Welcome to the website www.shop.slot.it/en/. For Galileo Engineering S.r.l., your privacy and the security of your personal data are important. That is why we collect and manage your personal data with the utmost care and adopt specific measures to keep it secure.

For detailed information on how your personal data is processed, we invite you to carefully read this document (Privacy Policy). Additionally, we ask you to read the Cookie Policy. This Privacy Policy applies exclusively to the Site and does not concern any third-party websites referenced within the Site’s pages.

 

1. Data Controller

The Data Controller is Galileo Engineering S.r.l., located at Via Cavallotti 16 - 42122 Reggio Emilia (RE), VAT no. 01799760358.

2. Types of Data Processed

Regarding the purposes of processing specified in section 3 below, Galileo Engineering processes different types of personal data concerning you, including:

• Identifying data (such as first and last name), contact data (such as phone number), billing information (such as tax code and/or date and place of birth, gender), shipping and billing addresses. These data are processed in relation to the registration on the SLOT.IT website, necessary for the online sale of Galileo Engineering products and the related activities such as contract conclusion and execution; payment; invoice issuance; product shipping; customer support; fraud and abusive behavior control and prevention (including third parties), in compliance with applicable laws, contractual provisions, and good faith practices. For registration on the Site, your email address and password will also be collected.
• When browsing the Site, navigation data is also collected, particularly to verify the regular functioning of the Site, ensure optimal navigation, and improve the quality of our services. For more information on the technologies used (cookies and similar tools), please consult our Cookie Policy.

3.1 Purposes Related to the Online Sale of Products

As the data controller, Galileo Engineering processes your personal data for the online sale of Galileo Engineering products and related activities, specifically to:

• Conclude and execute the purchase contract on the Site for one or more products, process payment, and ship the product. This processing is necessary to execute a contract in which you are a party (purchase contract). Providing your personal data is mandatory; without it, you will not be able to make a purchase on the Site or manage your requests or receive customer support.
• Fulfill legal obligations related to sales activities (such as issuing and storing invoices). This processing is necessary to comply with a legal obligation. Therefore, providing your personal data is mandatory; without it, you cannot make a purchase on the Site.
• Register on the Site; this processing is necessary to execute a contract in which you are a party (Site registration and related product supply). Providing your personal data is mandatory; without it, you cannot register on the Site or use services dedicated to registered users.

3.2 Marketing Purposes (Newsletter Subscription)

With your consent given at the time of subscribing to the Newsletter, Galileo Engineering will use your personal data for marketing purposes. Galileo Engineering may send promotions, commercial, or advertising communications about its products. The processing of your data is based on your freely given consent, and providing your data is optional. Refusing to provide your data will not affect your ability to purchase products online.

Marketing communications or offers are sent via email and newsletter. You can unsubscribe from newsletters by clicking the unsubscribe link included in each commercial communication.

3.3 Additional Purposes

Your personal data will also be processed by the data controller for:

• Managing requests for exercising personal data protection rights. This processing is necessary to comply with a legal obligation to which the data controller is subject.
• Other data protection obligations, such as providing information on any security breaches affecting your data (e.g., data breaches) or significant updates to this privacy policy. This processing is necessary to fulfill a legal obligation.

4. Data Communication and Access

Your personal data may be accessed by Galileo Engineering employees or collaborators who are formally authorized and by third parties (such as logistics and technical management companies) who are carefully selected and guarantee compliance with personal data protection laws. These companies are allowed to process your data only under specific conditions, on our behalf, and only for the necessary scope and period required to provide their service.

Additionally, your personal data may be communicated to:

• Entities, professionals, companies, or other structures in charge of administrative, accounting, and management tasks related to regular business activities, including debt recovery purposes.
• Public authorities and administrations to fulfill legal obligations.
• Banks, financial institutions, or other parties if the data transfer is necessary for the performance of our company's activities and to meet contractual obligations with you (e.g., third-party artisans working with the Controller). Your personal data may also be transferred abroad to countries within the European Union, in compliance with applicable laws. Your data will not be disclosed to the public.

5. Data Retention Period

We retain your personal data for a limited period, strictly related to the purpose for which it was collected and in compliance with applicable legal or regulatory obligations. At the end of the retention period, your personal data will be deleted or irreversibly anonymized unless Galileo Engineering is required to retain the data for a longer period to comply with legal or regulatory obligations or to exercise or defend a legal right in court.

The retention period varies depending on the purpose of processing, specifically:

• For online product sales and order processing, data (sales documents) is retained for the period established by applicable law, which is 10 years.
• For general marketing activities, your data is retained until you request deletion, withdraw consent, or object to processing; Galileo Engineering will retain the data for no more than 5 years.
• To fulfill legal obligations related to personal data processing, your data will be retained for the period necessary to manage your request to exercise rights under the GDPR or to comply with legal obligations. Data proving compliance with legal obligations will be retained for 10 years.
• In case of legal or administrative disputes, your data will be retained for the time necessary to protect Galileo Engineering’s legal rights, within the limits imposed by judicial or administrative authorities.

6. Data Subject Rights

You can exercise your rights under the GDPR at any time, including:

• Request confirmation whether your personal data is being processed and obtain access and a copy of your personal data (“right of access”).
• Request correction, modification, or updating of inaccurate or outdated data, or provide supplementary information to complete your data (“right of rectification”).
• Withdraw consent: You can revoke your consent to the processing of your personal data, including marketing activities (sending commercial/promotional communications, conducting market research). Upon receiving your request, the data controller will cease processing your data based on consent. Other lawful processing will continue in compliance with current regulations.
• Request deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose, was unlawfully processed, or must be deleted to comply with legal obligations (“right to erasure”).
• Restrict data processing, allowing your data to be stored but not processed unless for specific purposes, such as legal claims or protecting rights (“right to restriction”).
• Request data portability to receive your data in a structured, commonly used, machine-readable format or request the transfer of your data to another controller (“right to data portability”).
• Lodge a complaint with the competent data protection authority (in Italy, the Garante per la Protezione dei Dati Personali) if you believe your data has been processed unlawfully (“right to lodge a complaint”).

Additionally, you have the right to object to:

• The processing of your personal data for legitimate interests or marketing purposes at any time. The controller will cease processing unless they can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or for legal defense purposes.

To ensure full protection of your rights and prevent unauthorized access to your data, we may request additional information to verify your identity before fulfilling any request to exercise your rights.

You can exercise your rights by emailing info@slot.it with the subject "PRIVACY COMMUNICATION."

7. Privacy Policy Changes

The features, functionalities, and services offered by the Site may change over time, and as a result, this Privacy Policy may be updated. We invite you to check the contents periodically. Significant changes will be appropriately communicated.