PRIVACY POLICY

Browsing data

In the course of their normal operation, the IT systems and software procedures used to run this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified data subjects but which, by its very nature, could  through processing and association with data held by third parties  make it possible to identify users.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. These data are used solely to obtain statistical information on the use of the site and to check that it is working correctly. The data could be used to establish liability in the event of hypothetical computer crimes against the site.

Data provided voluntarily

In the “contact us” and “newsletter” sections, you will be asked to provide personal data. In this case, you will be provided with the information notice pursuant to Article 13 of the GDPR concerning the processing of personal data in relation to the purpose pursued. Consent to the processing of the data by the Data Controller will be requested.

Provision of data

Apart from what is specified for browsing data, the provision of data for further processing purposes is optional. Failure to provide it may make it impossible to pursue such further purposes specifically, it will not be possible to receive the requested information, book a visit to our showroom or send a CV.

Purposes of processing and scope of communication of personal data

The Data Controller will process personal data:

• To enable browsing of the website;
• For the technical and commercial administration of the website;
• To respond to any requests for contact or information from users;
• To subscribe to our newsletter.
  
  

Methods of processing

• Your personal data will be processed by automated means.
• Your data will be processed by the Data Controller’s employees and collaborators who have been expressly appointed as persons authorised to process it pursuant to Article 29 of the GDPR.
• Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.
• Our website uses a hosting service provided by a provider based within the European Union, with which SLAs (Service Level Agreements) have been signed ensuring the protection of personal data in compliance with the GDPR.
  
  

Communication of data

Your data being processed may be communicated to parties contractually linked to the Data Controller, belonging to the following categories:

• Operators of platforms providing Social Network or Analytics services;
• Companies handling the maintenance and support of the website;
• External collaborators with commercial functions;
• Partner companies in the development of products and services;
• Public security authorities.

The parties belonging to the above categories act as Data Processors pursuant to Article 28 of the GDPR, or operate in full autonomy as separate Data Controllers. The list of any processors is constantly updated and available at the Data Controller’s premises.

Your data will not be disclosed in any way.

Please note that this notice does not apply to any other websites that the user may consult via links on our site, which are to be regarded as autonomous data controllers and must refer to their own privacy policy.

Rights of the data subject

• You have the right to obtain from the controller the erasure (right to be forgotten), restriction, updating, rectification, portability and objection to processing of your data, as provided for by Articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.
• Pursuant to Article 77 of the GDPR, the data subject may submit a report or complaint to the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), located at Piazza Venezia, 11 – 00186 Rome, email: urp@gpdp.it
• To exercise your rights, you can send a communication to the address indicated below or an email to info@gesmspa.com

Data Controller

The Data Controller is GESM S.P.A FASHION FACTORY, with registered office at Via Quarena, 187 – 25085 Gavardo (BS) Italy.