Free delivery on orders over 95.00 for Austria, Belgium, Germany, France, Luxembourg, Netherlands, Spain.

Free delivery on orders over 95.00 €  for Austria, Belgium, Germany, France, Luxembourg, Netherlands, Spain.

100% Italian Extra Virgin Olive Oil

100% Italian Extra Virgin Olive Oil

Privacy Policy

DISCLOSURE EX REG: 2016/979

Pursuant to Articles 13 of Regulation (EU) 2016/679 ("the Regulation" or "GDPR"), we would like to inform users about the methods and purposes of the processing of personal data of those who interact with our website: www.galantino.it

The policy does not apply to other websites that may be accessed through links on the owner's domain websites, and the owner is not responsible in any way for the websites of third parties.

Data controller

The owner of the processing of personal data collected through this site is Frantoio Galantino s.r.l., unipersonal in the person of its legal representative, via Corato Vecchia, 2, 76011 Bisceglie (BT) Italy, P.I. 00441480720 (hereinafter "The Owner" or "Galantino s.r.l")

Purposes of processing, legal basis, nature of contribution 

For the purposes expressed in this notice, as a rule, non-particular personal data will be processed. The data will be processed in compliance with the conditions of lawfulness ex art. 6 of the Regulations, for:

  • Allow navigation on this website and the technical management of connections to it

The computer systems responsible for the operation of the websites acquire, during their normal operation and for the sole duration of the connection, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified Data Subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example: IP addresses or the names of the computers used by users who connect to the websites, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the characteristics of the browser used for browsing, the resolution of the screen in which the browser runs in the device used, and other parameters relating to the user's operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the sites and to check its proper functioning, and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the sites.

Legal basis of the processing: the legitimate interest of the Data Controller (Art. 6 paragraph 1 letter f of the GDPR).

The data requested for the stated purposes are necessary to enable navigation on the site.

  • Follow up on requests for information or contact and other types of requests, made by customers/users regarding the services offered by the Owner

The voluntary sending of electronic mail to the e-mail addresses indicated on the above-mentioned website, the filling in of one of the contact forms on the site assets involves the subsequent acquisition of the User's First Name and Last Name, his/her e-mail address.

In case of purchase on the site, telephone contact details and a shipping address as well as any other personal data entered by the User in the body of the message will also be acquired.

This data is needed to follow up on requests,

Legal basis of the processing: performance of a contract to which the data subject is party or to the execution of pre-contractual measures taken at the request of the data subject (Art. 6 paragraph 1 letter b of the GDPR) and legitimate interest of the Data Controller (Art. 6 paragraph 1 letter f of the GDPR).

The data requested for the purposes indicated are necessary to be able to follow up on the requests of the interested party. Any failure to provide the data has the sole effect of making it impossible to send and/or receive and/or respond to the data subject's request.

  • Manage the selection process in case of application and spontaneous submission of resume

Users are, in addition, free to provide their personal and special data (exclusively for the above purposes), through online forms and contact forms, to send CVs or submit specific applications.

Legal basis for processing: the performance of pre-contractual or contractual obligations (Art. 6 paragraph 1 lett. b GDPR) and consent for special data (Art. 9 lett a GDPR).

The data requested for the stated purposes are necessary in order to initiate the personnel selection procedure. Any failure to provide the data has the effect of making it impossible to include the candidate in the selection and consequently to consider his or her employment.

Personal data will not be processed using automated decision-making processes under Article 22 of the GDPR.

The information pursuant to Art. 13 GDPR will be provided at the time of the "first useful contact", following the sending of the curriculum pursuant to Legislative Decree 101/2018

Within the limits of the purposes established in Article 6(1)(b) of the GDPR, the applicant's consent to the processing of personal data contained in the resume is not required.

Methods of data processing

The processing will be carried out with manual, computer and telematic tools in compliance with the regulations in force and the principles of correctness, lawfulness, transparency, relevance, completeness and non-excessiveness, accuracy and with logics of organization and processing strictly related to the purposes pursued and in any case in such a way as to guarantee the security, integrity and confidentiality of the processed data, in compliance with the organizational, physical and logical measures provided for by the provisions in force.

Period of data retention

In compliance with the provisions of Art. 5 paragraph 1 letter e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention of data of a personal nature provided depends on the purpose of the processing:

  • for contact and information request, will be deleted within one month of response if they do not result in the execution of a contract.
  • Personnel selection process, maximum 1 year
  • for purchases made online, the data will be retained for the time stipulated in the current regulations on retention of fiscal and financial data.

Once these terms have expired, the data will be deleted or transformed into anonymous form, unless their further storage is necessary to fulfill contractual obligations that have arisen, legal obligations or to comply with orders issued by Public Authorities and/or Supervisory Bodies.

Nature of provision of data

Users are free to provide their personal data. Failure to provide data may make it impossible to obtain what is requested or to use the web services of the Data Controller.

Data recipients or categories of recipients

For the pursuit of the purposes described, or in the event that this is indispensable or required by legal provisions or authorities with the power to impose it, the Holder reserves the right to communicate the data to recipients belonging to the following categories:

  • Entities performing IT maintenance or similar services;
  • Subjects that provide services for the management of the information system used by the Owner and telecommunications networks, including electronic mail and Internet site management;
  • Authorities and Supervisory and Control Bodies and, in general, subjects, public or private, with functions of public relevance (e.g.: Prefecture Police Headquarters, Judicial Authority, in any case only to the extent that the prerequisites established by the applicable regulations are met);
  • other companies in the group to which the Holder belongs, or in any case parent, subsidiary or associated companies, pursuant to Article 2359 of the Civil Code;
  • professional firms or companies as part of service and consulting relationships;
  • data may also be known, in connection with the performance of assigned duties, by the Owner's staff, including interns, temporary workers, consultants, and employees of companies outside the Owner, all of whom are specifically authorized to process the data.

Transfer of data abroad

User data will not be transferred to countries outside the EU.

Data dissemination

User data will not be disseminated.

Use of Social Networks

From the website it is possible to link to the company pages on social networks, through their respective icons (Facebook, Instagram, Youtube and Tripadvisor).

As is well known, Social Networks independently manage their own privacy for those who browse, post and communicate through them, being in that case the main data controllers.

Therefore, the user is invited to visit the following links for more information:

https://www.facebook.com/privacy/explanation https://www.facebook.com/privacy/explanation
https://www.linkedin.com/legal/privacy-policy?_l=it_IT

However, when the user is on the social pages managed by Galantino s.r.l and communicates, in various ways, their personal data (e.g., through a private message or by commenting on a post or leaving a review), or when the social networks provide some statistics on the use of the pages in a non-anonymous way (and therefore traceable to the activity carried out on the page by the specific person), it is Galantino s.r.l that becomes the Data Controller.

The data processing that is carried out is done exclusively for the ordinary management of the pages and for the verification of the content posted by users (e.g., if a comment is posted in which other users are insulted, the Owner may decide to remove it from the page as illicit) and to answer user questions (both public and private) about the characteristics of the goods or services provided.

In this case, the legal basis for the processing is the legitimate interest of the Data Controller in proposing to the user and illustrating its services and their characteristics, as well as on the need to provide answers to any possible questions from the user.

The processing of the user's personal data will take place by means of the tools provided by the Social Networks themselves.

At this stage of simple contact, the Owner will not transfer or disclose the user's personal data to other parties.

The user is always free to decide when to unlike, delete a comment, review, etc., by simply returning to the relevant Social Network page and directly providing the deletion.

As for private messages, these are kept for up to 6 months after the last contact, after which they are deleted.

Users are always free to provide their personal data. Failure to provide data may make it impossible to obtain what is requested or to use the services of the Owner.

Rights of the data subject

Articles 15, 16, 17, 18, 20, 21 of the GDPR provide the data subject with specific rights that can be exercised against the Data Controller.

In particular, the user, under the conditions of the GDPR, may exercise the following rights:

  • Right of access: the right to obtain confirmation as to whether or not personal data concerning him or her is being processed and, if so, to obtain access to his or her personal data, including a copy thereof;
  • Right of rectification: the right to have inaccurate personal data concerning him/her corrected and/or incomplete personal data supplemented;
  • Right to erasure (right to be forgotten): the right to obtain the erasure of personal data concerning him/her, if they are no longer necessary for the purposes pursued by the Data Controller, if consent is withdrawn (and there is no other legal basis for the processing) or if he/she objects to the processing, if the processing is unlawful, or if there is a legal obligation to erase. The right to erasure does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defense of a right in court.
  • Right to restrict processing: the right to obtain restriction of processing when: a) the data subject disputes the accuracy of personal data; b) processing is unlawful and the data subject objects to the deletion of personal data and instead requests that their use be restricted; c) personal data are necessary for the establishment, exercise or defense of a legal claim;
  • Right to data portability: the right to receive, in a structured, commonly used and machine-readable format, personal data concerning him or her that has been provided to the Data Controller and the right to transmit it to another data controller without hindrance, where the processing is based on consent and is carried out by automated means;
  • Right to object: right to object, at any time, to processing if personal data are processed for purposes other than those for which the data subject has consented to the processing.

Pursuant to Article 77 of the Regulation, it is recognized that the data subject has the right to lodge a complaint with a supervisory authority, namely in the member state in which he or she normally resides, works or in the place where the alleged violation occurred, which in Italy corresponds to the Italian Data Protection Authority, whose references can be found at www.garanteprivacy.it.

In addition, the GDPR gives the data subject the right to revoke consent given at any time as easily as it was given.

The exercise of the data subject's rights is free of charge under Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, including because they are repetitive, the Data Controller may charge a reasonable fee in light of the administrative costs incurred in handling the request, or deny satisfaction of the request.

The data subject's rights may be exercised by using the attached form, which should be sent in hard copy to the Holder's address, or by e-mail or fax to the contact information in this policy.

This Policy was updated on 19/01/2022. Any updates will always be posted on this page.

The Data Controller

Galantino oil mill s.r.l.

Shopping cart0
There are no products in the cart!
Continue shopping