WHO WE ARE
Giemme S.r.l. (hereinafter the "Company"), with registered office in Italy, in Spoleto (PG), Via dei Tessili, 70-74, in carrying out its activities, pays the utmost attention to the security and confidentiality of the personal data of its customers.
The Company is the Data Controller of the personal data collected on this website.
YOUR PERSONAL DATA WHICH CAN BE COLLECTED
The following categories of personal data concerning you may be collected:
- Contact details - information on the name, place and date of birth, social security number, address, telephone number, mobile number, email address.
- Interests - information that you provide us about your interests, including the products you are interested in.
- Other personal data - information that you provide us regarding your date of birth, education or professional situation.
- Use of the website - information on how you use the website, open or forward our communications, including information collected via cookies (here you can find our Cookie Policy that regulates the details).
HOW WE COLLECT YOUR PERSONAL DATA
The Company collects and processes your personal data in the following circumstances:
- if you register on the website to use its features;
- for the purchase of our products;
- if you respond to our marketing campaigns, for example by filling out a response form, or by entering data on one of our websites;
- if other companies in our group or business partners legitimately transfer your personal data to us.
If you provide personal data on behalf of someone else you must make sure, in advance, that the interested parties have read this Privacy Policy.
Please help us keep your personal information up-to-date and inform us of any changes.
FOR WHAT PURPOSE YOUR PERSONAL DATA MAY BE USED
- Establishment and execution of contractual relationships and consequent obligations, including the communication related to services (for example, to execute purchase orders).
The Company may process your contact details for the purpose of the possible establishment and execution of contractual relations, the provision of services requested and the response to reports and complaints.
The Company may also use your contact details, and in particular your e-mail address, to provide you information relating to the service.
Presupposition for processing: fulfilment of contractual obligations.
The provision of data is mandatory to manage the contractual relationship; otherwise we will not be able to do business with you. - Operational management and purposes strictly related to this for access to the website, in particular the reserved areas of the same.
The Company collects your contact details and usage data on the website to allow you to access your Personal Area in order to:
(i) download documents relating to the services you have purchased from your Personal Area;
(ii) process other requests made through the website.
Presupposition for processing: fulfilment of contractual obligations.
The provision of data is mandatory to respond to your requests; otherwise we will not be able to do business with you. - Marketing to meet your needs and to provide promotional offers also in line with your preferences.
The Company may process your contact details for marketing and advertising purposes, aimed at informing you about promotional sales initiatives, realized through automated methods of contact (e-mail, text messages and other mass-messaging tools, push notifications, etc.) and traditional methods of contact (for example, phone call with an operator) or for market research and statistical surveys, where you give us your consent.
The Company may also process the contact details, your interests and other personal data that you wish to give us, to send you commercial communications in line with your preferences, based on a specific customer profile, where you release us a further consent.
Presupposition for processing: your consent.
Failure to provide the same does not affect the contractual relationships.
The consent can be revoked at any time. - Execution on behalf of third parties, of marketing activities on products and services of Group companies and also of third parties.
The Company may process your contact details for marketing and advertising purposes, aimed at informing you about promotional sales initiatives, realized through automated methods of contact (e-mail, text messages and other mass-messaging tools, push notifications, etc.) and traditional methods of contact (for example, phone call with an operator) or for market research and statistical surveys, where you give us your consent.
The Company may also process the contact details, your interests and other personal data that you wish to give us, to send you commercial communications in line with your preferences, based on a specific customer profile, where you release us a further consent.
Presupposition for processing: your consent.
Failure to provide the same does not affect the contractual relationships.
The consent can be revoked at any time. - Execution on behalf of third parties, of marketing activities on products and services of Group companies and also of third parties.
The Company could process your contact details for third parties, for marketing activities on products and services of Group companies and also third parties, realized through automated methods of contact (e-mail, text messages and other mass-messaging tools, push notifications) etc.) and traditional methods of contact (for example, phone call with an operator) or for market research and statistical surveys, where you release us with appropriate consent.
Presupposition for processing: your consent.
Failure to provide it does not affect the contractual relationships.
The consent can be revoked at any time. - Compliance with legally binding requests to fulfil a legal obligation, regulations or provisions of the judicial authority, as well as to defend a right in court.
The Company collects your contact details to fulfil a legal obligation and/or to defend one's right in court.
Presupposition for processing: legal obligations, to which the Company is obliged to comply.
HOW WE KEEP YOUR PERSONAL DATA SECURE
The Company uses all the security measures necessary to improve the protection and maintenance of the security, integrity and accessibility of your personal data.
All your personal data is stored on our secure servers (or properly stored paper copies) or on those of our suppliers or our business partners, and are accessible and usable according to our standards and our security policies (or equivalent standards for our suppliers or business partners).
Where we have provided you (or you have chosen) a password that allows you access to our website, applications or services we provide, you will be responsible for the confidentiality of this password and for the compliance with any other security procedure we may inform you about.
HOW LONG WE STORE YOUR PERSONAL DATA
We retain your personal data only for the time necessary to achieve the purposes for which it were collected or for any other legitimate related purpose. Therefore, if the personal data are processed for two different purposes, we will retain this data until the retention period with the longer term ceases. However, we will no longer process personal data relating to the purpose for which the retention period has ceased.
We limit access to your personal data only to those who need to use it for relevant purposes.
Your personal data that are no longer needed, or for which there is no longer a legal requirement for its conservation, are irreversibly anonymised (and thus can be stored) or destroyed safely.
Below we report the storage times in relation to the different purposes listed above:
Fulfilment of contractual obligations: the data processed to fulfil any contractual obligation may be retained for the entire duration of the contract and in any case not later than 10 years, in order to verify any differences including accounting documents (for example invoices).
Operational management and purposes closely related to this for access to the website: the data processed for this purpose may be kept for the duration of the contract and in any case not later than 10 years.
Purposes of customer satisfaction surveys: the data processed for this purpose may be kept for 24 months from the date on which we obtained your last consent for that purpose (with the exception of the opposition to receive further communications).
Marketing purposes also profiled and execution of marketing activities on behalf of other group companies and third parties: personal data processed for marketing purposes may be kept for 24 months from the date we have obtained your last consent for that purpose (with the exception of the opposition to receive further communications); for the purposes of profiled marketing, however, these data will be kept for 12 months.
In the case of disputes: in the event that we must defend or act or even make claims against you or third parties, we may retain personal data that we will reasonably need to process for such purposes, for the time when such a claim can be prosecuted.
WHO WE CAN SHARE YOUR PERSONAL DATA WITH
Your personal data can be accessed by duly authorized employees, as well as external suppliers, appointed, if necessary, responsible for processing, which provide support for the provision of services.
HOW TO CONTACT US
The contact details of the Company, as the data controller, and of the person in charge of protection of personal data (DPO) can be requested at the following e-mail address: info@giemmespoleto.com
YOUR RIGHTS IN THE FIELD OF DATA PROTECTION AND YOUR RIGHT TO ADVANCE COMPLAINTS TO THE CONTROLLER AUTHORITY
In certain conditions you have the right to ask the Company:
- to access to your personal data;
- the copy of the personal data you have provided us (the so-called portability);
- the correction of the data in our possession;
- the deletion of any data for which we no longer have any legal presupposition for processing;
- opposition to processing where required by applicable law;
- withdrawal of your consent, in the event that the processing is founded on consent;
- the limitation of the way in which we process your personal data, within the limits established by the law for the protection of personal data.
The exercise of these rights is subject to exceptions aimed at safeguarding the public interest (e.g. prevention or identification of crimes) and our interests (for example the maintenance of professional secrecy). In the event that you exercise any of the aforementioned rights, it will be our responsibility to verify that you are entitled to exercise it and we will give you feedback as a rule within a month. For any complaints or remarks on how we process your data, we will make every effort to respond to your concerns. However, if you wish, you can forward your complaints or reports to the authority responsible for data protection, using the relevant contact details: Guarantor for the protection of personal data - Piazza di Monte Citorio, 121 - 00186 Romme - Fax: (+39) 06.69677.3785 - Telephone: (+39) 06.696771 - E-mail: garante@gpdp.it - Certified mail: protocollo@pec.gpdp.it. For any controversy will be exclusively competent the Forum of Spoleto.
The last update of these conditions was written on 06/30/2022.
Information regarding online dispute resolution pursuant to Art. 14 Para. 1 of the ODR (Online Dispute Resolution Regulation):
The European Commission gives consumers the opportunity to resolve online disputes pursuant to Art. 14 Para. 1 of the ODR on one of their platforms. The platform (http://ec.europa.eu/consumers/odr) serves as a website where consumers can try to reach out-of-court settlements of disputes arising from online purchases and contracts for services.