Cookies and Third-Party Services
Last updated: 4 November 2026
This policy supplements and forms an integral part of Midinette's Privacy Policy. It details the service providers and third parties with whom we share personal data for the operation of the store, and the cookies and tracking technologies used. In case of discrepancy, the main Privacy Policy prevails.
Midinette is operated by NITOR S.r.l. a socio unico, with registered office at Via Giacomo Leopardi 14, 20123 Milan, Italy, which is the data controller of your personal data.
Service Providers and Third Parties
To provide you with the Services, we use the providers listed below, grouped by category. Each provider processes personal data exclusively for the purposes described and in accordance with its privacy policy.
| Category | Provider | Purpose of processing | Privacy Policy |
|---|---|---|---|
| E-commerce platform | Shopify Inc. | Store hosting, order management, account, and technical infrastructure | Shopify Privacy |
| Payments | Shopify Payments | Secure processing of card, digital wallet and local payment method payments; fraud prevention | Shopify Privacy |
| Payments | PayPal | Payments with PayPal; PayPal acts as an independent data controller | PayPal Privacy |
| Pay in instalments | Klarna | Instalment or deferred payment and assessment of the request; Klarna acts as an independent data controller | Klarna Privacy |
| Pay in instalments | Scalapay | Instalment or deferred payment and assessment of the request; Scalapay acts as an independent data controller | Scalapay Privacy |
| Seller reviews | Google LLC – Google Customer Reviews | Sending, on our behalf, an invitation to review the purchase experience; Google may receive transaction information (order details, email, estimated delivery date) | Google Privacy |
| Catalog and shopping | Google LLC – Merchant Center / Shopping | Publishing the product catalog (prices, availability, descriptions) on Google services | Google Privacy |
| Advertising and measurement | Google LLC – Google Ads | Personalized ads, remarketing, and conversion measurement | Google Privacy |
| Traffic analysis | Google LLC – Google Analytics | Website usage statistics and Service improvement | Google Privacy |
| Product reviews | Judge.me | Collecting and publishing product reviews on the website | Judge.me Privacy |
| Email marketing | Shopify Email | Sending promotional and transactional email communications; with marketing consent, measuring opens and clicks through tracking pixels | Shopify Privacy |
| Messaging and AI support | TextYess | AI assistant on WhatsApp for customer support and sales; processes phone number, conversations, and order data | TextYess Privacy |
| Advertising pixel | Meta Platforms (Meta Pixel) | Measurement, remarketing, and personalized ads on Facebook/Instagram | Meta Privacy |
| Advertising pixel | TikTok (TikTok Pixel) | Measurement, remarketing, and personalized ads on TikTok | TikTok Privacy |
| Advertising pixel | Pinterest (Pinterest Tag) | Measurement, remarketing, and personalized ads on Pinterest | Pinterest Privacy |
| Shipping | DHL | Order delivery and management of returns and exchanges (name, shipping address, contact details) | DHL Privacy |
| In-store pickup and returns | The company that runs the Midinette boutiques | Handing over Click & Collect orders and receiving returns on our behalf (name, order number, contact details) | — |
| AI-powered visual content production | Kive.ai | Processing of product photographs, including images featuring models. | Kive.ai Privacy |
The list may be updated when we add or remove a tool. The categories of providers remain as indicated: hosting and infrastructure, payments, marketing and communications, advertising and analytics, reviews, customer support, and logistics.
Artificial Intelligence
We use artificial intelligence systems for customer support on WhatsApp (the “Micaela” assistant, provided by TextYess) and for processing certain product images. The assistant always identifies itself as an AI system at the start of the conversation, and a handover to a human agent is always available.
Pursuant to Article 50 of Regulation (EU) 2024/1689 and Law 132/2025, we inform you that some images published on the website and our social media channels have been processed or generated using artificial intelligence tools.
Cookies and Tracking Technologies
The Services use cookies and similar technologies (web beacons, pixels, device identifiers). Within the services listed above, Google and other third parties may set and read cookies on your browser or use web beacons or similar technologies to collect information. We use:
- Technical/necessary cookies, essential for the website's operation (cart, session, security). They do not require consent.
- Statistical/analytical cookies, to understand how the site is used (e.g., Google Analytics).
- Marketing/profiling cookies, for personalized ads and remarketing (e.g., Google Ads, Meta Pixel, TikTok Pixel, Pinterest Tag).
Statistical and marketing cookies are activated only after your consent, which we collect through the cookie banner on the website upon first access.
Preference Management and Rights
You can manage or revoke consent for cookies at any time via the cookie banner/management panel on the site, as well as through your browser settings. You can also:
- manage Google ad preferences on the Google Ad Settings page;
- deactivate Google Analytics with the browser add-on;
- manage Meta, TikTok, and Pinterest ad preferences from their respective account settings;
- exercise the right to refuse the sale/sharing of data for targeted advertising on the Data Sharing Opt-out page.
If you reside in the European Economic Area or the United Kingdom, you have the rights described in our main Privacy Policy (access, rectification, erasure, objection, restriction, portability, and withdrawal of consent).
International Transfers
Some of the providers listed above (in particular Shopify, Google, Meta, TikTok, and Pinterest) may process your personal data outside the European Economic Area. In such cases, the transfer occurs based on recognized mechanisms, such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country deemed to offer an adequate level of protection.
Contact
For any inquiries regarding this policy or your personal data: NITOR S.r.l. a socio unico — Via Giacomo Leopardi 14, 20123 Milan, Italy — Email: info@midinette.online — Certified email (PEC): nitorsrl@pec.it