Information notice on the processing of personal data.
(Articles 13 and 14 EUROPEAN REGULATION NO. 679/2016)
Dear Visitor,
the undersigned Giafra Srl, with registered office at corso Mazzini, n.166, 87100 - Cosenza (CS) ITALY, Tax Code and VAT no. 02101790786, in its capacity as “Data Controller”, informs you, pursuant to Articles 13 and 14 of European Regulation no. 679/2016 (hereinafter the “EU Regulation”), that your data will be processed as set out below:
1. Subject Matter of the Processing
The Data Controller informs you that personal, identifying data (for example, first name, surname, company name, address, telephone, e-mail, banking and/or payment references, etc.), hereinafter referred to as “personal data” or simply “data”, relating to you, acquired also verbally, directly or through third parties in the past, as well as those that will be collected in the future, may be subject to processing in full compliance with the EU Regulation. The Data Controller carries out the processing lawfully, specifically for the performance of a contract to which you are a party or for the implementation of pre-contractual measures (e.g. preparation of a quotation, etc.) requested by you (art. no. 6 of the EU Regulation).
Processing of data means any operation or set of operations concerning the collection, recording, organisation, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination and destruction of the data itself.
2. Legal basis and Purposes of the processing
Legal basis: EU Regulation no. 679/2016
A) without your express consent (art. 6 lett. b), c), e) of the EU Regulation), for the following Purposes:
- to fulfil the pre-contractual, contractual and tax obligations arising from relationships in place with you;
- to fulfil the obligations provided for by law, by a regulation, by Community legislation or by an order of the Authority (such as, for example, in the field of anti-money laundering);
- to exercise the rights of the Data Controller, for example the right of defence in legal proceedings;
- for the keeping of general accounts;
- for management purposes (invoicing, any document management, etc.);
- for the management of receivables;
- for statistical analysis and quality control;
- for insurance management;
- for technical assistance.
In particular, your data will be processed for purposes connected with the implementation of the following obligations, relating to legislative or contractual obligations:
- Technical and Functional access to the Website; no data is kept after the Browser is closed;
- Advanced navigation purposes or personalised content management;
- Statistical and Analysis purposes of the navigation and of the users.
B) Only subject to your specific and separate consent (art. 7 of the EU Regulation), for the following commercial and/or marketing and/or profiling Purposes:
- sending, via e-mail, post and/or sms and/or telephone contacts, of newsletters, commercial communications and/or advertising material on products or services offered by the Data Controller and/or surveying the degree of satisfaction with the quality of what has been carried out at your request;
- sending, via e-mail, post and/or sms and/or telephone contacts, of commercial and/or promotional communications from third parties (for example, business partners).
3. Methods of processing
The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2) of the EU Regulation and specifically: collection, recording, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction, blocking. Your personal data are subject to both paper-based and electronic and/or automated processing (in any case suitable to guarantee the security and confidentiality of the data).
4. Data retention periods and other information
The Controller will process the personal data for the time necessary to fulfil the purposes referred to above and in any case for no longer than the terms provided by law from the termination of the relationship for the Purposes relating to the relationship in place.
With reference to the personal data subject to Processing for Marketing Purposes or Processing for profiling purposes, they will be retained in compliance with the principle of proportionality and in any case until the purposes of the processing have been pursued or until the specific consent is withdrawn by the data subject.
Specifically, the Data Controller will process the data for no longer than 2 years from the collection of the data for Marketing Purposes and one year for the data collected for profiling Purposes.
The personal data provided by you will be processed “lawfully, fairly and transparently”, protecting your confidentiality and your rights.
A periodic review is envisaged on an annual basis on the data processed and on the possibility of deleting them if they are no longer necessary for the intended purposes.
5. Access to the data
Your data may be made accessible for the purposes referred to in points 2.A) and 2.B) above:
- to members, employees and collaborators of the Data Controller in Italy and abroad, in their capacity as persons appointed and/or internal processors of the processing and/or system administrators;
- to third-party companies or other parties who carry out outsourcing activities on behalf of the Data Controller, in their capacity as external processors of the processing (by way of example: associated firms, lawyers, data processing companies, certifying bodies, accounting/tax consultant and in general all the Bodies responsible for audits and controls regarding the correct fulfilment of the purposes indicated above, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, tax offices, Municipal Bodies and/or Municipal Offices, consultants and companies for services and for safety in the workplace, who may in turn communicate the data, or grant access to it, among their members, users and their respective successors in title for specific market research. The data collected and processed may also be communicated, in Italy and abroad, to subcontractors, suppliers, for the management of information systems, to carriers, forwarding agents and customs agents).
For the sake of brevity, the detailed list of such figures is available at our registered office and is at your disposal.
6. Communication of the data
Without the need for express consent (art. 6 lett. b) and c) of the EU Regulation), the Data Controller may communicate your data for the purposes referred to in point 2.A) above to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those parties to whom communication is mandatory by law for the fulfilment of the purposes indicated above.
Said parties will process the data in their capacity as autonomous Data Controllers.
During and after browsing, your data may be communicated to third parties, in particular to:
- Google: Advertising service, Advertising targeting, Analytics/Measurement, Content personalisation, Optimisation;
- Google AdWords: Advertising service, Advertising targeting, Analytics/Measurement, Content personalisation, Optimisation;
- Google Analytics: Advertising targeting, Analytics/Measurement, Optimisation.
Your data will not be disseminated.
7. Data transfer
The personal data are stored on devices located at the registered office of the Data Controller or at providers, within the European Union. It remains understood in any case that the Data Controller, should it become necessary, shall have the right to move the data also to non-EU countries. In such a case, the Controller assures as of now that the transfer of data outside the EU will take place in compliance with the applicable legal provisions, subject to the conclusion of the standard contractual clauses and checks provided for by the European Commission.
Both with regard to the data present on its own devices, and for any data present at providers, the Data Controller has implemented adequate technical and organisational measures to guarantee an appropriate level of security, in full compliance with the provisions of art. 32 of the EU Regulation.
Navigation: your navigation data may also be transferred, limited to the purposes set out above, to the following states: - EU Countries, - United States.
Cookie management: should you have doubts or concerns regarding the use of cookies, it is always possible for you to intervene to prevent their setting and reading, for example by changing the privacy settings within your browser in order to block certain types.
Since each browser, and often different versions of the same browser, differ, even considerably, from one another, if you prefer to act independently through your browser preferences you can find detailed information on the necessary procedure in your browser's guide.
8. Nature of the provision of data and consequences of refusal to reply
The provision of data for the purposes referred to in point 2.A) above is mandatory. In their absence, we will not be able to guarantee you the Services indicated in 2.A).
The provision of data for the purposes referred to in point 2.B) above is instead optional. You may therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in such a case, you will not be able to receive newsletters, commercial communications and advertising material and/or anything else pertaining to the Services offered by the Data Controller.
You will in any case continue to be entitled to the Services referred to in point 2.A).
9. Rights of the data subject
In your capacity as data subject, you have the rights set out in art. 15 of the EU Regulation reported below, and precisely:
1. you have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and, in that case, to obtain access to the personal data and to the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
e) the existence of the right of the data subject to request from the Data Controller rectification or erasure of personal data or restriction of processing of personal data concerning them or to object to their processing;
f) the right to lodge a complaint with a supervisory authority (the Data Protection Authority);
g) where the data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making, including profiling referred to in art. 22, paragraphs 1 and 4 of the EU Regulation, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2. Where your personal data are transferred to a third country or to an international organisation, you have the right to be informed of the existence of appropriate safeguards pursuant to art. 46 of the EU Regulation relating to the transfer.
3. The Data Controller shall provide a copy of your personal data undergoing processing should you so request.
Should you request further copies, the Data Controller may charge you a reasonable fee based on administrative costs. If you make the request by electronic means, and unless you indicate otherwise, the information will be provided to you in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.
Furthermore, where applicable, you may enjoy the rights set out in articles 16 to 22 of the EU Regulation and precisely you have:
- the right to rectification of personal data;
- the right to be forgotten (right to erasure);
- the right to restriction of processing;
- the right to data portability;
- the right to object;
- the right to lodge a complaint with the Supervisory Authority.
You also have the right to withdraw at any time any consent already given, without affecting the lawfulness of the processing based on the consent given before the withdrawal.
10. Methods of exercising the rights
You may exercise your rights at any time by sending:
- a registered letter with return receipt to the undersigned (see the address indicated on the letterhead);
- an e-mail to the address giafrasrl.cs@pec.it
11. Minors
What is offered by the Data Controller and forms the subject of the relationship in place with you does not envisage the intentional acquisition of personal information referring to minors. Should information about minors be inadvertently recorded, the Data Controller will delete it promptly, at the request of the data subject.
12. Personal data not obtained from the data subject
It may happen that the undersigned is not the Data Controller to whom you gave your personal data, but is instead a joint controller of the processing or an external processor of the processing, and that therefore your data reached the undersigned second-hand due to a contract governing the parties. In this case, it is specified that the undersigned will do its utmost to ensure that you have been informed and have given consent to the processing. You may ask the undersigned at any time about the origin of the acquisition of your data.
13. Controller and Appointed persons
Below we provide you with some information that it is necessary to bring to your attention, not only in order to comply with legal obligations, but also because transparency and fairness towards our clientele is a founding part of our activity.
Data Controller. The Data Controller of your personal data is Giafra Srl on behalf of the legal representative, responsible towards you for the legitimate and correct use of your personal data, whom you may contact for any information or request at the following contact details: telephone +39 0984795594, e-mail: giafrasrl.cs@pec.it.
Appointed persons. The updated list of the persons appointed to the processing is kept at the registered office of the Data Controller.
14. Cookies
Cookies are text files that are automatically saved on the user's computer during their browsing. Their purpose is to make the experience of using the website more complete, as they act as tools for storing the user's preferences.
This website uses proprietary and third-party cookies described below; their presence is subject to the functionalities envisaged for the website during the design phase:
Technical cookies
Technical cookies are essential for the correct functioning of some areas of the Website. For this reason, technical cookies are always used on the Website regardless of the user's preferences. In particular, the Website uses: PHPSESSID (duration of the browsing session); it contains information about the browser session and allows users to access the Website.
Reserved area cookie
Where a reserved area is present, a cookie is generated able to remember the user's username and password.
In this way, such information will not have to be re-entered at each subsequent visit.
Mobile navigation cookie
With the aim of making navigation experiential also on latest-generation devices, this website is equipped with a cookie able to detect, and store, the access device used. Based on the information collected, the most suitable version of the website will be presented.
E-shop order recovery cookie
Where an e-commerce area is present, the system stores the user's interaction with the purchase area, generating a cookie able to recover the orders placed.
Third-party cookies - Google Analytics
This website uses third-party cookies belonging to Google Inc. for the collection of users' navigation data. The data thus collected are used solely for the purpose of generating statistical reports within the Google Analytics analysis tool.
A demographic profiling of the users may also be carried out, extracting statistically relevant data including age range, gender and interest categories.
Further information on the processing of data by Google Inc. can be found at the following address http://www.google.com/analytics/learn/privacy.html
To deactivate Google Analytics for display advertising or to customise the types of ads shown, you can access the address https://www.google.it/settings/ads
To completely deactivate the collection of statistical data by Google Analytics, you can install the browser add-on, freely downloadable from the address https://tools.google.com/dlpage/gaoptout/
Other active third-party cookies may be: AddThis ( http://www.addthis.com/privacy ), Bing ( https://privacy.microsoft.com/it-it/privacystatement ), CloudFlare ( https://www.cloudflare.com/it-it/privacypolicy/ ), Facebook ( https://www.facebook.com/policies/cookies/ ), Feedaty ( https://www.feedaty.com/privacy ), HotJar ( https://www.hotjar.com/privacy ), Linkedin ( https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy ), ShareThis ( https://www.sharethis.com/privacy/ ), TrustedShop ( https://www.trustedshops.it/legal-notice-privacy.html ), Twitter( https://help.twitter.com/it/rules-and-policies/twitter-cookies ), Yotpo ( https://www.yotpo.com/privacy-policy/ ), Zendesk ( https://www.zendesk.com/company/customers-partners/cookie-policy/ )
To discover all the cookies active on this website, you can use the service available at the address http://www.cookie-checker.com/ or similar services.
Please note that all the data collected with cookies on this website will never be provided to third parties other than Google Inc. or its certified partners.