PRIVACY POLICY
Ghella S.p.A., headquartered at Via Pietro Borsieri, 2/a - 00195 Rome, VAT No. 00898971007 and Tax Code 00462220583 (Tel: +39 06.456031), in its capacity as data controller (hereinafter the “Company” or the “Controller”), provides the following privacy policy pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter, the “GDPR”) regarding the processing of personal data of visitors to the website https://www.laviniaroma.com/it (hereinafter, the “Website”).
1. If I am a visitor to the Website, what types of data are processed and for what purposes?
If you are a visitor to the Website, the following types of personal data will be processed for the following purposes:
Browsing Data:
The IT systems and software procedures used for the operation of this Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user's operating system and IT environment.
This data, necessary for the use of web services, is also processed to: (i) obtain statistical information on the use of services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.); and (ii) verify the proper functioning of the services offered. The data could be used to ascertain responsibility in case of hypothetical cybercrimes against the Website.
Browsing data is processed based on our legitimate interest in ensuring the security of the Website, verifying its proper functioning, and obtaining statistics regarding its use (Art. 6, para. 1, letter f) of the GDPR).
Data You Provide Voluntarily if You Subscribe to the Website's Newsletter:
The Website allows you to subscribe to our newsletter. Please note that our newsletter contains purely informational content and is limited to providing general information about the art program available at the Loggia dei Vini in Villa Borghese. You may revoke your consent to the processing of your email address at any time, freely and without charge, by making a request using the methods described in paragraph 8 below.
The Website uses cookies. Please refer to paragraph 6 below.
2. Will my personal data be shared with third parties?
At the request of judicial or law enforcement authorities, we may be required to disclose visitor data in cases provided for by law. In such instances, we may also share your data with lawyers or legal firms if necessary to pursue our legitimate interest in exercising or defending a legal right.
3. Who can access my data?
Our employees and collaborators responsible for managing and maintaining the Website, assisting Website visitors who request information or make other inquiries, as well as, based on your optional consent, sending informational communications, may access your personal data.
Additionally, the following categories of entities, acting as data processors, may access your personal data as they provide services instrumental to our activities: IT service providers, outsourcing and cloud computing service providers, analytics service providers (offering us aggregated statistics and data on Website use), management service providers, external professionals, and consultants.
4. How will my personal data be processed, and for how long will it be retained?
Your personal data will be processed using automated and non-automated tools. Specific security measures are in place to prevent data loss, unlawful or improper use, and unauthorized access.
Browsing data will be retained for a maximum of 7 (seven) days unless further retention is necessary to ascertain responsibility in the event of hypothetical cybercrimes against the Website or to comply with requests from judicial authorities.
If you have consented to the processing of your personal data for receiving newsletters, your personal data will be processed until you withdraw your consent.
5. Will my data be transferred outside the European Economic Area?
If data is transmitted to entities whose headquarters or data processing location is not within a member state of the European Union or another country outside the European Union that is a signatory to the treaty, the Company ensures, prior to the transfer of data, that an appropriate level of data protection exists, except in exceptional cases permitted by law concerning the recipient. This protection may be established, for instance, through an adequacy decision by the European Commission under Article 45 of the GDPR, appropriate safeguards pursuant to Article 46 of the GDPR, or the implementation of the so-called EU Standard Contractual Clauses with the data importer, in accordance with Article 46(2)(c) of the GDPR. The Company can provide the user with a summary of the recipients located in third countries and a copy of the specific regulations agreed upon to guarantee the appropriate level of data protection.
6. Do you use cookies or similar tools on the Website?
Yes, we use cookies on our Website. Please consult our Cookie Policy.
7. What are my rights?
You have the right to exercise, at any time, free of charge and without formalities, the rights provided for in Articles 15 to 22 of the GDPR, including:
(i) the right of access to personal data (i.e., the right to obtain confirmation from us as to whether or not personal data concerning you is being processed and, if so, to access your personal data, obtaining a copy and the information provided for in Article 15 of the GDPR);
(ii) rectification (i.e., the right to obtain the correction of inaccurate data concerning you or the integration of incomplete data) or deletion of such data if one of the grounds set forth in Article 17 of the GDPR applies;
(iii) restriction of processing (i.e., the right to obtain, in the cases provided for in Article 18 of the GDPR, the marking of stored data with the aim of limiting its processing in the future);
(iv) the right to data portability (i.e., the right, in the cases provided for in Article 20 of the GDPR, to receive from us, in a structured, commonly used, and machine-readable format, the data concerning you and to transmit such data to another controller without impediment).
You also have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you under Article 6, paragraph 1, letters e) (performance of a task carried out in the public interest or in the exercise of official authority) or f) (legitimate interest) of the GDPR, including profiling based on those provisions.
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling to the extent that it is related to such direct marketing.
You also have the right to withdraw your consent at any time when processing is based on your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
8. How can I contact you and exercise my rights?
Requests to exercise your rights, as outlined above, may be submitted by mail to:
“Ghella S.p.A., with its registered office at Via Pietro Borsieri, 2/a –00195 Rome – addressed to the Privacy Coordinator,” or by email to privacy@ghella.com
Ghella has appointed a Data Protection Officer (DPO), who can be contacted by mail at the above address (attn: DPO) or by email at dpo@ghella.com.
You are also reminded that you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority of the EU Member State where you reside, work, or where the alleged infringement occurred.
Last update: November 2024