The data controller is the Company Gefran S.p.A. (“Gefran” or the “Company”), headquartered in Provaglio d’iseo (BS) via Sebina 74, 25050, pec gefran@legalmail.it.

Browsing data

The computer systems and software procedures used to operate this website acquire, as part of their normal operation, some personal information that is implicitly transmitted in the use of Internet communication protocols.

This information, by its nature, may, through association and the processing of data held by third parties, allow users to be identified (for example purpose only via their IP address)

Data provided voluntarily by users

When users send personal information in order to access certain services (for example purpose only newsletters) or to make requests via email, this action entails acquisition by Gefran of the sender’s address and/or other personal data.

Personal data will be processed by the Company in agreement with Regulation (EU) 2016/679 and with local laws, including any possible decisions issued by the Supervisory Authority, as applicable, and, according to accuracy, lawfulness and transparency principles, preserving their confidentiality and their related rights.

Your personal data will be processed using also automated electronic methods, in addition to the manual ones, strictly necessary to the purpose of the processing and the data will be processed exclusively within the European Union. Appropriate security measures are observed to prevent the loss of data, illegal or incorrect use and unauthorized access.

The processing of personal data by the data controller is intended in order to provide the requested services or to reply to the specific requests.

The data will be maintained until the request to unsubscribe from the requested services and in any case for time strictly necessary in order to provide the requested services, without prejudice to the obligations provided for by the law.

Any withdrawal of the consent to the treatment does not affect the lawfulness of the processing based on the consent given before the withdrawal.

No data deriving from the web service shall not be disseminated.

Without prejudice to the duty of disclosure in order to fulfil any public authority order or to abide by legal obligations, the personal data may be brought to the attention of Gefran’s employees and processed by them; such personnel is formally appointed and authorized to process and receive opportune operational instructions in this regard. Furthermore, the data may be processed by external companies which Gefran may make use of in relation to the management of the contractual relationship with customers or for its own organizational needs and its activities.

The Data Subjects have the right at any time to: (i) obtain confirmation of the existence of such data and to know its content and origin; (ii) to verify its accuracy or to request its integration or updating, or correction; (iii) the right to request cancellation, transformation into anonymous form or the blocking of data processed in violation of the law, as well as the right to data portability; and (iv) to oppose in any case, for legitimate reasons, to their treatment.

In order to exercise the rights referred to in this statement it is possible to contact the Company at the addresses indicated above or email us at privacy@gefran.com.

The data Subjects are entitled to submit complaints to the Italian Authority for the protection of personal data, www.garanteprivacy.it.