COOKIE POLICY
Information on cookies and other tracking technologies under Article 122 of Italian Legislative Decree 196/2003, Regulation (EU) 2016/679 and the Italian Data Protection Authority’s Guidelines of 10 June 2021
Last updated · 25 August 2026
1. Data Controller and scope
This Cookie Policy explains how cookies and similar technologies are used on www.memorabid.com, its language versions, restricted areas, and the pages through which Memorabid provides online auctions, Buy Now functions, marketplace services, charitable initiatives, experiences and related services (together, the “Website”).
The Data Controller is:
Memorabid S.r.l.
Registered office: Foro Buonaparte 59, 20121 Milan (MI), Italy
Email: info@memorabid.com
Website: www.memorabid.com
This notice supplements the Memorabid Privacy Policy, which explains personal-data processing, recipients, international transfers, retention periods and data-subject rights.
2. What cookies, trackers and similar technologies are
Cookies are small text files sent by a website to a user’s device and returned by the browser on later visits. The Website may also use technologies with similar functions, including local identifiers, pixels, tags, scripts, SDKs, local storage and device identifiers. This Policy refers to all of them as “Trackers”.
Trackers may be:
• first-party, when set or managed directly by Memorabid;
• third-party, when set or managed by a provider other than Memorabid;
• session-based, when deleted when the browser closes or the session ends;
• persistent, when retained until their stated expiry, consent withdrawal or deletion by the user.
A Tracker’s actual duration may depend on Memorabid’s configuration, the provider, browser and device. Third-party providers may change Tracker names, purposes and duration. The preference panel available on the Website and each provider’s notice are the most current operational references.
3. Classification criteria
Memorabid classifies Trackers according to their actual function, not only the technical label assigned by a provider. The categories are:
• Necessary: required to display the Website, maintain sessions, authenticate users, remember privacy choices, prevent abuse, protect auctions and payments, and provide a function requested by the user. They are not used for behavioural advertising.
• Functionality: enable requested features or integrations that are not strictly necessary for the Website’s basic operation.
• Experience: enhance the interface through third-party content, fonts, maps, videos and social features.
• Measurement: help Memorabid understand Website use, measure performance and troubleshoot problems, either in aggregate or at user/device level.
• Marketing: measure campaigns, build audiences, personalise advertising and recognise a device across websites or services.
A service may perform more than one function. In that case, Memorabid applies the category that offers users the greatest protection and, where required, blocks the service until consent has been obtained for the relevant category.
4. Legal grounds and consent
Necessary Trackers are used without consent to the extent permitted by Article 122 of the Italian Privacy Code because they are strictly required to transmit a communication or provide a service requested by the user. Any personal data collected through them are processed, depending on the circumstances, to perform a contract or pre-contractual steps, comply with law, or pursue Memorabid’s legitimate interest in service security and continuity.
Functionality, experience, measurement and marketing Trackers are activated only after an affirmative choice where consent is required by law. Consent is freely given, purpose-specific, informed, unambiguous, demonstrable and withdrawable at any time. Refusing optional Trackers does not prevent access to the Website’s essential features.
Continuing to browse, scrolling, closing the banner or remaining inactive does not constitute consent. “Accept”, “Reject” and “Customise” controls must be clear and free from deceptive design.
5. Necessary Trackers
5.1 Memorabid session, account and security
Memorabid uses first-party Trackers to maintain sessions, manage account access, remember language and technical settings, protect forms and requests, prevent fraud and ensure that auctions, bids, purchases and payments operate correctly. These normally last for the session or for the limited period required by the relevant function.
5.2 Consent management – iubenda
The iubenda consent-management platform records the preferences expressed by the user, categories accepted or rejected, policy version and technical evidence needed to demonstrate the choice. These identifiers are necessary to avoid showing the banner on every visit and to apply withdrawals or updates. Their ordinary duration may be up to 12 months, unless earlier renewal is required because processing materially changes or the previous choice cannot be recognised.
5.3 Google Tag Manager
Google Tag Manager, provided by Google Ireland Limited and/or Google LLC depending on processing location, is used to manage Website tags. The container operates as technical infrastructure; any non-necessary tag deployed through it remains subject to consent for its own category. Information: Google Business Data Responsibility.
5.4 Cloudflare
Cloudflare, Inc. provides security, malicious-traffic protection, network management and content-delivery services. It may use technical identifiers to distinguish legitimate from automated traffic and maintain a secure session. Duration depends on the security measure and may be session-based or persistent. Information: Cloudflare Privacy Policy.ù
5.5 Google reCAPTCHA
Google reCAPTCHA may be used on pages involving data submission or sensitive actions to distinguish real users from automated access and protect accounts, auctions and forms. It may collect device, interaction and network information and set security Trackers. Its use is limited to abuse prevention. Information: Google Privacy Policy and Google Terms.
5.6 Stripe and payments
When a payment method is registered or verified and during checkout, Stripe Payments Europe, Ltd. and other Stripe group companies may use technical identifiers required for fraud prevention, security, session management and transaction processing. Memorabid does not use those identifiers for its own advertising. Information: Stripe Privacy Center.
6. Functionality Trackers
6.1 Google Workspace
Memorabid uses Google Workspace services, provided by Google Ireland Limited, for operational and collaboration features connected with the service. When an integration is made directly available in the interface, the service may process usage data and technical information. It is activated according to the requested feature and, where required, with user consent. Information: Google Business Data Responsibility.
7. Experience Trackers
7.1 Font Awesome
Font Awesome, provided by Fonticons, Inc., displays icons and graphic components. The provider may receive the IP address and technical information required to deliver the content. Information: Font Awesome Privacy Policy.
7.2 YouTube
The Website may embed videos using the standard YouTube widget or privacy-enhanced mode. Google Ireland Limited and/or Google LLC may collect usage data and set Trackers when the user authorises or interacts with the content. Privacy-enhanced mode reduces tracking before interaction but does not necessarily eliminate all processing. Information: Google Privacy Policy.
7.3 Google Maps
The Google Maps widget displays maps and locations. When activated, Google may receive the user’s IP address, device data, approximate location and interaction information. Information: Google Privacy Policy.
7.4 Google Fonts
Google Fonts displays typefaces. When fonts are loaded from Google servers, the provider may receive the IP address and technical request data. Where technically feasible, Memorabid may host fonts locally to reduce such disclosures. Information: Google Privacy Policy.
7.5 Facebook Like button and social widgets
The Facebook Like button and social widgets, provided by Meta Platforms Ireland Limited, allow interaction with Facebook. If authorised, they may disclose usage data, IP address and the page viewed to Meta even where the user does not actively use the button. Information: Meta Privacy Policy.
8. Measurement Trackers
8.1 Google Analytics 4
Google Analytics 4, provided by Google Ireland Limited and/or Google LLC, helps Memorabid measure traffic, navigation, technical conversions and Website performance. It may process usage data, online identifiers, device information, referring page and Website events. Common _ga and _ga_ID Trackers normally last for up to 2 years, as configurable by Memorabid; session identifiers have shorter durations.
Google Analytics 4 is activated only after consent where it operates with identifiers or for purposes outside the exemption for strictly necessary tools. Where possible, Memorabid applies data minimisation, limited retention and controls over links to other Google products. Information and opt-out: Google Business Data Responsibility and Google Analytics Opt-out Browser Add-on.
9. Marketing Trackers
9.1 Meta Pixel and conversion measurement
Meta Pixel, provided by Meta Platforms Ireland Limited, measures campaign effectiveness, attributes conversions and builds or updates advertising audiences. It may use identifiers such as _fbp and _fbc, normally retained for up to approximately 3 months, together with event and device information. It is activated only with consent. Information and controls: Meta Privacy Policy and ad preferences.
9.2 Microsoft Advertising
Microsoft Advertising, provided by Microsoft Ireland Operations Limited and/or Microsoft Corporation, measures campaigns and conversions and, where authorised, personalises advertising. It may process online identifiers, usage data, referring page and device information. Duration varies according to the identifier and service configuration. It is activated only with consent. Information and controls: Microsoft Privacy Statement and Microsoft ad settings.
10. Duration and inventory updates
The periods in this Policy are maximum or indicative durations and may be shortened by Memorabid’s configuration, user deletion or provider rules. Session Trackers normally expire when the browser closes; persistent Trackers expire on their stated date unless a permitted new interaction renews them.
The service list reflects Memorabid’s iubenda-policy configuration on the update date. Before publication and following each material technical change, Memorabid verifies by scanning and testing its banner that:
• no optional Tracker is set before consent;
• rejection and withdrawal controls work effectively;
• names, categories, providers and durations match the live configuration;
• tags loaded through Google Tag Manager follow user preferences;
• embedded content remains blocked until the required choice is made.
11. Managing or withdrawing preferences
Users may accept all optional Trackers, reject them, or choose individual categories in the banner on first access. Preferences can be changed or withdrawn at any time through the “Cookie Settings” command or equivalent, which must remain available in the Website footer.
Withdrawal does not affect the lawfulness of processing before withdrawal. After a change, Memorabid stops future activation of the relevant Trackers; users may also delete Trackers already stored through their browser or device settings.
The banner may be shown again before 6 months where services or purposes materially change, Memorabid cannot determine whether a Tracker is already stored, or a choice is no longer valid. Otherwise, Memorabid avoids repeatedly asking users who have refused consent.
12. Browser, device and provider controls
Most browsers allow users to view, delete and block cookies, including on a site-by-site basis. Blocking all necessary Trackers may prevent account access, auction participation, preference storage or payment.
Instructions for major browsers:
For interest-based advertising, users may also consult YourOnlineChoices, Network Advertising Initiative, Digital Advertising Alliance and, for mobile apps, AppChoices. These tools operate independently from Memorabid’s panel and may not cover every provider.
13. International transfers and third-party responsibility
Some providers may process data outside the European Economic Area. Where Memorabid determines processing purposes and means, it applies the safeguards described in the Privacy Policy, such as adequacy decisions, the EU–US Data Privacy Framework where applicable, or Standard Contractual Clauses with necessary supplementary measures.
For Trackers directly managed by third parties, those providers may act as processors, joint controllers or independent controllers depending on the service. Their notices explain additional processing and controls that Memorabid cannot directly manage.
14. User rights
Where information collected through Trackers is personal data, users may exercise the rights of access, rectification, erasure, restriction, portability and objection under Articles 15–22 GDPR and withdraw consent at any time. Requests may be sent to info@memorabid.com.
Users may lodge a complaint with the Italian Data Protection Authority or the supervisory authority in their Member State, without prejudice to any other administrative or judicial remedy.
15. Changes to this Cookie Policy
Memorabid may update this Policy to reflect technical, organisational or legal changes. The current version is published on the Website with its update date. If a change affects purposes or requires fresh consent, the relevant Trackers remain blocked until the user makes a new choice.
16. Contact
For questions about Trackers or privacy preferences, contact Memorabid S.r.l., Foro Buonaparte 59, 20121 Milan (MI), Italy · Email: info@memorabid.com.