Privacy Policy
Information on the processing of personal data
This notice is provided pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 "Personal Data Protection Code" and Article 13 of EU Regulation no. 2016/679 "General Data Protection Regulation".
GIAROLA Savem srl, with registered office at via Martiri della Libertà 86/b, 29010 Monticelli d'Ongina (PC), Italy, Tax Code and VAT number 00056260334, in its capacity as Data Controller, hereby informs you, pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 and Article 13 of EU Regulation no. 2016/679 (hereinafter, the "GDPR"), that your data will be processed in the manner and for the purposes set out below:
1. Subject matter of the processing
GIAROLA Savem srl cares about the protection of your personal data and complies with the applicable data protection legislation (Privacy Code and GDPR 2016/679). Your personal data is processed confidentially and is transferred to third parties only as provided for in this Policy or with your consent. We process the personal data you provide to us when using the website and/or after registering on the website. In particular, we process:
I. identifying, non-sensitive personal data (in particular, first name, surname, tax code, VAT number, email, telephone number – hereinafter, "personal data" or "data") directly provided by you upon registration on the website;
II. data not directly provided by you – and in any case acquired within the limits of Article 14(5) of the GDPR – the transmission of which is connected to the use of Internet communication protocols (by way of example only, page accesses, quantity of data transferred, status messages for completed accesses, session ID numbers, IP addresses, URL addresses, etc.). Such data makes it possible to reconstruct the path of your visits to the website.
2. Purposes of the processing
Your personal data is processed:
A) without your express consent (Article 24 (a), (b), (c) of the Privacy Code and Article 6 (b), (e) of the GDPR), for the following Service Purposes:
I. to process a contract request;
II. to carry out pre-contractual measures taken at your request;
III. to compile internal statistics;
IV. to fulfil pre-contractual, contractual and tax obligations arising from existing relationships;
V. to fulfil obligations set out by law, regulation, EU legislation or an order of the Authority;
VI. to protect the vital interests of the data subject or of another natural person;
VII. to perform tasks carried out in the public interest or connected to the exercise of official authority vested in the data controller;
VIII. to prevent or detect fraudulent activities or abuses harmful to the website;
IX. to pursue a legitimate interest of the Data Controller or of third parties, within the limits and under the conditions set out in Article 6(f) of the GDPR;
X. to exercise the rights of the Data Controller (by way of example only, the right of defence in legal proceedings).
B) Only with your specific and unequivocal consent (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR), for the following Marketing Purposes:
I. to send, by email, newsletters, commercial communications and/or advertising material regarding products and/or services, different from and/or dissimilar to those already purchased, offered by the Data Controller.
3. Nature of the provision of personal data
The provision of your Data for the purposes described in point 2, letter A), nos. i and ii) is mandatory. Without such provision, we cannot guarantee your registration on the Website, nor the possibility of acting on your requests. The provision of Data for the purposes described in point 2, letter B), is instead optional. You may therefore decide not to provide any data or to withdraw your permission for us to process data previously provided. In that case, you will no longer receive our newsletters, while you will continue to receive our services and will retain the right to register on the website.
4. Methods of processing
Your personal data is processed by means of the operations listed in Article 4 of the Privacy Code and Article 4(2) of the GDPR, namely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. The processing of your Data will be based on the principles of fairness, lawfulness and transparency and may also be carried out through automated means designed to store, manage and transmit it. It will take place using tools that are suitable, as far as reasonable and in light of the state of the art, to guarantee security and confidentiality, through the use of appropriate procedures that avoid the risk of loss, unauthorised access, unlawful use and disclosure.
5. Data retention period
The Data Controller will process personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes, and for no longer than 2 years from the collection of the data for the Marketing Purposes. After this retention period has elapsed, the data will be destroyed or anonymised.
6. Access to data
The personal data processed by the Data Controller will not be disseminated, that is, it will not be made known to unspecified persons in any possible form, including by making it available or allowing simple consultation. It may, however, be communicated to employees working under the authority of the Data Controller and to certain external parties who collaborate with them. In particular, your data may be made accessible to:
I. employees and collaborators of the Data Controller, and consultants authorised to manage the website and provide related services (by way of example: customer service, IT department, etc.), in their capacity as internal Processors and/or Persons authorised to process personal data and/or System Administrators;
II. third-party companies or other parties (by way of example only: credit institutions, professional firms, consultants, insurance companies, etc.) that carry out outsourced activities on behalf of the Data Controller, in their capacity as external Processors and/or Persons authorised to process personal data.
Your data may also be communicated, within the strictly necessary limits, to parties entitled to access it by virtue of provisions of law, regulations or EU legislation.
7. Communication of data
Without your express consent (pursuant to Article 24(a), (b), (d) of the Privacy Code and Article 6(b), (c) of the GDPR), the Data Controller may communicate your data, for the stated purposes, to supervisory bodies, judicial authorities and all other parties to whom communication is mandatory by law for the fulfilment of those purposes.
8. Data transfer
The management and storage of personal data will take place on servers of the Data Controller and/or of third-party companies appointed and duly designated as Data Processors, located within the European Union, or in accordance with Articles 45 et seq. of the GDPR. The servers are currently located in Verona (VR), Italy. The data will not be transferred outside the European Union. It is in any case understood that, should it become necessary to relocate the servers, whether in Italy and/or the European Union and/or non-EU countries, such relocation will always comply with Articles 45 et seq. of the GDPR. In such a case, the Data Controller hereby assures that the transfer of data outside the EU will take place in accordance with applicable legal provisions, entering into, where necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission.
9. Browsing data
The computer systems and software procedures used to operate the website may acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified data subjects, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified (i.e. parameters relating to the user's operating system and computer environment). Such data is used by the Data Controller solely to obtain anonymous statistical information on the use of the Site and to check that it is functioning correctly, and is deleted immediately after processing. Such data may also be used to establish liability in the event of hypothetical computer crimes against the Site.
Information on the processing of personal data
This notice is provided pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 "Personal Data Protection Code" and Article 13 of EU Regulation no. 2016/679 "General Data Protection Regulation".
GIAROLA Savem srl, with registered office at via Martiri della Libertà 86/b, 29010 Monticelli d'Ongina (PC), Italy, Tax Code and VAT number 00056260334, in its capacity as Data Controller, hereby informs you, pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 and Article 13 of EU Regulation no. 2016/679 (hereinafter, the "GDPR"), that your data will be processed in the manner and for the purposes set out below:
1. Subject matter of the processing
GIAROLA Savem srl cares about the protection of your personal data and complies with the applicable data protection legislation (Privacy Code and GDPR 2016/679). Your personal data is processed confidentially and is transferred to third parties only as provided for in this Policy or with your consent. We process the personal data you provide to us when using the website and/or after registering on the website. In particular, we process:
I. identifying, non-sensitive personal data (in particular, first name, surname, tax code, VAT number, email, telephone number – hereinafter, "personal data" or "data") directly provided by you upon registration on the website;
II. data not directly provided by you – and in any case acquired within the limits of Article 14(5) of the GDPR – the transmission of which is connected to the use of Internet communication protocols (by way of example only, page accesses, quantity of data transferred, status messages for completed accesses, session ID numbers, IP addresses, URL addresses, etc.). Such data makes it possible to reconstruct the path of your visits to the website.
2. Purposes of the processing
Your personal data is processed:
A) without your express consent (Article 24 (a), (b), (c) of the Privacy Code and Article 6 (b), (e) of the GDPR), for the following Service Purposes:
I. to process a contract request;
II. to carry out pre-contractual measures taken at your request;
III. to compile internal statistics;
IV. to fulfil pre-contractual, contractual and tax obligations arising from existing relationships;
V. to fulfil obligations set out by law, regulation, EU legislation or an order of the Authority;
VI. to protect the vital interests of the data subject or of another natural person;
VII. to perform tasks carried out in the public interest or connected to the exercise of official authority vested in the data controller;
VIII. to prevent or detect fraudulent activities or abuses harmful to the website;
IX. to pursue a legitimate interest of the Data Controller or of third parties, within the limits and under the conditions set out in Article 6(f) of the GDPR;
X. to exercise the rights of the Data Controller (by way of example only, the right of defence in legal proceedings).
B) Only with your specific and unequivocal consent (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR), for the following Marketing Purposes:
I. to send, by email, newsletters, commercial communications and/or advertising material regarding products and/or services, different from and/or dissimilar to those already purchased, offered by the Data Controller.
3. Nature of the provision of personal data
The provision of your Data for the purposes described in point 2, letter A), nos. i and ii) is mandatory. Without such provision, we cannot guarantee your registration on the Website, nor the possibility of acting on your requests. The provision of Data for the purposes described in point 2, letter B), is instead optional. You may therefore decide not to provide any data or to withdraw your permission for us to process data previously provided. In that case, you will no longer receive our newsletters, while you will continue to receive our services and will retain the right to register on the website.
4. Methods of processing
Your personal data is processed by means of the operations listed in Article 4 of the Privacy Code and Article 4(2) of the GDPR, namely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. The processing of your Data will be based on the principles of fairness, lawfulness and transparency and may also be carried out through automated means designed to store, manage and transmit it. It will take place using tools that are suitable, as far as reasonable and in light of the state of the art, to guarantee security and confidentiality, through the use of appropriate procedures that avoid the risk of loss, unauthorised access, unlawful use and disclosure.
5. Data retention period
The Data Controller will process personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes, and for no longer than 2 years from the collection of the data for the Marketing Purposes. After this retention period has elapsed, the data will be destroyed or anonymised.
6. Access to data
The personal data processed by the Data Controller will not be disseminated, that is, it will not be made known to unspecified persons in any possible form, including by making it available or allowing simple consultation. It may, however, be communicated to employees working under the authority of the Data Controller and to certain external parties who collaborate with them. In particular, your data may be made accessible to:
I. employees and collaborators of the Data Controller, and consultants authorised to manage the website and provide related services (by way of example: customer service, IT department, etc.), in their capacity as internal Processors and/or Persons authorised to process personal data and/or System Administrators;
II. third-party companies or other parties (by way of example only: credit institutions, professional firms, consultants, insurance companies, etc.) that carry out outsourced activities on behalf of the Data Controller, in their capacity as external Processors and/or Persons authorised to process personal data.
Your data may also be communicated, within the strictly necessary limits, to parties entitled to access it by virtue of provisions of law, regulations or EU legislation.
7. Communication of data
Without your express consent (pursuant to Article 24(a), (b), (d) of the Privacy Code and Article 6(b), (c) of the GDPR), the Data Controller may communicate your data, for the stated purposes, to supervisory bodies, judicial authorities and all other parties to whom communication is mandatory by law for the fulfilment of those purposes.
8. Data transfer
The management and storage of personal data will take place on servers of the Data Controller and/or of third-party companies appointed and duly designated as Data Processors, located within the European Union, or in accordance with Articles 45 et seq. of the GDPR. The servers are currently located in Verona (VR), Italy. The data will not be transferred outside the European Union. It is in any case understood that, should it become necessary to relocate the servers, whether in Italy and/or the European Union and/or non-EU countries, such relocation will always comply with Articles 45 et seq. of the GDPR. In such a case, the Data Controller hereby assures that the transfer of data outside the EU will take place in accordance with applicable legal provisions, entering into, where necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission.
9. Browsing data
The computer systems and software procedures used to operate the website may acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified data subjects, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified (i.e. parameters relating to the user's operating system and computer environment). Such data is used by the Data Controller solely to obtain anonymous statistical information on the use of the Site and to check that it is functioning correctly, and is deleted immediately after processing. Such data may also be used to establish liability in the event of hypothetical computer crimes against the Site.
COOKIE POLICY
General template of clauses for a “cookies” notice
(Covering the different types and purposes of cookies)
WHAT COOKIES ARE
The website of the company GIAROLA Savem Srl uses cookies to make its services simple and efficient for users browsing its pages. Users who access the Site will have minimal amounts of information placed on the devices they use, whether computers or mobile devices, in small text files called “cookies” saved in the directories used by the user’s web browser. There are various types of cookies: some make use of the Site more effective, others enable certain functionalities.
COOKIES OF THE SITE OPERATOR
– Necessary cookies
Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to protected areas of the site. The website cannot function properly without these cookies.
– Statistical cookies
Statistical cookies help website owners understand how visitors interact with the site by collecting and transmitting information anonymously: Google Analytics: used to send data to “Google Ireland Limited” for users operating within the European Economic Area (EEA) or Switzerland, and to “Google LLC” for other users, regarding the device and the user’s behavior. It tracks the user across devices and marketing channels.
– Font display services (Google Fonts)
The Site uses Google Fonts, a typeface display service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for users operating within the European Economic Area (EEA) or Switzerland, and by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for other users. Google Fonts is integrated through a direct call to Google’s servers when the page loads, in order to ensure the correct and uniform display of content. In this process, the user’s browser transmits to Google’s servers the IP address of the device used for browsing. The processing is carried out on the basis of the Controller’s legitimate interest pursuant to Art. 6(1)(f) of the GDPR. The data thus collected may be transferred to the United States of America. For EEA users, this transfer takes place in accordance with the safeguards provided by the GDPR. For more information on Google’s data processing, please refer to the Google privacy policy
– Marketing cookies
Marketing cookies are used to track visitors across websites. The aim is to display ads that are relevant and engaging for the individual user, and therefore of greater value to publishers and third-party advertisers.
INSTALLING/UNINSTALLING COOKIES, BROWSER OPTIONS
Users can object to cookies being stored on their device by configuring the browser they use for navigation. If they use the Site without changing their browser settings, it is presumed that they intend to receive all cookies used by the Site and to enjoy all functionalities. Below we list the methods offered by the main browsers to block the acceptance of cookies:
Safari: Apple support
Firefox: Mozzilla support
Chrome: Google support
Microsoft Edge: Microsoft support
General template of clauses for a “cookies” notice
(Covering the different types and purposes of cookies)
WHAT COOKIES ARE
The website of the company GIAROLA Savem Srl uses cookies to make its services simple and efficient for users browsing its pages. Users who access the Site will have minimal amounts of information placed on the devices they use, whether computers or mobile devices, in small text files called “cookies” saved in the directories used by the user’s web browser. There are various types of cookies: some make use of the Site more effective, others enable certain functionalities.
COOKIES OF THE SITE OPERATOR
– Necessary cookies
Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to protected areas of the site. The website cannot function properly without these cookies.
– Statistical cookies
Statistical cookies help website owners understand how visitors interact with the site by collecting and transmitting information anonymously: Google Analytics: used to send data to “Google Ireland Limited” for users operating within the European Economic Area (EEA) or Switzerland, and to “Google LLC” for other users, regarding the device and the user’s behavior. It tracks the user across devices and marketing channels.
– Font display services (Google Fonts)
The Site uses Google Fonts, a typeface display service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for users operating within the European Economic Area (EEA) or Switzerland, and by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for other users. Google Fonts is integrated through a direct call to Google’s servers when the page loads, in order to ensure the correct and uniform display of content. In this process, the user’s browser transmits to Google’s servers the IP address of the device used for browsing. The processing is carried out on the basis of the Controller’s legitimate interest pursuant to Art. 6(1)(f) of the GDPR. The data thus collected may be transferred to the United States of America. For EEA users, this transfer takes place in accordance with the safeguards provided by the GDPR. For more information on Google’s data processing, please refer to the Google privacy policy
– Marketing cookies
Marketing cookies are used to track visitors across websites. The aim is to display ads that are relevant and engaging for the individual user, and therefore of greater value to publishers and third-party advertisers.
INSTALLING/UNINSTALLING COOKIES, BROWSER OPTIONS
Users can object to cookies being stored on their device by configuring the browser they use for navigation. If they use the Site without changing their browser settings, it is presumed that they intend to receive all cookies used by the Site and to enjoy all functionalities. Below we list the methods offered by the main browsers to block the acceptance of cookies:
Safari: Apple support
Firefox: Mozzilla support
Chrome: Google support
Microsoft Edge: Microsoft support