Privacy policy

Pursuant to and for the purposes of Article 13 of the new European Regulation 2016/279 on the protection of individuals with regard to the processing of personal data (General Data Protection Regulation - GDPR) as required by the General Data Protection Regulation of the European Union (GDPR 2016/679, Article 13), before proceeding to the processing, users of the website are informed that the personal data collected through the aforementioned website are subject to processing by the company using computer and/or telematic tools, for the purposes indicated in this information notice.
to this end, the data subject is subject to the privacy policy statement prepared by Gaillardo srl , the creator and promoter of the activities available on the website

The data controller is: Gaillardo srl, Via della Croce 2/a, 50058 Signa (FI) Italy, P. IVA 05337141005.

The personal data being processed are collected directly by Gaillardo srl for the pursuit of the purposes described below.

The personal data provided by the user when navigating on the website are processed by the controller in accordance with current legislation on the protection of personal data. the legal basis of the processing is identified in the provision of services by the company, the management and facilitation of the website, as well as the establishment, execution and possible termination of the online sales contract concluded between the parties and the obligations connected to the same contract and / or directly and / or indirectly derived from the same.
The processing of personal data by Gaillardo srl is aimed at pursuing the following purposes:
1) Subscription to the newsletter: in the event that the user decides to subscribe to the Gaillardo srl newsletter only after eventual and specific consent, personal data will be processed by the company to send commercial or promotional communications, updates relating, for example, to new arrivals, offers and promotions. To unsubscribe from the newsletter simply click on the appropriate 'unsubscribe' link shown at the bottom of the e-mails received.
2) Registration to the site: in the event that the user decides to register on the site, only after having given their specific consent will their personal data be processed by the company for registration purposes. In particular, against the provision of one's name, surname, e-mail address and the setting of an access password, these will be processed for the creation of a personal account, to speed up the purchase process, to allow the user to view the status of orders and receive updates on purchases made, to modify personal settings and update the account, and to save favourite items in the wishlist.
3) Online purchasing activities: the personal data provided will be used for the purposes of establishing, managing, executing and/or concluding the online sales contract.
The data provided will be processed by the company for the purpose of managing the purchase order with reference to the activity of payment, shipping, taking charge of any returns, for customer service, for the execution of administrative - accounting purposes related to the management of the order, for the fulfilment of obligations under current regulations.
In case of payment by credit card, the fundamental information for the execution of the transaction (credit/debit card number, expiry date, security code) will be processed by paypal and nexi pay.
4) Profiling: only after eventual and explicit consent, the personal data provided may be processed by the data controller for profiling activities, i.e. analysis of preferences aimed at creating personalised content and offers.

The personal data processed by the company are those provided by the user when browsing the site, when registering or when purchasing products made available by Gaillardo srl such as name, surname and e-mail address, in addition to the data necessary for the provision of online sales service such as, those functional to the execution of payment and shipping of purchased products.


Personal data is processed by the data controller in compliance with the provisions of current privacy legislation.
The data controller processes personal data by means of computer and/or telematic tools and with organisational and logical methods strictly related to the pursuit of the purposes indicated in this statement, as well as by adopting appropriate security measures in order to prevent unauthorised access, disclosure, modification or destruction of personal data, their loss and their unlawful and incorrect use.
However, the company cannot guarantee its users that the measures taken for the security of the site and the transmission of data and information on the site are able to limit or exclude any risk of unauthorised access or dispersion of data by devices belonging to the user. For this reason, users of the site are advised to ensure that their computer is equipped with software suitable for the protection of network data transmission and that their internet provider has taken appropriate measures for the security of network data transmission. The company also undertakes to process data in accordance with the principles of correctness, lawfulness and transparency, to collect data to the extent necessary and accurate for processing, and to permit its use only by authorised personnel.
The management and storage of the personal data acquired will take place in archives or on servers located within the European Union owned by the company.
In relation to the different purposes for which they are collected, personal data will be kept for the time strictly necessary to achieve those purposes and, in any case, in accordance with the relevant regulations in force. In any case, the company will take care to avoid the indefinite use of data by proceeding, on a periodic basis, to suitably verify the effective continuation of the interest of the subject to whom they refer.

The company reserves the right to make changes to this privacy policy at any time by publicising them to users on the website or by email. in the event of non-acceptance of changes to this privacy policy, the data subject may request the company to delete their personal data.

Unless otherwise specified, the previous privacy policy will continue to apply to personal data collected up to that point.