Dear user,
This page describes how the site is managed in relation to the processing of your personal data.
Pursuant to the articles. 13 and 14 of the European Regulation n. 679/2016 regarding the protection of personal data (hereinafter referred to only as GDPR) we therefore provide the information below in order to provide correct and transparent information on the data collected by our website and the related methods of usage.
The information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of directive no. 95/46/EC adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online and, in particular, the methods, times and nature of the information that data controllers must provide to users when they link to web pages, regardless of the purpose of the link.

 

1. Data acquisition
The personal data being processed are freely provided by you and acquired by us while browsing our site as well as by completing the various contact forms present (such as information requests, booking a visit, ordering kits, etc.) for requesting information. .

 

2. Data subject to processing
The processing will concern the following information:
a) Browsing data:
When you visit our website we send cookies, or technologies with similar functionality, to your devices, which allow us to monitor your behavior. These cookies send data back to our information analysis devices. We are therefore able to track which marketing channel your contact was generated from (for example Google AdWords, email, newsletter) and which pages you visited, and other similar information. We also receive information about how you use the site and interact with it, as well as the time spent on the site. Our website server also collects basic information relating to the search that was carried out on your browser when you visit the site. This data may contain information about the date and time of your last visit, the date and time of your browser search, your IP address, basic HTTP header information (such as URL references and user agent), and previous URLs you searched for. from your browser.
On this site it is also possible to select some functions that operate on personal data by sharing them with other entities or websites (such as Facebook, Twitter, Instagram, Youtube, etc.). These features transmit data to third parties who may use personal data in accordance with their own privacy policies. These features are operated by third parties, not associated with us, whose privacy policies we strongly recommend.
The use of cookies and other digital tools with similar functionality is described in more detail in our Cookie Policy which can be consulted online in the appropriate section.
b) Personal and contact details:
When you intend to request any information through the information request sections on the website, you will be asked for some personal and contact details as well as other personal information in order to be able to process your requests as best as possible and quickly.
c) Special data:
When you intend to request any information through the information request sections on the website, in some cases, you will be asked for particular data such as the expected date of birth or the week of gestation in order to be able to process your requests as best as possible and quickly.

 

3. Treatment methods
The processing will be carried out, also but not only with the aid of IT and/or automated means, with methods suitable to guarantee the safety, protection and confidentiality of the data and to prevent and limit the risk of loss, deterioration or theft of data. and to ensure its restoration within a reasonable time in the event of a "data breach".
The processing will take place through operations of: collection, recording, organisation, structuring, conservation, adaptation or modification, extraction, consultation, use, communication, comparison or interconnection, limitation, cancellation and destruction of data.
 

4. Purpose of the processing
Your personal data will be processed for the following purposes:
a) To enable the technical and functional management of our website (including maintaining IT security), for example by identifying parts of the website that have low latency;
b) To send you newsletters and communications with promotional and informative/advertising content about our products and services if you have given your consent;
c) For profiling purposes or for the creation of profiles (individual and/or aggregated) based on the profile and service choices and for the transmission of personalized communications, in the event that you have expressed your consent;
d) To allow us to process your requests, in the event that you wish to request information through the various information request sections on our website.

 

5. Legal basis of the processing 
The processing of your personal data will be carried out on the following legal bases:
a) on the consent freely and regularly given by you (for example in the case of marketing and profiling);
b) as necessary for pre-contractual obligations (such as the management of requests for information);
c) on the pursuit of legitimate interests of the Data Controller.
In details:
The legal basis for the purpose under a) is art. 6.1 f of the GDPR and art. 5.1 f, the art. 6.1 a of the GDPR, for the purposes under d) is represented by the art. 6.1 b of the GDPR.

 

6. Mandatory or optional nature of the processing 
The provision of your data for the purposes detailed in the previous point 4 "Purpose of processing" letter d) is mandatory, therefore your refusal will make it impossible to process the request you intend to make.
The release of data for the purposes referred to in letters b) and c) above is optional, therefore you can decide not to provide any data without jeopardizing relations with our company.

 

7. Recipients of personal data
The personal data collected will be processed by the Data Controller, the Data Processor appointed by him and the formally authorized and appropriately trained data processors (ex art. 29 of the GDPR). Your data may also be processed by consultants of any kind. , as data controllers, committed to carrying out technical and support tasks on behalf of the company.
Your data will not be disclosed but may be communicated to inspection bodies responsible for checks and controls relating to the regularity of legal obligations and to parent, controlled and associated companies.

 

8. Transfer of data to a third country
As regards the possible transfer of data to third countries, including countries that may not guarantee the same level of protection provided for by the GDPR, the processing will in any case take place on the basis of one of the conditions defined by the Regulation in compliance with the articles. 44 and following and articles. 45.

 

9. Data retention period 
The navigation data collected are used for the sole purpose of obtaining anonymous statistical information on the use of the site as well as to check its correct functioning and are deleted following processing.
Other personal data will be processed for the time strictly necessary to manage the requested service.
In the event that you have chosen to receive commercial communications from us or have authorized profiling, the acquired data will be used (processed) until you choose to revoke your consent and in any case no later than two years from when it was issued or renewed consent for data provided for commercial communications activities, no later than one year for data used for personalized commercial offers.

 

10. Rights of the interested party
We inform you that, at any time, pursuant to articles. 15-22 of the GDPR you may exercise the following rights:
1) Obtain confirmation of the existence or otherwise of processing of personal data concerning you and, in this case, obtain access to the same data and all information relating to the processing itself (right of access pursuant to art. 15 GDPR) ;
2) Obtain the rectification of inaccurate personal data without unjustified delay and the integration of incomplete data also through a supplementary declaration (right of rectification pursuant to art. 16 GDR);
3) Obtain the cancellation of your personal data without unjustified delay if: the data are no longer necessary with respect to the purposes for which they were collected or processed; have been treated unlawfully; must be deleted to comply with a legal obligation; has revoked consent or objects to the processing (right to be forgotten pursuant to art. 17 GDPR);
4) Obtain the limitation of processing when one of the following hypotheses occurs: if you contest the accuracy of the personal data, for the period necessary for the data controller to verify said accuracy; if the processing is unlawful and you oppose the deletion of the data and instead request that their use be limited; although the Data Controller no longer needs them for the purposes of the processing, the personal data are necessary for the establishment or exercise of a right in court; if you have objected to the processing, pending verification of the possible prevalence of the legitimate reasons of the Data Controller with respect to yours (right of limitation pursuant to art. 18 GDPR);
5) To receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit such data to another Data Controller without impediments on the part of the Data Controller to whom you provided them (right to portability ex art. 20 GDPR );
6) To oppose, in whole or in part, the processing. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing, including profiling to the extent it is connected to such direct marketing. If personal data are processed for scientific or historical research purposes or statistical purposes, for reasons related to your particular situation, you have the right to object to the processing, unless the processing is necessary for the execution of a task of public interest (right to opposition pursuant to art. 21 GDPR)
7) To revoke the consent given at any time;
8) To lodge a complaint with the Guarantor Authority for the protection of personal data.

 

11. Data controller and his representative in the European Union
To assert the rights described above you can contact, at any time, using this form, the Data Controller GS23 d.d.o .a., by means of a communication to be sent, by e-mail, to the following e-mail address: GS23SRL@gmail .com.

 

12. Data Protection Officer (i.e. Data Protection Officer – DPO)
Our Data Protection Officer can be contacted, via email, at GS23SRL@gmail.com

The Data Controller
GS23 s.r.l.