This policy describes the processing of data in connection with the use of cookies and similar tracking tools on the website www.gestlabs.it (hereinafter the “Website”).
This notice is provided pursuant to Article 13 of Regulation (EU) No 2016/679 (hereinafter, the “GDPR”) and in accordance with Article 122 of Legislative Decree 196/2003 (hereinafter, the “Privacy Code”), as well as the provision on cookies issued by the Italian Data Protection Authority on 8 May 2014, as supplemented by the “Guidelines on cookies and other tracking tools” of 10 June 2021 (hereinafter, the “Provision”).
For all other processing of personal data carried out via the Website, please refer to the privacy policy.
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
The Data Controller is GESTLABS S.r.l. – VAT No. 08535170966, with registered office at Via Piave, 6 – 23871 Lomagna (LC), Italy (“GESTLABS” or “Data Controller”).
GESTLABS can be contacted by email at: info@gestlabs.it.
WHAT ARE COOKIES?
Cookies (or trackers) are small text files created by the web server you visit on your device when you access a particular website, for the purpose of storing and transmitting information.
These markers are sent by the web server to the user’s device (usually the browser) and stored so that the device can be recognized on each subsequent visit. Cookies are, in fact, sent back from the user’s device to the website on each subsequent visit.
First-party and third-party cookies
Cookies may be set not only by the operator of the website the user is visiting ( first-party cookies ), but also by a different website that sets them via the first website ( third-party cookies ) and is able to recognize them. This happens because the website visited may contain elements (images, maps, sounds, links to web pages on other domains, etc.) that reside on servers other than that of the website visited.
In accordance with the provisions of the Regulation, the obligations regarding information provision and, where applicable, consent, in relation to cookies installed by third parties, rest with those third parties; the website operator, acting as a technical intermediary between the third parties and users, is required to include up-to-date links to the third parties’ privacy policies and consent forms in the extended privacy notice.
Technical, analytical and profiling cookies
Depending on their purpose, cookies are divided into technical cookies and profiling cookies.
Technical cookies can be divided into navigation cookies , which are used to store data necessary for the normal navigation and use of the website on the user’s computer (allowing, for example, the website to remember the preferred page size in a list), and functional cookies , which enable the website to remember the choices made by the user in order to optimize its functionality (for example, functional cookies allow the site to remember a user’s specific settings, such as country selection and, if set, the status of permanent login).
Some of these cookies (known as essential or strictly necessary cookies) enable functions without which certain operations would not be possible.
Pursuant to the aforementioned Article 122(1) of the Data Protection Act, the use of technical cookies does not require users’ consent, but only entails an obligation to inform users.
Under the Regulation, so-called analytics cookies are treated in the same way as technical cookies – and therefore do not require users’ consent for their installation – if:
- created and used directly by the first-party website operator (without, therefore, the involvement of third parties) for the purpose of optimising the website to collect aggregated information on the number of users and how they visit the website, as well as
- realizzati e messi a disposizione da terze parti se:
- utilizzati dal sito prima parte per meri fini statistici, qualora vengano adottate misure di minimizzazione idonee a ridurne il potere identificativo (ad esempio, mediante il mascheramento di opportune porzioni dell’indirizzo IP) e impiegati unicamente per la produzione di statistiche aggregate ed in relazione, di regola, ad un singolo sito o una sola applicazione mobile, in modo da non consentire il tracciamento della navigazione della persona che utilizza applicazioni diverse o naviga in siti web diversi;
- third parties, who provide the website with web analytics services, do not combine, augment or cross-reference the data – even when anonymized as described above – with other information held by such third parties (e.g. customer files or statistics on visits to other websites), nor do they pass it on to further third parties.
Profiling cookies are used to track users’ browsing activity, analyse their behaviour for marketing purposes, and create profiles of their tastes, habits, choices, etc., so as to deliver targeted advertising messages tailored to their interests and in line with the preferences they have expressed whilst browsing online.
These cookies may only be stored on the user’s device if the user has given their consent.
Persistent and session cookies
Depending on their duration, cookies are classified as persistent cookies, which remain stored on the user’s device until they expire, unless the user deletes them, and session cookies , which are not stored permanently on the user’s device and are deleted when the browser is closed.
COOKIES USED ON THIS WEBSITE
Technical cookies
GESTLABS uses cookies for specific and limited purposes; in particular, to make the website easier for users to navigate, and for internal security and system administration purposes.
This type of cookie cannot be disabled and, as stated above, users’ prior consent is not required for their installation, in accordance with Article 122 of the Privacy Code.
Below is a list of each analytical cookie used, including its name, whether it is first-party or third-party, the purpose for which it is used, and its duration.
| NAME | PART ONE/PART THREE | DESCRIPTION (PURPOSE) | DURATION |
| _grecaptcha | This cookie is used to distinguish between humans and bots. This helps the website to generate accurate reports on site usage. | persistent | |
| _GRECAPTCHA | This cookie is used to distinguish between humans and bots. This helps the website to generate accurate reports on site usage. | 180 days | |
| rc::a | This cookie is used to distinguish between humans and bots. This helps the website to generate accurate reports on site usage. | persistent | |
| rc::b | This cookie is used to distinguish between humans and robots. | session | |
| rc::c | This cookie is used to distinguish between humans and robots. | session | |
| wt_consent | GESTLABS | Used to remember users’ consent preferences so that these are respected during subsequent visits to the site. It does not collect or store any personal information about visitors to the site. | 1 year |
| elementor | Elementor | The website’s WordPress theme uses this cookie. It allows the website owner to add or edit the website’s content in real time. | never |
| wpEmojiSettingsSupports | WordPress | WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user’s browser can display emojis properly. | session |
| JSESSIONID | New Relic | New Relic uses this cookie to store a session identifier so that New Relic can monitor session counts for an application. | session |
Anonymised analytics cookies
The Website uses analytical cookies created and provided by third parties to statistically analyze visits to the Website, enable the Data Controller to improve its structure, navigation and content, and collect information on how the Website is used. For further details and information, please visit the following link: https://support.google.com/analytics/answer/1011397.
These cookies, which have been appropriately anonymized (by masking significant portions of the IP address), enable the collection of aggregated information on the number of users and how they visit the website, without it being possible to identify individual users.
These cookies are not essential for the website to function, but they are vital for assessing its effectiveness or for helping to measure its “traffic”, i.e. the number of visitors, potentially broken down by geographical area, time of day or other characteristics.
Properly anonymized analytical cookies are treated in the same way as technical cookies; for this reason, users’ prior consent is not required.
Below is a list of each analytical cookie used, including its name, whether it is first-party or third-party, the purpose for which it is used, and its duration.
| NAME | PART ONE/PART THREE | DESCRIPTION (PURPOSE) | DURATION |
| _ga | Google Analytics first-party cookie. It is used to distinguish unique users and collect information on how users interact with the website. | 2 years | |
| _ga_# | Used by Google Analytics to collect data on the number of times a user has visited the website, as well as data relating to their first visit and most recent visit. | 2 years | |
| _gid | A cookie used to distinguish unique users and collect information on how users use the website. | 24 hours | |
| _gat | Cookie used to limit the frequency of requests to the Google Analytics server. | never |
Profiling cookies
The Website uses profiling cookies to identify specific behavioral patterns among users when they use the Website’s features, in order to gather information on their tastes, habits and choices, and to group different user profiles into homogeneous groups for the purpose of sending advertising messages in line with the preferences the user has already expressed while browsing online.
Users’ consent is required for the installation of these cookies.
Below, for each profiling cookie used, you will find the name, whether it is a first-party or third-party cookie, the purpose for which it is used, and its duration.
RECIPIENTS OF THE DATA
The data is processed by:
- GESTLABS employees and contractors who have been expressly authorized in accordance with their respective roles and who have received appropriate operational instructions;
- GESTLABS’ suppliers, who carry out activities necessary for the purposes for which the data is processed, such as IT service providers, designated as data processors pursuant to Article 28 of the GDPR;
- public authorities, professional firms or other bodies (e.g. insurance companies and banks) authorized to receive such data, acting as data controllers.
Data may be transferred to recipients established outside the European Union (EU) or the European Economic Area (EEA), in particular to the United States, a country deemed adequate by the European Commission within the framework of the “EU-US Data Protection Framework” of 10 July 2023.
Where the recipients to whom the data are transferred are located in a “third country” for which no adequacy decision has been issued, the standard contractual clauses (SCCs) referred to in Article 46 co. 2 lett. C) del GDPR, di cui gli interessati possono ottenere copia rivolgendosi al Titolare ai punti di contatto riportati al precedente paragrafo 1.
HOW TO GIVE AND WITHDRAW CONSENT AND BROWSER SETTINGS
Profiling cookies will only be stored on your devices with your consent. By clicking on the ‘ACCEPT ALL’ button in the banner containing the brief privacy notice that appears when you access the Website, you consent to the use of all cookies used by the Website, including profiling cookies. You can choose not to accept cookies by clicking on the ‘REJECT’ button, or select specific categories of cookies by clicking on the ‘MORE OPTIONS’ button. You can, in any case, change your preferences at any time via the link provided in the footer of the website. Consent to the use of cookies is recorded using a specific ‘technical cookie’.
Users can, however, manage their cookie preferences via their browser settings. Even if the user’s web browser is set to automatically accept cookies, they can change the default settings via the settings menu, deleting and/or removing all or some cookies, blocking the sending of cookies, or restricting this to certain websites. Disabling, blocking or deleting cookies may affect your ability to use certain parts of the website to their full potential, prevent certain features from working, and impact the functioning of third-party services.
Below are links to guides on managing cookies for the main browsers:
For browsers other than those listed above, please refer to the relevant guide to find out how to manage cookies.
RIGHTS OF DATA SUBJECTS
Without prejudice to the provisions of the previous paragraph regarding consent, all data subjects (i.e. the individuals to whom the data relate) may exercise the rights set out in Articles 15–22 of the GDPR by contacting the Data Controller at the contact details provided in the first paragraph. In particular, interested parties may:
- to obtain confirmation from the Data Controller as to whether or not personal data concerning them are being processed and, if so, to request access to such data and to the information referred to in Article 15 of the GDPR;
- to have inaccurate data rectified or incomplete data completed in accordance with Article 16 of the GDPR;
- request the erasure of personal data in the circumstances set out in Article 17 of the GDPR;
- to have the processing restricted (i.e. to have the data temporarily stored for the sole purpose of retention) in the cases provided for in Article 18 of the GDPR;
- to object at any time, on grounds relating to their particular situation, to the processing of their personal data carried out on the basis of the Controller’s legitimate interests, in accordance with Article 21 of the GDPR;
- where the processing is based on consent, a contract or the implementation of pre-contractual measures taken at the data subject’s request, and is carried out by automated means, to request that the data be provided in a structured, commonly used and machine-readable format, and, where technically feasible, to have it transmitted to another controller without hindrance, pursuant to Article 20 of the GDPR (“right to data portability”).
Furthermore, data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work, or in the Member State where the alleged infringement occurred (in Italy, this is the Garante per la Protezione dei Dati Personali).