.

.

Privacy Policy

INTRODUCTION

This privacy policy is provided by the Data Controller “Galeotti S.a.s. di Galeotti Giuliano & C”, as follows, in accordance with D.Lgs. n. 196/2003 -Italian Personal Data Protection Code and subsequent modifications by D. Lgs. 101/2018, as well as Reg. U.E. 679/2016 for the website galeotticalzature.com (hereinafter referred to as “Website”) in relation to the data processing done in its addresses, in order to carry out its activities. Galeotti S.a.s. di Galeotti Giuliano & C. guarantees the respect of the legislation regarding the protection of personal data (D. Lgs 196/03 and subsequent modifications and Reg. EU 679/2016) and informs that any personal data provided by the interesting parties through the several collecting channels, directly or indirectly managed by the Data Controller, or acquired by a third party, will be processed lawfully and fairly, in accordance with the principles provided by D.Lgs. 196/2003 and subsequent modifications and by Reg. EU 679/2016.

Below is the Privacy policy for the website of Galeotti S.a.s. di Galeotti Giuliano & C. This privacy Policy contains the information you need in order to use the website in all conscience of the data you provide or will be provided in the navigation of the website. This page describes the modalities of the data processing of users’ personal data in the website www.galeotticalzature.com

In any case, it is important to inform you that your “sensitive data” will not be processed.

Data Controller, Data Processors, categories of persons appointed and Scope of the Privacy Policy


The Data Controller is Galeotti S.a.s. di Galeotti Giuliano & C., with legal address in via Carducci n°2 06012 Città di Castello (PG), tax code and registration number in the company register of Perugia and VAT registration number 02497010542 REA number Perugia 221583. Your data will be processed only by the persons appointed by and under the responsibility of the Data Controller. The updated list of the Data Processors is available and accessible in the legal address. The data processing should be carried out not only by the employees of Galeotti S.a.s. di Galeotti Giuliano & C., but also by third parties, to whom the enterprise entrusts the management of some activities (or part of these) linked or instrumental to the carrying out of the processing or to the services provision. In this case the same subjects will act as autonomous controller, co-controller or will be nominated as Data Processors or appointed for the processing.

The website and/or the Data Controller are not responsible for the processing of the data collected in some pages not present in the domain of second level of https:// www.galeotticalzature.com or its potential sub-domains.

Persons to whom data may be disclosed or can learn about the data

The direct access to your data is allowed only to the Data Controller above mentioned. The Provider of the hosting service is Amazon AWS, and it's policy privacy is available at the following link https://aws.amazon.com/it/legal/cookies/ which can potentially access your data only for technical reasons on the grounds of necessity and urgency which required an intervention for the purpose not to affect the serviceability and security of the website.

Data processing methods

Data processing is carried out by automated means (for instance by electronic processes and supports) and/or manually for the period of time strictly necessary for the pursuit of the specific purposes of the collecting and, in any case, in conformity with the existing regulations on the subject and with the regulations indicated in this Policy.

Type of the data being processed

The data collection and processing are carried out by the Data Controller in the addresses of the above-mentioned company and by companies appointed by the same, also through its portal galeotticalzature.com according the security measures and prescriptions of D.Lgs. 196/2003 and subsequent modifications and of EU Reg. 679/2016.

Navigation data

Informatic systems and software procedures for the functioning of these websites automatically acquire, in their normal exercise, some personal data, implicitly transmitted in the use of the Internet communication protocols. These are data which by their very nature could, by associations and elaborations with data held by third parties, allow the user/visitors’ identification (e.g. IP address, domain name of the users’ computer, ecc.). These data are used only to get statistical information and to control the correct functioning of the websites. Normally these data are erased as soon as they are processed. In any case, these data are to be considered anonymous, as it is not possible to identify you.

Specific sources of personal data are indicated in the specific privacy policies prepared for specific services offered by the website or software used for the correct functioning of the website and as following indicated.

Data provided by the user

Should the users/visitors, accessing these websites or by any other form of written or oral communication, provide their personal data to have specific services, or, to make some requests via e-mail, Galeotti S.a.s. of Galeotti Giuliano & C. and/or of the third parties, with which Galeotti S.a.s. may provide the service requested by the user, will acquire these data; these data shall be processed only for the reply to the request or for providing the service according to the present Policy. Personal data expressly provided by the users/ visitors, registering in the reserved area of the website, shall be communicated to third parties only if the communication is necessary to comply to the requests of the users/ visitors and to provide the same service requested. Should you fill the page “enregistration” “contact us”, “newsletter” or send a request in any modality, data will be acquired in the systems. Information are protected by a system of authentication and are accessible only to those in possession of the credentials. The requests of information by e- mail imply the retention of the e-mail address of the user, necessary to reply to the request. Data contained in the message will be included. In case of data processing carried out in paper form, they will be adopted the necessaries measures to limit the access only to the authorized persons.

In these cases, data provided by the user to fill the pages “enregistration”, “contact us” and “newsletter” will be only processed for the period of time strictly necessary (existing the personal account) for the use of the services required and, nevertheless, not more later than 10 years of storage (which will be carried out by electronic means in our servers), after which the data will be erased, prior our communication. Nevertheless, the erasure from the above-mentioned services will entail the erasure of any data associated to any user, who may communicate this specific intention to the email address indicated in the section “Contacts” or the user can erase the account definitively. This operation can take few days. We specify that, Galeotti s.a.s. may retain the right to verify the possible inactivity on the platform by the registered users i.e. “inactive accounts” and this to the exclusive purpose of guaranteeing their rights according to Reg. EU 2016/679 – and in particular art. 17 of the same regulation – adopting every measure which would be considered necessary to protect the registered users.

Data processing purposes and legal basis

1.Concerning the common areas of the website: the data related to you will be transformed in anonymous data and processed as aggregate data for statistical purposes and for permitting the continuity of the service and for improving the same website. If you do not agree with this use, please do not navigate the website or use the services offered.

IP address may be used, in some cases, to block attempts to damage the website, and unlawful behaviors, constituting offences according to the existing laws.
Particular purposes of the data processing may be indicated in the specific Privacy policy prepared for particular services offered by the website or software used by it for the correct functioning and as detailed below.

2. Concerning the reserved area of the website: the processing of biographical data and of any data concerning the telephonic and telematic contacts is done to satisfy the requests of users, visitors and customers. Providing these data is mandatory, although, in case of refusing of the consent or revocation of the same, it shall not be possible to carry out the data processing. It is to be highlighted that a wrong or insufficient communication of the requested data will entail the total or partial impossibility to execute the requests of the interested and the possible not correspondence of the results of the data processing in the respect of the existing agreements or of the obligations imposed by rules and regulations. In particular, the personal data processing will be aimed to provide the services, to the advantage of users/visitors/customers, connected to the drafting and execution of the contract for the purchase of goods. In order to guarantee the satisfaction of users/visitors/ clients and for addressing their expectations, the processing is aimed at the optimal management of the production and stocks by means of the statistical elaboration of the collected data. The data processing, prior specific consent of the interested party, may be carried out also for the recognition of the tastes, preferences and habits of the clients, of the degree of satisfaction of the client, for sending commercial or advertising information, for direct-marketing campaign, for the participation to games, rewards programs, contest, for providing protection to customers, market research and other operations directly or indirectly attributable to the marketing activity. Providing this kind of data is not mandatory. The eventual denial to the processing / revocation of the consent will not affect the instauration /prosecution of the initial relationship.

By means of filling the specific registration module you will find on the website, we will be able to collect and use, inter alia, the following personal data: Name, Surname, birth date, email, password. Your registration request is tied to the acceptation and to having sight of this policy. In any case, these data will not be diffused by the Data Controller and will be processed until the user is registered in the personal area specifying that, for this category of data, the user may exercise the rights listed in the present privacy policy. Requesting your log-in info (username and password) to access the reserved area in the internet website, the data entered by the user will be made visible only to the Data Controller or its appointees, discharging liability for any loss or misuse of the registered profile by third subjects who can illegitimately use the access credentials. For that reason, we invite you to pay close attention to the storage of your access credentials. The reserved area allows the creation of a profile by means of which the user will be able to benefit from the use of the several services offered by the website. In case you decide to delete your registration, the data connected to your reserved profile will be deleted.

In case of registration in the reserved area of the website, some data communicated by the user may be used for newsletter and promotional services (direct email marketing). By

accepting the present privacy policy, the user agrees to the processing of data optionally provided (e.g. email address) also for these other purposes. In any case, we specify that the user will be able to unsubscribe to these services by clicking on the link properly inserted in the above-mentioned marketing communications or, also, submitting a cancellation request of the subscription to the Data Controller via the above-mentioned contact details. In any case, the registered user may exercise the rights indicated in this privacy policy.

Legal basis of processing

The legal basis for the processing is the legitimate interest of the Data Controller expressly provided by EU Reg. 2016/679, consisting in the correct functioning of the website and in the related services provided.

Rights of the interested party

It is important that you become aware of the fact that the existing privacy legislation (Reg. EU 679/2016 and D.Lgs. 196/2003 and subsequent modifications) recognizes to the interested party the entitlement to exercise some rights, such as the right of access to data, to rectification or to erasure of the data or the right to restrict or to object to the processing of the data. Any request related to your rights, in addition to the entitlement to exercise the rights recognized by the GDPR, may be addressed to the Data Controller, by using the above-mentioned contact details.

The interested party may exercise the following rights:
- right to request access, right to rectification, right to erasure, right to restriction and right to object to the processing of data;
- right to obtain the data and have them transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller. This right can be freely exercised by the interested party, considering that a reimbursement may be requested to be paid to make the data available;
- the right to object to the processing and to withdraw consent, without prejudice to the lawfulness of the processing which occurred prior to the withdrawal. The withdrawal of 
the consent to the processing, given while the contractual relation is in being, may affect the correct and complete execution of the contractual or legal obligations of the Data Controller for the purposes relating to this privacy policy. The processed data for which it is not necessary to give consent (legal or contractual obligation) from the interested party may be processed even in absence of express consent. It is understood that this is without prejudice to the lawfulness of the processing which occurred prior to the withdrawal;

- the right to restrict the processing and right to have personal data erased;
- the right to lodge a complaint with the supervisory authority (Autorità Garante per la Protezione dei dati personali).
Right to lodge a complaint
As for the right to lodge a complaint, the interested parties who may think that the processing of their data is carried out in violation of the GDPR, may lodge a complaint with the supervisory Authority (Autorità Garante per la Protezione dei dati personali), under art. 77 of the GDPR or bring an action before the competent Courts.
All the rights mentioned above can be exercised by written communication to the Data Controller at the contact details on the Website, or at the following address: pec: galeotti@csi.pecconfesercenti.it
Communication and diffusion
The data processed are not of a common nature and are not aimed to be diffused. The Data Controller will not request and is not interested in identifying and processing the data qualifiable as sensible or judicial.
The data could be transferred to third parties in compliance with obligations arising from laws or regulations (Institutions, Police, Judicial Authority, ecc.) or for any activities directly or indirectly related to the established relationship. Purely by way of example but not to be exhaustive we mention:
Subjects which need to access the data of the interested party for purposes relating to the relationship with the Data Controller (Banks, Finance companies, Carriers, etc.); Consultants and collaborators, within the limits necessary to perform the task conferred by the Data Controller;
Subsidiaries and/or associates or in any case relating to Galeotti S.a.s. di Galeotti 
Giuliano & C. (and subsidiaries) which may access to the data, within the limits strictly necessary to perform the activities provided for by the object of the company.

Data may be communicated to any subjects operating in the European Union or in any country guaranteeing the same level of protection provided by D.Lgs. 196/2003 and subsequent modifications and Reg. EU 679/2016 or, more generally, by the Directive CE/ 95/46. As Galeotti S.a.s. di Galeotti Giuliano & C. may decide to operate in a supra- national level, the data processing carried out in the various countries shall be adapted to the more restrictive regulations, for the purpose of assuring the maximum level of protection to the data of the interested party. The data may be transferred to third parties, also for payment, should the interested give express consent, for purposes directly or indirectly related to the activity of the Data Controller.

The data processing will be carried out also further the end of the principal relation, in the respect of the regulations regarding to the storage of documents and, whether expressly authorized, to allow the instauration of future relations and to guarantee the historicization of the data, also in the interest of the client. In the scope of the organization of the Data Controller, the data may be processed in the various organizational functions.

Modifications to the privacy policy

This privacy policy may be subject to modifications – related also to the possible entry into force of new regulations of the sector, to the adjournment or the providing of new services or to technological innovations – therefore the user/visitor is encouraged to visit this page periodically.

Cookie

As with most web sites, they are kept for statistical purposes and to improve the functionality some information concerning the navigation on the website. The collection of information is possible through the use of cookies. A cookie is a small file that is transferred to your computer’s hard disk when you connect to a website. The data may relate to the geographic location of the service provider, the type of browser used, the IP address, pages visited, etc. The information thus collected allow you to see the frequency of visits to a site and the activities done during the navigation, the management of the shopping basket, and other technical aspects. In this way, over time, you can improve your site content and ease of use. Also companies transmitting content to the site or sites which are accessible via links, may use cookies when the user selects the relevant link. In these cases, the use of cookies is not under the direct control of Galeotti S.a.s. di Galeotti Giuliano & C.. Most browsers automatically accept cookies, but you can reject or select just a few, according to the set from user preferences. However, if you inhibit the loading of cookies, some components of the site may stop working and some pages may be incomplete.

Depending on their function and purpose of use, cookies can be divided into technical cookies, profiling cookies and third parties cookies.


Technical cookie

Technical cookies are those that do not require your consent in accordance with art. 122 paragraph 1 of Legislative Decree no. 196/2003 and subsequent modifications. Among the technical cookies we highlight the essential cookies, also called “Strictly Necessary”, without which you could not be enabled to navigate the website and use certain features. These cookies are used exclusively by Galeotti S.a.s. di Galeotti Giuliano & C. and are first party cookies. They are stored on your computer only during the browser session. Essential cookies are used for the management of the shopping basket and preferences. A cookie of this type is also used to store on our website the user’s decision about the use of cookies. Technical cookies are also those statistically used to analyze accesses or visits to the site, and are also known as “analytics”, they provide exclusively statistical data, (not marketing or profiling) and collect information in aggregate form without possibility of tracing back to the identification of the individual user. These cookies can be disabled and / or deleted through the browser settings.

Profiling cookies

Profiling cookies may be used to profile users and may be used to send targeted service advertising service custom in relation to the preferences expressed by the user during the navigation in the net. Galeotticalzature.com do not use profiling cookies.

Third Party Cookies

It may happen that a web page on our site contains cookies from other sites contained in various elements hosted on the same page, such as banner ads, images, videos, etc... We speak, in these cases, of third-party cookies, which are usually used for profiling purposes.

During the navigation of the website galeotticalzature.com, the User may receive on its terminal also cookies by different websites or webservers (i.e. “third party” cookies): this is because on the website can be present elements like, by way of example, images, maps, sounds, specific links to web pages of other domains which are on different servers from the one where the required page is. In other words, these cookies are set directly by web site or server operators different by the website. This third parties may set cookies while you visit the website and collect information related to the fact that you have visited the website of galeotticalzature.com. You may find further information on the use of cookies clicking on the following link. If the User decide not to give the authorization to the use of third-party cookies, the user shall be able to use only the functions of the website which do not require these cookies.

Disabling cookies

You may disable/enable cookies through your device by means of your internet browser:

Google Chrome

Click the Chrome menu on the browser toolbar. Select “Settings”. Click “Show advanced settings”. In the “Privacy” section, click the “Content Settings” button. The section in the upper part of the page explain you the cookies and allows you select the cookies you prefer. It allows you also to delete every cookie stored.

Mozilla Firefox

Click on the “Settings” menu, select “options”, select “Privacy” in the section “Options”. Choose “Internet History”. You will be able to choose between the cookie options whether enable or disable the same.

Internet Explorer 6+

Click the menu and select “Internet settings”. Click on “Privacy”. The privacy settings will show you six settings allowing you to check the number of cookies: Block all the cookies, High, Medium high, Medium (standard level), low and Accept all the cookies.

Safari browser

On the settings menu, select the option “Preferences”. Open the “Privacy” section and select the option you want in the section “Block cookies”.

Services provided by third parties, which have access to the data

Through this Website are made available to users’ certain services supplied by third parties. The collection and use of this information by these third parties are regulated by the respective privacy policies.


Social Networks

The user can share information and the data provided to the website with the social networks on which is signed in, accepting the respective privacy policies, and this, as appropriate, may entail the communication or diffusion of the data towards thirs subjects.

Google +1 (Google)

Google +1 is a service managed by Google Inc. permitting you to share information and receive personalized content from Google and its partners. Should the User click +1 on a content, this will be registered by Google, together with the information relating to the page displayed when clicking. In order to use the Google +1 button, it is necessary to have a Google profile containing, at least, the name chosen for the profile. It is possible that the identity indicated in the Google profile of the user would be visible to the persons having the email address or others identification details of the user. The information provided to Google are used in conformity to the Privacy rules of Google. Google may share aggregate statistics related to the activity +1 of the User with the public, its users and partners (publishers, advertisers or related websites). Google process the Data on its servers, in the USA and in other countries, conforming to the principles defined by the Safe Harbor Privacy Policy Framework and guaranteeing a data processing in line with the European security standards. Place of data processing: USA. For further information: https://developers.google.com/+/web/buttons-policy. The personal data which are collected are: Cookie and IP address.

Facebook

Facebook Like Button and its variations are services managed by Facebook Inc., company joining the venture Safe Harbor Privacy Policy Framework, guaranteeing that the data processing is in line with the European standard of security. The service allows the user to interact with the social network through this site. Facebook, thanks to the click by the user, acquire the data related to the visit of the same on the website. Facebook do not share any information in its possession with the Site or the Data Controller. Place of data processing: USA. For any further information:www.facebook.com/privacy/ explanation.php. The personal data collected are: Cookie and IP address.

Statistics

The services contained in this section, provided by third parties, are necessary to trace user behaviour and, in case of profiling, may require the express consent by the User. Google Analytics (Google)
Google Analytics is a web traffic analysis service provided by Google, Inc. ("Google") using "cookies" to collect the Data of the User, which are transmitted and stored at the servers of Google in the USA. Google use this information to trace and to analyze the use of the site, prepare reports and provide other services related to the activities of the Site. Google may use these data to profile the User and perform promotional activities in relation to products and/or services distributed by Google or third subjects. Place of the data processing: USA. For further information, please refer to the link below: https:// policies.google.com/technologies/partner-sites?hl=en. The personal data collected are: Cookies and IP address.

Back to top