INFORMATION ON PROCESSING OF THE PERSONAL DATA
of the users who consult the website of G&G Partners S.r.l.
in accordance with article 13 of (EU) Regulation 2016/679
WHY THIS INFORMATION?
In accordance with (EU) Regulation 2016/679 (hereinafter “Regulation”), this page describes the methods of processing of the personal data of users who consult the websites of G&G Partners S.r.l. (hereinafter “G&G Partners”) electronically accessible at the following address: https://www.gegpartners.net/.
This information does not concern other websites, online pages or services to reach via hypertextual links published on the websites but related to resources outside the G&G Partners’ domain.
DATA CONTROLLER
Following consultation of the above-mentioned website data concerning natural persons identified or that can be identified may be processed.
Data Controller is G&G Partners S.r.l., with head office in Via Gabriele D’Annunzio No. 9, IT25018, Montichiari, Brescia (email: [email protected], certified email [email protected], telephone +39 030 9673339).
DATA PROCESSOR
The Data Processor (DP) can be reached at the following addresses: email
LEGAL BASIS FOR PROCESSING
The personal data specified on this page is processed by G&G Partners whenever one of the following conditions exists:
the User has given his consent for one or more specific purposes;
Note: in some legal systems the Controller may be authorized to process Personal Data without the consent from the User or on another legal basis specified in the following until the User opposes this processing (“opt-out”). This, however, shall not apply when processing of Personal Data is governed by European Law regarding protection of Personal Data;
processing is necessary for execution of a contract with the User and/or for execution of pre-contractual measures;
processing is necessary for compliance with a legal obligation to which the Controller is subject;
processing is necessary for execution of a task of public interest or for exercise of public powers with which the Controller is invested;
processing is necessary to pursue the lawful interest of the Controller or of third parties.
It is in any case always possible to ask the Controller to clarify the concrete legal basis of each processing and, in particular, to specify if the processing is based on the law, envisaged by a contract or necessary to finalize a contract.
TYPES OF DATA PROCESSED AND PROCESSING PURPOSES
Browsing data
The IT systems and software procedures used to operate this website acquire, during normal operation, some personal data. The transmission of this data is implicit in use of internet communication protocols.
This category of data includes IP addresses or domain names of the computers and the terminals employed by users, URI/URL identification addresses (Uniform Resource Identifier/Locator) for requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the state of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the IT environment of the user.
This data, necessary for enjoying the use of the web services, is also processed in order to:
- obtain statistical information on use of the services (most visited pages, number of visitors per time band or per day, geographical areas of origin, etc.);
- check proper operation of the services being offered.
Browsing data, after a period of thirty days, is retained in encrypted form for the time strictly necessary for achieving the organizational, productive, security and control purposes and pursuant to laws on this matter.
Data communicated by the user
Optional, explicit and voluntary sending of messages to the contact addresses of G&G Partners as well as filling out and sending in the forms included in the G&G Partners’ website entail acquisition of the sender’s contact data (e.g. first and last name, telephone number, company name, address, country, province, email, ZIP code, town) needed in order to reply as well as of all the personal data included in the communications.
Unless otherwise specified all the Data requested by the contact form is mandatory. If the User refuses to communicate this data it may be impossible for G&G Partners to provide the Service. Should the website indicate that some Data is optional then Users are free to refrain from communicating this Data without this having any consequences regarding the availability of the Service or its operativeness.
PURPOSE OF PROCESSING OF COLLECTED DATA
The User’s Data is collected to allow the Controller to provide the Service, to meet legal obligations, to answer requests or to take executive actions, to safeguard its own rights and interests (or those of Users or third parties), to identify any malicious or fraudulent activities as well as for the following purposes: Statistics, Contacting the User and Display of the contents of external platforms.
COOKIES AND OTHER TRACKING SYSTEMS
G&G Partners’ website is managed through a technology called “cookies”. These are small data files that are stored in the user’s computer when he accesses the website or parts thereof. Cookies help understand which part of the website is most trafficked, what is the path taken by website visitors and how much time they remain in the website. Cookies are used to study traffic paths in order to improve the performance of the website and best meet the interests and preferences of visitors. Cookies are also used by websites that provide counters to our website. Track/path registration and management activities are performed using procedures that make the data non-identifiable. Moreover, cookies may be used to recognize the user’s computer the next time the same user visits the website. This saves time and frees the user, for example, from having to register again or helps him to customize his Internet settings.
So-called “web beacons” can also be used on our website: this technology lets us see which visitors clicked on which key element (such as links or graphics) of a webpage or an email. Web beacons are usually used together with cookies.
If the user does not wish to accept cookies these can be disabled following the instructions of the manufacturer of the browser being used.
Any details regarding specific types of cookies used can be found in the single thematic websites.
Session cookies
The Portal system websites use:
- session cookies, necessary to manage authentication of the on-line services and reserved areas: use of these cookies (which are not permanently stored in the user’s computer and which are deleted when the browser is shut off) is strictly limited to transmission of session identifiers necessary to permit safe and effective exploration of the website;
- session cookies to balance the load, optimize website performance and reduce page loading times;
- cookies strictly necessary for correct operation of the websites or to save browsing preferences.
Storage of session cookies in terminals or browsers is controlled by the user on the servers. At the end of HTTP sessions information regarding cookies remains recorded in the service logs with retention times not greater than those for other browsing data.
Disabling these cookies makes it impossible to use part of the online services.
Analytical cookies
As a rule, the G&G Partners’ website uses third-party analytical cookies where the third party undertook to use the cookies only for provision of the service as well as to retain them separately and not to cross them with information which may be available.
G&G Partners avails itself of the Google Analytics service, an analysis tool from Google Inc. that allows to obtain anonymous and aggregate statistics that are useful for optimizing the websites and services being offered.
Analytical cookies can be disabled without any consequences on portal browsing. To disable them refer to the following section “How to disable cookies”.
Profiling cookies
The G&G Partners’ website may integrate, in some pages, functions developed by third parties and/or by third parties’ profiling cookies which may be installed while browsing.
The goal of integrating them is to assess the effectiveness of communication activities and grant knowledge and visibility to the G&G Partners’ trade business.
These parts may regard, by way of example:
- use of java script code whereby information on the users who have viewed a specific page, following publication of advertisements on Facebook, is recorded and sent to Facebook;
- use of services that permit interactions with social networks (e.g. “social plugins”) or with other external platforms through the Portal system pages (e.g. display of YouTube and Vimeo videos, Google Maps).
In these cases, or when access to the website is after “logging in” through your own Facebook, LinkedIn, Google or Twitter account certain personal information may be acquired by the managers of the social network platforms.
Management of information collected by “third parties” is governed by the related privacy notices for which you are asked to refer to the related Cookie Policy and Privacy Policy.
How to disable cookies
To disable all cookies It is possible to refuse consent to use of cookies by selecting the appropriate setting on your browser: non-authenticated browsing of the G&G Partners’ website shall in any case be available with all its functions.
We suggest you search for this option in the software help.
To disable third-party cookies
Disabling of third-party cookies is possible following the procedures described in the respective privacy notices and/or provided directly by the third-party company data controller.
To disable only Google Analytics cookies you can use the additional opt-out component provided by Google for the main browsers. In this way it will also be possible to use the on-line services of the G&G Partners’ website.
To cancel cookies already stored on the terminal
Even if authorization to use third-party cookies is cancelled, the cookies could have been stored in the user’s terminal before revocation. For technical reasons it is not possible to cancel these cookies. However the user’s browser permits them to be removed in its privacy settings. As a matter of fact the browser options encompass the option “Cancel browsing data”, which can be used to remove the cookies, website and plug-in data.
The G&G Partners’ website does not support “Do Not Track” requests.
The User is asked to consult the respective privacy policies to discover if any third-party services used support them.
DATA RETENTION PERIOD
Data is processed and retained for the time period required for the purposes for which data was collected.
Therefore:
Personal Data collected for purposes connected to execution of a contract between Controller and User shall be retained until execution of this contract has been completed.
Personal Data collected for purposes related to the lawful interest of the Controller shall be retained until this interest is satisfied. The User may obtain further information regarding the lawful interest pursued by the Controller in the related sections of this document or by contacting the Controller.
When processing is based on User’s consent then the Controller may retain the Personal Data for a longer time and until said consent is withdrawn. Moreover, the Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or with the order of an authority.
At the end of the retention period the Personal Data shall be deleted. Therefore, upon expiration of this term the right to access, deletion, rectification and portability of the Data can no longer be exercised.
DATA RECIPIENTS
The Controller takes appropriate security measures aimed at preventing unauthorized access to, disclosure, modification or destruction of the Personal Data.
Processing is done using IT and/or telematics tools with organizational methods and logics strictly related to the specified purposes. In certain cases access to the Data could be given, besides the Controller, to other subjects involved in the organization of this Application (administration, commercial, marketing staff, lawyers, system managers) or to external subjects (such as third-party suppliers of technical services, postal couriers, hosting providers, IT companies, communication agencies) which are also appointed, if necessary, as Data Processors by the Controller. The updated list of Processors may always be required to the Data Controller.
TRANSFER OF DATA ABROAD
Data is processed at the headquarters of the Controller and in every other place where the parties involved in the processing are located.
Individual data processors may transfer data abroad only when these processors have provided adequate guarantees regarding the safeguarding of data subjects (Chapter V of the Regulation).
The User is entitled to obtain information related to the legal basis of the transfer of Data outside the European Union or to an international organization under public international law or consisting of two or more countries, such as, for example, the UN, as well as regarding the safety measures taken by the Controller to protect the data.
RIGHTS OF DATA SUBJECTS
Data subjects are entitled to obtain from G&G Partners, in envisaged cases, access to personal data and data rectification or deletion or to limit processing that concerns them or to oppose processing (article 15 et seq. of the Regulation).
More specifically the User has the right to:
Withdraw his consent at any time. The User can withdraw his previously given consent for processing his own Personal Data.
oppose processing of his own Data. The User may oppose processing of his own Data when it is done on a legal basis different from that of consent. Further details regarding the right of opposition are specified in the following section.
access his own Data. The User has the right to obtain information on the Data processed by the Controller, on specific aspects of the processing and to receive a copy of the processed Data.
verify and make a request for rectification. The User may check the correctness of his own Data and ask for updating or correction.
obtain limitation of processing. When certain conditions occur the User can make a request for limitation of processing of his own Data. In this case the Controller shall not process the Data for any other purpose except for their retention.
obtain cancellation or removal of his own Personal Data. When specific conditions occur the User can make a request for cancellation of his own Data by the Controller.
receive his own Data or have data transferred to another controller. The User has the right to receive his own Data in a structured, commonly used machine-readable format and, where technically feasible, to obtain transfer to another controller without impediment. This provision shall apply when the Data is processed by automated tools and processing is based on the consent of the User, on a contract to which the User is a party or on contractual measures connected thereto.
When the Personal Data is processed in the public interest, when the Controller exercises his public powers or to pursue a lawful interest of the Controller then the Users have the right to oppose processing for reasons connected to their particular situation.
Users are reminded that, when their Data is processed for direct marketing purposes then they can oppose processing without providing any reason. Users, to discover if the Controller processes data for direct marketing purposes, may refer to the respective sections of this document.
A specific petition to G&G Partners shall be sent to the email: [email protected].
Requests are filed free of charge and processed by the Controller in the shortest time possible and in any case within one month of receipt of the request.
RIGHT TO LODGE COMPLAINTS
Data Subjects who believe that processing of personal data concerning them is being done through this website in breach of the provisions of the Regulation have the right to lodge a complaint to the Data Protection Authority (article 77 of the Regulation) or to take suitable legal action (article 79 of the Regulation).
SPECIFIC PRIVACY NOTICES
When requested by the User the G&G Partners’ website may provide the User, in addition to the information encompassed in this privacy policy, other additional and simultaneous privacy notices regarding specific Services or the collection and processing of Personal Data.
CHANGES TO THIS PRIVACY POLICY
Use of the Website by the User, including use on a tablet and/or a smartphone, implies full knowledge and acceptance of the contents and any guidelines included in this version of the privacy notice published by the Controller at the moment the website is accessed. G&G Partners warns that this privacy notice may be changed without prior notice and therefore recommends a periodic reading thereof.
Last review: January 2023
