OF WEBSITE https://www.galbusera-international.com/
This page describes how the website is managed with regard to the processing of personal data of users and visitors who consult it, in order to allow users to know, even before accessing the various sections of the website and providing their data, how Galbusera processes their personal data.
This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) to all those who interact with the services offered by Galbusera, accessible electronically from the address www.galbusera-international.com, which corresponds to the home page of the website.
The information listed below is based on the provisions of the Data Protection Authority and also on the guidelines adopted by the European Data Protection Authorities.
Links to third-party websites
This privacy policy applies only to the website www.galbusera-international.com. It does not apply to other websites belonging to the same Data Controller that may be accessed by the user/visitor via specific links/sections available on the website itself.
The Data Controller
Following consultation of this website or interaction with it, data relating to identified or identifiable persons may be processed. The Data Controller is Galbusera S.p.A., with headquarters in Viale Orobie 9 – 23013 Cosio Valtellino (SO), e-mail: [email protected]
The Data Controller has appointed a Data Protection Officer (“DPO”), identified as GRC TEAM S.r.l., who can be contacted at the email address [email protected].
Categories of subjects who may become aware of users' personal data
Users' personal data may be disclosed to employees or collaborators of the Data Controller's International Department who, operating under the direct authority of the latter, are authorised to process the data pursuant to Article 29 of the GDPR and Article 2-quaterdecies of Legislative Decree 196/2003 and subsequent amendments, having received adequate operating instructions for carrying out the processing itself. Furthermore, in certain cases, personal data may also be disclosed to suppliers, contractors and consultants responsible for maintaining the website content or providing certain functions or services related to it. The recipients will have access to personal information only to the extent required to perform their duties, in accordance with specific contractual obligations of confidentiality and data protection. These recipients are designated – pursuant to Article 28 of the GDPR – as data processors. The complete list of any data processors designated pursuant to Article 28 of the GDPR is available at the Data Controller's headquarters.
Types of data processed and purposes of processing
Browsing data
During normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. etc.) and other parameters relating to the user's operating system and IT environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning. The data could be used by the competent authorities to ascertain responsibility in the event of hypothetical computer crimes against the website.
Legal basis: legitimate interest of the data controller.
Cookies
For information on the use of cookies on the website www.galbusera-international.com, please refer to our Cookie Policy
Data provided voluntarily by the user
Apart from what is specified for navigation data, the user is free to provide their personal data. The optional, explicit and voluntary sending of data by sending e-mails to the address indicated on the Contact page entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message. The Data Controller ensures that the personal data provided by users (name, surname, e-mail address, content of the message) who submit requests for information are used for the sole purpose of enabling the requested service to be performed. Failure to provide such data, however, will make it impossible to obtain what has been requested.
In particular, personal data voluntarily provided by users is processed for the following purposes:
a) to provide answers regarding our products and services;
b) to provide assistance and customer care services;
c) to develop anonymous statistics (e.g. to assess the number of requests received);
d) to respond to complaints and requests from users regarding products.
Legal basis for processing (letters a, b and d): implementation of measures taken at the request of the data subject.
Legal basis for processing with reference to letter c): legitimate interest of the Data Controller.
Specific summary information and requests for consent, where necessary, will be progressively reported or displayed on the pages of the website dedicated to particular services.
Methods of Processing
Personal data is processed, using automated and electronic tools, for the time strictly necessary to achieve the purposes for which it was collected and is communicated to third parties only if this is necessary for the provision of the requested service. Specific security measures are observed to prevent the loss of data, illicit or incorrect use of the same and unauthorised access.
Data retention
Users' personal data will be retained for the time necessary to pursue the purposes for which it was acquired.
The data retention period depends on the purposes for which it is processed and may therefore vary. The criteria used to determine the applicable retention period are as follows: personal data will be retained for the time necessary (i) to provide answers regarding our products and services; (ii) provide assistance and customer care services; (iii) respond to complaints and requests from users in relation to products; (iv) assert rights in court; and (v) for the time required by applicable law.
Further information on retention periods may be requested from the Data Controller at the contact addresses indicated.
Rights of data subjects
Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to personal data, rectification, portability or withdrawal of consent where given, or erasure of such data or restriction of processing concerning them, or to object to processing (Art. 15 et seq. GDPR). The specific request must be sent to the DPO of the Data Controller at the email address [email protected], or by post to: Galbusera S.p.A., Via Marconi n. 20 – 20864 Agrate Brianza (MB), for the attention of the Data Protection Officer.
Right to Complain
Data subjects who believe that the processing of their personal data through this website violates the provisions of the GDPR have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the GDPR, or to take appropriate legal action (Article 79 of the GDPR).
Galbusera reserves the right to modify or simply update the content of this Privacy Policy, in part or in full, including due to changes in applicable legislation. Galbusera S.p.A. will notify you of any such changes as soon as they are introduced, and they will be binding as soon as they are published on the website. Galbusera S.p.A. therefore invites you to visit this section regularly to read the most recent and updated version of the Privacy Policy so that you are always up to date on the data collected and how Galbusera S.p.A. uses it.
Last updated: October 2025