Cookie Policy
Last updated: 6 October 2026
This policy explains which cookies and similar technologies are used on www.getinart.com, what they are for, how long they last, who manages them and how you can accept them, refuse them or change your mind at any time. It is provided under Article 5(3) of Directive 2002/58/EC (ePrivacy Directive), Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Article 122 of the Italian Personal Data Protection Code, which transposes the Directive in Italy, where we are established. It supplements our Privacy Policy.
1. Data controller
PRiNKO S.r.l., owner of the GetinArt brand
Via Enrico Forlanini 84 - 00012 Guidonia Montecelio (RM), Italy
VAT / Tax code IT10827671008
Email: support@getinart.com - PEC: prinko@pec.prinko.it
2. What cookies and similar technologies are
Cookies are small text files that a website stores on your device (computer, tablet, smartphone) through the browser, and that are read again on later visits. The same rules apply to similar technologies, which this policy also covers and refers to as "cookies" unless otherwise stated:
- browser storage (localStorage and sessionStorage), which keeps information on the device like a cookie;
- pixels and tags, small pieces of code that send information about your visit to a provider (for example that a purchase took place);
- online identifiers generated by these tools to recognise the browser.
Cookies can be classified by:
- who sets them: first-party cookies are set by GetinArt; third-party cookies are set by other providers whose services are integrated into the site;
- duration: session cookies are deleted when you close the browser; persistent cookies remain until their expiry date or until you delete them;
- purpose: technical, functional, analytics or marketing (see section 4).
3. Legal framework
- Directive 2002/58/EC (ePrivacy Directive), Article 5(3);
- Regulation (EU) 2016/679 (GDPR), in particular Articles 4(11), 6, 7, 13, 26, 28 and 44 et seq.;
- EDPB Guidelines 05/2020 on consent and 2/2023 on the technical scope of Article 5(3) of the ePrivacy Directive;
- Italian Legislative Decree 196/2003 (Personal Data Protection Code), Article 122, and the Guidelines on cookies and other tracking tools of the Italian Data Protection Authority (Garante) of 10 June 2021.
As the controller is established in Italy, Italian law is our reference. If you browse from another EU or EEA country, you also benefit from the protections of your national law transposing the ePrivacy Directive.
4. Categories of cookies and when consent is needed
Strictly necessary technical cookies no consent
They are needed for the site to work and to provide services you request: navigation, sign-in, cart, checkout, payment security, storing your cookie choices. Under Article 5(3) of the ePrivacy Directive they do not require consent. They cannot be disabled from the banner; you can block them from your browser, but some parts of the site (cart, account, payment) will then stop working.
Functional cookies no consent
They remember choices you make to improve the service: language, VAT display preference, delivery country, the state of the "Sign in with Google" prompt, the virtual assistant conversation. First-party functional cookies are treated as technical cookies and do not require consent. In the banner they are grouped in the "Functionality" category for transparency. They contain no data that identifies you and are not used to track you on other websites.
Analytics cookies
They are used to understand, in aggregate form, how visitors use the site. As they are third-party tools (Google Analytics 4) and the provider may process data for its own purposes, they are used only with your consent.
Marketing and profiling cookies
They are used to measure the effectiveness of our advertising campaigns, to show you GetinArt ads on other sites and social networks (remarketing) and to build audiences of people with similar interests. They are used only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
5. How we collect and manage consent
- On your first visit a banner (provided by Cookie-Script) lets you accept all cookies, reject all non-necessary cookies or choose category by category.
- Before you make a choice only technical and functional cookies are used: analytics and marketing tools start with consent set to "denied".
- Scrolling the page or continuing to browse does not count as consent. Rejecting is as easy as accepting.
- Your choice is stored for 360 days in the
CookieScriptConsentcookie. The banner is shown again when it expires, or earlier if the tools we use change significantly. - The site uses Google Consent Mode v2: Google tools receive the status of your choices for each purpose (analytics, advertising, sending user data to Google, ad personalisation) and do not read or write analytics or advertising cookies if consent is denied.
You can change or withdraw your consent at any time with the Cookie Settings link at the bottom of every page, the badge that remains visible after your choice, or this button:
Withdrawal does not affect the lawfulness of processing carried out before it. Cookies already stored may remain in the browser until they expire, but they are no longer read by the tools for which you withdrew consent; you can delete them right away from your browser settings (see section 9).
6. Detailed list of cookies and similar technologies
The durations shown are the maximum ones; some cookies are deleted earlier (for example on logout). Third-party providers may also use their own cookies on their own domains (for example google.com, facebook.com, pinterest.com), especially if you are signed in to their services: these are governed by their policies, linked in section 7.
Strictly necessary technical cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| GIASESS | GetinArt | Session cookie: keeps browsing, the cart and access to the account area working. | Session (deleted when the browser is closed) |
| GIAREMEMBER | GetinArt | Only if you tick "Remember me" when signing in: keeps you signed in between visits. It contains a random code, not your password. | 30 days |
| __Host-GIACART | GetinArt | Keeps the contents of your cart while you browse. Without it a purchase cannot be completed. | 60 days |
| CookieScriptConsent | GetinArt, via Cookie-Script | Stores the choices made in the cookie banner, so that they are applied and the banner is not shown on every page. | 360 days |
| gia_lead | GetinArt | Only for those who fill in the short Artists Programme application form: lets you resume the application without re-entering your details. It cannot be read by scripts on the page. | 30 days |
| __stripe_mid, __stripe_sid | Stripe | Only on the card payment page: transaction security and fraud prevention. | 1 year / 30 minutes |
| Cookie PayPal (domini paypal.com) | PayPal | Only if you choose to pay with PayPal: authentication, security and fraud prevention for the payment. | Set by PayPal |
| giaUser (localStorage) | GetinArt | Stores in the browser the first name, last name, email and account type of the signed-in user, to display the account area. It is deleted on logout. | Until logout |
Functional cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| gia_lang | GetinArt | Remembers the site language (Italian or English), chosen by you or detected from your browser settings. | 1 year |
| gia_lang_manual | GetinArt | Remembers that you chose the language manually, so the site does not change it automatically. | 1 year |
| gia_lang_hint | GetinArt | Remembers that you closed the notice suggesting the other language, so it is not shown again. | 1 year |
| gia_price_mode | GetinArt | Remembers whether you prefer to see prices including or excluding VAT. | 1 year |
| gia_vat_country | GetinArt | Remembers the delivery country you indicated, to show prices with the correct VAT. | 1 year |
| g_state | Set by the "Sign in with Google" service on the sign-in, registration and checkout pages: remembers the state of the sign-in prompt (for example whether you closed it). | 6 months | |
| Webchat Botpress (localStorage) | Botpress | Keeps your conversation with the virtual assistant while you move from page to page. | Until deleted from the browser |
Analytics cookies (consent required)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google (Google Analytics 4) | Assigns the browser a random identifier to produce aggregate statistics on how the site is used: pages viewed, traffic sources, visit length. | 13 months |
| _ga_Y3D7WWJQ2G | Google (Google Analytics 4) | Keeps the browsing session state for Google Analytics 4. | 13 months |
Marketing cookies (consent required)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _gcl_au | Google (Google Ads) | Measures conversions, such as a purchase, generated by Google ads. | 3 months |
| IDE (dominio doubleclick.net) | Google (Google Ads) | Remarketing: allows GetinArt ads to be shown to you on other websites and their effectiveness to be measured. | 1 year |
| _fbp | Meta (Meta Pixel) | Measures conversions and builds audiences for ads on Facebook and Instagram. | 3 months |
| _pin_unauth | Pinterest (Pinterest Tag) | Recognises the browser to measure conversions and show relevant ads on Pinterest. | 1 year |
7. Third-party services integrated into the site
Google Tag Manager
Provider: Google Ireland Ltd / Google LLC. A tool that loads the other tags on the site (analytics and marketing) according to the consent you have given. It does not set cookies of its own. Privacy policy.
Cookie-Script
Consent management platform that displays the banner and stores your choices (technical). Privacy policy.
Google Analytics 4
Provider: Google Ireland Ltd / Google LLC. Aggregate statistics on site usage and on the stages of a purchase (products viewed, added to cart, orders). Active only with consent to the analytics category. Privacy policy - How Google uses data from partner sites - Opt-out browser add-on.
Google Ads: conversion tracking, enhanced conversions and remarketing
Provider: Google Ireland Ltd / Google LLC. Measures purchases and contacts generated by our ads and allows GetinArt ads to be shown to people who have visited the site. With enhanced conversions, if you are signed in or have entered them in a form, your email address, phone number, first and last name are sent to Google only in hashed form (SHA-256), not in clear text, to match conversions to ads. This happens only with consent to the marketing category. Privacy policy - Ad personalisation settings.
Meta Pixel
Provider: Meta Platforms Ireland Ltd. Measures the effectiveness of ads on Facebook and Instagram (for example views, add to cart, purchases, Artists Programme applications) and builds audiences for remarketing. With advanced matching, contact details are sent only in hashed form (SHA-256). Active only with consent to the marketing category. For the collection and transmission of data via the pixel, GetinArt and Meta are joint controllers (Article 26 GDPR), under the Meta Controller Addendum; subsequent processing is Meta's sole responsibility. Privacy policy - Ad preferences.
Pinterest Tag
Provider: Pinterest Europe Ltd. Measures conversions from Pinterest ads and allows relevant ads to be shown on Pinterest. Active only with consent to the marketing category. Privacy policy - Personalisation settings.
Sign in with Google
Provider: Google. Lets you register or sign in with your Google account. The library is loaded only on the sign-in, registration and checkout pages; if you use it, Google sends us the data described in the Privacy Policy. Privacy policy.
Google Maps (address autocomplete)
Provider: Google. Suggests addresses while you type them, on pages where an address is entered (registration, address book, checkout). Google receives your IP address and the text typed in the address field. Privacy policy.
Google Customer Reviews
Provider: Google. After a paid order, a box asks whether you would like to review your purchase. Only if you accept does Google send you a questionnaire by email after delivery. The script is loaded only on the order confirmation page. Privacy policy.
Stripe and PayPal (payments)
Providers: Stripe Payments Europe Ltd and PayPal (Europe) S.à r.l. et Cie, S.C.A. They handle card and PayPal payments; their cookies are technical and used for security and fraud prevention. They are loaded only on the payment page. Payment data is entered directly with the provider and is not stored by GetinArt. Stripe privacy policy - PayPal privacy policy.
Botpress (virtual assistant)
Provider: Botpress Technologies Inc. The customer service chat available on every page. Messages you type are processed by the provider to generate answers; please do not enter sensitive data in the chat. Privacy policy.
Resources loaded from external servers (no cookies)
To display the site, the browser downloads fonts from Google Fonts (Google) and some graphic libraries from the jsDelivr and unpkg networks. These services do not set cookies, but like any web server they receive your IP address and technical browser data when the resources are requested.
8. Data processed, recipients and transfers outside the EU
Through analytics and marketing cookies the following may be collected: online identifiers, IP address, browser and device type, pages visited, the site you came from, actions taken (such as adding a product to the cart or purchasing, with the order value) and, only for marketing tools with consent, contact details in hashed form.
Depending on the service, providers act as processors on our behalf (Article 28 GDPR), as independent controllers or, for Meta and limited to the collection and transmission of data, as joint controllers. We do not sell data collected through cookies.
Some providers (Google, Meta, Pinterest, Stripe, PayPal) belong to groups based in the United States, and Botpress is based in Canada: data may therefore be transferred outside the European Economic Area. Transfers take place on the basis of a European Commission adequacy decision (for the United States, the EU-U.S. Data Privacy Framework for certified companies; for Canada, the adequacy decision for commercial organisations) or, failing that, of standard contractual clauses (Article 46 GDPR).
Retention: cookies last as long as shown in the tables in section 6; data held by providers is kept according to their policies and the retention settings of the respective services.
9. Managing cookies from your browser
In addition to the banner, you can view, block and delete cookies from your browser settings, or use private browsing. Blocking all cookies also disables technical ones and may prevent the cart, sign-in and payment from working.
For advertising based on your interests you can also use Your Online Choices and the settings pages of the individual providers listed in section 7.
10. Your rights
Under Articles 15 to 22 GDPR you may request access to your data, rectification, erasure, restriction of processing, portability, object to processing and withdraw consent at any time. To exercise these rights write to support@getinart.com. You also have the right to lodge a complaint with the supervisory authority of the EU Member State where you live, work or where the alleged infringement took place; in Italy this is the Garante per la protezione dei dati personali. More information is available in the Privacy Policy.
11. Changes to this policy
We update this policy whenever the tools used on the site change. The current version is always on this page, with the date of the last update. If changes affect the purposes for which you gave consent, we will ask for it again through the banner.