Privacy Policy

Data Controller

Gima Services S.r.l., registered office at Viale Sabotino 15, 20135 Milan (Italy).

VAT / Tax ID: 07826760964 — REA: 1984456 — VIES: IT07826760964.

Contact: info@bergastat.com.

Data we collect

We collect the data strictly necessary to provide the service:

• Contact data submitted through the form (name, email, subject, message).
• Purchase, billing and shipping data, collected at checkout (when active).
• Technical browsing data (IP address, user-agent, access logs) generated automatically by our systems and by Cloudflare for security and diagnostic purposes.

Purposes and legal basis

• Responding to your requests sent through the form: legal basis = consent and/or pre-contractual measures (Art. 6.1.a/b GDPR).
• Managing orders, payments, shipping and tax obligations: legal basis = contract performance and legal obligations (Art. 6.1.b/c GDPR).
• Ensuring security, fraud prevention and site diagnostics: legal basis = legitimate interest (Art. 6.1.f GDPR).

Recipients and processors

Your data may be shared with the following providers, chosen among parties offering adequate guarantees:

• Cloudflare, Inc. — hosting, CDN and site security.
• Sendinblue SAS (Brevo) — transactional email and CRM.
• Stripe, Inc. / Stripe Payments Europe — payment processing (when active).
• Logistics couriers in charge of shipping.

We never sell or rent your data to third parties for their own marketing purposes.

Transfers outside the EU

Some providers may process data outside the European Union. In that case, the transfer is based on Standard Contractual Clauses approved by the European Commission or equivalent safeguards.

Retention

Data is kept for the time strictly necessary for the purposes for which it was collected, and in any case no longer than the periods required by Italian tax and civil law (usually 10 years for accounting data).

Your rights

At any time you have the right to:

• access your data, get a copy, request rectification or deletion;
• request restriction of processing or object to processing;
• receive your data in a structured format (portability);
• withdraw consent, without prejudice to the lawfulness of processing carried out before the withdrawal;
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights write to info@bergastat.com.