Welcome to our website gef-mobili.com.
1. Who is the Data Controller?
G.& f. S.R.L., with headquarters at 33077 Sacile (PN) Italy, Via Interna n. 8/A, Tax Code and VAT no. 00192460939 (hereinafter referred to as “G. & F.”) is the Data Controller, that is, the subject who decides how and why to process your personal data.
You can always contact G. & F. S.r.l. by writing to the address: firstname.lastname@example.org.
2. What personal data do we collect?
The categories of personal data that “G.& F.” collects and processes when you browse on gef-mobili.com, are the folowing:
a) we collect the personal data necessary to conclude and execute your purchase on “G. & F.” such as name and surname, email address, shipping address, billing address, telephone and payment details;
b) we collect your email address when you sign up for our newsletter service;
c) we process the personal data you provide when you contact our Customer Care (email@example.com) to provide the assistance requested;
d) with your consent, we collect and use your personal data for commercial communications;
e) we collect information about your browsing on gef-mobili.com, such as the pages you visit and how you interact with the single page and we save this information on our servers.
f) during normal operation of the site, computer systems and software procedures acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user's computer environment.
g) in the use of the form in the contact section for the submission of applications, it may occur that personal data in the categories cited in art. 9 of the Regulation, the so-called special data: "data [...] suitable to reveal racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as [...] genetic data, biometric data intended to uniquely identify a natural person, data related to the health or sexual life or sexual orientation of the person ".
We inform you that “G.& F.” does not process personal data relating to minors (18). If you access gef-mobili.com and use the services offered by “G.& F.” you declare that you are of legal age (18).
3. How do we use personal data collected?
“ G.& F.” collects and processes your personal data for the following purposes:
a) conclude and execute the purchase agreement for the products offered by gef-mobili.com.
b) registration on the site and use of the services offered to registered users. Registration on the site is possible through the inclusion of some personal information, necessary to ensure your identification and the performance of the services offered to registered users.
c) provision of services offered by gef-mobili.com. For this purpose, “G.& F.” needs to collect the personal data necessary to perform the specific service requested by you in relation to each service and its characteristics. d) management of requests to Customer Care (firstname.lastname@example.org), which uses the personal data you provide to meet your requests for information and requests for assistance.
e) statistical analysis and surveys. We use some information about your use of the site, your browsing and use of the related services to perform analysis and statistical surveys in order to improve our offer and our services.
f) sending commercial communications following the purchase of one of our products, so-called soft spam.
g) subject to your express consent, we may use the contact details you have provided for commercial communications on our products and services, in order to update you on news, new arrivals, exclusive products, our offers and promotions.
Besides, always with your consent, we will be able to use your contacts as part of market research and surveys for the detection of satisfaction in order to improve our services and the relationship with our users.
If you wish to authorise the activities referred to in point g) and then do not wish to receive further communications from “G.& F.” or if you wish to limit the way in which you are contacted, you can interrupt these communications at any time by simply contact “G.& F.” through our Customer Care (email@example.com). We inform you that you may receive further communications from us even after submitting your unsubscription request, as some submissions may have already been planned, our systems may take some time to process your request.
In relation to all the activities mentioned above, we will process your personal data mainly through IT and electronic tools; the tools we use guarantee high safety standards, in full compliance with current legislation.
5. Legal basis of processing
We only process your personal data when there are legal requirements for doing so under the current legislation, and specifically:
a) to enter into and perform a contract to which you are party.
When we process your data to enter into a purchase agreement with you, we take care to only use the minimum amount of information needed to perform it. This basis legitimises the personal data processing that occurs in the following activities:
- signing and performance of a contract to purchase products offered on gef-mobili.com,
- registration on the Website, and use of the services reserved to registered users,
- provision of services offered on gef-mobili.com,
- management of your requests by our Customer Care (firstname.lastname@example.org).
- providing your personal data for such activities is a contractual obligation. You may freely decide whether or not to provide your data. However, without the required data, we will be unable to enter into or perform the contract or your requests. This means you will be unable to purchase products and may not use the services of “ G.& F.”, and that “G.& F.” may not manage your requests.
b) to fulfil a legal obligation.
In the event that a contract to purchase goods is entered on gef-mobili.com, your data will be processed in order to carry out the legal obligations to which “G.& F.” is subject. You are free to decide whether or not to enter into a contract, and whether or not you provide your data, but if you do, your data will be needed and will be processed to carry out the aforementioned legal obligations to which “G.& F.” is bound.
c) for our legitimate interest.
We have a legitimate interest in processing personal data in case of a dispute by or against “G. & F.”.
d) based on your consent.
We will perform the following processing exclusively in the event that you have given your express consent:
- conducting of marketing activities and opinion and market research surveys.
To provide your consent for these optional activities. You are free to decide whether or not to provide your consent, but if you do not, it will not be possible for “G. & F.” to conduct the marketing activities, opinion and market research surveys, or to conduct analyses of your shopping habits.
6. Who will process your data?
Your personal data will be processed by the internal personnel of , “G.& F.” which has been specifically instructed and authorised for such processing.
Your personal data will also be transferred to third parties, which we use to provide our services on gef-mobili.com; these parties have been adequately selected and provide a suitable guarantee of compliance with personal data processing rules. These parties act as independent controllers or have been appointed as processors (or sub-processors appointed by the latter) and carry out their activity according to the instructions provided by “G.& F.” and under its control, or under the control of the processor.
The third parties in question belong to the following categories: site manager, bank operators, internet provider, companies specialised in IT and electronic services, carriers, agencies that conduct marketing activity, companies specialised in market research and data processing.
Your data may be disclosed to the police, or judicial or administrative authorities, in conformity with the law, to investigate and prosecute crimes, prevent and safeguard from threats to public safety, in order to allow “G.& F.” to investigate, exercise, or defend a legal right, as well as due to other reasons related to the protection of the rights and freedoms of other parties.
7. Transfer of extra EU data
Some of the third parties listed in the previous paragraph no. 6 'Who will process your data?' may be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission (http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).
The transfer of your personal data to countries that do not belong to the European Union and that do not ensure adequate levels of protection will be performed only after conclusion between “G.& F.” and said subjects of specific agreements, containing safeguard clauses and appropriate guarantees for the protection of your personal data, the so-called 'standard contractual clauses', also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of an agreement between you and “G.& F.” (for the purchase of goods offered by “G. & F.”, for registration on the website or use of services on the website) or for the management of your requests.
8. How long do we retain the data?
We keep your personal data for a limited period of time, which differs depending on the type of activity for which the personal data processing provides. Once this period has elapsed, your data will be definitively deleted, or in any event rendered irreversibly anonymous. Your personal data is kept in accordance with the terms and criteria specified below:
a) data collected to enter into and perform contracts to purchase goods by “G. & F.”: until the administrative and accounting formalities have been fulfilled (and just for the minimum data needed) until the end of the legal warranty provided for under the current legislation. Billing-related data shall be kept for ten years from the billing date;
b) payment-related data: until certification of the payment and fulfilment of the relative administrative and accounting formalities;
c) data collected in connection with the use of services offered on gef-mobili.com: this data is kept until the service is terminated or upon request to cancel the user's registration in the service;
d) data connected to the requests of users to our Customer Care (email@example.com): the data used to assist you shall be kept until your request has been fulfilled;
e) data used for commercial communications to users who purchase products by “G. & F.” (soft spam): this data is kept until the service is stopped or the user deregisters from the service;
f) data provided for commercial communication activities, opinion surveys and market research: until deregistration from the service or following the request by a user to interrupt activity, and nevertheless within two years of the last interaction of any kind of the user with “G.& F”;
g) the data collected during the submission of candidatures will be kept for 12 months from receipt of the application.
In any event, due to technical reasons, termination of the processing and the consequential final deletion or irreversible anonymization of the relative personal data shall be final within thirty days of the terms noted above.
9. Your rights
You can exercise your rights with reference to the specific processing of your personal data by “G.& F.” at any time. Find below their general description and how to exercise them.
a) access your data and modify it: you have the right to access your personal data and to request that it be correct, modified or integrated with other information. If you wish, we will provide you with a copy of your data in our possession
b) revoke your consent: you can revoke a consent you have given for the processing of your personal data in relation to any activity for marketing purposes at any time. In this regard, we remind you that marketing activities are considered the sending of commercial and promotional communications, the conduct of opinion polls and market research, in order to detect your degree of satisfaction and improve the services offered. Once we receive your request, it will be our duty to promptly cease to process your personal data based on this consent, while different processing or that which is based on other assumptions will continue to be carried out in full compliance with the provisions in force.
c) opposition to the processing of your data: you have the right to object at any time to the processing of your personal data made on the basis of our legitimate interest, explaining the reasons that justify your request; before accepting it, “G.& F.” will have to evaluate the reasons for your request.
d) delete your data: you may request the cancellation of your personal data in the cases provided for by current legislation. Once your request has been received and examined and if it is legitimate, it will be our duty to timely cease to process your personal data and to delete it.
e) request that the processing of your personal data is temporarily limited: in this case, “G.& F.” will continue to keep your personal data but will not process it, unless it is subject to your different request and the exceptions established by law. Processing of your personal data can be limited when you dispute the accuracy of your personal data, when the processing is illegal but you oppose the cancellation of your data, when we no longer need your personal data but you need to exercise your right in court and when you oppose your processing, in the period in which we evaluate the reasons for your request.
f) request your data or transfer it to a party other than “G.& F.” (right to data portability). You can ask to receive your data that we process based on your consent or on the basis of an agreement with you in a standard format. If you wish, where technically possible and at your request, we may transfer your data directly to a third party that you indicate.
In order to exercise some of your rights described above, you can contact our Customer Care (firstname.lastname@example.org) or write to the address of the Data Controller above. In order to ensure that our users' data is not illegitimately used or infringed upon by third parties, we may ask you for some information to be sure of your identity before accepting your request to exercise one of the rights indicated.
10. Security measures
We protect your personal data with specific technical and organisational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: the pseudonymisation or the encryption of your data; the confidentiality, integrity, availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. In addition, “G.& F.” agrees to test, verify and regularly evaluate the effectiveness of technical and organisational measures in order to guarantee continuous improvement in the security of processing.
If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the competent control authorities for compliance with the rules on personal data protection.
In Italy, a claim may be filed with the Italian Personal Data Protection Authority [Autorità Garante per la Protezione dei Dati Personali] ("Protection Authority"). More information on how to present them is available on the website of the Guarantor, at http://www.garanteprivacy.it/.
12. Changes to this information
Therefore, we invite you to periodically check the contents: where possible, we will try to inform you promptly on the changes made and their consequences.
In any case, the updated version of the privacy statement will be published on this page, with indication of the date of its last update.
13. Legislative references and useful links
The processing of your personal data is carried out by “G.& F.” in full compliance with the regulations on the matter pursuant to General Data Protection Regulation (EU) 2016/679 The rules on the processing of Italian personal data and the provisions of the Italian Supervisory Authority (http://www.garanteprivacy.it/) and, where applicable, the competent foreign control authorities.