Privacy Policy
Pursuant to Articles 13 of Regulation (EU) 2016/679 ("the Regulation" or "GDPR"), we wish to inform users about the methods and purposes of the processing of personal data of those who interact with our Website: galise.it
This policy is not to be considered valid for other websites that may be consulted via links present on the websites under the owner's domain, who is in no way responsible for third-party websites
Data Controller
Galise Carlo Domenico
P.zza Matteotti, 9 - 70033 - Corato - Italy
VAT No.: IT06199360725
Tax Code: GLSCLD84T04C983B
Email: info@galise.it
Types of Data Collected
For the purposes expressed in this notice, only non-sensitive personal data will be processed. The data will be processed in compliance with the lawfulness conditions under Art. 6 of the Regulation. Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website.
If the User refuses to provide them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without affecting the availability or operation of the Service.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website and guarantees the right to communicate or disclose them, releasing the Controller from any liability towards third parties.
Details on the Processing of Personal Data
By registering to the mailing list or the newsletter, the User's email address is added to a list of contacts who may receive email messages containing information, including commercial and promotional information, related to this Website. The User's email address may also be added to this list as a result of signing up via a form or after making a purchase on this Website. Data will not be transferred to third parties for other commercial purposes.
Personal Data processed: First Name, Last Name, and Email
SMS (this Website)
This Website, subject to the User's authorization to receive news and promotions, adds the User's phone number to a contact list that may receive messages containing information, including commercial and promotional information, related to this Website. The User's phone number may also be added to this list as a result of completing and submitting a form or after making a purchase on this Website. Data will not be transferred to third parties for other commercial purposes.
Personal Data processed: Phone number
"Contact Us" Page Form (this Website)
By filling out the form with their Data, the User consents to their use to respond to requests for
information, quotes, or any other nature indicated in the form.
The transfer of the User's Data to
third parties may be necessary solely for the execution of the request.
Data will not be
transferred to third parties for other commercial purposes.
Personal Data processed: First Name, Last Name, Email Address, Phone Number or Mobile Number, Address, City, Postal Code, Province, Date of Birth, other data indicated in the form, IP Address.
By filling out the form with their Data, the User consents to their use for the provision of services or
the sale of products, including payment and possible delivery.
The transfer of the User's Data to
third parties may be necessary solely for the execution of the request.
Data will not be
transferred to third parties for other commercial purposes.
Personal Data processed: Company Name, First Name, Last Name, Email, VAT Number, Tax Code, Recipient Code, Phone Number, Address, IP.
This Website processes all payments via credit card, bank transfer, or other means through external
payment service providers. Users are asked to provide their payment details and personal information
directly to such payment service providers.
This Website is not involved in the collection and
processing of such information: it only receives a notification from the respective payment service
provider confirming the payment.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: see Privacy Policy
The IT systems responsible for the functioning of websites acquire, during their normal operation and for the sole duration of the connection, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects but, by its nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example: IP addresses or computer names used by users connecting to the websites, URI (Uniform Resource Identifier) addresses of requested resources, characteristics of the browser used, screen resolution of the device used, and other parameters related to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on site usage and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical IT crimes against the sites.
Google Analytics with anonymized IP (Google Ireland Limited)
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Participant in the Privacy Shield.
Facebook Ads conversion tracking (Facebook Pixel) (Facebook, Inc.)
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy
Participant in the Privacy Shield.
These services are intended to host and operate key components of this Website, making it possible to deliver this Website from a single platform. These platforms provide the Owner with a wide range of tools such as analytics, user registration management, comment and database management, e-commerce, etc. The use of such tools involves the collection and processing of Personal Data.
PrestaShop (PrestaShop S.A.)
PrestaShop is a platform offered by PrestaShop S.A. that enables the Owner to create, manage, and host an e-commerce website.
Personal Data processed: Cookies; various types of Data as specified in the service's privacy policy.
Place of processing: France – Privacy Policy
These services support the centralized management of the tags and scripts used on this Website. Their use may involve the transmission of the User's Data through these services and, if applicable, their storage.
Google Tag Manager (Google Ireland Limited)
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Participant in the Privacy Shield.
These services allow content hosted on external platforms to be displayed directly on the pages of this Website and interact with them. This type of service might collect web traffic data related to the pages where it is installed, even when Users do not actively use it. It is recommended to log out from the respective platforms to ensure that data processed on this Website is not linked back to the User's profile.
Google Fonts (Google Ireland Limited)
Personal Data processed: Usage Data; various types of Data as specified in the service's privacy policy.
Place of processing: Ireland – Privacy Policy
Participant in the Privacy Shield.
Google Maps Widget (Google Ireland Limited)
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Participant in the Privacy Shield.
These services allow the User's Data to be used for commercial communication purposes in various forms of advertising, including banners, also based on the User's interests. Some of the services listed below may use Cookies or other Identifiers to identify Users or may use the behavioral retargeting technique, i.e., display personalized ads based on the User’s past behavior, including outside of this Website.
Facebook Remarketing and Custom & Lookalike Audiences (Facebook, Inc.)
This advertising and behavioral targeting service provided by Facebook, Inc. uses Data collected through the 'Facebook Custom Audiences' service in order to display ads to Users with similar behaviors to those already listed in a Custom Audience based on their previous use of this Website or interaction with relevant content through Facebook apps and services. Personalized ads will be shown to Users suggested by Facebook Lookalike Audiences based on this Data.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt-Out
Participant in the Privacy Shield.
These services allow this Website to distribute its content through geographically located servers and to optimize its performance.
Cloudflare (Cloudflare Inc.)
Personal Data processed: Cookies; various types of Data as specified in the service's privacy policy.
Place of processing: United States – Privacy Policy
Data Processing Methods
Processing will be carried out using manual, IT, and telematic tools in compliance with applicable laws and principles of fairness, lawfulness, transparency, relevance, completeness and non-excessiveness, accuracy, and with organizational and processing logics strictly related to the purposes pursued. In any case, data will be processed in such a way as to guarantee their security, integrity, and confidentiality, in accordance with the organizational, physical, and logical measures required by current regulations.
Data Retention Period
In compliance with Article 5(1)(e) of EU Regulation 2016/679, the collected personal data will be stored in a form that allows the identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. The retention of personal data depends on the purpose of the processing:
- for contact and information requests: up to 2 years;
- for the purchase of goods or services: up to 2 years;
After these periods, data will be deleted or anonymized, unless further retention is required to comply with contractual obligations, legal obligations, or orders issued by public authorities and/or supervisory bodies.
Nature of Data Provision
The User is free to provide their personal data. Failure to provide such data may make it impossible to fulfill the User’s request or to access the Data Controller’s web services.
Data Recipients or Categories of Recipients
To achieve the purposes described or where required by law or by authorities with legal power, the Data Controller may share data with recipients in the following categories:
- entities providing IT maintenance or similar services;
- entities providing services for the management of the IT system used by the Controller and telecommunications networks, including email and website management;
- Authorities and supervisory/control bodies, and in general public or private entities with public relevance (e.g., Prefecture, Police, Judicial Authorities—only to the extent provided for by applicable law);
- other companies of the same group as the Controller, or companies that are parent, subsidiary, or affiliated companies, as defined by Article 2359 of the Italian Civil Code;
- professional firms or companies as part of consulting and support relationships;
- the Controller’s staff, including interns, temporary workers, consultants, and employees of external companies authorized to process data.
Data Disclosure
User data will not be disclosed.
Cookie Policy
This Website uses cookies. To learn more and read the detailed information, Users can consult the Cookie Policy.
Data Subject Rights
Articles 15–21 of the GDPR grant data subjects specific rights that may be exercised against the Data Controller.
Specifically, as a data subject, the User may, under the conditions provided by the GDPR, exercise the following rights:
- Right of access: to confirm whether or not personal data concerning them is being processed and, if so, access their personal data, including a copy;
- Right to rectification: to obtain the correction of inaccurate personal data and/or the integration of incomplete data;
- Right to erasure ("right to be forgotten"): to have their personal data erased when no longer necessary for the purposes, in case of consent withdrawal (where no other legal basis applies), objection to processing, unlawful processing, or a legal obligation to erase;
- This right does not apply when processing is necessary for compliance with a legal obligation, public interest task, or for the establishment, exercise, or defense of legal claims;
- Right to restriction of processing: to limit processing in cases where: a) the data subject contests the accuracy of data; b) the processing is unlawful, and they oppose erasure; c) the data is needed for legal claims;
- Right to data portability: to receive their personal data in a structured, commonly used, machine-readable format, and transmit them to another controller without hindrance, where processing is based on consent and carried out by automated means;
- Right to object: to object at any time to processing where data is used for purposes other than those for which consent was given.
Under Article 77 of the Regulation, the User has the right to lodge a complaint with a supervisory authority, especially in the Member State where they habitually reside or work or where the alleged violation occurred. In Italy, this is the Italian Data Protection Authority (Garante per la Protezione dei dati personali), whose details can be found at www.garanteprivacy.it.
The GDPR also grants the User the right to withdraw consent at any time as easily as it was given.
Exercising data subject rights is free of charge under Article 12 of the GDPR. However, if requests are manifestly unfounded or excessive, including due to their repetitive character, the Controller may charge a reasonable fee or refuse the request.
The User can exercise their rights by contacting the Controller via email or registered mail using the contact details provided in this notice.
Last updated: 07/14/2025