Privacy Policy

1. Information We Collect

Giardina Finishing India Pvt. Ltd. ("Giardina", "we", "us", or "our") collects information to provide and improve our services to visitors and clients. The types of information we collect include:

a) Information You Provide Directly

b) Information Collected Automatically

• Device & Browser Information: Browser type and version, operating system, screen resolution, and device type (desktop, mobile, or tablet).
• Usage Data: Pages visited, time spent on each page, referral source (how you arrived at our website), click patterns, and navigation paths.
• Network Information: IP address (anonymised where possible), approximate geographic location (city/region level only), and internet service provider.
• Cookies & Similar Technologies: Data collected through cookies, web beacons, and local storage as described in Section 5 below.

We do not collect any sensitive personal data such as biometric data, financial information (credit/debit card numbers), health records, religious beliefs, or government-issued identification numbers through this website.

2. Legal Basis for Processing

We process your personal data on one or more of the following lawful bases under India's Digital Personal Data Protection Act, 2023 (DPDPA) and, where applicable, the EU General Data Protection Regulation (GDPR):

• Consent: When you voluntarily submit your information through our enquiry form or subscribe to communications, you provide consent for us to process that data for the stated purposes.
• Legitimate Interest: We may process your data where necessary for our legitimate business interests — such as improving our website, understanding visitor behaviour through analytics, and responding to service enquiries — provided this does not override your fundamental rights and freedoms.
• Contractual Necessity: When processing is necessary to perform or enter into a service agreement with you or your organisation.
• Legal Obligation: When we are required to process your data to comply with applicable laws, regulations, or valid government orders.

You may withdraw your consent at any time by contacting us at projects@giardina.in. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

3. How We Use Your Information

The personal data we collect is used strictly for the following purposes:

• Responding to Enquiries: To acknowledge, process, and respond to your project enquiries regarding our UV roller lines, spray coating systems, pressurised painting booths, digital printing, and protective packaging services.
• Service Coordination: To schedule factory visits, product demonstrations, consultations, and technical assessments of our European finishing solutions.
• Client Relationship Management: To maintain records of past communications, project specifications, and service history to serve you more effectively.
• Marketing Communications: To send periodic updates about new finishing technologies, product launches, industry events, or company news — only if you have expressly opted in. You may unsubscribe at any time.
• Website Improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, design, and content of our website.
• Legal & Regulatory Compliance: To comply with applicable Indian laws, tax requirements, regulatory filings, or valid government orders.

We will never use your personal data for automated decision-making or profiling that produces legal effects concerning you.

4. Sharing of Information

We respect your privacy and do not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

• Group Companies: With Giardina Group entities (including Giardina Finishing AG, Switzerland) for internal business purposes, coordination of cross-border projects, and delivery of our finishing solutions. All group entities are bound by equivalent data protection standards.
• Service Providers: With trusted third-party vendors who assist in operating our website, hosting infrastructure, email services, or analytics platforms (e.g., Google Analytics). These providers are contractually obligated to process your data only on our instructions and maintain strict confidentiality.
• Professional Advisors: With lawyers, accountants, auditors, and insurers where necessary for professional advice, claims management, or audit purposes.
• Legal Requirements: When disclosure is required or permitted by law, regulation, legal process, or a valid government or judicial order issued by a court of competent jurisdiction in India.
• Business Transfers: In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and help us understand how visitors interact with our site. A cookie is a small text file stored on your device by your web browser.

Types of cookies we use:

Third-party analytics: We may use Google Analytics to collect anonymised visitor statistics. Google Analytics uses cookies to generate information about your website visits. This data is transmitted to and stored on Google's servers. Google's privacy policy can be reviewed at policies.google.com/privacy.

Managing cookies: You may disable or delete cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain features on our website. Most browsers allow you to:

• View what cookies are stored and delete them individually.
• Block third-party cookies.
• Block cookies from specific websites.
• Block all cookies from being set.
• Delete all cookies when you close your browser.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are:

When personal data is no longer required, we will securely delete or anonymise it in accordance with industry best practices. You may request earlier deletion by contacting us (see Section 8).

7. Data Security

We implement commercially reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. Our security safeguards include:

• Encryption in Transit: All data transmitted between your browser and our website is encrypted using HTTPS (TLS/SSL) protocols.
• Access Controls: Personal data is accessible only to authorised personnel on a need-to-know basis, with role-based access restrictions.
• Secure Infrastructure: Our website is hosted on reputable, industry-standard hosting platforms with regular security patches and monitoring.
• Data Minimisation: We collect only the minimum amount of personal data necessary for the stated purposes.
• Incident Response: We maintain procedures for identifying, reporting, and responding to personal data breaches in compliance with applicable regulations.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

8. Your Rights

Under India's Digital Personal Data Protection Act, 2023 (DPDPA) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data:

• Right to Access: You may request confirmation of whether we hold personal data about you and obtain a copy of such data.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (the "right to be forgotten").
• Right to Restrict Processing: You may request that we restrict or limit the processing of your data in certain circumstances.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as the legal basis.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Nominate: Under the DPDPA, you have the right to nominate another person to exercise your data rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please submit your request to projects@giardina.in with the subject line "Privacy Rights Request". We will verify your identity and respond within 30 days of receiving your request. In certain cases, we may require additional information to confirm your identity before processing your request.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India or, for EU residents, the relevant supervisory authority in your jurisdiction.

9. International Data Transfers

As part of the Giardina Group, your personal data may be shared with our parent company, Giardina Finishing AG, headquartered in Switzerland, and other group entities in Europe for the purpose of coordinating cross-border projects, technical consultations, and internal business operations.

When your data is transferred outside India, we ensure that appropriate safeguards are in place, including:

• Transfers to countries or territories recognised by the Central Government of India as providing adequate data protection under the DPDPA.
• Binding contractual clauses and data processing agreements with recipient entities that impose obligations equivalent to those under Indian data protection law.
• Where applicable, Standard Contractual Clauses (SCCs) approved by the European Commission for transfers subject to GDPR.

Switzerland is recognised by the European Commission as providing an adequate level of data protection. For further details on specific transfer safeguards, please contact us.

10. Third-Party Links

Our website contains links to third-party websites, including our official social media profiles on the following platforms:

• Facebook — facebook.com/giardina.india
• Instagram — instagram.com/giardina.india
• LinkedIn — linkedin.com/company/giardinaindia
• YouTube — Giardina India YouTube Channel
• X (formerly Twitter) — x.com/giardinaindiaex

These third-party websites have their own privacy policies, which we strongly encourage you to review before providing them with any personal information. We are not responsible for the privacy practices, content, or data collection policies of any external websites linked from our site. The inclusion of a link does not imply endorsement of that website by Giardina.

11. Children's Privacy

Our website and services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect, solicit, or process personal data from children. If we become aware that a child under 18 has provided us with personal information without verifiable parental or guardian consent, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe your child has submitted personal information on our website, please contact us at projects@giardina.in so that we can take appropriate action.

12. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make changes:

• We will revise the "Last Updated" date at the top of this page.
• For material changes that significantly affect your rights or the way we process your personal data, we will make reasonable efforts to provide prominent notice (e.g., a banner on our website or an email notification where feasible).
• Your continued use of our website after the posting of changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

13. Grievance Officer

In accordance with India's Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, we have designated a Grievance Officer to address any complaints, concerns, or questions regarding the processing of your personal data or this Privacy Policy.

The Grievance Officer will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days from the date of receipt. If you are not satisfied with the resolution, you may escalate the matter to the Data Protection Board of India.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, the handling of your personal data, or wish to exercise any of your rights described above, please reach out to us using the details below: