Last updated: 13 May 2026

This Privacy Policy describes how personal data is processed through the website officinagarbarino.it.

This information is provided pursuant to Regulation (EU) 2016/679, the “GDPR”, and the applicable Italian legislation on the protection of personal data.

1. Data Controller

The Data Controller is:

Garbarino Paolo & C. Snc
VAT no. / Tax Code: 01225540085
Registered office: Via Argine Destro, 541 – 18100 Imperia (IM), Italy
Email for privacy requests: ufficio@officinagarbarino.it

2. Personal Data Processed

The following personal data may be processed through the website:

  • technical browsing data, such as IP address, browser type, device used, access date and time, and technical logs;
  • data voluntarily provided by the user through contact forms, email, telephone or other communication channels;
  • identification and contact data, such as name, surname, email address, telephone number and message content;
  • any additional data voluntarily included by the user in communications sent to the Data Controller.

3. Purposes of Processing

Personal data is processed for the following purposes:

  • to allow browsing and the proper functioning of the website;
  • to respond to requests for information, quotes, assistance or contact;
  • to manage communications sent by the user;
  • to ensure website security and prevent improper use;
  • to comply with any legal obligations;
  • to protect the rights of the Data Controller.

4. Legal Basis for Processing

The processing of personal data is based on:

  • the performance of pre-contractual or contractual measures, when the user sends requests for information, quotes or assistance;
  • compliance with legal obligations, when processing is necessary to comply with applicable laws;
  • the legitimate interest of the Data Controller, to ensure the security and functioning of the website, prevent abuse and protect its rights;
  • the user’s consent, only for any optional processing activities that require it.

5. Processing Methods

Personal data is processed using electronic, telematic and, where necessary, paper-based tools.

The Data Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or unlawful destruction.

6. Provision of Data

The provision of data through contact forms, email or other channels is optional.

However, failure to provide the necessary data may prevent the Data Controller from responding to the user’s requests or providing the requested information.

7. Recipients of Personal Data

Personal data may be disclosed, within the limits necessary, to parties that support the Data Controller in carrying out its activities, including:

  • technical providers of the website;
  • providers of IT, hosting, email or maintenance services;
  • consultants and professionals;
  • public authorities, where required by law.

Personal data is not sold to third parties.

8. Transfer of Data Outside the European Economic Area

Personal data is mainly processed within the European Economic Area.

If some technical providers process personal data outside the European Economic Area, the transfer will take place in compliance with the safeguards provided for by the GDPR.

9. Data Retention Period

Personal data is stored for the time necessary to achieve the purposes for which it was collected.

In particular:

  • technical data and logs are stored for the time necessary to ensure the functioning and security of the website;
  • data sent through forms, email or other contact channels is stored for the time necessary to manage the request and for any need to protect rights;
  • data subject to legal obligations is stored for the period required by applicable law.

10. Cookies

The website uses technical cookies necessary for the proper functioning of pages and essential services.

Technical cookies do not require the user’s consent.

The website does not use profiling cookies without the user’s consent.

If analytics, marketing or other tracking tools are introduced in the future, this Privacy Policy and the related cookie banner will be updated.

11. Data Subject Rights

The user may exercise at any time the rights provided for by Articles 15 and following of the GDPR.

In particular, the user may request:

  • access to their personal data;
  • rectification of inaccurate data;
  • erasure of data;
  • restriction of processing;
  • objection to processing;
  • data portability, where applicable;
  • withdrawal of consent, where processing is based on consent.

Requests may be sent to the following email address: ufficio@officinagarbarino.it

The user also has the right to lodge a complaint with the Italian Data Protection Authority.

12. Changes to This Privacy Policy

This Privacy Policy may be updated over time.

Any changes will be published on this page.