Privacy Policy

1. General Information

1.1. Data Controller

Gallardo Components
VAT ID: IT04411360276
Viale Viareggio 34, 30038 Spinea (VE), Italy
E-mail: contact@gallardocomponents.com

1.2. Purposes and Legal Bases

In the course of our business we process personal data of website visitors and customers for the following purposes and on the following legal bases:

  • Handling inquiries and orders via e-mail (requests for availability/quotes, order confirmation, communication of shipping costs and total): Art. 6(1)(b) GDPR (pre-contractual steps and contract performance).
  • Legal, tax and accounting obligations (e.g. invoicing, mandatory document retention): Art. 6(1)(c) GDPR.
  • Website operation and security (server logs, prevention of abuse): Art. 6(1)(f) GDPR (legitimate interest).
  • Consent, where required (e.g. non-essential cookies): Art. 6(1)(a) GDPR. Currently, we do not use profiling or marketing cookies.

1.3. Recipients

Depending on the situation, your personal data may be disclosed to:

  • Technical service providers (e.g. website hosting, e-mail provider);
  • Shipping companies/couriers for delivery;
  • Accountants or tax advisors for statutory compliance;
  • Authorities or other entities where required by law or court order.

Where required, such providers are bound by data processing agreements in accordance with Art. 28 GDPR.

1.4. Transfers to Third Countries

Some service providers (e.g. hosting or e-mail providers) may process data outside the EU/EEA. In such cases, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses under Art. 46 GDPR) or rely on exceptions under Art. 49 GDPR where applicable.

1.5. Retention Periods

  • E-mails/orders and contractual documents: retained for the duration of the business relationship and, thereafter, for the statutory retention period (generally up to 10 years for tax/accounting).
  • Technical server logs: retained only as long as necessary for security and operation.
  • Consent-based processing: retained until consent is withdrawn or the purpose no longer applies.

1.6. Data Subject Rights

You have the rights granted by Articles 15–22 GDPR: access, rectification, erasure, restriction, portability, and objection.
You may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or any other competent supervisory authority (Art. 77 GDPR).

1.7. Right to Object

You may object at any time to processing based on our legitimate interest (Art. 21 GDPR).
We do not engage in direct marketing or profiling.

2. Specific Processing Situations

2.1. Website Use (cookies and logs)

Our website uses only essential technical cookies required for operation. We do not use profiling or tracking cookies.
The server automatically records technical logs (IP address, date/time, URL, user-agent) to ensure functionality and security.
Legal basis: Art. 6(1)(f) GDPR.

If in the future we implement non-essential cookies or third-party services (e.g. maps, embedded videos), consent will be requested via a cookie banner and this policy will be updated accordingly.

2.2. Contact and Orders via E-mail

When you write to contact@gallardocomponents.com to request products, we process the personal data you provide (e.g. name, contact details, shipping/billing address, content of the request) to:

  • issue quotes and order confirmations;
  • organize shipping and delivery;
  • issue invoices and tax documents.

Legal basis: Art. 6(1)(b) GDPR; for tax obligations Art. 6(1)(c) GDPR.

2.3. Shipping

We share the necessary delivery data (name, address, contact details) with couriers/shipping providers to deliver your order.
Legal basis: Art. 6(1)(b) GDPR.

2.4. Payments

We do not use online payment processors (no PayPal, no credit card handling). Payments are arranged according to instructions provided (e.g. bank transfer).
We only process billing and invoicing data required for contract and legal purposes.
Legal basis: Art. 6(1)(b) and 6(1)(c) GDPR.

3. Social Media Presence (if applicable)

Gallardo Components may maintain official profiles on social networks (e.g. Facebook, Instagram, LinkedIn) for communication and information purposes.
Data may also be processed by the social networks themselves as independent controllers. For details, please consult the respective privacy policies of each platform.
We do not conduct advertising campaigns or profiling via social media.

4. Security Measures

We implement appropriate technical and organizational measures to protect your data (access controls, secure e-mail systems, backups, and data minimization principles).

5. Contact for Privacy Matters

For any questions regarding personal data or to exercise your rights:

contact@gallardocomponents.com
Gallardo Components, Viale Viareggio 34, 30038 Spinea (VE), Italy