OUR PRIVACY POLICY
the processing of personal data by GIPS s.a.s. di Gelpi Mario & Co. (”GIPS”)
This Privacy Policy is provided pursuant to Regulation (EU) 679/2016 and the subsequent national adaptation legislation (hereinafter, as a whole “GDPR”) and describes how GIPS collect and process the personal data of users or customers of the web site i-gips.com (“Site”). The term “personal data” means any information concerning an identified or identifiable physical person. For example, personal data are: name, an identification number, location information, online identification as an email address, phone numbers, etc… GIPS may amend, supplement or periodically update these information, also in consideration of possible regulatory changes which are applicable or provisions from the Guarantor for the Protection of Personal Data. The changes and substantial updates to the Privacy Policy will be applied and brought to the attention of the interested parties as soon as they are adopted by updating the link to the Privacy Policy in the Site footer and by emailing the registered users. In case of changes that significantly affect the rights of the registered user, the communication will be made with reasonable notice.
PURPOSES OF PROCESSING AND LEGAL BASIS
The data are processed for the following purposes.a) Based on the contractual need in order to:
– manage orders and perform related activities (ex: sales and after-sales customer assistance, communications with the customers on the status of their orders, responses to their information requests, management of payments, etc.);
– managing user accounts when registered with the Site in order to use the related services;
– allow access to specific and additional services requested from time to time by the user;
– manage product shipments and create waybills;
– follow specific user requests
b) Based on the consent expressed by the user, in order to send commercial communications, information about functionality and operation of the Site or eventual Newsletter.
c) Based on the legitimate interest of GIPS, specifically:
– for the analysis and improvement of its services;
– for statistical and/or research and development activities, also by analysing data deriving from the use of services;
– in order to defend their rights in the course of court, administrative or extrajudicial proceedings, and in disputes arising in connection with the services offered;
d) Based on the need to fulfill the legal obligations to which GIPS is subject.
The provision of data for the purposes referred to in paragraph (a) above is mandatory, as it is necessary to process the sale and delivery of products and services purchased, or for registration at the sites. Refusal to provide personal data for processing makes it impossible to perform the services required for the purchase of goods and services on the Sites.
CATEGORIES OF DATA PROCESSED BY GIPS
Below is a description of the categories of data we deal with:
– Data supplied directly by the interested party: all personal data entered on the Sites (to proceed with online purchases or to register). Examples of data provided directly by the interested parties are: name; address and telephone number; credit card data (processed only for the time necessary for the purchase, or for what is necessary in the case of periodic payments and, if the person concerned has not opposed to such processing by changing his settings in “My account”, section “Payment Methods”, saved for subsequent purchases). More generally, all the data provided to allow the execution of a purchase order, the carrying out of research of products on the Sites, the compilation and use of the profile on the Site, the facilitation of the delivery of products with the communication data relating to numbers or contact addresses (eg telephone, email, addresses).
– The data provided by third parties constitute all the personal data GIPS collects from other sources (postal service companies, couriers, data entry companies, etc.) to perform its services. Examples of data provided by third parties are the data related to updates or corrections received during delivery by couriers, transport partners or third parties.
– Data collected automatically: these are browsing data and/or collected using the so-called “cookies”. During their normal operation, the computer systems and software procedures used to operate this Site acquire certain personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected with the aim of linking it to identified users, although, by its nature, it might enable user identification through processing and linking with data held by third parties. This category of data includes IP addresses or domain names of computers used by persons who connect to the site, the URI (Uniform Resource Identifier) of requested resources, the time of request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply provided by the server (successful, error, etc.) and other parameters regarding the user’s operating system and computer environment.
COOKIES
A cookie is a small file sent by a website and stored on the user’s browser while they use an Internet site. Cookies can be stored only for the time you use a particular site (cookies session) or for a longer period of time and independent from the session (persistent cookies). Cookies work in conjunction with the website content and normally have the function of improving the usability and browsing experience on the web (technical cookies). Some types of cookies also allow you to know the contents displayed, the choices selected and any use of the site by the user. A website can use self-developed cookies (first-party cookies) or cookies developed by third-party companies (third-party cookies). In addition to allowing an easy use of the Sites, GIPS uses cookies for various purposes, including: (i) identifying the user when logging in; (ii) store the products saved in the cart for purchase; (iii) avoid fraudulent use of accounts or payments; (iv) improve the Site and the offer of GIPS products.
In particular, GIPS uses:
a) TECHNICAL COOKIES: These are cookies necessary for browsing as they allow correct use of the Site and its full functionality. They include cookies which enable the creation of a personalized account, logging in, displaying content in the chosen language at every access, recognising the the user is connecting from (and remembering this setting for future access) and order management. These cookies are strictly necessary for Site operation and their deactivation might impair browsing experience and outcome. In particular, we use technical cookies for the following purposes:
– for the management of dynamic web pages, for the geographical identification of users, and for the management of last access data;
– to guarantee the correct functioning of the web pages;
– for the functioning of the forms (e.g. course registration form);
– for the management of data relating to the amounts and products of the orders
b) ANALYTICAL COOKIES: used to collect information on the number of users and how they visit the site. For example:
Google Analytics: the site uses the Google Analytics tool to collect information, in aggregate form, on the number of users and how they visit the site. This tool uses third-party technical cookies for its operation. Information on the processing of privacy by Google is available at the following link: http://www.google.com/analytics/learn/privacy.html. Information on the cookies used by Google Analytics, collection and use of this data are available at the following link: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gajs. The following link also contains information to deny consent to the use of third-party cookies by Google Analytics: http://tools.google.com/dlpage/gaoptout
Disabling cookies. The user can always decide to block, delete, disable cookies or other similar technologies through the settings of their browser or device. There are many different browsers: each different browser (and in some cases even each different version of the same browser) has its own procedure for deleting cookies. Cookie preferences must be set separately for each browser used, as the features and options offered may vary. It is therefore advisable to visit the support pages of your browser for more information. Furthermore, the user can modify the settings related to GIPS cookies, including their activation and deactivation, by accessing the dedicated section in the Sites’ footer, under “Cookie Settings”. Their complete deactivation may preclude many features, or the proper browsing or viewing of the Site or other web pages. Acceptance and waiver of cookies. At the time of the user’s first access to the Sites and, in any case, until a choice is expressed, the user will be asked to provide his consent to the use of third-party analytical cookies. In particular, consent can be provided by continuing with navigation.
DATA RECIPIENTS OR CATEGORIES OF RECIPIENTS
The data may be processed by third parties, carefully selected in terms of reliability and competence, who, as data controllers, act in the name and on behalf of GIPS on the basis of contractual agreements and specific instructions. This is necessary or appropriate in order to carry out activities, including instrumental or ancillary, related to the purposes of data processing indicated in this Privacy Policy, the main one of which consists in the supply of goods or services requested by the interested party (e.g.: postal service companies, couriers, etc.). In any other case, except as required by applicable law, personal data are not transferred and/or disclosed to third parties.
DATA RETENTION PERIOD
As soon as the personal data are no longer necessary for the purposes for which they were collected, GIPS will delete them, unless the law requires further storage, or the user has not consented to the processing for a longer time, or when they are archived. In particular, following the deactivation of the account or, for unregistered users, of the completion of the order, GIPS will retain the personal data that are necessary to: – fulfill the requests of the authorities within their competence;
– defend or assert any existing or potential claim;
– handle any complaint regarding contracts or orders concluded.
The data retention period necessary to achieve the aforementioned purposes is linked to the limitation period of a claim that in many cases is equal to 10 years. GIPS will retain personal data after such time has elapsed only when required to comply with legal obligations or in the event of disputes and extraordinary claims that reasonably require the retention of personal data.
RIGHTS OF THE DATA SUBJECT
Under the GDPR, each user has the right to access their personal data and to obtain confirmation of the existence or otherwise of his personal data, even if not yet registered, and to their communication in intelligible form. In particular, each user has the right to obtain access to his data from Eataly, as well as any information regarding the methods and characteristics of the processing. In addition to the above, the user, in the cases provided by law, has the right to receive his personal data in a structured, plain and readable format, as well as the right to transmit this data to another data controller without impediments. Furthermore, each user has the right to obtain updates, rectification or integration of their data from GIPS. The user also has the right to erase his personal data as well as to limit the processing in cases provided by law. Finally, each user has the right to object, in whole or in part, to the processing of personal data concerning him if the processing is based on the legitimate interest of the controller. The requests referred to in the previous points should be addressed to the data controller’s contacts indicated in the “Data Controller” section below. The requests must be addressed to the relevant controller for the relevant activities. If you have doubts or if you want more information about the relevant data controller, please contact GIPS by sending a letter to our address or writing to info@i-gips.com.
DATA CONTROLLER
The controller of the data processing is: GIPS s.a.s. di Gelpi Mario & Co. with registered office in Arese (MI), Via G. Mattei 46A, Post Code 20020, VAT Number: 08920070961, certified email address gips.sas@pec.it, with regard to the processing activities on the Site (e.g. operation of the Sites, cookies, e-commerce, purchase of products from i-gips.com); If you have doubts or if you want more information about the relevant data controller, or for any matters regarding the processing of your personal data and the exercise of your rights deriving from the GDPR, you can contact us by sending an e-mail to: info@i-gips.com.