This privacy policy is provided in compliance with current legislation on the protection of personal data and, in particular, pursuant to EU Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (so-called “GDPR”) and of Legislative Decree 196/2003 (Italian Code regarding the protection of personal data, so-called “Privacy Code”) with reference to the processing of personal data of users who access the website www. garageeks.com and transactions made with Garageeks Srl.

This Privacy Policy aims to describe in a simple and transparent way to users which personal data are processed, for what purpose, by whom and with what methods and to inform them about the measures that are applied to protect their rights and freedoms. This Privacy Policy, therefore, only concerns this site and is not made available for other websites that may be consulted by the user via links.

Index

1. Data Controller
2. Why we use personal data
3. Provision of personal data
4. What data are processed
5. Methods of data processing
6. Who can the data be disclosed to?
7. What are the rights of the data subjects?
8. Right of revocation and opposition

1. Data Controller

The data controller of the user’s personal data is Garageeks S.r.l., with registered office in Milan in Viale Isonzo n. 8, R.E.A. MI-2105137, VAT number 09657240967, e-mail: info@garageeks.com, hereinafter referred to as “Garageeks” or “Owner”.

2. Why we use personal data

By accessing and consulting this site, as well as using the services that are offered to users through the site, information relating to users as identified or identifiable natural persons can be collected and processed. If personal data are thus acquired, the same, in compliance with current legislation on the protection of personal data, will be processed solely for the following purposes:

1. a) strictly connected and instrumental purposes to allow access and use of the site, its features and the services requested;
2. b) to fulfill any obligations provided for by law and European legislation;
3. c) for operational and management needs internal to the Owner and related to the services offered through the site and through offline communication channels;
4. d) in a completely anonymous and aggregate form, for statistical purposes;
5. e) to execute the newsletter service (for details see par. 4.3);
6. f) To request clarifications on your orders, manage the orders themselves and perform shipments.

The data collected by users who use the site for the purposes indicated in the previous point could also be used for other purposes, but for any further processing, users will be required to express and explicit consent. In this way, the data collected from users can only be used if the user freely and clearly consents to each further processing.

3. Provision of personal data

   The provision of personal data is mandatory for the purposes referred to in art. 2, paragraph 1, as the legal basis of the processing is the execution of the services requested by the user, or the use of the site, the fulfillment of orders and any other service that may be expressly requested (as in the case of the newsletter) made available through the site. Any refusal to oppose the related processing may therefore prevent the execution of the requested services; it will in any case be possible to consult the Site without providing any personal data, even if some features may not be available and some services not provided.

   In particular, the consequences of any refusal to provide personal data will always be explicit and specifically connected to each service: for example, any refusal to the relative processing may prevent the consultation of the Site and its functions (in the case of cookies ) or receipt of the newsletter (in the case of offering the newsletter service). Therefore, the user will be adequately informed in the manner provided for each specific case, but in any case, he or she may consult the website even denying consent to the processing of personal data, where required; in this case, some functionalities or features of the site could be disabled.

4. What data are processed?

Depending on the service rendered, personal data of different types may be processed, as specified in this article.

4.1 Navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the navigation of the websites. This information is not collected to be associated with identified interested parties; however, by their very nature they could, through processing and association with data held by third parties, allow users to be identified. These include the IP addresses or domain names of the computers used by users who connect to the site, the URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and platform used by the user.

The above data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for more than seven days. With regard to cookies, please refer to par. 4.4 below.

4.2.1 Data provided voluntarily by the user (communications)

The optional, explicit and voluntary sending of communications by means of contact forms on the site or by e-mail to the addresses indicated on this site, involves the subsequent acquisition of the data communicated by the user, including his e-mail address, and consent to receive any response messages to their requests.

The personal data provided in this way are used for the sole purpose of satisfying or responding to the requests transmitted and are communicated to third parties only if this is necessary for this purpose, such as for example to collect payments or dispatch goods by couriers and postal services.

Payments by credit card are processed with PayPal (Privacy Policy: https://www.paypal.com/it/webapps/mpp/ua/privacy-full) and at no time Garageeks comes into possession of the card data. credit.

4.2.2 Data provided voluntarily by the user (to receive communications for marketing and / or commercial promotion purposes)

Only in the event that personal data (in particular, e-mail address and telephone number) are provided by the interested party in the context of a service requested by the same, the data thus provided may be used to send related e-mail communications to services similar to those previously requested by the user, pursuant to art. 130, paragraph 4, legislative decree 196/2003, without the need for express and prior consent (so-called soft spam). In any communication, however, the user is reminded that he can revoke the consent at any time and without formalities. The data is deleted at the request of the interested party.

4.3. Newsletter

The newsletter is sent by e-mail to those who explicitly request it, by filling out the appropriate form on the Site and authorizing the processing of their personal data for the aforementioned purpose.

Consent: The provision of data is mandatory only for the purpose of receiving the newsletter and any refusal will make it impossible to use the service, without further consequences.

Purpose: The personal data provided by users will be used for the sole purpose of sending the newsletter and will not be disclosed to third parties.

Method: The data collected will be processed with IT tools; in order to prevent its loss, illicit or incorrect use or in order to prevent any unauthorized access to the site, specific security measures are adopted.

Service provision platform: the service is provided through the “MailChimp” platform made available and managed by The Rocket Science Group LLC, a company in the State of Georgia in the United States, (privacy policy: https://mailchimp.com/legal/privacy/).

Cancellation from the service: to stop receiving the newsletter, simply select the cancellation link, present at the end of each e-mail, or send a specific request to the e-mail address info@garageeks.com

The cancellation is managed in an automated way, so further newsletters could be received for a period following this request, in any case no later than 72 hours from the cancellation request, and the sending of which was planned before receiving the cancellation request.

4.4.1 Cookie

What are cookies? Cookies are information stored by the browser when a website is visited with any suitable device (such as a computer, tablet or smartphone). Each cookie contains different data (for example, the name of the server from which it comes, a numeric identifier, etc.), it can remain in the system for the duration of a session (until the browser is closed) or for long periods and can contain a unique identification code.

What are they for? Cookies are used for different purposes depending on their type: some are strictly necessary for the correct functionality of a website (technical cookies), while others optimize its performance to offer a better user experience or allow you to acquire statistics on the website. ” use of the site, such as analytics cookies or allow you to view personalized advertising, such as profiling cookies.

Consent: any provision of the user’s consent is stored by GaraGeeks through a technical cookie, with a duration of 12 months. The user is informed both through the short information (banner displayed until consent is given or denied, as explained in paragraph 4.4.4. “How to disable cookies?”) And through this extended information; furthermore, in paragraph 4.4.3 links to the privacy policies of third parties are indicated, also for the purpose of disabling them (where directly available through them).

How to disable them? It is possible to disable cookies both through the browser settings (par. 4.4.4. “How to disable cookies?”) And through the mechanisms made available by some third parties (par. 4.4.3 “Cookies used on the site”).

4.4.2 General types of cookies used on the site

Technical cookies (GaraGeeks): they are essential for the proper functioning and display of the site and to store the user’s consent to the use of cookies.

Analytical cookies (GaraGeeks): they are used for the purpose of aggregate analysis of visits to the site.

Analytical cookies (third parties): they are used for the purpose of aggregate analysis of visits to the site, through the use of a third-party service.

Profiling cookies (third parties): they are used to create profiles relating to the user and are used in order to send advertising messages in line with the preferences expressed by the same in the context of surfing the net, through the use of a third-party service , including the advertising dealer for most of them. The names of the third parties and the links to the relevant information are available in the next paragraph.

4.4.3 Cookies used on the site

Garageeks cookies: technical cookies are used for the following purposes: to memorize the user’s preference regarding cookies, the indication of the possibility of scrolling by touching the screen on mobile devices, authentication in the session (only for the area reserved for staff).

Third-party cookies: Google Analytics cookies.

4.4.4 How to disable cookies?

Control via browser: The commonly used browsers (eg Firefox, Chrome, Safari) accept cookies by default, but this setting can be changed by the user at any time. This applies to both PCs and mobile devices such as tablets and smartphones: it is a generally and widely supported function.

Therefore, cookies can easily be deactivated or disabled by accessing the options or preferences of the browser used and generally only third-party cookies can be blocked; in general, these options will only have effect for that browser and on that device, unless options are active to unify preferences on different devices. Specific instructions can be found on the options or help page of the browser itself. Disabling technical cookies, however, can affect the full and / or correct functioning of various sites, including this site.

As a rule, the browsers used today:

• offer the “Do not track” option, which is supported by some websites (but not all). In this way, some websites may no longer collect certain navigation data;
• offer the option of anonymous or incognito browsing: in this way no data will be collected in the browser and the browsing history will not be saved, but the browsing data will still be acquired by the operator of the website visited;
• allow you to delete the cookies stored in whole or in part, but when you visit a website again they are usually installed where this possibility is not blocked.

The links to the support pages of the most popular browsers are indicated (with instructions on disabling cookies on these browsers):

Firefox (https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie);

Safari (iOS) (https://support.apple.com/it-it/HT201265);

Chrome (desktop: https://support.google.com/chrome/answer/95647?hl=it; Android and iOS https://support.google.com/chrome/answer/2392971?hl=it).

Online tools: it should be noted that from the site http://www.youronlinechoices.com/it/ it is possible not only to acquire further information about cookies, but also to verify the installation of numerous cookies on your browser / device and, where supported, also to disable them.

5. Methods of data processing

Personal data are processed lawfully and fairly and used only for the purposes indicated in art. 2. The processing will take place using tools suitable for guaranteeing the security and confidentiality of personal data and with automated tools designed to store, manage and transmit the data. Specific security measures are adopted to prevent data loss and contain the risks of illicit or incorrect use and unauthorized access and personal data will be kept for the time prescribed by law and, in any case, for the time strictly necessary. to follow up on the activities for which they were collected (for example, find the request sent via the contact form on the site) and / or until the consent given for the purposes referred to in art. 2, paragraph 1, lett. e) and f).

6. To whom can the collected data be disclosed?

The processing connected to the web services of this site take place at the GaraGeeks headquarters and are only handled by technical personnel expressly in charge of processing, internal and / or external to the same. In particular, where necessary only with prior consent, the data may be disclosed to third parties whose collaboration Garageeks may and / or must make use of for the performance of the services offered. The data acquired via the web, or in any case deriving from web services, may be communicated to the technological and instrumental partners of which the Data Controller uses for the provision of the services requested by users, always in compliance with the purposes indicated in art. 2. To this end, the subjects who will have access to personal data will be specifically authorized for processing by the Data Controller and, if due, appointed as Data Processors, pursuant to art. 28 and 29 of the GDPR.

The data collected for the aforementioned purposes may also be disclosed to companies connected to the Data Controller and to subjects authorized for this purpose by provisions of and European legislation.

A list of the subjects to whom the Data Controller communicates the personal data collected for the aforementioned purposes is available and can be consulted at the headquarters of the Data Controller and may be requested at the addresses indicated.

7. What are the rights of the data subjects?

The interested party is the natural person, identified or identifiable, to whom the personal data being processed refer and, therefore, the user who accesses the site and who may request the provision of services by GaraGeeks.

Each interested party has the right to access at any time the data concerning him / her processed by the Data Controller (right of access) in order to verify its correctness and to verify the lawfulness of the treatments carried out. The interested party can also exercise all the rights recognized by the current national and European legislation on the protection of personal data (by Legislative Decree 196/2003 and by EU Reg. 2016/679 and subsequent amendments and additions): in in particular, may request at any time the correction and updating of incorrect or inaccurate data, the limitation of the processing carried out and the cancellation of the same (right to be forgotten), as well as to propose a complaint to the Guarantor for the protection of personal data. .

With reference to personal data processed by automated means, the interested party may also receive the data concerning him in a structured and commonly used format and possibly transmit them to another data controller (right to data portability).

8. Right of revocation and opposition

Each interested party is also recognized the right to revoke the consent given at any time, without prejudice to the lawfulness of the processing carried out by the Data Controller prior to such revocation.

The interested party is also always granted the possibility of opposing the processing of data concerning him if it was carried out for direct marketing purposes by the Data Controller; in this case, your data will no longer be processed for these purposes, depending on the specific consent previously issued, by the Data Controller or by any third parties (right of opposition).