PRIVACY POLICY FOR VISITORS TO THE WWW.GEAL-PLAST.IT SITE

Information on the processing of the data of visitors who visit the website pursuant to Art. 13 of Regulation (EU) 2016/679

The purpose of this Privacy Policy is to describe the management methods of the www.geal-plast.it site, with reference to the processing of the personal data of users/visitors who consult it.

The policy is provided only for the above-mentioned site and not for other websites that may be consulted by the user through specific links.

Geal SRL with registered office in Travedona di Monate (VA) at Via Mazzini n. 182, CAP 21028, VAT no. 01560730127, Tel. 0332-977415, e-mail amministrazione@geal-plast.it, PEC geal@secmail.it, as Data Controller, guarantees compliance with the legislation on the protection of personal data (Reg. 2016/679/EU Legislative Decree 196/03, as amended by Legislative Decree 101/2018).

Users /visitors are invited to read this Privacy Policy carefully before sending any type of personal information by e-mail and/or filling in any electronic form on the site itself.

Data Controller.

In addition to the Data Controller company as identified above, any partner sites that from time to time participate in data processing activities autonomously may assume the role of independent Data Controllers.

Subject of the processing.

1) Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, successful, error, etc.) and other parameters related to the user's operating system and computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning.

The data on web contacts are not stored, however, for more than seven days, except for any investigations of computer crimes against the site.

2) Data provided voluntarily by users/visitors

If users/visitors, connecting to this site, send their personal data to access certain services, or to make requests by e-mail or send messages to institutional profiles/pages on social media (where this possibility is provided), as well as by filling in and forwarding forms on the site, they are aware that this involves the acquisition by the Data Controller of the sender's address and/or any other data personal data that will be processed exclusively to respond to the request, or for the provision of the service.

Specific information will be published on the pages of the site prepared for the provision of certain services.

The personal data provided by users/visitors will be communicated to third parties only if the communication is necessary to comply with the requests of the users/visitors themselves or for legal obligations (such as in the case of invoicing).

3) Cookies

In addition to the data expressly provided to the Data Controller, other data deriving from the user's navigation on the site may be recorded: when the user accesses it, in fact, the site may send the user a "cookie". A "cookie" is a small text file that the site can automatically send to your computer when you view our pages.

"Cookies" are used to make navigation more convenient, as well as to obtain information on the navigation of the individual user within the site and to allow the operation of some services that require the identification of the user's path through different pages of the site.

For any access to the site, regardless of the presence of a "cookie", the site records the type of browser (e.g. Internet Explorer, Chrome, Firefox), the operating system (e.g. Windows, Macintosh), the host and URL of origin of the user-navigator, as well as the data on the requested page.

These data can be used in aggregate and anonymous form for statistical analysis on the use of the site.

For the complete management of cookies, consult the "Cookie policy" page of this site.

Processing methods.

The processing is carried out using automated tools for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the relevant regulatory provisions in force.

Specific security measures are observed to prevent the loss of data, illicit or incorrect use of the same and unauthorized access, so as to allow access only to persons in charge or responsible appointed in accordance with the provisions of the law in force.

Purpose of the processing.

In addition to those indicated in the individual information notices that precede the completion of the forms in the various sections of the site, the purposes of the processing carried out by the Data Controller must be understood as:

• collection and storage and processing for the purpose of establishing and operational and administrative management of the contractual relationship established and the provision of the service offered on the site.
• support and contact with you: to respond to your requests and help you with any problems;
• processing of the personal data provided and those inferred from browsing the site in order to provide a service consistent with the indications transmitted during the use of the service;
• collection, storage and processing of data to carry out statistical analyses in anonymous and/or aggregate form.

Legal basis for processing.

The legal basis of the data processing carried out by the Data Controller through the website consists, as regards the indications referred to in the previous point sub a) and b), in the contract stipulated, or in the pre-contractual phase connected to it, with the Data Subjects, while as regards sub c) and d) the legal basis is to be found in the legitimate interest of the Data Controller in the free economic initiative referred to in art. 41 of the Constitution.

As regards the additional and future purposes that may require consent, this will be requested in a special form and must also be considered as a valid legal basis.

Recipients.

In addition to the Data Controller, in some cases, categories of Data Processors and authorized persons involved in the company organization (administrative, commercial, marketing, legal, accountant, system administrators) may have access to the data.

In addition, the Data Controller may make use of external parties (such as third-party technical service providers, carriers, hosting providers, cloud services, IT companies, communication agencies) who will be appointed as external Data Processors.

The updated list of Data Processors can always be requested from the Data Controller, by contacting the address indicated above.

Transfer to a third country.

The owner does not transfer the data of users/visitors to the site to other countries outside the European Union.

The data processed by the Data Controller will never be disseminated.

Place of data processing.

The processing related to the web services of this site takes place within the EU and therefore, on the basis of Reg. 2016/679/EU in a place to be considered suitable.

Time and place of data storage.

The data will be stored for a period of time not exceeding the achievement of the purposes, ("principle of storage limitation", art. 5 of the EU Regulation) or according to the deadlines provided for by law.

Optional or mandatory nature of the provision of data.

Apart from what is specified for browsing data that acquires data automatically, users/visitors are free to provide their personal data or not provide it. Failure to provide them may only make it impossible to obtain what has been requested. The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender's address, which is necessary to respond to requests for services, products or information, as well as any other personal data included in the message.

Rights of data subjects.

The person to whom the personal data refers has the right at any time under the GDPR to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request that it be supplemented, updated or corrected.

Requests should be addressed to Geal SRL with registered office in Travedona di Monate (VA) at Via Mazzini n. 182, CAP 21028, VAT no. 01560730127, Tel. 0332-977415, e-mail amministrazione@geal-plast.it, PEC geal@secmail.it.

In relation to the processing of the aforementioned data, the customer/user has the right to obtain from the Data Controller:

• confirmation of the existence or otherwise of your personal data, their communication in intelligible form and knowledge of their origin, as well as the logic on which the processing is based;
• the cancellation, within a reasonable time, of your data, their transformation into anonymous form or the blocking of those processed in violation of the law;
• updating the data, their correction or, when interested, their integration;
• certification that the operations referred to in points 2) and 3) above have been brought to the attention of those to whom they have been communicated, provided that it is not impossible or involves a disproportionate use of means;
• rectification or erasure of data concerning him or her or restriction of processing;
• has the right to revoke consent relating to optional processing not related to the execution of the contract signed with the Data Controller;
• he/she also has the right to object for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection, to request its portability, to exercise the right to be forgotten, as well as to contact both the ordinary Judicial Authority and the competent supervisory authority for the protection of personal data for any violation he/she believes he/she has suffered in the manner indicated on the website of the Guarantor itself at the address www.garanteprivacy.it.

Automated decision-making.

Automated decision-making processes are not carried out on the aggregate data collected, except for the purpose of better managing the site.

Minor.

In accordance with the provisions of art. 8 of the GDPR, no person under the age of 16, without the prior consent of their parents or guardians, may send information to this website, nor may they make purchases or complete legal acts on this site without the aforementioned consent, unless this is permitted by the regulations in force.