Cookie Policy

This Cookie Policy is issued by GASPA S.R.L MACCHINE, trading as GASPA MACCHINE, with registered and operational office at Z.I. Predda Niedda Strada 30, 07100 Sassari (SS), Italy, VAT number IT 03006910909, ATECO code 47.52.40 — hereinafter referred to as "the Controller" or "GASPA MACCHINE".

GASPA MACCHINE operates the e-commerce website gaspa-macchine.com, built on the WordPress platform with the WooCommerce e-commerce plugin and the Elementor page builder. The site is hosted by Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus). GASPA MACCHINE specializes in the online sale of new and used agricultural and construction machinery — tractors, mini-excavators, telescopic handlers, tandem rollers, wheel loaders, and dumpers — with shipping to 10 European countries.

This Cookie Policy describes in a complete, clear, and transparent manner which cookies and tracking technologies are used on the gaspa-macchine.com website, for what purposes, for how long, and how users can manage or refuse them. This policy complements and accompanies the Privacy Policy of GASPA MACCHINE, available on the official website.

Cookies are small text files that websites send to the user's device (computer, smartphone, tablet) during browsing and that are stored by the browser. On each subsequent visit to the same site, the browser resends the cookies to the server, allowing the site to recognize the device and remember certain information about the browsing session or user preferences.

• First-party cookies: cookies set directly by gaspa-macchine.com, managed by GASPA MACCHINE as Data Controller. They are primarily used for the technical operation of the site, to maintain an active shopping session, and to remember user preferences during the visit.
• Third-party cookies: cookies set by domains other than gaspa-macchine.com, belonging to external providers such as PayPal for payments, Google for visit statistics, or other services integrated into the site. For these cookies, the external manager is the respective data controller and has its own privacy policy.

• Session cookies: temporary cookies that are automatically deleted by the browser when the user closes the browser window or ends the session. They are necessary to ensure the proper functioning of the site during browsing, for example to keep the shopping cart active.
• Persistent cookies: cookies that remain stored on the user's device for a defined period of time (which can range from a few minutes to several years), even after closing the browser. They are automatically deleted when the preset term expires, or manually by the user through browser settings.

In addition to traditional cookies, there are other tracking technologies that work similarly. In the context of the gaspa-macchine.com website, the following technologies may be present:

• Server-side sessions: session identifiers temporarily stored on the hosting server (Hostinger) to manage PHP sessions of the WordPress/WooCommerce site. This data is not transferred to the user's device, but allows the server to recognize the active session via an identifier (PHPSESSID) stored in the browser cookie.
• LocalStorage and SessionStorage: HTML5 storage mechanisms that allow the site to save small amounts of data directly in the user's browser, without sending them to the server. They are used by some WordPress/WooCommerce and Elementor components to temporarily store user display preferences.
• Tracking pixels: extremely small images (1x1 pixel), invisible to the human eye, that can be used by third parties (such as Meta/Facebook) to track visits to certain pages or actions taken on the site. They are treated as cookies for all purposes of this Cookie Policy and the required consent.

The processing of personal data carried out via cookies is subject to two different legal regimes, depending on the cookie category in question. The fundamental distinction is between cookies for which consent is not required and cookies for which consent is mandatory.

Strictly necessary technical cookies can be installed on the user's device without requiring prior consent, pursuant to:

• Art. 122, paragraph 1, Legislative Decree 196/2003 (Italian Privacy Code), as amended by Legislative Decree 101/2018: technical cookies do not require consent when they are strictly necessary for the provision of the service requested by the user.
• Recital 25 of the ePrivacy Directive 2002/58/EC (as amended by Directive 2009/136/EC): technical cookies are exempt from the consent requirement as they are necessary for the transmission of a communication over a network or to provide a service requested by the user.
• Guidelines of the Italian Privacy Authority on cookies of June 10, 2021: confirm that technical cookies (necessary for navigation, session management, shopping cart, and security) do not require consent.

Analytical, non-essential functional, marketing, and profiling cookies require the prior, free, specific, informed, and unambiguous consent of the user, pursuant to:

• Art. 7 of EU Regulation 2016/679 (GDPR): consent must be demonstrated by the controller, can be withdrawn at any time with the same ease with which it was given, and cannot be conditional on access to the site or services.
• Art. 122, paragraph 1, Legislative Decree 196/2003: prohibits the installation of non-technical cookies without prior user consent.
• Guidelines of the Italian Privacy Authority of June 10, 2021: require that the cookie banner present "Accept all" and "Reject all" options with the same visual prominence, prohibit pre-ticking of boxes and dark pattern techniques, and prohibit cookie walls (denying access to the site in case of cookie refusal).

The cookies present on gaspa-macchine.com belong to four main categories. Below is a visual summary illustrating the essential characteristics of each category. The following sections of this Cookie Policy describe each category in detail, with complete tables of individual cookies.

Strictly necessary technical cookies are essential for the proper functioning of the site and for the provision of the e-commerce service. Without these cookies, gaspa-macchine.com would not be able to function properly: the shopping cart would not work, it would not be possible to log in to the personal area, and the payment process could not be completed. These cookies do not collect personally identifiable data and are not used for marketing or profiling purposes. They are automatically installed on the user's device and do not require prior consent.

WooCommerce is the e-commerce plugin that manages the GASPA MACCHINE online store. WooCommerce cookies are strictly necessary to allow users to add machinery to the cart, proceed to checkout, and complete the purchase.

Functional cookies are not strictly essential for the technical operation of the site, but improve the user's browsing experience by storing their preferences and choices. Unlike strictly necessary technical cookies, these cookies require the prior consent of the user before being installed.

Analytical cookies collect anonymous or pseudonymized statistical information about the use of the gaspa-macchine.com website. This data is used exclusively to understand how visitors interact with the site — which pages are visited most frequently, from which countries visitors come, which machinery categories generate the most interest, and where users abandon the purchase process — with the aim of continuously improving the site's content, functionality, and performance. Analytical cookies are not used to identify individual persons nor for commercial profiling purposes.

The gaspa-macchine.com website may use Google Analytics 4, the web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies to collect statistical information about site usage in aggregated and anonymized form. Google Analytics 4 is configured with IP address anonymization enabled, which means that the user's IP address is truncated before any processing by Google, making direct identification of the user impossible.

• IP anonymization enabled: in Google Analytics 4, users' IP addresses are anonymized by default before any processing. The full IP address is never stored by Google.
• No data sharing: GASPA MACCHINE has configured Google Analytics with the data sharing option with Google disabled. Analytics data is not used by Google for its own advertising purposes.
• Extra-EU transfer: data is processed by Google LLC in the United States. This transfer is covered by the Standard Contractual Clauses (SCC) adopted by Google and approved by the European Commission, pursuant to Arts. 46 and 47 of the GDPR. For further details, consult Google's Privacy Policy and Google Analytics privacy rules.
• Opt-out from Google Analytics: you can prevent data collection by Google Analytics by installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.

GASPA MACCHINE accepts payments via PayPal, Visa and Mastercard credit/debit cards, and direct bank transfer. To complete transactions via PayPal, the payment system installs some strictly necessary cookies to ensure the security of the payment process and prevent fraud. These cookies are set by PayPal, Inc. (2211 North First Street, San Jose, CA 95131, USA) and by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg) when the user is redirected to the PayPal platform to complete payment.

Marketing cookies are used to show relevant advertisements to users on third-party websites (for example on Facebook, Instagram, or the Google Display Network), to measure the effectiveness of advertising campaigns, and to prevent the same advertisement from being shown too frequently to the same user. These cookies track user navigation across different sites and can create a profile based on interests to show personalized advertising. They always require the user's explicit and prior consent.

GASPA MACCHINE is present on Facebook (facebook.com/gaspa.macchine) and on Instagram (instagram.com/materielsagricole). Should GASPA MACCHINE use the Meta Pixel for measuring advertising conversions on Facebook and Instagram, the pixel installs the following cookies on the devices of users who have provided the relevant consent.

GASPA MACCHINE has a YouTube channel (youtube.com/@GIOVANNIPELLEGRINO-w7i). Should YouTube videos be embedded in the site's pages, YouTube (Google LLC) installs cookies on the user's device. GASPA MACCHINE uses, where possible, the privacy-enhanced embedding mode (youtube-nocookie.com domain) which reduces the cookies set by YouTube. Cookies are only installed when the user chooses to start playing the video.

In accordance with the Guidelines of the Italian Privacy Guarantor of June 10, 2021 and with EU Regulation 2016/679 (GDPR), the site gaspa-macchine.com shows visitors, upon their first access, a cookie information banner that allows them to freely express their preferences before non-technical cookies are installed.

• An "Accept all" button that allows you to accept all cookies, including functional, analytical, and marketing ones.
• A "Reject all" button of equal visual prominence, which allows you to reject all non-technical cookies with a single click, without having to configure anything. Only strictly necessary cookies will remain active.
• A "Settings" or "Manage preferences" button that opens a detailed panel where it is possible to selectively accept or reject each individual category of cookies (functional, analytical, marketing).
• A link to this Cookie Policy to read the full information before expressing consent.
• A link to the site's Privacy Policy.

In accordance with Art. 7 of the GDPR, consent to cookies can be withdrawn at any time with the same ease with which it was provided. To modify previously expressed preferences:

• Via the site's cookie preference panel: access the cookie settings again by clicking on the appropriate link in the site footer or in this Cookie Policy. The cookie banner will appear again and you will be able to modify your choices.
• Via browser settings: you can delete cookies already installed and/or block the installation of new cookies through your browser settings. Instructions for each browser are provided in Section 11 of this Cookie Policy.
• Via third-party opt-out tools: for some third-party services such as Google Analytics and Meta, it is possible to use the specific opt-out tools provided by the respective providers (described in Sections 7 and 9).

In accordance with the 2021 Guidelines of the Italian Privacy Guarantor and the indications of the EDPB (European Data Protection Board), gaspa-macchine.com does not apply any type of cookie wall. This means that:

• Access to the site, viewing products, and purchasing machines are always possible even without accepting non-technical cookies.
• The refusal of cookies does not result in any deterioration of the service, limitations of essential functionalities, or price discrimination.
• Consent to marketing cookies is never a condition for using the e-commerce service.

All major web browsers allow you to manage cookies through their settings. You can: view the cookies present on the device, delete them individually or all together, block the installation of new cookies (all or only third-party ones), and set notifications when a site attempts to install cookies. Below you will find instructions for the most popular browsers. Please note that blocking all cookies could compromise the functioning of some features of the gaspa-macchine.com site, including the shopping cart.

• Google Analytics – Browser add-on: tools.google.com/dlpage/gaoptout — prevents data collection by Google Analytics on all websites.
• Google – Personalized ads settings: myadcenter.google.com — manage your Google advertising preferences.
• Meta (Facebook/Instagram) – Ad settings: facebook.com/adpreferences — manage Meta's advertising targeting preferences.
• PayPal – Privacy Center: paypal.com/it/legalhub/privacy-full — full information and management of data processed by PayPal.
• YourOnlineChoices (DAA/NAI): youronlinechoices.com/it/ — multi-platform tool to reject profiling cookies from numerous advertising networks with a single click.

The retention period for each cookie is determined based on technical necessity or the purpose for which it is used. GASPA MACCHINE applies the principle of minimization in cookie duration: cookies are kept only for the time strictly necessary to achieve the purpose for which they were created.

Some of the third-party cookies present on gaspa-macchine.com involve the transfer of data to entities established outside the European Union (EU) or the European Economic Area (EEA), in particular to the United States of America. The transfer of personal data to third countries is subject to specific guarantees under Articles 44–49 of the GDPR.

The Data Privacy Framework (DPF) EU-USA is an adequacy mechanism adopted by the European Commission with the Adequacy Decision of July 10, 2023. US companies that have joined the DPF (such as Google, Meta, and PayPal) are considered eligible to receive personal data from the EU without the need for further specific guarantees, as they guarantee a level of data protection essentially equivalent to that provided by the GDPR. The list of DPF certified companies can be consulted on the official website dataprivacyframework.gov.

As a data subject in the processing of personal data, the user of the gaspa-macchine.com site has a series of rights provided by EU Regulation 2016/679 (GDPR) and, for Italian users, by Legislative Decree 196/2003 (Privacy Code). These rights can be exercised at any time by contacting GASPA MACCHINE via the contact details indicated in Section 17.

• Right of access (Art. 15 GDPR): you have the right to obtain confirmation of the processing of data concerning you via cookies and to receive a copy of the information processed, including the category of data, the purposes of the processing, the recipients, and the duration of retention.
• Right to erasure ("right to be forgotten") (Art. 17 GDPR): you have the right to request the erasure of personal data processed via cookies, in the cases provided for by law (for example, when consent is withdrawn and there is no other legal basis for the processing). For cookies already present on the device, erasure must be carried out manually via the browser settings.
• Right to object (Art. 21 GDPR): you have the right to object at any time to the processing of personal data via analytical and marketing cookies. The objection is exercised by withdrawing consent via the site's cookie banner or browser settings.
• Right to withdraw consent (Art. 7 GDPR): you have the right to withdraw at any time the consent provided for non-technical cookies, without prejudice to the lawfulness of the processing carried out before the withdrawal.
• Right to portability (Art. 20 GDPR): you have the right to receive the personal data concerning you, processed via cookies on the basis of consent, in a structured, commonly used, and machine-readable format.
• Right to restriction of processing (Art. 18 GDPR): you have the right to request the restriction of the processing of data collected via cookies in the cases provided for by law.
• Right to rectification (Art. 16 GDPR): you have the right to request the correction of inaccurate personal data concerning you, if such data has been collected via cookies and associated with your user account.

To exercise any of the rights listed above, simply send a written request to info@gaspa-macchine.com, specifying the right you wish to exercise and providing the information necessary to identify you (name, surname, e-mail address registered on the site). GASPA MACCHINE will respond to your request within 30 calendar days of receipt, as provided for by Art. 12 of the GDPR. In the case of particularly complex requests, the deadline may be extended by a further two months, following reasoned communication.

Cookie legislation is mainly based on the European ePrivacy Directive (2002/58/EC), amended by Directive 2009/136/EC, and on the GDPR. However, each member country has transposed these directives with its own specificities and the respective Data Protection Authorities have issued guidelines with interpretations that in some cases differ from each other. The following table summarizes the specific legislation applicable in each country to which GASPA MACCHINE ships, with a focus on any provisions that are more restrictive than the European standard.

GASPA MACCHINE reserves the right to update or modify this Cookie Policy at any time, to reflect changes in the technologies used, in the applicable regulations, in the indications of the Data Protection Authorities, or in the operational practices of the site. The updated version of the Cookie Policy will always be available on this page at the address gaspa-macchine.com/cookie-policy/.

• Last updated date: each version of the Cookie Policy reports the last updated date at the top of the page. By checking this date, you can verify if the policy has been modified since your last visit.
• Substantial updates: in the event of significant changes concerning the introduction of new categories of cookies, new third-party providers, or relevant changes in retention times, the site's cookie banner will be reset to allow users to express their consent again in an informed manner.
• Notification to registered users: customers who have a registered account on gaspa-macchine.com may receive an e-mail notification in the event of particularly relevant updates to this Cookie Policy, if they have consented to receive service communications.

In accordance with the principle of transparency of the GDPR, GASPA MACCHINE keeps previous versions of the Cookie Policy for a period of at least 3 years from the date of replacement with the updated version. Historical versions can be requested by contacting us at info@gaspa-macchine.com.

For any questions, clarifications, or requests relating to this Cookie Policy or the processing of personal data via cookies carried out by GASPA MACCHINE, you can contact the Data Controller via the following contact details:

• Company name: GASPA S.R.L MACCHINE (operating as GASPA MACCHINE)
• Registered office: Z.I. Predda Niedda Strada 30, 07100 Sassari (SS), Italy
• VAT number: IT 03006910909
• Email: info@gaspa-macchine.com
• Telephone: +39 377 390 1146 (Mon–Sat, 09:00–18:00 CET)
• Website: gaspa-macchine.com

As a data controller established in Italy, GASPA MACCHINE is subject to the supervision of the Data Protection Authority. If you believe that the processing of your personal data via cookies violates the GDPR or Italian privacy legislation, you have the right to lodge a complaint with the Guarantor:

• Garante per la Protezione dei Dati Personali
• Piazza Venezia 11, 00187 Rome, Italy
• www.garanteprivacy.it

Visitors residing in other countries can lodge a complaint with the data protection authority of their country of residence: