DATA CONTROLLER
Gabrielli S.p.A., registered office in Via Mazzini, 58, 35013 CITTADELLA (PD) Italy. Share Capital Euro 20,000,000.00 fully paid, Company Register PD 00362740284 Tax Code – VAT no. IT 00362740284.
DATA PROTECTION OFFICER
The Data Controller has appointed Ms. Cathy La Torre as Data Protection Officer. She can be contacted at the following email address: dpo@gabrielli.it
LOCATION OF DATA PROCESSING
Processing connected with web services of this site is performed at the aforementioned registered office and is handled exclusively by personnel authorized to carry out processing, or by possible appointees who perform maintenance and secretarial operations.
Types of data processed
You will be asked to provide the following data in our contact form: name, surname, email, telephone number and the information your require.
Purposes of the processing
Your personal data will be exclusively processed for the following purposes:
- for requests and contacts;
- for browsing the website and processing anonymous statistics in relation to the data acquired from the user’s browsing experience;
- for fulfilling administrative and legal obligations connected with our activity;
- for technical information regarding Internet browsing (when collected through acquisition as, for instance, from IP resources, i.e. cookies);
- for receiving updates on Gabrielli Group Companies;
- for receiving personalized sales messages on the basis of previous purchases and contacts with the Companies of the Group.
The site uses technical cookies/sessions and also third parties’ cookies which are described more in detail in the specific notice which can be found here (Cookie Notice).
The legal basis of our data processing is:
art. 6, subparagraph 1 point b) and point f) of Reg. EU 2016/679 (for the purposes from no. 1 to no. 4), whereas it is art. 6 point a) for the purposes referred to at no. 5 and 6), (that is, a consent may be revoked at any time).
Compulsory or optional nature as regards the provision of data, consequences of any refusals
For the purposes of numbers from 1 to 4, the provision of your personal data is compulsory, as if they are not provided we will not be able to answer you and offer you the service you request. Should you not consent (optional) to the purposes referred to in numbers 5 and 6, we will not be able to send you emails with news on products or other information about our Group and you will not receive personalized notices. We would like to remind you that you can revoke your consent at any time through the unsubscribe procedure found at the bottom of each email.
Methods of data processing
Processing of data shall be carried out both manually and using electronic and automated tools; in particular, computer, telephone, online, audiovisual, cable or satellite, magnetic, paper and manual processing tools may be used and stored on servers located within the European Union. Your data shall be processed, under the Controller’s authority, only by specifically appointed subjects who are authorized and instructed as to the processing pursuant to art. 29 of Reg. EU 2016/679. Suitable security measures shall be observed pursuant to art. 5 and 32 of Regulation EU 2016/679 for preventing the loss of your data, unlawful or incorrect uses, non authorized accesses, involuntary deletions. Each person in charge of processing is bound by the principles of lawfulness and confidentiality in the processing. Your data are processed in compliance with the applicable law and using adequate security measures, in accordance with the law in force also pursuant to art. 5 and 32 of Regulation EU 2016/679.
Who can we transmit your personal data to?
Your personal data may be communicated within the EU, in full compliance with the provisions of EU Regulation 2016/679, to the following subjects: public authorities, when this is enforced by law or upon their request; external organizations and/or companies whom the Controller uses to perform connected or instrumental activities; external consultants. The Controller shall appoint third party subjects as processing officers in accordance with art. 28, who process data in its name and on its behalf. We would like to underline that the Company is part of the Gabrielli Group and, subsequently, requests shall be shared, depending on their content, with the Company which offers the service requested, so that pre-contractual negotiations may proceed.
The Companies of the Group are the following: Gabrielli S.p.A., which also includes Metalservice from Cittadella, Veneta Nastri and Gavinox from San Fior, Metalplasma from Curtarolo, Varcolor from Quinto Vicentino and Ocsa from Crocetta del Montello.
Duration of the Processing
Without prejudice to legal obligations, the personal data we process will be kept for a determined period, based on the requirements of judicial protection of rights and contractual requirements and obligations, also established by law, and in any case for all the time necessary to manage reporting. With regard to the newsletter and update service, as well as the profiling service, the contact shall be deleted in a short and reasonable time from the related data base when the consent is revoked, with the exception of emailing for managing orders and/or other activities connected with the contractual relationship underway.
Your rights
You can exercise the rights referred to in art. 15, 16, 17, 18, 2 and 21 of Regulation EU 2016/679 at any time by sending a written message to the following address: privacy@gabrielli.it. You can: ask for a confirmation whether or not your personal data exist in our databanks, check whether your personal data are correct or ask to update, rectify, integrate, access, delete them or limit their processing; request deletion or block your personal data anonymously if you deem that they are processed in breach of law.
Claims – Privacy Authority
We would like to remind you that if you believe that your right has been infringed, you have the opportunity to lodge a claim with the Privacy Authority, which can be contacted on the website http://www.garanteprivacy.it/.
