Privacy Policy
Dear User,
this notice is provided pursuant to Article 13 of the Data Protection Regulation (EU) 2016/679 (“GDPR“), in order to provide you with information regarding the manner in which your personal data is processed when browsing the website (the “Site“).
Data controller
We inform you that the data controller is GDES.r.l. with registered office at VIA REGINA ELENA 8 GIOA DEL COLLE (BA) (“DataController” or “Company“), who can be contacted at the following e-mail address info@gde.srl
Type of data processed
Navigation data
The servers and computer systems responsible for the operation of the Site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the devices used by users connecting to the Site, as well as the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.
The data could be used to ascertain liability in case of hypothetical computer crimes against the site.
These data, which are necessary for the use of web services, are also processed for the purpose of:
- Obtain statistical information on the use of services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);
- Monitor the proper functioning of the services offered.
Cookies are not used while browsing the site to transmit personally identifiable information.
Data provided by you
The optional, explicit and voluntary sending of messages to the contact addresses indicated within the Site, as well as the completion and forwarding of the forms on the same, such as the forms relating to the subscription to the newsletter service, imply the acquisition of personal data, such as contact data, necessary for sending replies and/or e-mails, as well as all the personal data required in the communications and forms transmitted.
Specifically through the Site, all information you provide through the use of the “Contact Us”, “Sign up for the newsletter”, “Receive our catalogs” sections is collected and processed.
Should you contact the Company, the Company will retain such correspondence for the period of time indicated in the remainder of this policy.
Purpose and legal basis for processing
With reference to navigation data, this data is used for the sole purpose of checking the correct functioning of the Site. The data could also be used by public security authorities to ascertain responsibility in case of possible computer crimes to the detriment of the Site. Without prejudice to the foregoing, the data themselves will be kept for the period of time required by the relevant legal regulations and, in any case, for the time strictly necessary to provide the user with the requested service as well as to ensure the transmission of the communication.
For this purpose, the data are processed on the basis of Article 6.1 (f) of the GDPR, i.e. for the pursuit of the legitimate interest of the Data Controller.
The Controller will process the data you voluntarily provide for the purposes outlined below:
- Follow up on requests you submit through the “Contact Us” section of the Site.
For this purpose, your personal data is processed on the basis of Art. 6.1 letter b) GDPR, as it is necessary for the performance of a contract to which you are a party or for the execution of pre-contractual measures taken at your request;
- Sending information material, newsletters, catalogs and advertising material or commercial communications related to the Company’s activities.
For this purpose, your personal data are processed on the basis of Article 6.1 letter a) GDPR, where you have given your consent by ticking the appropriate box provided as part of the registration form. Please note that the Company may use your e-mail address in order to send you information about its services and initiatives, also under the conditions provided for in Article 130, paragraph 4, of Legislative Decree No 196/2003, as amended by Legislative Decree No 101/2018 (“Privacy Code”).
The provision of your personal data within the “Contact Us” section, is necessary for the provision of the requested service.
On the other hand, the provision of your personal data for the provision of the newsletter service, for the receipt of catalogs as well as for marketing, commercial and advertising purposes remains optional. You may revoke your consent at any time.
Cookie
Cookies are small text files that are placed on the devices a user uses to browse the Internet and thus when he or she visits websites. Cookies, in particular, allow a Web site to (i) recognize the device with which the user accessed the site; (ii) track the user’s navigation through the different pages of a Web site; and (iii) identify users who return to visit the site.
Cookies are used for a variety of purposes including, but not limited to, to ensure websites function efficiently, as well as to provide information to website owners.
The setting of third-party analytics and targeting cookies, the purpose of which is to improve your and other users’ experience on the Site and collect useful information, is optional. We will not set these cookies unless you enable them through the appropriate Cookie Banner that appears when you log in to the Site. For more detailed information about the cookies we use, we encourage you to review and take a look at our cookie policy at the following link (insert link referencing the cookie policy above).
Data recipients
The processing will be carried out by employees and associates of the Owner, expressly and duly authorized to process for the pursuit of the above purposes.
In addition, your personal data may be disclosed to parties external to the Data Controller, such as marketing service providers and IT support service providers, who will only have access to your personal data to the extent required by the performance of their functions, subject to certain contractual confidentiality obligations. In any case, the recipients of the data will only be able to process the data after they have been appointed by the Controller as external data processors, pursuant to Article 28 of the Regulations.
Extra-EU data transfer
Your personal data will not be transferred outside the territory of the European Union.
Data retention
The data retention period depends on the purposes for which the data is processed and therefore this retention period may vary. In any case, personal data will be retained for as long as necessary (i) to handle specific requests you submit through the “Contact Us” section; (ii) until your consent is revoked for the purposes referred to in (b) above or, until your right to opt-out is exercised; (iii) to enforce the Controller’s rights in court; and (iv) as well as for the period required by applicable legal regulations.
Rights of the data subject
As a data subject you have the right to exercise against the Data Controller, the rights set forth in Articles 15 to 21 of the GDPR. In particular, these rights consist of:
- Receive confirmation about the existence of the user’s personal data and access to their content (right of access);
- Update, amend and/or correct personal data (right of rectification);
- to request the deletion or limitation of the processing of data processed in violation of the law including data whose retention is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to erasure and right to limited erasure);
- Object to the processing (right to object);
- To revoke consent, where given, without prejudice to the lawfulness of the processing based on the consent given before revocation (right to revoke consent);
- Request the Data Controller to directly transfer portable data to another data controller (right to portability).
These rights may be exercised by sending an appropriate request to the Holder at the following e-mail address info@gde.srl .
Right of complaint
Should you believe that the processing of your personal data carried out through this Site is in violation of the provisions of the GDPR, you shall have the right to lodge a complaint with the Garante per la Protezine dei Dati Personali, as provided for in Articles 13 and 77 of the GDPR itself, as well as in Article 140 bis of the Privacy Code, or to take appropriate legal action pursuant to Article 79 of the GDPR.
Last updated May 10, 2025