Data protection

GA S.A.S. Di Garavaglia Christian & C. (hereinafter "SieMatic") takes your privacy very seriously and strictly adheres to legal requirements. We are committed to your privacy and protect the confidentiality of your data. The following statement provides an overview of this protection and the type of data collected for what purpose.

SECURITY AND PROTECTION OF YOUR PERSONAL DATA

We consider it our primary responsibility to protect the confidentiality of the personal information you provide and to protect it from unauthorized access. Therefore, we apply state-of-the-art security standards with extreme care to ensure that your personal information is protected to the maximum extent possible.

As a private company, we are subject to the provisions of the European Data Protection Regulation (DSGVO) and the provisions of the Federal Data Protection Act (BDSG). We have taken technical and organizational measures to ensure that the data protection regulations are complied with both by us and by our external service providers.

Note on the responsible entity

The entity responsible for data processing on this website is:

GA S.A.S. Di Garavaglia Christian & C.

V.le Monte Santo 8

20124 - MILAN

Tel: +39 02 29013279

info@garavagliarredamenti.com

Controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

I. Definitions
Legislation requires that personal data be processed lawfully, in good faith and in a manner that is understandable to the data subject ("lawfulness, fairness, transparency"). To ensure this, we inform you of the individual legal definitions also used in this privacy policy:

1.    PERSONAL DATA

Personal data" is any information relating to an identified or identifiable natural person (hereinafter referred to as "the data subject"); an identifiable person is defined as a natural person who, directly or indirectly, in particular by the assignment of an identifier - for example a name - can be identified according to a serial number, location data, online identification, which are an expression of the physical, mental, economic, cultural or social characteristics of the same.

2.    TREATMENT

The "processing" of any person, whether or not by automated means, is a specific action or any process associated with personal data, such as collection, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure for transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3.    RESTRICTION OF PROCESSING

"Restriction of processing" is the marking of saved personal data in order to restrict their future processing.

4.    PROFILE

"Profile" means any type of automated processing of personal data that involves using them to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, analyzing or predicting personal preferences, interests, reliability, behavior, location or change of location of that natural person.

5.    PSEUDONYMIZATION

"Pseudonymization" is the processing of personal data in such a way that the same can no longer be assigned to a specific person without further information being provided, provided that such additional data is kept separate and subject to technical and organizational measures to ensure that the same cannot be assigned to an identified or identifiable natural person.

6.    FILE SYSTEM.

"File system" means any structured collection of personal data that is accessible by specific criteria, regardless of whether such collection is centralized, decentralized, or organized on the basis of functional or geographic considerations.

7.    RESPONSIBLE

 "Controller" is a natural or legal person, public authority, body or institution which, alone or jointly with others, decides on the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or Member State law, the controller or the specific criteria for its appointment may be provided for by Union law or Member State law.

8.    PROCESSOR

"Processor" means a natural or legal person, public authority, body or institution that processes personal data on behalf of the controller.

9.    RECIPIENT

"Recipient" means a natural or legal person, public authority, agency or other entity to whom personal data is disclosed, regardless of whether it is a third party.However, authorities that may receive personal data under Union or member state law in connection with a particular mission are not considered recipients; the processing of such data by such authorities must comply with applicable data protection rules in accordance with the purpose of the processing.

10.    THIRD PARTY.

"Third Party" is a natural or legal person, public authority, institution or other that processes personal data under the direct responsibility of the data subject, the controller and the processor.

11.   CONSENT

The "consent" of the data subject is any voluntary consent given unambiguously in the form of a statement or other clearly confirmed act by which the data subject agrees to the processing of his or her personal data.

II. Legality of processing

The processing of personal data is only lawful if there is a legal basis for the processing. The legal basis for the processing, in accordance with Article 6 para. 1

lit. a - f DSGVO, may consist in particular of the following:

1.         The data subject has given his or her consent to the processing of personal data concerning him or her for one or more specific purposes;

2. the processing is necessary for the performance of a contract to which the data subject is party or for the performance of any pre-contractual action taken at the request of the data subject

3. the processing is necessary for compliance with a legal obligation to which the controller is subject;

4. the processing is necessary in order to protect the vital interests of the data subject or of any other natural person

5. the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority delegated to the controller

6. the processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or the fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child.

 

§ 1 INFORMATION ON THE COLLECTION OF PERSONAL DATA

(1) Below we provide information on the collection of personal data during the use of our website. Personal data is any data that relates to your person, e.g. name, address, e-mail addresses, usage patterns.

(2) Data protection officer

We have appointed a data protection officer for our company.

GA S.A.S. Di Garavaglia Christian & C.

Garavaglia Christian

V.le Monte Santo 8

20124 - MILANO

Tel: +39 02 29013279

info@garavagliarredamenti.com

(3) When you contact us by e-mail or via a contact form, we store the information you have provided (your e-mail address and possibly your name and telephone number) to answer your questions. We delete data resulting from this context after archiving is no longer necessary or limit processing if there are legal retention requirements.

(4) If we rely on service providers for individual functions of our offer or want to use your data for commercial purposes, we will inform you in detail about the respective transactions. In doing so, we will also mention the criteria established for the duration of storage.

§ 2 YOUR RIGHTS

(1) You have the following rights in relation to personal data concerning you:

- right to information,

- right to rectification or erasure,

- the right to restriction of processing,

- the right to object to the processing,

- the right to the transmissibility of the data.

(2) You also have the right to complain about the processing of your personal data to a data protection supervisory authority.

§ 3 COLLECTION OF PERSONAL DATA WHEN YOU VISIT OUR WEBSITE

(1) In the case of purely informational use of the website, i.e. if you do not register or provide us with information, we only collect personal data that your browser transmits to our server. If you wish to view our website, we collect the data specified below, which are technically necessary for us to enable you to view our website and to ensure stability and security (legal basis is Art. 6 paragraph 1 S.lit.f DS-GVO ):

- IP address

- Date and time of the request

- Time difference from Greenwich Mean Time (GMT)

- Content of the request (concrete page)

- Access status / HTTP status code

- Amount of data transmitted each time

- Website from which the request originates

- Browser

- Operating system and its interface

- Language and version of the browser software.

(2) In addition to the above data, cookies are stored on your computer when you use our website. Cookies are small text strings that are stored on the hard drive assigned to the browser you are using and through which the body that sets the cookie (here through us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

(3) Use of Cookies:

(a) This website uses the following types of cookies, the scope and operation of which are explained below:

- Temporary cookies (see b)

- Permanent cookies (see c).

b) Temporary cookies are automatically deleted when you close your browser. These include in particular session cookies. These store a so-called session ID, with which various requests from the browser can be assigned to the common session. This will enable recognition of your computer when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Permanent cookies are automatically deleted after a set period, which may vary depending on the cookie. You can delete cookies in your browser's security settings at any time.

d) You can configure your browser settings to suit your needs and refuse to accept third party cookies or all cookies. Please be aware that if you do so, you may not be able to use all features of this site to its fullest extent.

(e) We use cookies to identify you for follow-up visits if you have an account with us. Otherwise, you must log in for each visit.

f) We use cookies to determine if you visit our site through a specific partner retailer and to facilitate a return to your retailer.

 

(4) Use of Usercentrics

This website uses the consent management platform Usercentrics, a service of Usercentrics GmbH, Rosental 4, 80331 Munich (hereinafter: "Usercentrics"), on the basis of Art. 6 (1) sentence 1 lit. c DSGVO. Usercentrics collects log file and consent data on certain cookies and tools by means of a JavaScript. This JavaScript makes it possible to inform visitors about their consent to certain tags on our website and to obtain, manage and document this consent. In particular, the following data are processed (1) the consent data (anonymised logbook data (Consent ID, Processor ID, Controller ID), Consent Status, Timestamp, (2) the data of the devices used (including shortened IP addresses (IP v4, IP v6), device information, Timestamp) and (3) user data (including eMail, ID, browser information, SettingIDs, Changelog).
 
The data collected in this way is stored for a period of 1 year or is deleted if you request us to do so. Mandatory legal storage obligations remain unaffected.
 
We have concluded a contract with Usercentrics for commissioned processing in accordance with Art. 28 DSGVO, in which Usercentrics undertakes to process the data received only in accordance with our instructions and to comply with the EU data protection level.
For more information on data protection at Usercentrics, please refer to the provider's privacy policy. Alternatively, you can also contact Usercentrics' data protection officer directly: epost@datenschutz-agentur.de.

(5) Use of Google Analytics (GA4)

This website uses Google Analytics 4, a web analytics service provided by Google Inc,.1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. a DSGVO in conjunction with. § 25 para.1 TTDSG. The tool uses the "Measurement Protocol" and thus collects specific parameters and information about user interactions, such as in particular the page URL, the language used, the location, the page title, the referrer, the device type, the screen resolution, the operating system and other relevant data. The information collected in this way is transferred to Google's servers and stored there. The storage period is 14 months
 
We have concluded a contract with Google on commissioned processing in accordance with Art. 28 DSGVO, in which Google undertakes to process the data received only in accordance with our instructions and to comply with the EU level of data protection. Specifically, we have commissioned Google to use the data collected via our website solely for the purpose of evaluating the use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The data collected in this way may be merged with data from other data processing operations described in this privacy policy for the purpose of optimising customer service and communication.
 
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the tool and related to your use of the website by Google by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout. In addition, you can revoke your consent to data collection and further processing at any time with effect for the future by calling up the cookie settings and changing your selection there.
 
Further information on GA4's data protection can be found in the provider'sprivacy policy.

(5) Using Google Tag Manager

(a) We use Google TAG Manager to control advertising. Tag Manager collects personally identifiable information on your device and transmits it directly from your device to other affiliated marketing providers who process it in accordance with this Privacy Policy. Tag Manager saves or does not transfer this data. To ensure function, U.U. cookies are set. The TAG manager is also responsible for your opt-out to individual marketing providers.

b) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Privacy policy: www.google.com/intl/it / policies / privacy.

c) Legal basis for the use of Google TAG Manager is Article 6 paragraph 1 S. 1 lit. b DSGVO. The Tag Manager is necessary for the function of the page.

(9) Integration of Google Maps

a) On this website we use the Google Maps offer. This enables us to show you interactive maps directly on the website and allows you to use the map function conveniently.

b) By visiting the website, Google receives information that you have accessed the relevant page of our website. In addition, the data referred to in § 3 of this statement will be transmitted. This happens regardless of whether Google provides a user account that you have logged in to or if there is no user account. When you log in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or the creation of tailor-made websites. This evaluation is carried out in particular (also for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You can object to the formation of these user profiles by exercising your rights with Google.

(c) Further information on the purpose and scope of data collection and processing by the plugin provider can be found in the provider's privacy policy. You can also find more information about your rights and privacy settings below:http://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the United States and is subject to the EU-US Privacy Shield, www.privacyshield.gov/EU-US Framework.

 

§ 4 PROCESSOR

We use external service providers (processors) e.g. for shipping goods, newsletters or payment transactions. In order to ensure the protection of your personal data, a separate processing of your personal data has been carried out by the service provider.

§ 5 Objection or revocation of the processing of your data

(1) If you have given consent to the processing of your data, you may revoke it at any time. Such revocation will affect the admissibility of the processing of your personal data after you have so expressed.

(2) Insofar as we base the processing of your personal data on a balancing of interests, you may object to the processing at any time. This is the case if, in particular, the processing is not required to fulfill a contract with you, which we indicate each time in the following function description. In case of disagreement, we ask you to explain why we should not process your personal data as we have done. In the event of your reasoned objection, we will examine the situation and either discontinue or adapt the data processing or indicate to you our valid and legitimate reasons on the basis of which we would like to continue with the processing.

(3) You may, of course, object to the processing of your personal data for commercial and analytical purposes at any time. Regarding the withdrawal of consent to the processing of data for commercial purposes you can contact us at the following addresses:

GA S.A.S. Di Garavaglia Christian & C.

V.le Monte Santo 8

20124 - MILAN

Tel: +39 02 29013279

info@garavagliarredamenti.com

The privacy policy is based on the legal basis. From time to time it is necessary to adapt the content of this Privacy Policy for future data collection and any legal changes. We reserve the right to change this policy at any time. We will also post the modified version of the Privacy Policy here. If you visit us again, you should therefore read the Privacy Policy again.