Guida Acqua 2021 - GEL

POLICY ON PERSONAL DATA PROCESSING RELATING TO THE WEBSITE USERS

Please find below information on the processing of personal data collected after interaction with the website starting from the URL http://www.gel.it/.

In case of exit from the domain http://www.gel.it/ and visit to other websites whose links can also be shown in the web pages published on the website http://www.gel.it/, it is necessary to refer to the personal data protection policies of the above-mentioned other websites.

Data controller and contact details

The data controller is GEL S.p.A., located and registered in Via Enzo Ferrari no. 1, 60022, Castelfidardo (AN), Italy.

Any further queries on personal data processing can be sent to info@gel.it.

Type of personal data processed

The data controller processes the non-sensitive personal data of the type described in the paragraphs below.

The computer systems and software used to operate the website can acquire personal data.

This category of data includes: IP addresses; domain names of the computers used by users who connect to the website; addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources; time of the request; method used in submitting the request to the server; size of the file obtained in response; numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment.

The website http://www.gel.it/ also makes use of cookies.

Cookies are computer files or partial data consisting of strings of text that can be saved on your computer (or other devices enabled to browse the internet) when you visit a website.

A cookie generally contains the name of the website from which the cookie comes from, the duration of the cookie (how long it will remain on your device), and a value, which is usually a unique number generated randomly.

Some cookies are strictly necessary to the functionality of the website, others allow to optimise performances and offer a better user experience, whilst others are used to collect data relating to the user's behaviour on the website.

Cookies have an exact duration and according to the duration can be divided into:

• persistent: once closed the browser are not deleted but remain until a pre-set expiration date;
• session: they are deleted every time the browser is closed.

Technical cookies are necessary for the proper functioning of some areas of the website or to improve the browsing experience of the user.

Without such cookies, the website or some parts of it may not work as intended.

The technical cookies on this website are aimed to improve browsing; remember your consent to the use of cookies, to avoid having to ask for the authorization when opening each web page.

Analytical cookies are used to collect information on the use of the website by users and collect aggregated data regarding the number of users who have visited the website and their behaviour.

Third-party cookies are used to integrate products and functions of third-party software, such as third-party domains and partner websites that offer their functionality among the pages of the website.

The different web browsers can be set to not accept third-party cookies; to do this, please read the instructions of your browser by clicking on "Guide" or "Help" in the relevant menu.

Most Internet browsers are initially set to accept cookies automatically.

It is possible to modify these settings to block cookies or to receive warnings about the cookies sent to your device.

To disable the use of cookies (totally, individually or by third parties) or delete any cookie files already on your computer, please read the instructions of the browser, by clicking on “Guide” or "Help" of the relevant menu.

Further information on cookies and how to manage them can be found on www.aboutcookies.org.

Below you will find the list of cookies installed by the website http://www.gel.it/.

• analytical cookies: Google Analytics
• technical cookies: Google AJAX search API
• third-party cookies: -

The user who visits the website and wishes to receive information is requested to communicate his/her email address.

Legal basis of personal data processing

The personal data processed by the website http://www.gel.it/ are used for the sole purpose of getting statistical information on the use of the website and to check its correct functioning.

The data might be used to ascertain responsibility in case of any computer crimes against the website and its controller.

By browsing the website http://www.gel.it/, the use of cookies and other personal data coming from the use of software and internet protocols is considered authorized.

By disabling the use of cookies from your browser, certain features and pages may not work as intended.

Only upon specific and distinct consent (Article 7 GDPR), personal data, e-mail addresses and telephone numbers provided by the user may be used for sending electronic material consisting of documents, videos, images, audio material.

If the data subject does not intend to communicate the above-mentioned personal data, it is not possible to send the requested electronic material.

Assuming to be interested, he/she may be contacted for direct marketing purposes, i.e. send newsletters, commercial communications and / or advertising material on products or services offered by the data controller.

With regard to the data provided by the data subject, he/she is responsible for the truthfulness and for the fact that there are no elements having direct, indirect or subliminal advertising purpose or that could cause injury to third parties' personal or property rights.

Personal data recipients or categories of recipients

Without the need for an explicit consent, the Data Controller may communicate his/her own data to Supervisory Bodies, Judicial Authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law.

These subjects will treat the data acting as independent data controllers.

Data transfer and disclosure

Personal data may be processed in one or more third country/ies where an adequate level of protection is guaranteed.

The appropriate level of personal data protection was ensured by an adequacy decision of the Commission (article 45, paragraph 3, of GDPR) or by agreement with standard data protection clauses (article 46, paragraph 2, letters c) d) d) GDPR) or finally by an approved certification mechanism (article 46, paragraph 2, letter f) in conjunction with art. 42 GDPR).

Data subject’s rights

In accordance with art. 15 GDPR the data subjects have the rights of:

i. getting confirmation of the existence or not of personal data concerning him/her, even if not yet registered, and their communication in an intelligible form;

ii. getting the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of processing carried out via electronic instruments; d) of the identification details of the controller, the managers and the person in charge according to art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it acting as representative in the territory of the country, as managers or agents;

iii. getting: a) updating, rectification or, when interested, integration of data; b) cancellation, transformation into anonymous form or blocking of data processed unlawfully, including those data whose retention is unnecessary for the purposes for which the data were collected or further processed; c) attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disclosed, except when such fulfilment is impossible or implies the use of means manifestly disproportionate to the protected right;

iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data, even though they are relevant to the purpose of collection; b) to the processing of personal data for sending advertising or direct sales material or for carrying out market research or commercial communication via automated call systems without the intervention of an operator by email and/or via traditional marketing methods by telephone and/or post.

The right of opposition of the data subject, set out in point b) above, for direct marketing purposes via automated methods, extends to traditional ones. In any case, there is possibility for the data subject to exercise the right to object even only partially.

Therefore, the data subjects can decide to receive communications using traditional methods only, automated communications only, or none of the two types of communication.

At any time, you can use the right to revoke the authorization for the processing of audio, visual and photographic material.

Where applicable, you also have the rights referred to in Article1 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object) as well as the right to lodge a complaint with a Supervisory Authority.

Automated decision-making processes

There are no automated decision-making or profiling processes.