PRIVACY & COOKIE POLICY
Contacts:
ð I authorise the processing of my personal data to respond to my requests as described in the privacy policy
On the word “privacy policy”, activate the link to the document below. A single box, not pre-ticked, which the user must tick. A record must be kept of the date of consent and that it was given on the website and the IP address. Also set the data retention period
Data subjects: users of the contact section
In accordance with Articles 13 and 14 of European Regulation 2016/679, we inform you that Gallery Holding S.p.A., with registered office in Via Roma, 183 – Fano (PU), in its capacity as Data Controller, processes your data (name, surname and email address) in order to respond to your requests. The provision of data for the management of the contact service is optional, but it is necessary for the execution of the contract pursuant to Article 6.1.b) of the GDPR.
Your personal data will be processed manually, electronically and/or telematically, through the use of cookies (as indicated in the cookie policy available on the website) and by means of electronic computers using third-party software in accordance with the procedures set out in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures provided for.
Your data will be processed by appropriately appointed personnel and will be communicated externally to companies acting as independent Data Controllers or Data Processors:
- external parties providing cloud services;
- technical support service providers;
- third-party companies providing IT system management services, including server hosting and backup services;
The complete list can be requested by writing to the Data Controller’s contact details.
Your data will not be disclosed.
We would like to point out that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the retention period of your personal data is set for a period of time not exceeding the performance of the services provided.
The Data Controller is Gallery Holding S.p.A., with registered office in Via Roma, 183 – Fano (PU) -Tel. +39 0721 829052 – ind mail info@galleryholdingspa.com in the person of its pro-tempore legal representative. The Data Controller has appointed a Data Protection Officer who can be contacted at dpo@galleryholdingspa.com.
You have the right to obtain from the Data Controller the erasure (right to be forgotten), the restriction, updating, rectification, portability, and opposition to the processing of personal data concerning you, as well as, in general, you may exercise all the rights provided for in Articles 15 et seq. of European Regulation 2016/679 by writing to info@galleryholdingspa.com or by contacting the Data Controller at the company addresses provided in this document. The data subject has the right to lodge a complaint with the Supervisory Authority
EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject
- The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and
their communication in intelligible form and the possibility of lodging a complaint with the Supervisory Authority
- The data subject has the right to obtain information on:
- a) the origin of the personal data;
- b) the purposes and methods of processing;
- c) the logic applied in the case of processing carried out with the aid of electronic instruments;
- d) the identification details of the data controller, data processors and designated representative pursuant to Article 5, paragraph 2;
- e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or personnel authorised to process personal data.
- The data subject has the right to obtain:
- a) the updating, rectification or, where interested therein, integration of the data;
- b) the erasure, anonymisation or blocking of data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed;
- c) certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected;
- d) the portability of the data.
- The data subject has the right to object, in whole or in part:
- a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
- b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.