GDS Lighting S.r.l. firmly believes that transparency is the basis of its relationship with their customers and users. For this reason, GDS Lighting S.r.l. would like to be completely transparent regarding the way in which your personal data will be processed through this website gdslighting.com (hereinafter the “Site“), and/or make a request to the contact form. This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter the “GDPR“) and also satisfies the requirements under the equivalent data protection laws in the United Kingdom.
INDEX
1. DATA CONTROLLER, PROCESSOR AND AUTHORIZED PERSONS
2. TYPE OF DATA PROCESSED, PURPOSE OF PROCESSING, LEGAL BASIS AND NATURE OF DATA PROVISION
2.1 Browsing Data
2.2 Cookies
2.3 Personal data provided by the data subject
3. THIRD- PARTY ADVERTISERS AND LINKS TO OTHER WEBSITES
4. PROTECTION OF MINORS
5. PROCESSING METHODS AND RETENTION PERIODS
6. DISCLOSURE OF DATA
7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
8. RIGHTS OF THE DATA SUBJECTS
9. RIGHT TO OBJECTS
10. FURTHER INFORMATION FOR CALIFORNIA CONSUMERS
10.1 Your California privacy rights
10.2 How to exercise your rights
11. FURTHER INFORMATION FOR VIRGINIA CONSUMERS
11.1 Your privacy rights under the Virginia Consumer Data Protection Act
11.2 How to exercise your rights
12. FURTHER INFORMATION FOR COLORADO CONSUMERS
12.1 Your privacy rights under the Colorado Privacy Act
12.2 How to exercise your rights
13. FURTHER INFORMATION FOR CONNECTICUT CONSUMERS
13.1 Your privacy rights under the Connecticut Data Privacy Act
13.2 How to exercise your rights
14. FURTHER INFORMATION FOR UTAH CONSUMERS
14.1 Your privacy rights under the Utah Consumer Privacy Act
14.2 How to exercise your rights
15. AMENDMENTS
1. Data Controller, Data Processor and Authorized persons
The Data Controller is GDS Lighting S.r.l., with register office in via Tezze di Cereda 20/A Cornedo Vicentino (VI), Italy (also the “Data Controller” or the “Company”).
You can contact the Data Controller at the following address:
The Data Controller, for the data processing operations described in this Privacy Policy, is supported by its authorized employees (as Authorized Persons) and by its suppliers appointed, pursuant to art. 28 GDPR, as Data Processors.
A complete and updated list of Data Processors and Authorized Persons is available by contacting the Data Controller at the addresses indicated above.
2. TYPE OF DATA PROCESSED, PURPOSE OF PROCESSING, LEGAL BASIS AND NATURE OF DATA PROVISION
2.1 Browsing Data
When accessing or browsing the Site, the computer systems and software procedures used to operate them acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the user’s computers, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. Browsing data are processed for the following purpose: to verify the proper functioning of the Site and the services offered. The legal basis for the processing is the legitimate interest of the Data Controller in the proper functioning of the Site. The provision of browsing data is necessary for accessing and browsing the Site. When there is a legal obligation browsing data may also be communicated to the Public Authorities for the investigation of criminal offences.
2.2 Cookies
When browsing or accessing the Site cookies are used as explained in the Cookie Policy.
2.3 Personal data provided by the data subject
For some specific services, the release of personal data may be required. In particular you can provide the following kinds of personal data: name and surname, contact details (email,phone), your requests, professional data, country and account details.
In this case the personal data you voluntarily provide are processed for the following purposes:
The personal data described above could be processed also for compliance purposes when is necessary for the Data Controller to fulfil any legal obligations or comply with requests from authorities. The legal basis is the fulfilment of any legal obligations. The provision of data is necessary in order to allow us to fulfil the legal obligations and requests of the authorities.
3. THIRD- PARTY ADVERTISERS AND LINKS TO OTHER WEBSITES
The Site may include advertisements from parties other than the Company (hereinafter the “Third Parties”) and links to other websites and/or applications. If you access these websites and/or applications, Third Parties may collect information about you when you interact with their content, advertising and services under the terms and conditions described in the respective websites/applications.
4. PROTECTION OF MINORS
The Site includes contents that are not of interest to minors. In any case the protection of minors online is a fundamental element of our Company. By accessing the Site or registering on the Site, you declare that you are of legal age according to the legislation of your country residence.
5. PROCESSING METHODS AND RETENTION PERIODS
The Data Controller has adopted specific security measures to prevent loss, unlawful or incorrect use of and unauthorised access to data.
Personal data are stored for the time strictly necessary to achieve the purposes for which they were collected. In particular:
6. DISCLOSURE OF DATA
To comply with specific legal obligations or for reasons that are strictly related to the pursuit of the purposes indicated in paragraph 2, the personal data provided by you may be disclosed to the following recipients: external consultants in legal, tax and commercial matters, judicial authorities, public bodies and institutions as well as other third parties, in their capacity as Data Processors or independent data controllers.
We use third party service providers to support our websites, products, services, marketing purpose and to achieve the purposes indicated above. These service providers are prohibited from using your personal data except for these purposes, and they are required to maintain the confidentiality of your information.
Furthermore the Data Controller, for the data processing operations described in this Privacy Policy, is supported by its authorized employees (as Authorized Persons).
7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
The personal data processing for the purposes indicated above are not transferred outside the EEA. In any case when a transfer of personal data outside the EEA is necessary the Data Controller updates this Privacy Policy and the transfer will be done in compliance with art. 44 et seq. GDPR.
8. RIGHTS OF THE DATA SUBJECTS
As provided in article 13 GDPR, you may at any time:
The rights described above in letters a), b), c) and d) may be exercised by submitting a request to the Data Controllers at the following addresses without following any specific formalities:
The rights described above could be exercise when it’s applicable and when there is not a limitation provided by the law. For the rights concerning the usage of the cookies you could see our Cookie Policy.
Your rights and our responses will vary based on your state or country of residency. Please note that you may be located in a jurisdiction where we are not obligated, or are unable, to fulfill a request. In such a case, your request may not be fulfilled.
In compliance with Article 21 paragraph 1 and 2 GDPR for processing based on legitimate interest or for marketing purposes, you are the right to object which can be exercised by writing to privacy@gdslighting.com. You can write to this email address in order to stop commercial communication from the Data Controller. In addition, to unsubscribe from the newsletter service or stop receiving marketing communications, click on the “unsubscribe” link at the bottom of each communications you receive, at any time.
10. FURTHER INFORMATION FOR CALIFORNIA CONSUMERS
This section applies to all Users, who are consumers residing in the state of California (U.S.A.), who are consumers residing in the state of California, according to the “California Consumer Privacy Act of 2018” (the “CCPA”), as updated by the “California Privacy Rights Act” (the “CPRA”) and subsequent regulations. For such consumers, this section supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal information“ as defined in the California Consumer Privacy Act (CCPA/CPRA).
For the categories of personal information we collect, the purposes, the data retention, the disclosure (with third parties) you could refer to the previous paragraphs.
We collect the above-mentioned categories of personal information, either directly or indirectly, from you when you use this Site.
We do not sell your personal information (please note that the exchange of personal information with a service provider pursuant to a written contract that meets the requirements set by the CCPA, does not constitute a sale or sharing of your personal information).
10.1 Your California privacy rights
As a California resident, you may be able to exercise the following rights in relation to the personal information about you that we have collected:
The rights described above could be exercise when it’s applicable and when there is not a limitation provided by the law. For the rights concerning the usage of the cookies you could see our Cookie Policy.
10.2 How to exercise your rights
To exercise the rights described above, you need to submit your verifiable request to us by contacting us at the following addresses without following any specific formalities:
For us to respond to your request, it’s necessary that we know who you are. Therefore, you can only exercise the above rights by making a verifiable request which must:
We will not respond to any request if we are unable to verify your identity and therefore confirm the personal information in our possession actually relates to you.
Making a verifiable consumer request does not require you to create an account with us.
If you cannot personally submit a verifiable request, you can authorize a person registered with the California Secretary of State to act on your behalf.
You can submit a maximum number of 2 requests over a period of 12 months. Should we deny your request, we will explain you the reasons behind our denial.
To file a complaint you may contact the California Privacy Protection Agency.
11. FURTHER INFORMATION FOR VIRGINIA CONSUMERS
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the Commonwealth of Virginia, according to the “Virginia Consumer Data Protection Act” (the “VCDPA”), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the VCDPA.
For the categories of personal data we collect, the purposes, the data retention, the disclosure (with third parties) you could refer to the previous paragraphs.
We collect the above-mentioned categories of personal data, either directly or indirectly, from you when you use this Site.
We do not sell your personal information. Please note that the exchange of personal information with a service provider that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the VCDPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
11.1 Your privacy rights under the Virginia Consumer Data Protection Act
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
The rights described above could be exercise when it’s applicable and when there is not a limitation provided by the law. For the rights concerning the usage of the cookies you could see our Cookie Policy.
11.2 How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us at the following addresses without following any specific formalities:
For us to respond to your request, we need to know who you are.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this paragraph. Within 60 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint.
12. FURTHER INFORMATION FOR COLORADO CONSUMERS
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Colorado, according to the “Colorado Privacy Act” (the “CPA”), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the CPA.
For the categories of personal data we collect, the purposes, the data retention, the disclosure (with third parties) you could refer to the previous paragraphs.
We collect the above-mentioned categories of personal data, either directly or indirectly, from you when you use this Site.
For our purposes, the word “sale”, “sell”, or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined by the CPA.
Please note that according to the CPA, the disclosure of personal data to a service provider that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the CPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
12.1 Your privacy rights under the Colorado Privacy Act
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
The rights described above could be exercise when it’s applicable and when there is not a limitation provided by the law. For the rights concerning the usage of the cookies you could see our Cookie Policy.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service.
12.2 How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting usat the following addresses without following any specific formalities:
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this paragraph. Within 45 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint.
13. FURTHER INFORMATION FOR CONNECTICUT CONSUMERS
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Connecticut, according to “An Act Concerning Personal Data Privacy and Online Monitoring ” (also known as “The Connecticut Data Privacy Act” or the “CTDPA”), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the CTDPA.
For the categories of personal data we collect, the purposes, the data retention, the disclosure (with third parties) you could refer to the previous paragraphs.
We collect the above-mentioned categories of personal data, either directly or indirectly, from you when you use this Site.
We do not sell your personal information. Please note that according to the CTDPA, the disclosure of personal data to a service provider that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the CTDPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
13.1 Your privacy rights under the Connecticut Data Privacy Act
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
The rights described above could be exercise when it’s applicable and when there is not a limitation provided by the law. For the rights concerning the usage of the cookies you could see our Cookie Policy.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service.
13.2 How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us at the following addresses without following any specific formalities:
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this paragraph. Within 45 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may contact the Attorney General to submit a complaint.
14. FURTHER INFORMATION FOR UTAH CONSUMERS
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Utah, according to the “Consumer Privacy Act” (the “UCPA”), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the UCPA.
For the categories of personal data we collect, the purposes, the data retention, the disclosure (with third parties) you could refer to the previous paragraphs.
We collect the above-mentioned categories of personal data, either directly or indirectly, from you when you use this Site.
For our purposes, the word “sale”, “sell”, or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined by the UCPA.
Please note that according to the UCPA, the disclosure of personal data to a service provider that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the UCPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
14.1 Your privacy rights under the Utah Consumer Privacy Act
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following (subject to certain limitations at law and when it’s applicable):
The rights described above could be exercise when it’s applicable and when there is not a limitation provided by the law. For the rights concerning the usage of the cookies you could see our Cookie Policy.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service. We do not charge a fee to respond to your request, for up to one request per year.
14.2 How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us at the following addresses without following any specific formalities:
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request. We may retain your email address to respond to your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request.
To file a complaint you may contact the Attorney General.
15. AMENDMENTS
We reserve the right to amend the Privacy Policy at any time, including due to changes in applicable legislation, by updating this page. We therefore invite you to periodically check the Privacy Policy for updates.
This Privacy Policy was issued and is effective from January 3, 2024