Privacy policy

Introduction and legal basis
This Privacy Policy, which can be downloaded by the User for storage, is governed by EU Regulation 679/2016, on the processing of Personal Data,
Users are invited to periodically visit this section, in order to be always updated on any regulatory changes.

The Data Controller of Personal Data
The Data Controller is DM Service - VAT number 08489950728, in the person of its administrator , with registered office in Via Ettore Fiermosca 69 - 70123 - Bari - (BA) - Italy - mail: info@gantis.it - < / p>

tel. +39 3533051678


Information on general risks
The Data Controller, or DM Service, informs Users that, due to the particular nature of the medium used, there is a general risk of violation of network security, risk which may be placed outside the scope of application of the security measures adopted pursuant to current legislation. Therefore, the User is recommended to ensure that his / her navigation instrument has all the necessary requirements to guarantee the security of data transmission on the network.

Object of collection and processing
in order to promote awareness and facilitate public understanding of the risks, rules, guarantees and rights in relation to the processing of personal data and to promote the awareness of Data Controllers and Data Processors regarding the obligations imposed on them by the EU Regulation .
1. personal data provided by the User: data released voluntarily and knowingly such as name, surname and e-mail address released through the "form" for registration and by filling in the "form" for sending newsletters;
2. data obtained through the User's device: device manufacturer, device model, operating system, browser type, IP address;
3. data obtained from social media: the User ID and / or username associated with a given social media service and the link to the User's profile in the case of access or registration to the Site through a social media service (eg Facebook ). Access to the service through social media services requires the communication of the aforementioned data. If the User does not intend to communicate the aforementioned information, he must use other means to access the website.
4. geolocation: the position of the User's device, subject to the consent of the latter which may be revoked at any time by the User.

With reference to the data collected through cookies and the methods of possible removal, we invite the user to carefully examine our Cookie Policy, available in the dedicated section.

Purpose and methods of collection and processing
Personal data is collected to allow the main functions of the website or to allow users Users to perform registration operations, to manage requests for information sent by users, to comply with applicable regulations and / or respond to requests from public and administrative authorities, to carry out the activities necessary for the sale of business or company branches, acquisitions, mergers, demergers or other transformations and for the execution of the aforementioned operations, to allow limited profiling of the preferences, characteristics, habits or consumption choices of the Users, in order to allow the carrying out of marketing activities focused on the specific interests and needs of the Users, with the prior consent of the User.
Furthermore, the data is collected to allow at www.gantis.store, the sending of newsletters, subject to the consent of the user who has voluntarily subscribed through the appropriate field "subscribe to the newsletter", or by ticking the appropriate box "subscribe to the newsletter" in the form of registration www.gantis.it also processes aggregate data for its own statistical purposes.

Legal basis
At the basis of the processing of personal data there are first of all the contractual purposes. In this case, the processing is mandatory, as it is necessary for the provision of the requested services. Therefore, if the User does not want his personal data to be used for these purposes, he must not use the services and the website.
The processing also takes place on the basis of the legitimate interest of www.gantis.it , of its counterparties and of its partners for the realization of the economic activities, in the context and within the limits strictly necessary for the performance of the same, in line with the User's interest.

Finally, the legitimate interest in data processing is found in carrying out profiling activities, for the purpose of sending marketing communications, based on the User's interests and needs. In all these cases, the data processing activities are not mandatory and the User may object at any time, according to the methods indicated below, or by using the form available on the website www.gantis.it. The Marketing Purposes, on the other hand, are optional.
However, failure to provide consent for their realization would make it impossible for www.gantis.it and its Partners to send the User generic and / or personalized marketing communications and Partner services / products.
The User may withdraw his consent to the processing of personal data for Purposes at any time. of Marketing by sending the appropriate form, available for download, on www.gantis.it , to the e-mail address info@gantis.it

How to grant consent. Active contribution. www.gantis.it does not use automatic or predefined boxes for the acquisition of consent by the interested party to the processing of personal data.
The User, in fact, as required by EU legislation, must express his consent in a clear, determined and conscious way by clicking on the appropriate "accept" button, only after having carefully read the text of the information. In this way, consent to the processing and storage of personal data by the system will be acquired. Once the User has knowingly given his consent, by carrying out the procedure guided by the system, he assumes the responsibility of having read the information, relieving the Owner of any responsibility. The user is required to give his consent also regarding the receipt of the newsletter to which he has voluntarily subscribed through the appropriate field "subscribe to the newsletter", or by ticking the appropriate box "subscribe also to the newsletter" at inside the registration form.

In order to offer you Klarna's payment methods, we may pass your personal data in the form of contact and order details to Klarna at checkout, so that Klarna will evaluate whether you are eligible for their payment methods and to personalize those payment methods for you. Your transferred personal data is processed in line with Klarna's privacy policy.

To whom the data is communicated
The data may also be communicated to subjects delegated to carry out the activities necessary for the execution of the purposes pursued by the website and disseminated exclusively for this purpose < br> These are internal staff of the company, responsible for the execution of the service offered by the website.
User data could also be disclosed to the following categories of third parties:
- public authorities in the context of the fulfillment of specific legal obligations;
- administrative, judicial and tax authorities, in the cases and with the limitations provided for by law;
- other entities controlled and / or connected to the company, in the cases and with the limitations provided for by law;
- service providers or consultants for needs related to the management of the service.
In these cases, the consent of the interested party for the communication of personal data is not required.

It is possible that, as part of its business, the User's personal data are transferred to third-party companies both inside and outside the European Union.
In this case, they will all be the adequate measures for this transfer to take place in accordance with the provisions of articles 45 and 46 of the Privacy Regulation.

www.gantis.it shares the User's personal data, for the aforementioned purposes:
- with manufacturing companies (name, surname, delivery address);
- with service providers that are instrumental to the functioning of the website;
both appointed as External Data Processors;
- with the Competent Authorities in order to collaborate in the investigations aimed at guaranteeing protection, against illegitimate or unauthorized use of the website, as well as to ensure compliance with Applicable Laws. < br>
Methods of processing personal data
The User's personal data are treated with electronic and non-electronic tools, for the period of time strictly necessary to achieve the purposes for which they were collected. In the management of data, collected through www.gantis.it , the most appropriate measures are taken in order to prevent loss, illicit or non-use correct data as well as unauthorized access.
In addition, reasonable measures are taken to maintain the security of the personal data collected, including by limiting the number of individuals who have material access to our databases and by installing electronic security systems that protect against unauthorized access.

Data transfer methods
In the event that the User wishes to receive further information regarding the guarantees in place and request a copy of the same, he can contact us at the following address e- mail info@gantis.it

Storage place
The data released by the User will be collected and stored on the servers of serverplan.com Italy To send newsletters, DM Service uses a technology that allows the company to profile customers based on the language or country of origin, for the creation of specific lists, to which to send targeted communications.

Retention time of the collected data
The collected data will be kept for the time necessary to carry out the activities and obligations for which they were collected. They will then be archived by establishing the operator's internal registry, or they will be deleted. The internal registry will be able to combine and classify User data by associating them with the identification codes used for authentication.

User rights
The interested party enjoys the rights referred to in Regulation 678/2016, including:
- ask for confirmation of the existence of their personal data, including the data collected by 'company;
- to know their origin, the logic and the purposes of their treatment;
- to obtain the updating, rectification and integration;
- to request their cancellation and oblivion, the transformation into anonymous form or blocking in the event of unlawful processing;
- oppose their processing for legitimate reasons or in the case of use of the data for sending advertising material, commercial information, market research, direct sales and communication commercial interactive;
- request the transfer of their data to third parties, where possible and necessary

The exercise of these rights by the User takes place through direct contact with the Data Controller and the Manager of the Treatment, to which the User himself, using the references entered in this information, you can ask to proceed with each of the above charges.
Alternatively, on www.gantis.it is available for download , the specific form for the exercise of rights, which the User can fill in and send to the email address info@gantis.it

Reporting procedure
In case of violation of the rules for the protection of personal data or of an event that determines the loss by the Data Controller, Regulation 679/2016 imposes the following procedure:
- Obligation to report by the interested party
If the interested party is aware of the violation of his personal data, he must make an urgent communication to the Data Controller, using one or more contacts among those indicated in point 2) of this informative. The Data Controller must, within 72 hours, communicate the violation to the Privacy Authority, together with the measures taken to deal with the violation. Reporting by the Data Controller The Data Controller who becomes aware of the violation from other control sources (DPO - Data Processor - Data Processors). He must notify the Privacy Authority within 72 hours, also indicating the measures to deal with the violation, as well as the interested party.

Complaint
The interested party also has , the right to lodge a complaint with the Supervisory Authority. For more information on the procedures, the User is invited to visit the site www.garanteprivacy.it

Compensation for damage
L The interested party who has suffered damage caused by the loss, unauthorized or illicit disclosure of their data has the right to proceed, before the appropriate offices, to obtain relief.

Competent authority
For reports relating to the violation of personal data or damages suffered as a result of it, the Guarantor Authority is competent www.garanteprivacy.it

Jurisdiction
In the event of disputes relating to the interpretation of this document, the Consumer Court will be competent, pursuant to Legislative Decree 206/2005.

.