PRIVACY POLICY

In compliance with article 13 EU Regulation 2016/679

 

In accordance with EU Regulation 2016/679 (hereinafter GDPR), this document describes the processing of personal data by the Company here below mentioned.

1. DATA CONTROLLER

Company Name: GURISAN SEDIE di Fornasarig Nicola & C. s.n.c.
P.iva / C.F.: 00459290300
Address: Via Sottorive 28/1, Dolegnano – 33048 S. Giovanni al Natisone (UD)
Telephone: 0432 756 442
Surname and name of Data Controller: Furlani Piero
e-mail: gurisan@pec.it

2. CATEGORIES OF DATA AND PURPOSES OF THE PROCESSING

2.1. CUSTOMERS AND SUPPLIERS DATA

Personal data provided by customers and suppliers are processed in paper and / or digtal format for pre-contractual activities or to follow up with the contracts (GDPR, article 6, paragraph1, letter b).

2.2. PARTNER DATA AND POTENTIAL CUSTOMERS

During the commercial activity may be collected some personal data of potential customers. These data are processed and stored by the Data Controller for the purposes of legitimate interests (GDPR, Article 6, paragraph 1, letter f) for direct marketing (Recital 47). In order to carry out this type of treatment, was made an analysis in order to ensure thet interest, rights and foundamental freedoms of the interested parties are not infrigned.
The interested parties have, at any time, the right to oppose to the processing of personal data through the opt-out procedures present in the communications, on website, or by request to the contact details here above.

2.3. DATA COMMUNICATED BY USER

The Optional, explicit and voluntary sending of messages and emails to the owner’s contact addresses, a well as the compilation and forwarding of the forms on the website, entail the acquisition of the sender’s contact data, necessary to reply, as well as all personal data included in communications.
The collected data could be used for the following purposes:

  • to respond to requests;
  • to improve our Website (using users’ feedback to improve our services);
  • to create promotions, surveys and sending information to users about topics that we belive may be of interest;
  • to send emails with information and updates.

Specific information will be published on the website.
The data communicated by the user through the website will be kept as long as the user does not explicitly ask to delate them.

2.4. NAVIGATION DATA

The computer system and procedures provided for the function of website collect cartain personal information during normal operation, the transmission of which is subject to the use of data exchange protocols on internet.
This category of data may include IP addresses or domain names of computers and PC used by users, addresses in URI/ URL (Uniform Resource Identifier / Locator) notation of the resources requested, the time of request, the method used for submitting the request to the server, the code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system.
These data are processed for the purpose of:

  • Statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
  • Check the correct mode of operation of the services

Browsing data are acquired and processed through the Google analytics platform and Google’s servers keep these data for 26 months.

1.5. COOKIES AND OTHER TRACKING SYSTEMS

The website uses “cookies” to improve the user’s experience.
The kinds of cookies used are following:

  • Technical cookies necessary for the correct mode of operation of the site;
  • Session cookies (non persistent) and cookies for the aggregate statistical analysis of data navigation strictly limited for safe and efficient navigation;
  • Cookies for the statistical analysis of site visits, these cookies are provided by Google Analytics;
  • Profiling cookies in order to provide customised promotions, if required, based on users preferences, these cookies are provided by Google Analytics and Facebook for remarketing activities and Sendinblue for email marketing.

The storage of cookies in PC or browsers is under control of the user. Users can choose whether or not to activate cookies using the button below. Please don’t mind that if some coockies are disabled, some parts of website may not work.

2.6. SPECIAL CATEGORIES OF DATA

May be collected data described as “particular categories of personal data”, those data could reveal racial or ethnic origin, political opinions, religious beliefs or union membership, health status.

2. OPTIONAL PROVISION OF DATA

We would inform the users that, except of navigation data, the communication of data is optional, but any refusal may not allow the correct handlig of contact requests and the supplying service forwarded by the users.

3. LEGAL BASIS FOR THE PROCESSING

The personal data collected may be processed starting from the following legal bases:

  • Because processing is necessary for the execution of the contract of which the user is part of the execution of pre -contactual measures adopted by request of user;
  • Because the data controller is subject to fulfill legal obligation necessary for processing data which data controller is subject (for example the issue of invoices);
  • Because there is a legitimate interest of data controller that does not infringe the interests or fundamental rights and freedoms of the users.
    Personal data can be collected through several tools including:
  • Requests by forms on the website;
  • Requests by email addresses;
  • Requests from others means of communication including telephone, chat and other electronic or non-electronic tools.

5. CATEGORIES OF RECIPIENTS

The personal data collected are processed by the Company staff who act on the basis of specific instuctions provided in relation to the purposes and methods of the processing.
The data may be communicated to all subjects whom have the right of access recognized by regulatory provisions.
The data may be transferred to third parties only to comply with civil, fiscal, accounting and administrative obligations.
Personal data are not sent or transferred to a third country or to international organisations.
Personal data are not sold to third party companies for any reason.

6. METHOD AND STORAGE TIME

The necessary data will be enclosed in the records and registers required by law and will be transmitted in compliance with the law provisions.
The collected data are saved on the Company’s systems for a time estabilished by current legislation or as long as the interested party makes an explicit request for cancellation

7. SUBJECT’S RIGHT

We would inform you, as interested party, that in addition to the right to lodge a complaint to competent authority, you also have the rights listed below, which you can assert by making a specific written request to the Data Controller as indicated in point 1.
The users have the right to obtain, in the case provided, access to personal data (art. 15 of GDPR), rectification (art. 16 of GDPR), cancellation (art. 17 of GDPR), the limitation of tratment (art. 18 of GDPR), the right to data portability (art. 20 of GDPR), the right to oppose to the processing (art. 21 of GDPR) or not to be subjected to an automated decision-making process including profiling (art. 22 of GDPR).

8. CLAIMS

Data subjects who belives that the processing of personal data occurs in violation of the provisions of the GDPR have the right to lodge a compliant (art. 77 of GDPR) to the Data Controller or to refer to the appropriate judicial offices (art. 79 of GDPR).

9. MODIFICATINS TO THIS INFORMATION

The Data Controller may modify and update this Privacy policy in his sole discretion and in any time.
If this Privacy policy will be modified, it will be published on the Company website.
We encurage people interested in the processing of their personal data to visit the website periodically, checking the update date at the bottom of ptivacy policy.

Date, 10 DECEMBER 2018