Privacy Policy of LAGALPI Sagl
This website collects some Personal Data from its Users.
This document can be printed using the print command available in any browser's settings.
Data Controller
LAGALPI Sagl
Cantonale Street 4, Centro Galleria 3
CH-6928 Manno
IVA CHE-482-418-129
Data Controller email address: info@lagalpi.com
Phone +41 76 417 36 21
Types of Data Collected
Among the Personal Data collected by this website, either directly or through third parties, are: Cookies; Usage data; email; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); first name; last name; Data provided during the use of the service.
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed before the data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Website.
Unless otherwise specified, all Data requested by this Website are mandatory. If the User refuses to provide them, it may be impossible for this Website to deliver the Service. In cases where this Website marks certain Data as optional, Users are free to refrain from providing such Data without any impact on the availability or operation of the Service.
Users who have doubts about which Data are mandatory are encouraged to contact the Owner.
Any use of Cookies – or other tracking tools – by this Website or by the owners of third‑party services used by this Website, unless otherwise stated, is intended to provide the Service requested by the User, in addition to the further purposes described in this document and the Cookie Policy, if available.
The User assumes responsibility for Personal Data of third parties obtained, published or shared through this Website and guarantees that they have the right to disclose or disseminate such data, releasing the Owner from any liability towards third parties.
Methods and location of processing the collected Data
Processing methods
The Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, alteration or destruction of Personal Data.
Processing is carried out using computerised and/or telematic tools, with organisational methods and logics strictly related to the purposes indicated. In addition to the Controller, in some cases other parties involved in the organisation of this Website (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third‑party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Controller. The up‑to‑date list of Processors can always be requested from the Data Controller.
Legal basis for processing
The Controller processes Personal Data relating to the User when one of the following conditions applies:
- The User has given consent for one or more specific purposes; Note: in some jurisdictions the Controller may be authorised to process Personal Data without the User’s consent or another legal basis set out below, until the User objects (“opt‑out”) to such processing. This does not apply where the processing of Personal Data is governed by European data‑protection legislation;
- The processing is necessary for the performance of a contract with the User and/or for pre‑contractual measures;
- The processing is necessary to fulfil a legal obligation to which the Controller is subject;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
- The processing is necessary for the legitimate interests of the Controller or third parties.
It is always possible to ask the Controller to clarify the specific legal basis of each processing and, in particular, to specify whether the processing is based on law, provided by a contract, or necessary to conclude a contract.
Location
The Data are processed at the Owner's operational sites and any other location where the parties involved in the processing are located. For more information, contact the Owner.
The User's Personal Data may be transferred to a country different from the one where the User is located. To obtain further information about the place of processing, the User can refer to the section concerning the details of Personal Data processing.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or constituted by two or more countries, such as the UN, as well as regarding the security measures adopted by the Owner to protect the Data.
The User can verify whether any of the aforementioned transfers take place by examining the section of this document relating to the details of Personal Data processing or by requesting information from the Owner by contacting them at the details provided at the beginning.
Retention Period
The Data are processed and retained for the time required by the purposes for which they were collected.
Therefore:
- The Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until the execution of that contract is completed.
- The Personal Data collected for purposes attributable to the Owner's legitimate interest will be retained until that interest is satisfied. The User can obtain further information about the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.
When processing is based on the User's consent, the Owner may retain the Personal Data longer until such consent is withdrawn. Additionally, the Owner may be required to retain the Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, once this period expires, the rights of access, deletion, rectification, and data portability can no longer be exercised.
Purpose of Processing the Collected Data
User Data is collected to enable the Owner to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any fraudulent or malicious activity, as well as for the following purposes: Traffic optimization and distribution, Display of content from external platforms, Platform and hosting services, Statistics, Remarketing and behavioral targeting, Tag management, Advertising, Interaction with social networks and external platforms, Management of data collection and online surveys, and Contacting the User.
For detailed information on the purposes of processing and the Personal Data processed for each purpose, the User can refer to the “Details on the Processing of Personal Data” section.
Details on the Processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Contact the User
MAILING LIST OR NEWSLETTER (THIS WEBSITE)
By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list to which email messages containing information, including commercial and promotional content, related to this Website may be sent. The User’s email address may also be added to this list as a result of registering on this Website or after making a purchase.
Personal Data processed: surname; Cookie; usage data; email; first name.
Tag Management
This type of service is used for centralized management of tags or scripts used on this Website.
The use of such services causes the User’s Data to flow through them and, where applicable, be retained.
GOOGLE TAG MANAGER (GOOGLE IRELAND LIMITED)
Google Tag Manager is a tag‑management service provided by Google Ireland Limited.
Personal Data processed: usage data.
Processing location: Ireland – Privacy Policy.
Management of Data Collection and Online Surveys
This type of service allows this Website to manage the creation, implementation, administration, distribution and analysis of online forms and surveys in order to collect, store and reuse the Data of Users who respond.
The Personal Data collected depends on the information requested and provided by Users in the corresponding online form.
These services may be integrated with a wide range of third‑party services to allow the Owner to perform subsequent actions with the processed Data – for example, contact management, message sending, statistics, advertising and payment processing.
FACEBOOK CONTACT ACQUISITION ADS (FACEBOOK IRELAND LTD)
Facebook contact acquisition ads is an advertising and data‑collection service provided by Facebook Ireland Ltd that allows showing Users advertising messages in the form of pre‑filled forms with Personal Data from their Facebook profiles, such as names and email addresses. Depending on the ad type, Users may be asked to provide additional information.
Submitting the form involves the collection and processing of this Data by the Controller pursuant to this privacy policy and solely for the specific purpose indicated in the form and/or within this privacy policy, where applicable.
The User can exercise their rights at any time, including the right to withdraw consent to the processing of their Data, as specified in the section containing information on the User’s rights in this privacy policy.
Personal Data processed: surname; Cookie; Data provided during use of the service; Usage data; email; first name.
Place of processing: Ireland – Privacy Policy – Opt out.
Interaction with social networks and external platforms
This type of service enables interactions with social networks, or other external platforms, directly from the pages of this Website.
Interactions and information gathered by this Website are always subject to the User’s privacy settings for each social network.
This service may still collect traffic data for the pages where it is installed, even when Users do not use it.
It is recommended to disconnect from the respective services to ensure that data processed on this Website is not linked back to the User’s profile.
LIKE BUTTON AND FACEBOOK SOCIAL WIDGETS (FACEBOOK IRELAND LTD)
The “Like” button and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook Ireland Ltd
Personal Data processed: Cookie; Usage data.
Place of processing: Ireland – Privacy Policy.
Traffic optimization and distribution
This type of service allows this Website to distribute its content through servers located in the territory and to optimise its performance.
The Personal Data processed depend on the characteristics and the implementation method of these services, which by nature filter the communications between this Website and the User’s browser.
Given the distributed nature of this system, it is difficult to determine the locations where the content is transferred, which could contain the User’s Personal Data.
CLOUDFLARE (CLOUDFLARE INC.)
Cloudflare is a traffic optimisation and distribution service provided by Cloudflare Inc.
The integration methods of Cloudflare involve filtering all traffic of this Website, i.e., the communications between this Website and the User’s browser, also allowing the collection of statistical data about it.
Personal Data processed: Cookies; various types of Data as specified by the service’s privacy policy.
Location of processing: United States – Privacy Policy.
Advertising
This type of service enables the use of User Data for commercial communication purposes. These communications are displayed on this Website in the form of banners and other advertising formats, also related to the User’s interests.
This does not mean that all Personal Data are used for this purpose. Data and usage conditions are indicated below.
Some of the services listed below may use Tracking Tools to identify the User or employ behavioural retargeting, i.e., showing personalised ads based on the User’s interests and behaviour, detected even outside this Website. For more information, we suggest checking the privacy notices of the respective services.
Generally, such services offer the possibility to disable this tracking. In addition to any opt‑out function provided by any of the services listed in this document, the User can read more about how to disable interest‑based advertising in the dedicated “How to disable interest‑based advertising” section of this document.
FACEBOOK LOOKALIKE AUDIENCE (FACEBOOK IRELAND LTD)
Facebook Similar Audiences is an advertising and behavioural targeting service provided by Facebook Ireland Ltd that uses the Data collected through Facebook Custom Audiences to show ads to Users whose behaviours are similar to Users already in a Custom Audience list based on their previous use of this Website or their interaction with relevant content through Facebook apps and services.
Based on this Data, personalized ads will be shown to Users suggested by Facebook Similar Audiences.
Users can choose not to use Facebook cookies for ad personalization by visiting this opt‑out page.
Personal Data processed: Cookie; Usage data.
Location of processing: Ireland – Privacy Policy – Opt Out.
FACEBOOK AUDIENCE NETWORK (FACEBOOK IRELAND LTD)
Facebook Audience Network is an advertising service provided by Facebook Ireland Ltd For an understanding of Facebook’s data use, please consult Facebook’s data policy.
To enable Facebook Audience Network to function, this Website may use certain mobile device identifiers (including Android Advertising ID or Advertising Identifier for iOS) or technologies similar to cookies. Among the ways Audience Network delivers advertising messages to the User is the use of the User’s ad preferences. The User can control the sharing of their ad preferences within the Facebook Ad Settings.
The User can opt out of certain Audience Network targeting features through their device settings. For example, they can change the advertising settings available for mobile devices, or follow any Audience Network instructions that may be included in this privacy policy.
Personal Data processed: Cookies; Usage data; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).
Location of processing: Ireland – Privacy Policy – Opt Out.
Remarketing and behavioural targeting
This type of service allows this Website and its partners to communicate, optimize and serve advertising based on the past use of this Website by the User.
This activity is facilitated by tracking Usage Data and by using Tracking Tools to collect information that is then transferred to partners who manage remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
In addition to the opt‑out features offered by the services listed below, the User can opt out by visiting the Network Advertising Initiative opt‑out page.
Users may also choose not to participate in certain advertising features through the corresponding device configuration options, such as the mobile device advertising settings or the generic advertising configuration.
REMARKETING WITH GOOGLE ANALYTICS (GOOGLE IRELAND LIMITED)
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google Ireland Limited that links the tracking activity performed by Google Analytics and its cookies with the Google Ads advertising network and the DoubleClick cookie.
Personal Data processed: Cookie; Usage data.
Data processing location: Ireland – Privacy Policy – Opt OutOpt Out.
FACEBOOK REMARKETING (FACEBOOK IRELAND LTD)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that connects this Website’s activity with the Facebook advertising network.
Personal Data processed: Cookie; Usage data.
Location of processing: Ireland – Privacy Policy – Opt Out.
FACEBOOK CUSTOM AUDIENCE (FACEBOOK IRELAND LTD)
Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that links this Website’s activity with the Facebook advertising network.
Users can choose not to use Facebook cookies for ad personalization by visiting this opt‑out page.
Personal Data processed: Cookies; email.
Location of processing: Ireland – Privacy Policy – Opt Out.
Platform and hosting services
These services are intended to host and operate key components of this Website, making it possible to deliver this Website from a single platform. These platforms provide the Owner with a wide range of tools such as analytics, user registration management, comment and database management, e‑commerce, payment processing, etc. The use of such tools involves the collection and processing of Personal Data.
Some of these services operate through servers located in different geographic locations, making it difficult to determine the exact place where Personal Data are stored.
SHOPIFY
Shopify is a platform provided by Shopify Inc. that allows the Owner to develop, operate, and host an e‑commerce website.
Personal Data processed: various types of data as specified by the service’s privacy policy.
Data processing location: Canada – Privacy Policy; Ireland – Privacy Policy.
Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to keep track of the User's behavior.
GOOGLE ANALYTICS (GOOGLE IRELAND LIMITED)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected in order to track and examine the use of this Website, compile reports and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize ads in its advertising network.
Personal Data processed: Cookie; Usage data.
Location of processing: Ireland – Privacy Policy – Opt Out.
FACEBOOK ADS CONVERSION TRACKING (FACEBOOK PIXEL) (FACEBOOK IRELAND LTD)
Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Facebook Ireland Ltd that links data from the Facebook ad network with actions taken within this Website. The Facebook pixel monitors conversions that can be attributed to ads on Facebook, Instagram and Audience Network.
Personal Data processed: Cookie; Usage data.
Place of processing: Ireland – Privacy Policy.
Displaying content from external platforms
This type of service allows displaying content hosted on external platforms directly from the pages of this Website and interacting with it.
This type of service may still collect web traffic data related to the pages where the service is installed, even when users do not use it.
GOOGLE FONTS (GOOGLE IRELAND LIMITED)
Google Fonts is a font style rendering service managed by Google Ireland Limited that allows this Website to integrate such content within its pages.
Personal Data processed: Usage data; various types of Data as specified by the service’s privacy policy.
Processing location: Ireland – Privacy Policy.
WIDGET INSTAGRAM (FACEBOOK IRELAND LTD)
Instagram is an image display service managed by Facebook Ireland Ltd that allows this Website to integrate such content within its pages.
Personal Data processed: Cookie; Usage data.
Location of processing: Ireland – Privacy Policy.
Information on how to disable interest‑based advertising
In addition to any opt‑out function provided by any of the services listed in this document, Users can read more about how to disable interest‑based advertising in the dedicated section of the Cookie Policy.
User Rights
Users can exercise certain rights with respect to the Data processed by the Controller.
In particular, within the limits provided by law, the User has the right to:
- revoke consent at any time. The User may withdraw the consent previously given for the processing of their Personal Data.
- oppose the processing of their Data. The User may object to the processing of their Data when it is based on a legal ground other than consent. Further details on the right of objection are provided in the section below.
- access their Data. The User has the right to obtain information about the Data processed by the Controller, about certain aspects of the processing, and to receive a copy of the processed Data.
- verify and request rectification. The User can verify the accuracy of their Data and request its update or correction.
- obtain limitation of processing. The User may request a limitation of the processing of their Data. In such case the Controller will not process the Data for any purpose other than its storage.
- obtain deletion or removal of their Personal Data. The User may request the deletion of their Data by the Controller.
- receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, machine‑readable format and, where technically feasible, to have it transferred without hindrance to another controller.
- file a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
Details on the right of objection
When Personal Data are processed in the public interest, in the exercise of public powers vested in the Controller, or to pursue a legitimate interest of the Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users should note that, if their Data are processed for direct marketing purposes, they may object to the processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To find out whether the Controller processes Data for direct marketing, Users can refer to the relevant sections of this document.
How to exercise the rights
To exercise their rights, Users may send a request to the Owner’s contact details indicated in this document. The request can be submitted free of charge and the Owner will respond as soon as possible, in any case within one month, providing the User with all information required by law. Any corrections, deletions or limitations of processing will be communicated by the Owner to each of the recipients, if any, to whom the Personal Data have been transmitted, unless this proves impossible or would involve a disproportionate effort. The Owner will inform the User of such recipients upon request.
Cookie Policy
This website uses Tracking Tools. For more information, the User can consult the Cookie Policy.
Further information on processing
Legal defence
The User’s Personal Data may be used by the Owner in court or in preparatory phases for any possible proceedings for defence against abuse in the use of this website or the related Services by the User.
The User declares that they are aware that the Owner may be required to disclose the Data by order of public authorities.
Specific information
At the User's request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual notices concerning specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For reasons related to operation and maintenance, this Website and any third‑party services it uses may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User's IP address.
Information not contained in this policy
Further information regarding the processing of Personal Data can be requested at any time from the Data Controller using the contact details.
Response to “Do Not Track” requests
This Website does not support “Do Not Track” requests.
To find out whether any third‑party services used support them, the User is invited to consult the respective privacy policies.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, where technically and legally feasible, sending a notice to Users through one of the contact details it holds. Please therefore check this page regularly, referring to the last modification date indicated at the bottom.
If the changes affect processing activities whose legal basis is consent, the Controller will obtain the User's consent again, if necessary.
Definitions and legal references
PERSONAL DATA (OR DATA)
Personal data is any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
USAGE DATA
These are the information automatically collected through this Website (also from third‑party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User connecting to this Website, the URIs (Uniform Resource Identifier) addresses, the request time, the method used to forward the request to the server, the size of the file returned in response, the numeric code indicating the server response status (success, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (e.g., time spent on each page) and the details of the navigation path within the Application, with particular reference to the sequence of pages viewed, the parameters related to the operating system and the User’s computing environment.
USER
The individual who uses this Website who, unless otherwise specified, is the Data Subject.
DATA SUBJECT
The natural person to whom the Personal Data relate.
DATA CONTROLLER (OR CONTROLLER)
The natural or legal person, public administration and any other entity that processes personal data on behalf of the Owner, as set out in this privacy policy.
DATA OWNER (OR OWNER)
The natural or legal person, public authority, service or other body that, alone or together with others, determines the purposes and means of processing personal data and the tools adopted, including security measures related to the operation and use of this Website. The Data Owner, unless otherwise specified, is the owner of this Website.
THIS WEBSITE (OR THIS APPLICATION)
The hardware or software tool through which Users' Personal Data are collected and processed.
SERVICE
The Service provided by this Website as defined in the relevant terms (if any) on this site/application.
EUROPEAN UNION (OR EU)
Unless otherwise specified, any reference to the European Union in this document is understood to extend to all current member states of the European Union and the European Economic Area.
COOKIE
Cookies are Tracking Tools that consist of small pieces of data stored within the User's browser.
TRACKING TOOL
By Tracking Tool we mean any technology – e.g., Cookies, unique identifiers, web beacons, embedded scripts, e‑tags and fingerprinting – that enables tracking of Users, for example by collecting or storing information about the User’s device.
LEGAL REFERENCES
This privacy notice is drafted based on multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy notice applies solely to this Website.
Last updated: March 16, 2021
iubenda hosts this content and collects only the strictly necessary Personal Data for its provision.