Privacy Policy

This Privacy Policy is provided pursuant to art. 13 of the European Regulation n. 679/2016 and applies exclusively to all data collected through the website gereco.com. This Privacy Policy is subject to updates that will be published promptly on the Website. This Privacy Policy, together with the Terms and Conditions , any other documents referred to in it and the Cookie Policy , establish the basis on which the Personal Data of the interested party will be processed.

Data Controller

The Data Controller of the data collected from this website is GE.RE.CO SRL, with registered office in Via Raffaello Sanzio n. 16, 20090 Cesano Boscone (MI), VAT number 11498060158, email: e-commerce@gereco.com

Personal data

Personal Data means any information relating to an identified or identifiable natural person (Data Subject). An identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, one or more characteristic elements of his identity physics.

Category of Personal Data processed

Among the Personal Data processed by this Website, independently or through third parties, there are Common Data such as: Cookies, Usage data, contact details including name, e-mail, telephone and shipping number, billing address; login and account information, including username, password, and unique user ID; personal data including gender, hometown, date of birth and purchase history; payment method or credit card information.

Data Controller

Personal data

Category of Personal Data processed

Personal Data Processing Methods

The Personal Data provided or acquired will be processed based on principles of correctness, lawfulness, transparency and protection of confidentiality in accordance with current regulations. The Data Controller processes the Users' Personal Data by adopting the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data. The Processing is carried out using IT and/or telematic tools, with organizational methods and with logics strictly related to the purposes indicated.

Purpose of the Processing of Personal Data and Legal Basis

Personal Data can be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of the Users, of a technical-IT nature (e.g. the IP address, the type of browser used, the operating system, the name domain name and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent in the normal functioning of the internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be canceled immediately after processing.

The data that the interested party chooses to provide spontaneously will be processed in compliance with the conditions of lawfulness pursuant to art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the purposes indicated below and will be kept for the time necessary to fulfill the aforementioned purposes.

The purposes of the treatment are:

a) Respond to requests and provide Information

The Data will be processed in order to be contacted or to follow up on the specific requests addressed to the Data Controller by the Data Subject for communications of a nature relating to the Services and/or Contents of the same Data Controller, via e-mail messages or other communication tools such as telephone or messaging WhatsApp Business Snapshot.

Legal basis : this processing is optional and based on the consent of the interested party, however the provision of data is necessary for the pursuit of the indicated purpose.

Data retention period : until consent is revoked by the interested party.

b) Pre-contractual information and obligations

The Data will be processed in order to be contacted or to follow up on the specific requests addressed to the Data Controller by the Data Subject for communications of an informative nature and/or for information regarding the purchase of the Products of the same Data Controller, via e-mail messages or by filling in the Form contacts and other communication tools such as telephone or WhatsApp instant messaging.

Legal basis : this processing is optional and based on the consent of the interested party, however the provision of data is necessary for the pursuit of the indicated purpose.

Data retention period: until revocation of consent by the interested party.

c) Processing necessary in the context of a contract

The Data will be processed in order to fulfill the obligations deriving from the contract stipulated between the interested party and the Owner for the sale of the Products on the Website, to contact the interested party in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract itself. The Owner makes the service.com section available for open requests for product repairs. The Owner sends a password to the Customer who, by accessing the platform, will be able to monitor the phases of the repair of the purchased product.

Legal basis : this treatment is necessary for the execution of the contract of which the interested party is a part, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject.

Data retention period : 10 (ten) years or different legal obligation.

d) Fulfillment of any obligations established by current laws

The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations, commercial uses and tax/fiscal matters, including also for the purposes established by the legislation on anti-money laundering Legislative Decree 231/ 2007 and subsequent amendments.

Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.

Data retention period : 10 (ten) years or different legal obligation.

e) Newsletters

The Data will be processed for sending communications and promotional, commercial and advertising material or concerning initiatives and events of the Data Controller, via newsletter.

Legal basis: this treatment is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lit. A of the GDPR.

Data retention period: until consent is revoked by the interested party using the appropriate tool at the bottom of the newsletter or by requesting the Data Controller.

f) Direct marketing

The Data will be processed for the direct sale of Products/Services, market research, sending communications and promotional, commercial and advertising material or concerning initiatives and events, via e-mail, SMS, Whatsapp, Chat, Direct Messaging from social media, social network or by telephone calls, paper mail and other information material.

Legal basis: this treatment is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lit. A of the GDPR.

Data retention period: until revocation of consent by the interested party.

g) Statistics

The Data will be processed to carry out statistical analyzes on aggregated and anonymous data to analyze the behavior of the interested party to improve the products and services provided by the Data Controller as well as meet the expectations of the interested party.

Legal basis: this treatment is based on the consent freely expressed by the interested party.

Data retention period : until consent is revoked by the interested party.

h) Profiling

The Data will be processed for the analysis and evaluation of interests, habits, consumption choices, including the creation of profiles in order to be able to send personalized information and promotional material on the Services/Products offered by the Data Controller.

Legal basis: this treatment is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lit. A of the GDPR.

Data retention period : until consent is revoked by the interested party.

i) Personnel selection

The Data will be processed in order to be contacted or to follow up on the specific requests for spontaneous candidacy and/or for a specific job position addressed to the Data Controller by the Data Subject.

Legal basis : this processing is optional and based on the consent of the interested party, however the provision of data is necessary for the pursuit of the indicated purpose.

Data retention period : until consent is revoked by the interested party.

Data Communication

In addition to the Data Controller, in some cases, they may have access to the Data:

a) categories of specially trained Persons involved in the organization of the Website (administrative, commercial, marketing, legal, system administrators);
b) external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Managers, if appointed, can always be requested from the Data Controller;
c) public or private entities that can access the Data in compliance with legal obligations;
d) subjects who carry out ancillary and instrumental tasks with respect to the activity of the Data Controller;

Times of Treatment

As expressly provided for by art. 5, co. 1, lit. e) of the GDPR, the Data are kept for the time necessary for the Processing of the same in relation to the performance of the service requested by the interested party, or required by the Purposes described above in this document.

At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, cancellation, rectification and portability of the Data can no longer be exercised

Cookies

This Website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social network functions and analyze traffic. Cookie Policy

Place of processing and transfer of data abroad

The Data is processed at the Data Controller's operational headquarters. For further information, you can contact the Data Controller. The Data may be processed by natural persons and/or legal entities operating on behalf of the Data Controller and by virtue of specific contractual obligations and based in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will adopt all suitable contractual measures to guarantee adequate data protection.

Exercise of the rights of the interested party

The interested party has the right to exercise the faculties provided for in articles 7, 15-22 of the European Reg. 679/2016. In particular, you have the right to withdraw your consent at any time and, upon simple request to the Data Controller, you can request access to Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments (so-called portability), obtain updating, limitation of processing, rectification of data and cancellation of data processed in breach of current legislation. You have the right, for legitimate reasons, to object to the processing of your personal data and to the processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as supervisory authority for the protection of personal data or to appeal to the appropriate judicial offices. The interested party can exercise his rights by contacting the Data Controller by e-mail at the address: e-commerce@gereco.com.

Tools used for the processing of personal data

CONTACT FORM

The interested party, by filling in the contact form with his own data, consents to their use to respond to requests for information, or for any other purpose indicated by the header of the form. Personal Data collected through the contact form: Email, Name and Surname

WPForms (WPForms, LLC.)

WPForms is a form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified in the Privacy Policy of the service. Place of Processing: USA - Privacy Policy

OTHER CONTACT TOOLS

WhatsApp Business

WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For the purposes of the processing methods, the WhatsApp Business Data Processing Terms are also referred to, available at the following link: https://www.whatsapp.com/legal/business-data-processing-terms/ .
The data of the interested party will transit in the WhatsApp Business services according to the terms that WhatsApp reports in the document "Terms of Service WhatsApp Business" at the following link : https://www.whatsapp.com/legal/business-terms/ .
Personal Data collected: telephone number, email, Usage Data, Cookies. Place of Processing: Ireland - Privacy Policy

Live chats

To manage requests for information with users, this website uses a Chat service provided by:

WhatsApp (WhatsApp Ireland Limited)

WhatsApp is an instant messaging service provided by WhatsApp Ireland Limited. Personal Data collected: telephone number, email, Usage Data, Cookies. Place of Processing: Ireland - Privacy Policy

EMAIL ADDRESS MANAGEMENT

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the interested party. These services could also allow the collection of data relating to the date and time of viewing of messages by the interested party, as well as the interaction of the interested party with them, such as information on clicks on the links inserted in the messages.

Newsletters

By registering for the newsletter, the interested party's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The interested party's email address could also be added to this list as a result of registering on this site or after making a purchase. The interested party can choose to unsubscribe from the newsletter at any time by clicking on a specific button that he will find in the emails. After clicking on the delete button, the data of the interested party will be deleted immediately from the "email marketing" software. Personal Data collected: email and Name. This Website uses the newsletter service provided by:

WEBSITE REGISTRATION

With the registration service, the interested party allows the site to identify him and give him access to dedicated services. The registration and authentication services can also take place with the help of third parties. In this case, the application will be able to access some data stored by the third-party service used for registration and identification.

STATISTICS

The statistical services allow the Data Controller exclusively to monitor and analyze traffic data and are used to keep track of the behavior of the interested party. This Website uses the following services:

a) Google Analytics (Google Ireland Limited)

Google Analytics is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. The IP address anonymization function is active on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be incorporated into other data already held by Google.

At the following link https://tools.google.com/dlpage/gaoptout?hl=it the browser add-on for deactivating Google Analytics is made available by Google. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

b) Google Search Console (Google Ireland Limited)

is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

c) Hotjar (Hotjar Ltd)

Hotjar is a statistics service that allows the Data Controller to monitor the conversions of its customers and to record sessions. Under the following link https://www.hotjar.com/privacy/do-not-track/ the browser add-on for Do not track is made available by Hotjar. Personal Data collected: Cookies; Usage data. Place of Processing: Malta – Privacy Policy

d) Clarity (Microsoft Ireland Operations Limited)

Clarity is a service that allows the Data Controller to monitor the conversions of its customers. Personal Data collected: Cookies; Usage data. Place of Processing: Ireland - Privacy Policy

TAG MANAGEMENT

Google Tag manager (Google Ireland Limited)

Google Tag manager is a service that allows you to manage and monitor all third-party tags on the Website in order to obtain information on the interest shown by Users towards the Website itself and consequently on the quality of the contents. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

INTERACTION WITH SOCIAL NETWORKS

These services allow you to interact with social networks directly from the pages of this website. The interactions and information acquired from this website are in any case subject to the privacy settings of the interested party relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collects traffic data relating to the pages in which it is installed.

a) Facebook (Meta Platforms, Inc.)

The Facebook buttons are services for interacting with the Facebook social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

b) Instagram (Meta Platforms, Inc.)

The Instagram buttons are services for interacting with the Instagram social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

c) LinkedIn (LinkedIn Ireland Unlimited Company)

LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

d) TikTok (TikTok Technology Limited)

The Tik Tok buttons are interaction services with the social network provided by TikTok Technology Limited. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

REMARKETING AND RETARGETING

These services allow this Website to communicate, optimize and serve advertisements based on the past use of this Website by the interested party. This activity is carried out by tracking Usage Data and using Cookies. This Website uses the following services:

a) Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which connects the activity of this Website with the Facebook advertising network. This website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel it is possible to understand the actions that people perform on the Website. The data that is collected can be used for:

ensure that adverts are shown to the right people;
create audience groups to target ads;
take advantage of the additional advertising tools of the platform on which you advertise

The information collected is anonymous to the operators of this site and cannot be used to identify the identity of a single interested party. However, the information is saved and analyzed by Facebook, which may tie the action back to an individual profile and use this information for internal Facebook advertising purposes, as outlined by Facebook's privacy policy. This will allow Facebook to show ads both on Facebook and on third party sites. The Site Owner has no control over how this data is used. For more information on how users can protect their privacy, please refer to the Facebook Privacy Policy .

b) Google ADS

Google ADS is a service provided by Google Ireland Limited which connects this website with the Google advertising network. This Website makes use of the Remarketing functions of Google Analytics combined with the possibility of adaptation to different devices of Google ADS. This functionality makes it possible to link the target groups for promotional campaigns created by the Marketing function of Google Analytics with the adaptability to different devices of Google ADS. This allows advertising based on the personal interests of the interested party to be shown, identified through an analysis of the behavior of the interested party on the web, whether on a mobile device or on other devices. You can permanently disable the targeting and remarketing features by disabling the "personalized advertising" feature in your Google Account. To do this, simply follow this link: https://www.google.com/settings/ads/onweb/ Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

c) LinkedIn Tag Insights (LinkedIn Ireland Unlimited Company)

This Website uses a script called "LinkedIn Insight Tag". The LinkedIn Insight Tag adds a cookie to Users' browsers each time they visit this Website. Thanks to this tool, the Data Controller can record when a LinkedIn member performs a certain action on the Website (such as booking a service or leaving an email). This tool is used to collect statistical data to measure the effectiveness of paid advertising. Thanks to the LinkedIn Insight Tag, it is possible to understand the actions that people perform on the Website. The Data collected is used to: ensure that advertisements are shown to the right people; create audience groups to target ads; take advantage of the additional advertising tools of the platform on you advertise. This Website uses the LinkedIn Insight Tag to carry out "remarketing" and "Retargeting" activities; thanks to these activities, cookies are used that the interested party leaves on the website, without however identifying him. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

CONTENT ON EXTERNAL PLATFORMS

These services allow you to view content hosted on external platforms directly from the pages of this website and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, the same collects Traffic data relating to the pages in which it is installed.

This Website uses:

1.Google Maps

Google Maps is a map visualization service managed by Google that allows this Website to integrate such contents within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland - Privacy Policy

2. YouTube (Google Ireland Limited)

Youtube is a video content viewing service managed by Google that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

PAYMENT MANAGEMENT

Payment management services allow this Website to process payments by credit card, bank transfer or other means. The data used for payment are acquired directly by the manager of the requested payment service without being processed in any way by this site. Some of these services could also allow the programmed sending of messages to the interested party, such as emails containing invoices or notifications regarding the payment. This Website uses the following services:

a) PayPal (Paypal Europe S.à.rl et Cie, SCA Inc.)

PayPal is a payment service provided by PayPal Europe S.à.rl et Cie, SCA Inc., which allows the interested party to make online payments using their PayPal credentials. Personal data collected: Cookies and various types of data as specified in the privacy policy of the service. Place of processing: Luxembourg - Privacy Policy

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, referring to the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the interested party is required to cease using this website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that moment.
The Owner is not responsible for updating all the links that can be viewed in this Privacy Policy, therefore whenever a link is not functional and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the sites internet referred to by this link.

Your cart is empty

Your cart

Subtotal

Privacy Policy

Data Communication

Times of Treatment

Cookies

Place of processing and transfer of data abroad

Exercise of the rights of the interested party

Tools used for the processing of personal data

REMARKETING AND RETARGETING

CONTENT ON EXTERNAL PLATFORMS

PAYMENT MANAGEMENT