. Third-party providers may receive the technical data necessary for the operation of the relevant service in accordance with their respective privacy notices. The presence of an external service does not automatically imply profiling purposes: the purposes, legal basis and requirement for consent depend on the specific service used.

Duration of tracking technologies

The duration of cookies and other technologies may vary: some expire at the end of the browsing session, while others remain stored for a period defined by the Data Controller or the service provider. Where available, the specific duration is indicated in the cookie table or in the documentation of the relevant provider.

How to control or delete cookies and similar technologies through your browser or device

Users may use their browser or device settings to view which cookies or similar technologies are stored, block them or delete them. These controls operate at a technical level and generally do not offer the same level of category-based management available through the website’s consent panel. For further information, please refer to the guides provided by the main browsers:

On mobile devices, certain tracking preferences may also be managed through the operating system’s privacy, advertising or tracking settings.

How to limit interest-based advertising

In addition to the tools provided by the website and individual providers, users may consult services dedicated to managing advertising preferences, including YourOnlineChoices for the EU and the United Kingdom, Network Advertising Initiativeand Digital Advertising Alliance in the United States, DAAC in Canada and DDAI in Japan. The Digital Advertising Alliance also provides AppChoices, a tool dedicated to managing behavioural advertising in mobile applications.

Consequences of refusal

Refusing non-essential technologies does not prevent access to the website’s essential functions. However, some optional features that depend on external services, such as videos, maps, embedded content or personalisation features, may not be available until the relevant consent is given.

Cookies used by the website

The following table lists the cookies detected and classified by category, together with their respective purposes and retention periods on the device:

Cookie	Duration	Description
wt_consent	1 year	Stores the visitor consent choices recorded by the WebToffee GDPR Cookie Consent plugin.
woocommerce_cart_hash	session	Helps WooCommerce determine when cart contents or cart data change.
woocommerce_items_in_cart	session	Helps WooCommerce determine when cart contents or cart data change.
wordpress_logged_in_*	2 days	Keeps a registered WordPress user, including a WooCommerce customer account, signed in on the front end.
wordpress_test_cookie	session	Tests whether the visitor browser accepts cookies so WordPress can determine whether cookie-based functionality is available.
wp_woocommerce_session_*	2 days	Stores a unique customer code so WooCommerce can locate the visitor cart data in the database.
wpml_browser_redirect_test	session	Checks whether cookies are available for WPML browser-language redirection.
_GRECAPTCHA	6 months	Google reCAPTCHA uses this cookie to help distinguish legitimate users from automated abuse and protect forms from spam and malicious bot activity.
CONSENT	2 years	Provider: Google Maps. Stores the visitor's consent status for the use of cookies by embedded Google services such as Maps and YouTube.
elementor	persistent	Used by Elementor to store technical interface and page-builder state in the browser so website components can operate consistently.
rc::a	never	Google reCAPTCHA stores this browser identifier to help distinguish legitimate users from automated abuse and spam.
rc::b	session	Google reCAPTCHA stores temporary browser data used to distinguish legitimate users from automated abuse and spam.
rc::c	session	Google reCAPTCHA stores temporary browser data used to distinguish legitimate users from automated abuse and spam.
rc::f	never	Google reCAPTCHA stores this browser identifier to help distinguish legitimate users from automated abuse and spam.

Cookie	Duration	Description
wp-wpml_current_language	session	Stores the current language used by WPML for AJAX language filtering.
_icl_visitor_lang_js	1 day	Stores the language selected by WPML browser-language redirection.

Cookie	Duration	Description
_ga	2 years	Google Analytics uses this cookie to distinguish unique visitors and calculate usage statistics such as users, sessions and interactions on the website.
_ga_*	2 years	Google Analytics 4 uses this cookie family to persist session state and associate interactions with the relevant Analytics property.
sbjs_current	session	Stores traffic-origin information from the visitor current visit for WooCommerce order attribution.
sbjs_current_add	session	Stores the timestamp, referring URL and entry page from the visitor current visit for WooCommerce order attribution.
sbjs_first	session	Stores traffic-origin information from the visitor first visit for WooCommerce order attribution.
sbjs_first_add	session	Stores the timestamp, referring URL and entry page from the visitor first visit for WooCommerce order attribution.
sbjs_migrations	session	Stores technical data used by WooCommerce when migrating between versions of the order attribution feature.
sbjs_session	30 minutes	Stores the number of page views in the current session and the current page path for WooCommerce order attribution.
sbjs_udata	session	Stores browser and device information used by WooCommerce to attribute orders to the visitor traffic source.

Cookie	Duration	Description
1P_JAR	1 month	Provider: Google Maps. Used to carry out advertising measurement and personalization for Google services such as Maps and Search.
NID	6 months	Provider: Google Maps. Stores Google service preferences and information and may also be used for analytics, personalization or advertising depending on user settings.

Last updated

This notice may be updated over time, for example in the event of changes to the services used by the website, processing methods or applicable legislation. The version published on this page is the one currently in force; users are therefore advised to consult it periodically to check for any updates. Last updated: 21/10/2026.