Privacy Policy
The information is also based on Recommendation no. 2/2001 that the European authorities for the protection of personal data, brought together in the Group established by art. 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online, and, in particular, the manner, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the link, and the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on Cookies.
Personal data (Art. 4 GDPR): any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his physical, physiological, genetic, mental, economic, cultural or social identity; (C26, C27, C30).
Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or the domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
Data communicated by the interested party
The optional, explicit and voluntary sending of messages to the contact addresses, as well as the filling in and forwarding of the forms on the Owner's website, entails the acquisition of the sender's contact data, necessary to reply, as well as all the personal data included in the communications.
The data controller, pursuant to Articles 4 and 24 of EU Reg. 2016/679, is GIORGETTI SPA, with registered office in Via Manzoni, 20 - Meda 20821 (MB), in the person of its legal representative. Contact details are as follows: tel. 0362 75275; e-mail: privacy@giorgetti.eu
Cookies
For more information on the cookies used by this website, see the cookies policy at the following link
|
Purpose of processing
|
Legal basis |
Period of data retention | Nature of provision |
| A. Website navigation
| Legitimate interest of the Owner (art. 6, par. 1, lett. f) GDPR): activities strictly necessary for the operation of the site and the provision of the navigation service on the platform. | Up to the duration of the browsing session | The provision of navigation data is necessary in order to allow the navigation of the website. Failure to provide it will make it impossible to navigate the site. |
| B. Filling in the contact request form | Pre-contractual measures (art. 6 par. 1 lett. b) GDPR): execution of pre-contractual measures taken at the request of the data subject. | 1 year | The provision of data is necessary to receive a response from the Controller. Failure to provide the data will make it impossible to obtain what has been requested. |
| C. Direct marketing activities, through subscription to the newsletter service | Consent (art. 6 par. 1 lett. a) GDPR): the data subject has freely given his consent to the processing of his personal data. | Until consent is revoked (Opt-out) | The provision of data is optional and in the absence of the same, your data will not be processed for the pursuit of this purpose. Refusal to provide data will not affect the usability of the other purposes indicated. |
| D. Profiling of the user for sending promotional communications concerning activities/products/services in line with his/her interests | Consent (art. 6 par. 1 lett. a) GDPR): the data subject has freely given his/her consent to the processing of his/her personal data | 5 years, unless the consent is revoked (opt-out), whichever is earlier | The provision of data is optional and in the absence of the same, your data will not be processed for the pursuit of this purpose. Refusal to provide data will not affect the usability of the other purposes indicated. |
| E. Data transfer for marketing purposes by third parties (group companies) | Consent (art. 6 par. 1 lett. a) GDPR): the data subject has freely given his consent to the transfer of his personal data to third parties for the purpose of sending his own promotional messages (exclusively group companies) | Until revocation of consent (Opt-out), to be exercised in respect of the third party which, following the transfer of the data for marketing purposes, is the autonomous Controller for the marketing activity carried out by the same | The provision of data is optional and in the absence of the same, your data will not be processed for the pursuit of this purpose. Refusal to provide data will not affect the usability of the other purposes indicated. |
| F. Registration to the reserved area of the site | Pre-contractual measures (art. 6 par. 1 lett. b) GDPR): execution of pre-contractual measures taken at the request of the data subject. | For the entire duration of the registration | The provision of data is necessary. Failure to provide the data will make it impossible to obtain what has been requested and to use the Owner's services. |
| G. Sending CVs for job applications | Pre-contractual measures (art. 6 par. 1 lett. b) GDPR): execution of pre-contractual measures taken at the request of the data subject. | Maximum 24 months | The provision of data is necessary. Failure to provide personal data will result in the inability to apply. |
| H. Online purchase of products | Contractual measures (Art. 6 para. 1 letter b) GDPR): execution of contractual measures adopted at the request of the data subject. | For the duration of the contractual relationship and up to 10 years after termination of the contractual relationship. | The provision of data is necessary. Failure to provide the data will make it impossible to obtain what has been requested and to use the services of the Data Controller. |
| I: Receipt of invitations to participate in events and initiatives promoted by the data controller | Consent (art. 6 par. 1 let. a) GDPR): the data subject has expressed his/her free consent to the processing of his/her personal data | Until withdrawal of consent (Opt-out) | The provision of data is optional and in its absence, the data will not be processed for the pursuit of this purpose. The refusal of the transfer will not affect the usability of the other purposes indicated. |
Recipients
The personal data provided may be communicated to recipients who will process the personal data as autonomous data controllers or as data processors (art. 28 GDPR) or as authorised persons acting under the authority of the Data Controller (art. 29 GDPR), in order to comply with the contracts in place with the Company or for related purposes. Precisely, the data may be communicated to recipients belonging to the following categories:
-subjects that provide services for the management of the computer system used by the Data Controller and the telecommunications networks (including the website and e-mail);
-free professionals, studies or companies in the context of assistance and consultancy relationships;
-competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request.
The list of data processors is constantly updated and available at the Data Controller's head office.
Data transfer to a third country and/or international organisation
Data of a personal nature provided will not be transferred outside the European Economic Area (EEA).
Automated process
There is no fully automated decision-making process since, through the intervention of the operator, the Data Controller carries out profiling activities, in particular it elaborates consumer profiles and analyses consumer habits and choices in order to improve the commercial offer and services proposed.
Rights of the data subject | Complaint Control Authority
You may assert your rights as expressed in Articles 15 et seq. of EU Regulation 2016/679 by contacting the Data Controller by sending an email to privacy@giorgetti.eu. You have the right, at any time, to ask the Data Controller for access to your personal data, their rectification, erasure, and restriction of processing. In addition, in the cases provided for, you have the right to object at any time to the processing of your data. In the cases provided for, you have the right to the portability of your data, in which case the Controller shall provide you with the personal data concerning you in a structured, commonly used and machine-readable format. In addition, you have the right to object, at any time, to the processing of your data based on legitimate interest and, in the cases provided for, you have the right to withdraw the consent given without affecting the lawfulness of the processing based on the consent before withdrawal. If you wish to stop receiving marketing communications, simply write an email to privacy@giorgetti.eu with the subject line "unsubscribe marketing" at any time. To stop receiving personalised profiled marketing communications, simply write an e-mail at any time to privacy@giorgetti.eu with the subject line "cancellation of profiling". To no longer receive communications relating to invitations to events or initiatives promoted by the Data Controller, please write an email to privacy@giorgetti.eu with the subject "cancellation from the invitation list". Without prejudice to any other administrative and jurisdictional recourse, if you believe that the processing of data concerning you, violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Garante per la protezione dei dati personali (https://www.garanteprivacy.it/).
Changes to the Privacy Policy
We reserve the right to change, update, add or remove parts of this privacy policy at our discretion and at any time. In order to facilitate such verification, the policy will contain an indication of the date of update.