privacy disclaimer

Data Controller, collection and processing of personal datae

The Data Controller is Gierre S.r.l. with registered office in Via 1 ° Maggio, 1 and 6 in Olginate (LECCO).

Gierre S.r.l. collects personal data provided on a voluntary basis by the user when registering on the website or when the latter performs a transaction through the website, in addition to other personal data associated with order processing (if applicable). This personal data includes: Title, name and surname, company name, Tax Code / VAT number (if applicable), date of birth, gender, e-mail address, username and password, shipping and billing address (including code postal, city and country), telephone and mobile number, type and quantity of products ordered, order date, status of order fulfillment, date and time of delivery of the service, order value, currency, payment information ( credit card number and expiration date), requests for returns or offers to the user and the following information provided on a voluntary basis by the user: how he/she got to know the website, company data, number of employees and, for corporate customers, the company's foundation date (collectively "transaction data"). Gierre S.r.l. also collects data on the use of the website by the user, such as IP address, the products displayed and those saved in the shopping cart; if the user comes to the website via a referral page or a link in a promotional email or advertisement on another website that redirects to the website of; the company can also collect information on the referral page and on the promotional e-mail or targeted advertising together with the user's IP address to analyze the effectiveness of marketing operations (overall "usage data").

Purposes, legal basis and methods for processing

Personal data are processed by the Data Controller for: 1) Transaction data will be used to process orders, manage payments, communicate with the user about the order, manage product returns, requests for assistance from customers and collect the products. They will also be used to acquire pre-contractual data and information; exchange information for the execution of the contractual relationship, including pre and post contractual activities; making requests or processing requests received; manage accounting and tax compliance. 2)The transaction data will also be used to send the person concerned personalized messages or invitations to review the products; the usage data, in the case of registered customers, will be used together with the transaction data (except for payment information) to show customized products on the website based on the interests expressed by the user. 3) f the user asks for marketing communications and the newsletter, his transaction data and data on the use of the site will be analyzed by Gierre S.r.l. to send personalized commercial communications based on the preferences indicated. 4) Finally, the data will be used to manage and control risks, prevent possible fraud, insolvencies or defaults; prevent and manage possible disputes, take legal action in case of need.

The legal basis of the processing is as follows: - the processing is necessary for the execution of a contract of which the interested party is a part or for the execution of pre-contractual measures adopted at the request of the same, as regards the treatments listed in point 1) ; - the interested party has given consent to the processing of their personal data for one or more specific purposes, as regards the treatments listed in point 2); - execution of pre-contractual measures adopted at the request of the interested party and legitimate interest of the owner (maximizing the effectiveness of communications), as regards the treatments listed in point 3); - processing is necessary for the pursuit of the legitimate interest of the data controller (protection and prevention of fraud and insolvencies), as regards the treatments listed in point 4).

Recipients of the data

The personal data processed by the Data Controller are not disclosed, or are not given knowledge to indeterminate subjects, in any possible form, including that of making them available or simple consultation. Instead, they can be communicated to workers who work for the Data Controller, or to subjects authorized to process because they operate under the authority of the data controller. In this regard, Gierre S.r.l. has instructed third party service providers in relation to the operation of the website, such as hosting service providers, marketing and website service providers, IT maintenance service providers, shipping services and VAT verification services, as well as service providers that allow the integration of other functions on the website that the user can use at his discretion, such as the chat tool and the product review function. These service providers, designated as Data Processors, are only provided with the personal data they need to provide the corresponding services and they are not allowed to use or disclose the personal data of the interested parties for other purposes, without prior authorization concerned. They can also be communicated, within the strictly necessary limits, to subjects who, for the purpose of processing orders or other requests or of services relating to the transaction or contractual relationship with the Data Controller, must supply goods and / or perform on behalf of the Data Controller performance or services. Finally, they can be communicated to subjects entitled to access them by virtue of legal provisions, regulations, community regulations. In particular, on the basis of the roles and job duties performed, some workers have been legitimized to process personal data, within the limits of their competences and in accordance with the instructions given to them by the Data Controller.

Transfer of data

In no case does the Data Controller transfer personal data to third countries or to international organizations. However, it reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Data retention

The Data Controller stores and processes personal data for the time necessary to fulfill the indicated purposes. Subsequently, personal data will be stored, and not further processed, for the time established by the current civil and fiscal provisions.

Rights of the interested party

With reference to art. 7 of the legislative decree 196/2003 and to the articles 15 - right of access, 16 - right of rectification, 17 - right to cancellation, 18 - right to limitation of processing, 20 - right to portability, 21 - right to object, 22 right to object to the automated decision-making process of the GDPR 679 / 16, the interested party exercises his rights by writing to the Data Controller at the above address, or by email, specifying the subject of his request, the right he intends to exercise and attaching a photocopy of an identity document that certifies the legitimacy of the request.

Declaration of consent for CV sending

I authorize the storage of my data for 24 months so that my CV can be taken into consideration for any future selections of Gierre s.r.l. aware that, in the event of lack of authorization, my data will be processed exclusively for the current selection and subsequently deleted and that this authorization can be revoked at any time.

Withdrawal of consent

With reference to art. 23 of Legislative Decree 196/2003 and art. 6 of GDPR 679/16, the data subject party can revoke any consent given at any time. However, some treatments subject to this information (points 1) and 4)) are lawful and allowed, even in the absence of consent, as necessary for the execution of a contract of which the interested party is a part, or for the fulfillment of its requests or to pursue legitimate interests of the data controller. The revocation of consent, where applicable, may limit or compromise the methods of interaction and communication of the customer or user with the owner Gierre S.r.l.

Claim proposal

The data subject has the right to lodge a complaint with the supervisory authority of the state of residence.

Refusal to provide data

The data subject cannot refuse to provide the Data Controller with the personal data necessary to comply with the legal regulations governing commercial transactions and taxation. The provision of their further personal data may be necessary to improve the quality and efficiency of the transaction. Therefore, the refusal to provide the data necessary by law will prevent the fulfillment of orders. The additional data indicated in point a) of the paragraph "Data source and type of data collected" are provided on a voluntary basis; however if the interested party decides not to provide the requested data, Gierre S.r.l. you may not be able to provide the services, allow the transaction to complete through the website or process the order. The data indicated in point b) data are voluntarily provided by the interested party and, should he decide not to provide the requested data, the supply of products and services will not be compromised.

Automated decision-making processes

The Data Controller does not carry out treatments that consist of automated decision-making processes on the data of natural persons, except those indicated in the paragraph "Recipients of the data" for those who request the sending of marketing communications and the newsletter.

Cookie Policy

Go to the cookie policy page