Cookie Policy of www.gea-industrial.com
This Application collects certain Personal Data from its Users. This document may be printed using the print command available in the settings of any browser.
Data Controller
GEA S.r.l. Corso Venezia No. 3, 20121 Milan (MI), Italy – VAT No.: 14910240960 Data Controller e-mail address: info@gea-industrial.com
Types of Data collected.
Among the types of Personal Data that this Application collects, either independently or through third parties, there are: email address; first name; last name; Cookies; Usage Data. Complete details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or by means of specific information notices displayed before the Data are collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application. Unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to provide such Data, it may be impossible for this Application to provide the Service.
Where this Application specifically indicates that certain Data are optional, Users are free to refrain from providing such Data, without this having any consequence on the availability or operation of the Service. Users who are uncertain as to which Data are mandatory are encouraged to contact the Data Controller.
Any use of Cookies – or other Tracking Tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, where available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and warrants that they have the right to communicate or disseminate such Data, thereby releasing the Data Controller from any liability towards third parties.
Methods and place of processing of the collected Data
Processing methods.
The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of the Personal Data.
Processing is carried out using IT and/or telematic tools, with organisational procedures and logic strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, other parties involved in the organisation of this Application (administrative, sales, marketing and legal personnel, system administrators) or external parties (such as third-party technical service providers, postal and courier services, hosting providers, IT companies and communication agencies) may have access to the Data. Such parties may also be appointed, where necessary, as Data Processors by the Data Controller. An updated list of Data Processors may always be requested from the Data Controller.
Legal basis for processing.
The Data Controller processes Personal Data relating to the User where one of the following conditions applies:
- the User has given consent for one or more specific purposes.
- Note : in some jurisdictions, the Data Controller may be authorized to process Personal Data without the User's consent or any other legal basis specified below, until the User objects ("opts out") to such processing.
- This does not, however, apply where the processing of Personal Data is governed by European data protection legislation;
- processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;
- processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
- It is always possible to request that the Data Controller clarify the specific legal basis applicable to each processing activity and, in particular, specify whether the processing is based on law, provided for by a contract or necessary to enter into a contract.
Place.
The Data are processed at the Data Controller's operating premises and at any other location where the parties involved in the processing are located. For further information, please contact the Data Controller. The User's Personal Data may be transferred to a country other than the country in which the User is located. For further information regarding the place of processing, the User may refer to the section concerning details on the processing of Personal Data.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the United Nations, as well as regarding the security measures adopted by the Data Controller to protect the Data.
The User may verify whether any of the transfers described above take place by reviewing the section of this document concerning details on the processing of Personal Data or by requesting information from the Data Controller using the contact details provided at the beginning of this document.
Retention period.
The Data are processed and stored for the period required for the purposes for which they were collected. Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed;
- Personal Data collected for purposes attributable to the legitimate interests of the Data Controller shall be retained until such interests have been satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
- Where processing is based on the User's consent, the Data Controller may retain the Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain the Personal Data for a longer period in compliance with a legal obligation or pursuant to an order issued by an authority.
- At the end of the retention period, the Personal Data shall be deleted. Therefore, upon expiry of such period, the rights to access, erasure, rectification and data portability may no longer be exercised.
Purposes of the Processing of the collected Data.
The User's Data are collected to enable the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its own rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes: Contacting the User, Analytics and Displaying content from external platforms.
For detailed information regarding the purposes of processing and the Personal Data processed for each purpose, the User may refer to the section "Details on the processing of Personal Data".
Details on the processing of Personal Data.
Personal Data are collected for the following purposes and using the following services:
- Contacting the User:
Mailing List or Newsletter (This Application)
By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this Application may be sent. The User's email address may also be added to this list as a result of registering with this Application or after making a purchase. Personal Data processed : last name; email address; first name. Category of personal information collected under the CCPA: identifiers.
Contact form (This Application)
By completing the contact form with their Data, the User consents to the use of such Data to respond to requests for information, quotations or any other type of request indicated by the heading of the form. Personal Data processed: last name; email address; first name. Category of personal information collected under the CCPA: identifiers.
- Analytics
- The services contained in this section enable the Data Controller to monitor and analyze traffic data and are used to track User behaviour. Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the advertisements of its advertising network.
- Personal Data processed: Cookies; Usage Data.
- Place of processing: USA – Privacy Policy – Opt Out. Category of personal information collected under the CCPA: Internet information.
- This type of processing constitutes a "sale" of data ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing the rights of California consumers for information regarding how to opt out of the sale.
- Displaying content from external platforms
- These services allow content hosted on external platforms to be displayed directly on the pages of this Application and to interact with such content. If a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.
Google Maps Widget (Google Inc.)
Google Maps is a map display service operated by Google Inc. that enables this Application to integrate such content into its pages.
Personal Data processed: Cookies; Usage Data.
Place of processing: USA – Privacy Policy. Category of personal information collected under the CCPA: Internet information.
This type of processing constitutes a "sale" of data ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing the rights of California consumers for information regarding how to opt out of the sale.
User Rights
Users may exercise certain rights with regard to the Data processed by the Data Controller. In particular, the User has the right to:
- withdraw consent at any time.
- The User may withdraw consent to the processing of their Personal Data previously given.
- object to the processing of their Data.
- The User may object to the processing of their Data where such processing takes place on a legal basis other than consent. Further details regarding the right to object are provided in the section below.
- access their Data.
- The User has the right to obtain information regarding the Data processed by the Data Controller, certain aspects of the processing and a copy of the Data being processed.
- verify and request rectification.
- The User may verify the accuracy of their Data and request that such Data be updated or corrected.
- obtain restriction of processing.
- Where certain conditions apply, the User may request that the processing of their Data be restricted. In such case, the Data Controller shall not process the Data for any purpose other than storage.
- obtain the erasure or removal of their Personal Data.
- Where certain conditions apply, the User may request that the Data Controller erase their Data.
- receive their Data or have them transferred to another controller.
- The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have such Data transferred without hindrance to another controller. This provision applies where the Data are processed by automated means and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures related thereto.
- lodge a complaint.
- The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
Details regarding the right to object.
Where Personal Data are processed in the public interest, in the exercise of official authority vested in the Data Controller or for the purposes of the legitimate interests pursued by the Data Controller, Users have the right to object to such processing on grounds relating to their particular situation.
Users are informed that, where their Data are processed for direct marketing purposes, they may object to such processing without providing any justification.
To determine whether the Data Controller processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.
How to exercise rights.
To exercise their rights, Users may submit a request using the contact details of the Data Controller indicated in this document. Requests are free of charge and shall be handled by the Data Controller as soon as possible and, in any event, within one month.
Further information on processing.
Legal defence.
The User's Personal Data may be used by the Data Controller in legal proceedings or during the stages leading to possible legal proceedings for the defence against improper use of this Application or the related Services by the User. The User declares that they are aware that the Data Controller may be required to disclose the Data pursuant to an order issued by public authorities.
Specific information notices.
At the User's request, in addition to the information contained in this Privacy Policy, this Application may provide the User with additional and contextual information notices concerning specific Services or the collection and processing of Personal Data.
System logs and maintenance.
For operational and maintenance purposes, this Application and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User's IP address.
Information not contained in this policy.
Further information concerning the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.
Response to "Do Not Track" requests.
This Application does not support "Do Not Track" requests. To determine whether any third-party services used by this Application support such requests, Users are invited to consult the respective Privacy Policies.
Changes to this Privacy Policy.
The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, where possible, on this Application and, where technically and legally feasible, by sending a notification to Users through one of the contact details held by the Data Controller.
Users are therefore requested to consult this page frequently, with reference to the date of the latest modification indicated at the bottom.
Where the changes concern processing activities whose legal basis is consent, the Data Controller shall collect the User's consent again, where necessary.
Information for California Users.
This section supplements and completes the information contained in the remainder of this Privacy Policy and is provided by the company operating this Application and, where applicable, by its parent company and its subsidiaries and affiliates (for the purposes of this section, collectively referred to as "we", "our" or "us").
The provisions contained in this section apply to all Users who are considered consumers residing in the State of California, United States of America, pursuant to the "California Consumer Privacy Act of 2018" (such Users are hereinafter simply referred to as "you" or "your") and, for such Users, these provisions shall prevail over any other provision contained in this Privacy Policy that may differ or conflict with them. In this section of the document, the term "personal information" is used as defined by the California Consumer Privacy Act (CCPA).
Categories of personal information collected, disclosed or sold.
This section summarises the categories of personal information that we have collected, disclosed or "sold" under the CCPA and the related processing purposes.
Detailed information regarding these activities can be found in the section entitled "Details on
the processing of Personal Data" contained in this document.
Information we collect: categories of personal information collected.
We have collected the following categories of personal information about you: identifiers and Internet information. We will not collect additional categories of personal information without first providing you with a new privacy notice.
How we collect information: sources of the personal information we collect.
We collect the aforementioned categories of personal information, directly or indirectly, from you when you use this Application. For example, you provide us directly with your personal information when you submit requests through any form available on this Application. You also provide us with personal information indirectly when you browse this Application, as personal information relating to you is automatically observed and collected. Finally, we may collect your personal information from third parties that work with us in connection with the provision of the Service or the operation of this Application and its features.
How we use the information collected: sharing and disclosure of your personal information with third
parties for operational purposes.
We may disclose your personal information to third parties for operational and service-related purposes. In such cases, we enter into a written contract with such third party requiring the recipient of your personal information to keep such information confidential and not to use it for purposes other than those necessary for the performance of the contract.
We may also disclose your personal information to third parties when you request or authorize us to do so in order to provide you with our Service. For further information regarding the purposes of processing, please refer to the relevant section of this document.
Sale of your personal information.
For the purposes of this document, the term "sale" means "selling, assigning, releasing, making public, disclosing, disseminating, making available, transferring or otherwise communicating, orally, in writing or by
electronic means, a consumer's personal information by a business to another business or third party for monetary or other valuable consideration."
This means that, for example, a sale may occur whenever an application displays advertising, performs statistical analyses of its traffic or views or simply uses tools such as social network plug-ins and similar tools.
Your right to opt out of the sale of your personal information.
You have the right to opt out of the sale of your personal information. This means that whenever you ask us not to sell your data, we will comply with your request.
Such requests may be made freely, at any time and without submitting any request subject to verification, simply by following the instructions below.
Instructions for opting out of the sale of personal information.
If you would like further information or wish to exercise your right to opt out of all sales carried out by this Application, both online and offline, you may contact us using the contact details provided in this document.
What are the purposes for which we use your personal information?
We may use your personal information to enable the proper operation of this Application and its features ("operational purposes"). In such cases, your personal information shall be processed appropriately and proportionately to the purposes for which it was originally collected and strictly within the limits of compatible purposes.
We may also use your personal information for other purposes, such as commercial purposes (as indicated in the section "Details on the processing of Personal Data" in this document), as well as to comply with the law and defend our rights before the competent authorities when our rights or interests are threatened or when we suffer damage.
We will not use your personal information for different, unrelated or incompatible purposes without first providing you with a new privacy notice.
Your privacy rights in California and how to exercise them.
Right to know and data portability.
You have the right to know the following:
- the categories of personal information we collect about you and the sources of such information, the purposes for which we use your personal information and with whom we share it;
- in the event of the sale or disclosure of personal information to third parties for operational purposes, we will provide you with two separate lists in which we will inform you:
- o in the case of a sale, the categories of personal information disclosed to each category of recipient; and
- o in the case of disclosure to third parties for operational purposes, the categories of personal information obtained by each category of recipient.
- The information referred to above shall be limited to personal information collected or used during the previous 12 months.
- Where our response is provided electronically, the information contained therein shall be "portable", meaning provided in a format that allows you to transmit the information to other entities without hindrance, provided that this is technically feasible.
Right to request the deletion of your personal information.
You have the right to request the deletion of any personal information concerning you, subject to the exceptions provided by law (including, by way of example and without limitation, where the information is used to identify and repair errors on this Application, detect security incidents, protect against fraudulent or illegal activities, exercise certain rights, etc.). If none of the exceptions provided by law applies, following the exercise of your right, we will delete your personal information and ask our service providers to do the same.
How to exercise your rights.
To exercise the rights described above, you must submit a verifiable request by contacting us using the contact details provided in this document. In order to respond to your request, we must be able to identify you.
Therefore, you may exercise the above rights only by submitting a verifiable request that must:
- provide sufficient information enabling us to reasonably verify that you are the person to whom the personal information we have collected relates or their authorized representative;
- describe your request in sufficient detail to enable us to properly understand, assess and respond to it.
- We will not respond to any request if we are unable to verify your identity and, therefore, confirm that the information in our possession actually relates to you.
- If you are unable to submit a verifiable request personally, you may authorise a person registered with the "California Secretary of State" to do so on your behalf. If you are an adult, you may submit a verifiable request on behalf of a person over whom you have parental authority.
- A maximum of 2 requests may be submitted within a 12-month period.
How and within what timeframe we will handle your request.
Within 10 days, we will confirm that we have received your request and provide you with information on how we will process it. We will respond substantively to your request within 45 days of receiving it.
If we require additional time, we will explain the reason and inform you of how much additional time we need.
In this regard, please note that we may take up to 90 days to fulfil your request.
Our communications will cover the preceding 12-month period. If we deny your request, we will explain the reason for the denial. We will not charge any fee for processing or responding to your verifiable request unless it is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will inform you of our decision and explain the reasons for it.
Information for Users residing in Brazil.
This section supplements and completes the information contained in the remainder of this Privacy Policy and is provided by the entity operating this Application and, where applicable, by its parent company and its subsidiaries and affiliates (for the purposes of this section, collectively referred to as "we", "our" or "us").
The provisions contained in this section apply to all Users residing in Brazil pursuant to the "Lei Geral de Proteção de Dados" (such Users are hereinafter simply referred to as "you" or "your"). For such Users, these provisions shall prevail over any other provision contained in this Privacy Policy that may differ or conflict with them.
In this section of the document, the term "personal information" is used as defined by the Lei Geral de Proteção de Dados (LGPD).
Legal bases on which we process your personal information.
We process your personal information only where one of the legal bases for such processing applies. The legal bases are as follows:
- your consent to the relevant processing activities;
- compliance with legal obligations to which we are subject;
- compliance with rules established by laws or regulations or by contracts, agreements or other similar legal instruments;
- studies conducted by research bodies, preferably carried out using anonymized personal information;
- performance of a contract and related pre-contractual obligations, where you are a party to such contract;
- exercise of our rights in judicial proceedings, administrative proceedings or arbitration;
- protection of your or a third party's life or physical safety;
- protection of health, in the context of procedures carried out by healthcare entities or professionals;
- our legitimate interest, provided that your fundamental rights and freedoms do not override such interests;
- credit protection.
- For further information regarding the legal bases, you may contact us at any time using the contact details provided in this document.
Categories of personal information processed.
To find out which categories of personal information are processed, please refer to the section "Details on the processing of Personal Data" contained in this document.
Why we process your personal information.
To find out why we process your personal information, please refer to the sections "Details on the processing of Personal Data" and "Purposes of the Processing of the collected Data" contained in this document.
Your privacy rights in Brazil: how to submit a request and how we will handle it.
Your privacy rights in Brazil.
You have the right to:
- obtain confirmation of the existence of processing activities concerning your personal information;
- access your personal information;
- obtain the rectification of incomplete, inaccurate or outdated personal information;
- obtain the anonymization, blocking or deletion of unnecessary or excessive personal information, or of information processed in breach of the provisions of the LGPD;
- obtain information regarding the possibility of giving or refusing your consent and the related consequences;
- obtain information regarding the third parties with whom we share your personal information;
- obtain, upon your express request, the portability of your personal information (excluding anonymized information) to other providers of products or services, provided that our commercial and industrial secrets are safeguarded;
- obtain the deletion of personal information processed where the processing was based on your consent, unless one or more of the exceptions provided for under Article 16 of the LGPD applies;
- withdraw your consent at any time;
- lodge a complaint regarding your personal information with the ANPD (National Data Protection Authority) or a consumer protection body;
- object to processing activities where such processing is not carried out in accordance with applicable legal provisions;
- request clear and adequate information regarding the criteria and procedures used in automated decision-making processes;
- request the review of decisions that adversely affect your interests and that are made exclusively on the basis of automated decision-making processes involving your personal information.
- These include decisions used to profile you personally, professionally, as a consumer or creditor, or concerning other aspects of your personality.
- You will never be discriminated against or otherwise subjected to any unfavourable treatment as a result of exercising your rights.
How to submit a request.
You may submit an express request to exercise your rights free of charge at any time using the contact details provided in this document or through your legal representative.
How and within what timeframe we will handle your request
We will make every effort to respond to your request as soon as possible.
In any event, if we are unable to do so, we will ensure that we inform you of the factual or legal reasons preventing us from immediately satisfying or acting upon your request. If your personal information is not processed by us, where possible, we will indicate the natural or legal person to whom you should address your requests.
If you decide to submit an access request or a request for confirmation of the existence of processing of personal information, please make sure to specify whether you prefer to receive your personal information in electronic or paper format.
You must also let us know whether you require an immediate response, in which case you will receive a simplified response, or whether you require a complete information notice. In the latter case, we will respond within 15 days of your request, providing you with all information concerning the origin of your personal information, confirmation as to whether or not personal information concerning you exists, all criteria used for processing and the purposes of such processing, while safeguarding our commercial and industrial secrets.
If you decide to submit a request for rectification , deletion , anonymization or blocking of personal information , we will ensure that the other parties with whom we have shared your personal information are immediately informed of your request so that they may also fulfil your request, except where such notification is impossible or excessively burdensome for us.
Transfer of personal information outside Brazil where permitted by law.
We may transfer your personal information outside Brazilian territory in the following cases:
- where the transfer is necessary for international legal cooperation between intelligence services, investigative bodies and criminal prosecution authorities, as provided for by instruments made available under international law;
- where the transfer is necessary to protect your life or physical safety or that of third parties;
- where the transfer is authorized by the ANPD;
- where the transfer results from an obligation undertaken within the framework of an international cooperation agreement;
- where the transfer is necessary for the exercise of public authority or the performance of a public service;
- where the transfer is necessary to comply with a legal obligation, perform a contract and related pre- contractual obligations, or exercise rights in judicial, administrative or arbitration proceedings.
Definitions and legal references.
Personal Data (or Data).
Personal Data means any information which, directly or indirectly, including in connection with any other information, including a personal identification number, identifies or makes identifiable a natural person.
Usage Data.
Information collected automatically through this Application (or third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User connecting to this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used
to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time details of the visit (e.g. the time spent on each page) and details concerning the path followed within the Application, with particular reference to the sequence of pages visited, as well as parameters relating to the User's operating system and IT environment.
User.
The individual using this Application who, unless otherwise specified, coincides with the Data Subject.
Data Subject.
The natural person to whom the Personal Data relates.
Data Processor (or Processor).
The natural or legal person, public administration or any other entity that processes Personal Data on behalf of the Data Controller, as described in this Privacy Policy.
Data Controller (or Controller).
The natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including the security measures relating to the operation and use of this Application.
Unless otherwise specified, the Data Controller is the owner of this Application.
This Application.
The hardware or software tool by which the Users' Personal Data are collected and processed.
Service.
The Service provided by this Application as defined in the relevant terms (if any) on this website/application.
European Union (or EU).
Unless otherwise specified, any reference to the European Union contained in this document shall be deemed to extend to all current Member States of the European Union and the European Economic Area.
Cookie.
Cookies are Tracking Tools consisting of small pieces of data stored within the User's browser.
Tracking Tool.
A Tracking Tool means any technology – e.g. Cookies, unique identifiers, web beacons, embedded scripts, e- tags and fingerprinting – that enables Users to be tracked, for example by collecting or storing information on the User's device.
Legal references
This Privacy Policy has been prepared on the basis of multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise specified, this Privacy Policy applies exclusively to this Application.