Privacy Policy
We respect your privacy and are committed to protecting it by complying with this privacy policy (hereinafter referred to as the ‘Policy’).
Pursuant to Articles 13 and 14 of EU Regulation 679/2016 (hereinafter also referred to as ‘GDPR’), Gabel Industria Tessile s.p.a. (hereinafter also referred to as the ‘Company’ or the ‘Data Controller’), as the ‘Data Controller’, provides information about the use of any personal data provided by Users who consult and/or interact with the web services accessible electronically from the address: www.gabel1957.com corresponding to the home page of the Company's official website (hereinafter ‘Website’).
The information is provided only for the Website in question and not for other websites that may be consulted by the User via links and is addressed to Users of this Website. The Website may contain links to websites, services and other Internet resources relating to third parties. In this case, the Data Controller is in no way responsible for the content, security and usability of such sites and resources, nor does it verify the policy or issue guarantees regarding the protection of privacy and personal data by such third parties.
By accessing and using the Website and Services, the User acknowledges that they have read, understood and agreed to be bound by the terms of this Policy.
In compliance with the obligations laid down in relation to the protection of personal data, this Website respects and protects the confidentiality of Users.
1. Data controller
The data controller is:
Gabel Industria Tessile s.p.a., (tax code and VAT number 00185790185), with registered office in Rovellasca, Via XX Settembre no. 35, in the person of its pro tempore legal representative (telephone number 02964771 - e-mail: privacy@gabelgroup.com).
The list of persons authorised to process the data and data processors is kept at the Data Controller's registered office and made available at the request of the data subject.
2. Personal data subject to processing
The Company will only collect and process personal data voluntarily provided by Users of this Website. Users may browse the Website without having to provide personal data, except for browsing data, as specified below. Each User of the Website may choose to provide the Data Controller with limited personal data as requested in order to obtain information about our services. Once registered, the personal data collected will only be used for the services indicated in the available Policy.
The Company does not deliberately collect sensitive or judicial personal data through the Website.
Sensitive data, pursuant to Article 4 of European Regulation GDPR 679/2016, includes personal data revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade union nature, as well as personal data revealing health and sex life. Judicial data, again pursuant to Article 4 of European Regulation GDPR 679/2016, includes personal data revealing measures referred to in Article 3, paragraph 1, letters a) to o) and r) to u) of Presidential Decree No. 313 of 14 November 2002, No. 313, concerning criminal records, the register of administrative penalties for offences and related pending charges, or the status of defendant or suspect pursuant to Articles 60 and 61 of the Code of Criminal Procedure. We recommend that you do not provide such information through our Website.The Company may collect the following categories of personal data for the purposes described in this Policy:
- IP address of the User's device, unique identifiers of the User's mobile device, duration of stay on the Site, services used, links and messages activated, browser characteristics (type, language, plug-ins installed, etc., cookies, etc.);
- identification and contact details obtained during contractual or pre-contractual relations with the Company, such as, for example, name, surname, company name where it contains personal data, e-mail address, VAT number, and other contact details, username and password;
- administrative and accounting data necessary for payments and administrative obligations, such as, for example, name, surname, billing and delivery address, IBAN data or payment references;
- information contained in the application submitted in order to request information about our products, request updates on the latest news, request collaborations and partnerships;
- information on online purchases, such as, for example, the products purchased and their price;
- information on the browser used or browsing behaviour;
- information disclosed or published by the User in a public place, on social media pages or on the Company's Website.
3. Purpose of processing
The User's personal data will be processed for the following purposes:
a) browsing this Website and in particular for:
o activities aimed at the functioning of the Website. During normal operation, the system acquires some personal data whose transmission is implicit in the use of Internet communication. This category of data includes IP addresses or domain names of computers and terminals used by Users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and IT environment;
b) creation of an account on the Website www.gabel1957.com and in particular for:
o registering and managing the registration process and the reserved area for access to all features, such as the purchase of products and services;
c) contact the User in response to a request sent via the sections ‘Would you like to become a retailer?’ and ‘Are you looking for customised solutions for your business?’ or by email or telephone, and in particular to:
- validate, manage and respond to a question or request;
- satisfy requests for information on products, offers and quotes;
- send information material or other communications;
- inform about changes to the Website or updates to services;
- offer the best possible service and improve the User's experience;
- allow the User/Applicant to exercise their rights;
d) manage requests for the purchase of products and services and requests for collaborations and partnerships received through the reserved area on the Website or as a ‘guest’ or through the Website (through the sections ‘Would you like to become a reseller?’ and ‘Are you looking for customised solutions for your business?’) or by email or telephone contact, and in particular to:
-executing the contract and/or pre-contractual measures;
-receiving, validating and managing requests for purchase orders for products and services and requests for collaboration and partnership for the possible establishment of a contractual relationship;
-executing purchase requests, supplying products and services and establishing collaborations and partnerships;
-managing and carrying out the necessary customs procedures for import/export activities (including storage in its customs warehouses and assistance with inspections by the relevant authorities);
-executing administration, accounting, transport, logistics and goods shipment management services, storage of goods entrusted for safekeeping, execution of all procedures necessary for the correct and complete management of shipments and/or goods in transit;
-providing any third parties with the necessary information for the sole purpose of fulfilling contractual obligations;
-processing payments;
-communicating with the User regarding their orders, products, services and related promotional offers;
-managing any exchanges or returns and refunds after purchase;
e) managing applications received via the email address published on the Website, and in particular for:
-sending CVs;
-carrying out recruitment, analysis, assessment and selection of personnel;
-archiving CVs for future personnel recruitment needs;
f) carry out profiling, direct marketing and forwarding of commercial communications in response to requests received by email or registration on the form in the dedicated section of the Website and forward newsletters following an express request from the recipient received by email or upon registration on the form in the ‘Subscribe to the newsletter’ section of the Website and, in particular, to:
o carry out profiling activities by the Company in order to analyse behaviour, habits and propensities towards certain types of consumption and to meet needs and improve the Company's products, services and offers;
-carry out and manage marketing activities, forward commercial communications and newsletters in order to propose advertisements for offers, promotions, events, news, presentations of new services/products, regulatory changes using automatic contact methods (e.g. e-mail);
g) prevent and detect unauthorised use of the Website, as well as potential fraud committed against the User and against the Company, and in particular to:
- activate the necessary mechanisms to prevent and ascertain improper use of the Website, together with possible attempts at fraud against the User and the Company;
- in the event of a fraudulent transaction or detection of abnormal behaviour indicating an attempt to fraudulently use the Company's features, products or services, block the transaction - delete the account;
- ascertain responsibility in the event of hypothetical computer crimes against the site;
h) for legal, administrative and audit purposes, and in particular to:
-fulfilment of obligations under the law, regulations, EU legislation or an order from the Authority, for example, accounting and financial reporting obligations, anti-money laundering, antitrust, as well as customs (including storage in its customs warehouses), tax, health, labour and safety obligations, etc.)
i) asserting or defending a right in court, out of court or in administrative proceedings.
4. Legal basis
Pursuant to Article 6 of EU Regulation 679/2016, the conditions of lawfulness (legal basis) for the processing of Users' personal data are as follows:
- with regard to the processing referred to in letters a), g), and i): legitimate interest of the data controller, in compliance with Article 6(f) of the GDPR;
- with regard to the processing referred to in letter f): consent of the Website User, in accordance with Article 6(1)(a) of the GDPR;
- with regard to the processing referred to in letters b), c), d) and e): performance of the contract or pre-contractual measures, in accordance with Article 6(b) of the GDPR;
- with regard to the processing referred to in letter h): legal obligation, in accordance with Article 6(1)(c).
The provision of personal data is necessary for the establishment and proper performance of the Contract, as well as for the proper fulfilment of the obligations provided for by current legislation. Therefore, any refusal by the data subject to provide personal data, in whole or in part, for the purposes indicated, will make it impossible to establish or execute the Contract or to correctly fulfil the obligations provided for by current legislation.
The provision of personal data processed, only with the consent of the data subject, for profiling, marketing, sending commercial communications and newsletters by the Company is optional. Failure to consent to these purposes will only result in the Data Controller being unable to process personal data for the aforementioned purposes.
Consent to profiling, marketing, sending commercial communications and newsletters by the Company may be revoked by using the ‘unsubscribe’ link, where present at the bottom of the relevant communications sent by email, or by sending an email to privacy@gabelgroup.com.
5. Methods of processing personal data
In relation to the purposes described above, personal data is processed using manual, computerised and telematic tools, in any case in such a way as to guarantee the security and confidentiality of the data. The collection, recording, storage, organisation, processing, selection, extraction, comparison, interconnection, communication, blocking, erasure and destruction of data is permitted. Again with regard to data security, specific security measures are observed to protect personal data and prevent its loss and/or destruction, improper and/or unauthorised use, access, disclosure and improper and/or unauthorised modification and, in general, unlawful use.
6. Period of retention of personal data
The User's personal data will be processed:
-with regard to personal, contact, accounting and payment data relating to the conclusion of the contract: for the period strictly necessary to fulfil the contract and in any case no later than 31 December of the tenth year following the expiry of the contractual obligations, unless acts interrupting the limitation period are received or the conditions for the suspension of the limitation period exist; or, in any case, for the different period provided for by law for proof of fulfilment of legal or fiscal obligations or that necessary to allow the Company to protect its rights in court, administrative proceedings or before a Public Authority);
-with regard to data relating to the creation of an account on the Website and identification as a User of the Website: for as long as the User is registered, i.e. until the User decides to delete their online account;
-with regard to browsing data: for the period relating to the browsing session;
-with regard to personal and contact details provided when requesting contact: for a period not exceeding 5 years from their collection by the Data Controller;
-with regard to applications, candidates' personal data will be stored and processed for a period not exceeding 12 months from their collection by the Data Controller;
-with regard to data relating to profiling activities: 12 months from the collection of the data;
- with regard to data relating to marketing activities and the sending of commercial communications: 5 years from the collection of the data or from the last update of the relevant data;
- with regard to data relating to the sending of newsletters: 5 years from the collection of the data.
In any case, the data processed will be retained for the entire duration of any extrajudicial and/or judicial proceedings, until the expiry of the terms of enforceability of judicial protections and/or appeals. The verification of the obsolescence of the data retained in relation to the purposes for which it was collected is carried out periodically and, once the above-mentioned retention periods have expired, the data is deleted or anonymised.
7. Recipients of personal data and possibility of transferring personal data to third countries
The User's personal data may be disclosed to:
- persons authorised to process data and data processors pursuant to Article 28 of the GDPR;
- companies, manufacturers, distributors, suppliers, and business partners of the Data Controller to the extent necessary to carry out the activities covered by the contractual relationships and/or requests of the data subject;
- transport companies for the shipment of goods and customs procedures;
- banks for the management of payments;
- third parties exclusively for accounting, tax, legal, insurance purposes, or in the event of checks by police authorities or if required by law;
- financial administrations, public bodies, judicial authorities, law enforcement agencies;
- debt collection companies;
- companies that detect financial risks and carry out fraud prevention activities;
- supervisory and control authorities;
- judicial and/or public security authorities;
- any business partners of the Data Controller involved in the contractual relationship;
- data protection officer (DPO).
For the purposes indicated above, Users' personal data will be processed in the European Union and will be transferred outside the EU only under the terms and with the guarantees provided for by the Privacy Policy and, in particular, in accordance with Articles 44-49 of the GDPR.
In particular, it should be noted that such data will not be disclosed and will be processed by persons duly appointed to perform such tasks, who are constantly identified and/or appointed, appropriately trained and made aware of the constraints imposed by law, as well as through the use of security measures to ensure the protection of its confidentiality and to avoid the risks of loss or destruction, unauthorised access, unauthorised processing or processing that does not comply with the above purposes.
8. Children under 16 years of age
The Company does not allow children under 16 years of age to browse the website in order to protect their personal data and information, especially in an online environment. Therefore, the Company does not deliberately collect or maintain personal data relating to children.
9. Right of access to personal data and complaint procedures
Please note that, with regard to the personal data provided, the User has the following rights pursuant to Articles 15 to 22 of the GDPR:
- to withdraw consent to the processing of their personal information. To the extent that the legal basis for the processing of personal information is consent, the User has the right to withdraw such consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal;
- to be subject to lawful, fair and transparent processing (Article 6 of the GDPR);
- obtain confirmation as to whether or not personal data are being processed and, if so, obtain access to the personal data - including a copy thereof - and the communication, among other things, of the following information: the purposes of the processing, the categories of personal data processed, the recipients to whom they have been or will be disclosed, the period of storage of the data (right of access - Article 15 of the GDPR);
-obtain, without undue delay, the rectification of inaccurate personal data and/or the integration of incomplete personal data (right to rectification - Article 16 GDPR);
- obtain, without undue delay, the erasure of personal data (right to erasure - Article 17 GDPR);
- receive personal data in a structured, commonly used and machine-readable format, where the processing is based on consent and is carried out by automated means (right to data portability - Article 20 GDPR);
-object to the processing at any time, for reasons related to your situation (right to object - Article 21 GDPR). If you exercise this right, the Company will refrain from further processing your personal data, unless there are compelling legitimate grounds for proceeding with the processing;
- obtain restriction of processing (right to restriction of processing - Article 18 GDPR);
- assert your point of view with regard to automated decisions and, in particular, demand a review of the decision by a human being (right not to be subject to an automated individual decision - Article 22 GDPR);
- lodge a complaint with the Data Protection Authority, following the procedures and instructions published on the Authority's official website (Art. 77 GDPR) if you believe that there is a problem with the way your personal data is being managed.
The data subject may request a copy of the personal data being processed and may exercise their rights in the following ways:
- by e-mail: by sending a request to the Company at the following e-mail address: privacy@gabelgroup.com;
- by post, to the Company's registered office (Gabel Industria Tessile s.p.a.).
When contacting the Data Controller, the data subject must ensure that they include their name, email address, postal address and/or telephone number(s) to ensure that the Data Controller can correctly handle their request.
The Company will comply with such requests, revocations or objections as required by applicable data protection regulations within one month of receiving the request at the latest. This period may be extended to two months depending on the complexity or number of requests, and the Company will explain the reason for the extension.
10. Data Protection Officer (DPO)
The Company has appointed a Data Protection Officer (DPO) and, pursuant to Article 37 of the GDPR, has assigned the role to Francesco Tagliabue, lawyer, with offices in Como, Piazzale Gerbetto no. 6. The details for quickly contacting the Data Controller and communicating directly and effectively with him, including his email address, are as follows: email francesco.tagliabue@legaliassociati.it - certified email: francesco.tagliabue@como.pecavvocati.it - tel. +39 031 262591 – fax. 031.279179.
11. Further information – Use of social networks
The Company manages its institutional accounts on the following social network platforms, which are in turn managed by providers:
GABEL
https://www.facebook.com/gabelgroup
https://www.instagram.com/gabelgroup_/
https://www.youtube.com/channel/UCRJVSeiGr6l9_I1fOdj1Ikg
VALLESUSA
https://www.instagram.com/vallesusacasa/
https://www.youtube.com/@VallesusaCasa.official
https://www.facebook.com/vallesusahome
LINKEDIN
https://it.linkedin.com/company/gabel---industria-tessile-spa
The Data Controller uses its corporate accounts on the aforementioned social networks to provide information about the company, its products, services, offers and current developments, as well as to communicate with Users. Users may send messages, comment on, share or “like” published content; in such cases, the Data Controller processes profile data (in particular the user's name) and related interactions (such as messages or comments) in order to process requests and provide feedback. The processing is carried out in compliance with the legal framework applicable under the GDPR and, where required, the processing of the User's personal data may be based on the legitimate interest of the Data Controller in accordance with Article 6(f) of the GDPR.
Please note that when visiting accounts, social network providers may independently process personal data and install cookies on users' devices, activities over which the Data Controller has no control. For further information on how individual providers process data and on users' rights, please consult their respective privacy policies.
12. Changes
The Data Controller reserves the right to change this Policy at any time and at its discretion. The User will not receive proactive communications from the Data Controller regarding any changes. An updated version of this Policy will be effective immediately upon publication of the new Policy, unless otherwise specified. The User's continued use of the Site after the effective date of the updated Policy will constitute their consent to such changes. However, without the User's consent, the Data Controller will not use the User's personal information in a manner that is materially different from that stated at the time the Personal Information was collected.
Effective date 01/11/2025