Privacy Web Policy

Fratelli Gancia & C. S.p.A. ("Fratelli Gancia"), with registered office in Canelli, Corso Libertà n.66, in its capacity as data controller, in accordance with Article 13 of European Regulation n.679 of 2016, intends to inform you about the processing of your personal data when you connect to the website owned by Fratelli Gancia & C. S.p.A. at www.gancia.com (the "Site").
This information is provided only for the above-mentioned Site and not for any other websites consulted by the user via links.

FOR WHAT PURPOSES WE PROCESS YOUR PERSONAL DATA
We process your personal data to give you the best possible experience when you access our website, use our services and interact with us. This includes the following purposes:

Allow you to browse our website: when you visit our website, we automatically collect certain information, including your IP address, login data, browser type and version, browser plug-ins, operating system and platform. As you browse our site, we may also collect other data such as the Clickstream URL, articles viewed or searched for, viewing and download errors, the time and duration of visits to certain pages, and interaction with the page itself. If you require further information regarding the processing of your personal data, please contact us via the information we have provided above.

Method of acquisition: The data is automatically conferred by your browsing devices via the communication protocols of the Internet (e.g. TCP/IP, UDP).
Basis of lawfulness: We process this data in accordance with our Legitimate Interest - art. 6.1 lett. f) of the GDPR - to provide and improve navigation on our Site, to propose efficient and secure web services and to ensure the continuous improvement of your browsing experience over time.
How long we keep your data: We only keep your personal data for as long as necessary to allow you to browse the Site. In particular, some data are kept for the duration of your stay on the Website and others until you decide to delete them by deleting technical and functional cookies (e.g. language setting).
In some cases, we may anonymise data relating to access to the website and pages visited and retain it for statistical purposes indefinitely.

Managing communications: We collect your personal data when you communicate with us in person, through our website, email, by telephone or by any other means using the contact information we have issued to you through this Site. For example, we collect your contact details and details of messages to you and from you including details of when you sent them, when we received them and in some cases where you sent them from.

Mode of acquisition: The data are in part automatically conferred in the communication protocol used by the tool of your choice and in part are conferred by you in the content of the communication.
Basis of legitimacy: We mainly process this data because of our Legitimate Interest - art. 6.1 lett. f) of the GDPR - to respond to your requests and manage the necessary communications. However, in some cases we may be called upon to respond by virtue of specific contractual or legal obligations - art. 6.1 lett. b) and lett. c) of the GDPR.
How long we keep your data: Following up on any contact or support requests you decide to send us, your personal data is only processed for the time necessary to provide you with the information and/or assistance you need. In the event of any business dealings, your data will be processed and stored in accordance with the INF-DPMS.02 customer information notice published in the appropriate area of the website (Privacy Policy).

RIGHTS OF THE DATA SUBJECT

As a data subject, you may at any time exercise the rights expressly granted to you by the European Regulation, in particular
O The right of access to personal data (Art. 15) in order to obtain from the data controller confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to the personal data and to the following information:
I. the purposes of the processing;
II. the categories of personal data concerned
III. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations IV. where possible, the envisaged retention period for the personal data or, if this is not possible, the criteria used to determine this period
V. the existence of the data subject's right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him/her or to object to their processing
VI. the right to lodge a complaint with a supervisory authority
VII. where the data are not collected from the data subject, all available information on their origin.
VIII. the existence of an automated decision making process, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the logic used, as well as the importance of such processing for the data subject and the consequences thereof
IX. the existence of adequate safeguards within the meaning of Article 46 concerning the transfer of data abroad;
O. the right to rectification (Art. 16) and integration of inaccurate or incomplete personal data concerning you;
O. the right to erasure (Art. 17) of personal data concerning you if:
I. they are no longer necessary in relation to the purposes for which they were collected or otherwise processed or are unlawfully processed, or if they must be erased in order to comply with a legal obligation under the law of the Union or of the Member State to which the data controller is subject;
II. they were collected in connection with the provision of information society services as referred to in Article 8(8)
III. withdraws consent and where there is no other legal basis for the processing
IV. objects to the processing pursuant to Article 21(1) and there is no overriding legitimate ground for the processing, or objects to the processing pursuant to Article 21(2);
O. the right to restriction of the processing of personal data (Art. 18) when one of the following cases occurs:
I. You contest the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of the personal data;
II. The processing is unlawful and you object to the deletion of the personal data and request instead that their use be restricted
III. Although the data controller no longer needs the personal data for the purposes of the processing, the personal data are necessary for the establishment, exercise or defence of a legal claim
IV. You object to the processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the controller prevail over yours
O. the right to the portability of personal data (art. 20), i.e. the right to transfer such data to another controller, if it is based on consent or on a contract;
O. the right to object at any time (art. 21), on grounds relating to his particular situation, to the processing of data relating to him
O. the right not to be subjected to an automated decision (art. 22), including profiling, which produces legal effects concerning you or significantly affects you in a similar way, unless it is necessary for the conclusion or performance of a contract between you and the Company, or is authorised by EU law or by the Member State to which the controller is subject, or is based on consent.
O. the right to complain to a supervisory authority
O. The right to withdraw consent

Data controller
The data controller is the company F.lli Gancia & C. S.p.A., with registered office in Corso Libertà 66, Canelli (AT) (the "Data Controller").
Should you wish to exercise the rights listed above or should you wish to obtain information on the processing of your data, you may write to the following e-mail address dataprotection@gancia.it or to the ordinary mail address: Canelli (AT), 14053 Corso Libertà n. 66.

Data Protection Officer
Finally, it is necessary to inform you that the Company, considering the protection of your personal data to be of primary importance, has appointed a Data Protection Officer (DPO) whom you may contact by writing to the e-mail address dpo@gancia.it for all matters concerning the protection of personal data.