Web Privacy Policy – www.thegigi.it
This Privacy Policy, issued pursuant to art. 13 of European Regulation (EU) 2016/679 (hereinafter the GDPR) to those who interact with the company’s web pages, describes how the website
www.thegigi.it
processes users’ personal data. Please note that this Privacy Policy refers exclusively to this Website, and not to any other websites that may be linked to same. In accordance with the principle of transparency, this Privacy Policy sets out the methods, timeframes and nature of the information that the Data Controller shall provide Users when they connect to the Company’s web pages, regardless of the purpose of connection.
DATA CONTROLLER. The Data Controller is ERATO SRL (hereafter the “Company”), with registered offices in Via F. Guardi 27, Postioma di Paese (Treviso), ph. +390422484591, e-mail address info@erato1976.com.
PURPOSES AND LEGAL BASIS OF DATA PROCESSING. The User’s data is collected in order to allow the Data Controller to present and provide its services, as well as to provide answers to requests for information on the activities carried out and the services provided. The legal basis of such processing is the need to take steps at the request of the data subject (see art. 6(1)(b) of the GDRP).
MANDATORY OR OPTIONAL DATA PROVISION. Please note that data provision is mandatory and that non-provision will make it impossible for the Company to respond to your requests for information.
DATA PROVIDED VOLUNTARILY BY THE USER. The optional, explicit and voluntary sending of e-mails to the addresses listed on this Website involves the subsequent acquisition of the sender’s email address, so as to be able to respond to the requests, and of any other personal data included in the message.
DATA RETENTION PERIOD AND PROCESSING METHODS. Personal data is processed primarily using automated tools for the time strictly required to achieve the purposes for which it was collected. Therefore, data will be stored for a period not exceeding the time strictly required for the purposes for which it was collected or subsequently processed, and in any case for no more than 12 months. Such processing will always be based on the principles of fairness, lawfulness, transparency and protection of the confidentiality and rights of data subjects.
EXISTENCE OF AUTOMATED DECISION-MAKING. Data processing does not involve automated decision-making.
TRANSFERRING DATA TO A NON-EU THIRD COUNTRY. The Data Controller will not transfer personal data to a third country outside the EU or to international organisations, except as regards those third party services/components embedded in the Website, as set out in the relevant policies (see the Cookies Policy).
RECIPIENTS OR CATEGORIES OF RECIPIENTS. Personal data will be processed by the Data Controller and by persons strictly authorised by same. Data may be communicated to external parties such as consultants, professionals and suppliers of services instrumental to and necessary for achieving the stated purposes. Where necessary, such parties will be appointed external Data Processors pursuant to art. 28 of the GDPR. Data will not be disseminated.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY. The data subject has the right to lodge a complaint with the Italian supervisory authority (www.garanteprivacy.it ).
RIGHTS OF DATA SUBJECTS. At any time and where applicable, data subjects may exercise the rights of access to, rectification or erasure of personal data, the right to data portability, the right to restriction of processing and the right to object to same, as referred to in articles 15-20 of the GDPR, by sending an e-mail request to info@erato1976.com.