Privacy Policy
gnutti.com
Articles 13-14 of EU Regulation 2016/679
This document informs users, pursuant to Articles 13-14 of EU Regulation 2016/679, about the processing of personal data carried out through this website (hereinafter referred to as “the Website”), without extending to other websites that may be accessed through external links.
The processing of personal data is conducted in compliance with current regulations on personal data protection and adheres to the principles of fairness, lawfulness, transparency, and data protection.
Data Controller
The Data Controller is:
- Gnutti Transfer S.p.A (hereinafter “Gnutti” or “the Data Controller”)
- Legal Status: Sole-shareholder joint-stock company
- Tax ID and VAT Number: 03083060172
- Headquarters: Via D. Ghidoni 187, Ospitaletto (BS), Italy
- Email: info@gnutti.com
- Fax: +39 030 64 07 45
- Phone: +39 030 64 00 61
Sources and Categories of Personal Data
The personal data held by the organization is collected directly from users.
- Sensitive Data: This site does not collect sensitive data revealing racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union memberships, health, or sexual life.
Cookies
This Website, like others, saves cookies on the browser used by the user. Cookies are small text strings sent to the user’s device, stored, and sometimes retained over extended periods to be retransmitted during subsequent visits.
For more details and to modify cookie consent, refer to the Cookie Policy of the Website.
Browsing Data
Systems and software procedures used for operating this Website collect certain personal data implicitly during their normal functioning. These data, while not collected to identify users, may allow identification through processing and association with third-party data.
This category includes:
- IP addresses
- Domain names of the computers used by visitors
- Uniform Resource Identifier (URI) addresses of requested resources
- Request timestamps
- Method of submitting requests to the server
- Response file size
- Status codes of the server’s response (e.g., success or error)
- Other parameters related to the user’s operating system and IT environment
These data are used exclusively for anonymous statistical information and to ensure the correct functioning of the Website. They are deleted immediately after processing.
SSL/TLS Encryption
This site uses SSL or TLS encryption for security and to protect the transmission of confidential content. Encrypted connections are recognizable by the browser address bar showing “https://” and a padlock icon. Data transferred via an SSL/TLS connection cannot be accessed by third parties.
Profiling Data
No profiling data regarding users’ habits or consumption choices are directly collected. However, third parties may collect such data via links or embedded elements. Refer to the section on third-party cookies for details.
Voluntarily Provided Data
Users who voluntarily send emails to the addresses listed on the Website provide their address and any additional personal data included in the email. Similarly, completing forms on the Website involves the collection of information necessary to respond to requests or fulfill services.
This data may include:
- Personal details, contact information, phone numbers, addresses, and emails of users and any third parties mentioned by them.
Users are responsible for ensuring they have the right to share third-party data, releasing the Data Controller from any liability.
Contact Forms
By filling out contact forms, users consent to the use of their data to respond to inquiries, provide estimates, or fulfill other requests. Users are advised not to include sensitive or judicial data. If provided, sensitive data will be deleted unless required for processing.
Restricted Area
Information uploaded to restricted areas is encrypted and accessible only to authorized users (the data subjects and/or intermediaries). Such data is not disseminated.
Career Applications
Users may submit job applications via the Website, including an updated CV with explicit consent to process personal and sensitive data (if applicable). A dedicated privacy notice is available for this purpose.
Purposes and Legal Basis for Processing
Personal data is processed for:
- Website navigation: Legitimate interest (Art. 6(1)(f) GDPR).
- Service provision: Contractual necessity (Art. 6(1)(b) GDPR).
- Legal obligations: Compliance with laws and authority directives (Art. 6(1)(c) GDPR).
- Legitimate interests: Cybersecurity, fraud prevention, and legal defense (Art. 6(1)(f) GDPR).
Consequences of Refusing Data Provision
Providing data is optional but necessary for service execution. Failure to provide essential data may prevent service delivery. For non-essential or sensitive data, providing them is optional but may affect the completeness and results of processing.
Data Processing Methods
Data is processed using automated tools strictly for the time necessary to achieve the stated purposes.
- Location: Processing occurs within Italy or the EU.
- Security Measures: Measures are in place to prevent data loss, unauthorized access, and misuse.
No automated decision-making, including profiling, is performed.
Data Retention
Personal data is retained as long as necessary for the purposes of processing or as required by law.
Data Sharing
Data may be shared with:
- Internal and external processors: Responsible for website administration, data analysis, email management, etc.
- Authorities: As required by law.
Data will not be publicly disseminated unless anonymized or required by law.
User Rights
Users have the right to:
- Access, rectify, delete, or restrict their data.
- Object to data processing.
- Withdraw consent without affecting the lawfulness of prior processing.
- Lodge complaints with the data protection authority (www.garanteprivacy.it).
Requests should be sent to privacy@gnutti.com.
Policy Updates
This Privacy Policy is subject to updates. Users are encouraged to review the document regularly.