Giorgi Global Holdings, Inc. (“GGH”), and its wholly owned subsidiaries, including The Giorgi Companies, Inc. and the CANPACK GROUP (collectively, the ”Company” or “We”) respect your privacy and are committed to protecting it through our compliance with this Privacy Policy. The list of selected GGH’s subsidiaries and all of their websites is available here:
https:/www./thegiorgicompanies.com/
This Privacy Policy describes how your personal information is protected, collected, used, and shared when you visit, or use our websites (collectively, the “Sites”), engage, or intend to engage in a transaction or use our products or services (collectively, “Services”).
PERSONAL INFORMATION WE COLLECT
Information Collected Automatically
When you visit our Sites, We may automatically collect certain information about your device, including information about your web browser, operating system, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Sites, We may collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Sites over time. Collecting this information helps us to improve our Sites and to deliver a better and more personalized service, as well as help process your request for products we offer and ensure security. This may enable us to:
• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Sites according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Sites.
We refer to this automatically collected information as “Device Information”.
We may collect Device Information using the following technologies:
– “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier which enable us to provide certain features and functionality. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
– “Log files” track actions occurring on the Sites, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
– “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Sites.
We also use Google Analytics™ to obtain statistics related the use of our websites (in particular traffic thereon). For more information regarding collection of data by Google Analytics™, please read its Privacy Policy available at https://policies.google.com/technologies/partner-sites?hl=en. You can also opt-out of Google Analytics™ here: https://tools.google.com/dlpage/gaoptout.
Additionally, when you make a purchase or attempt to make a purchase through any of our Sites, we collect certain information from you, including your name, billing address, payment information (including credit card numbers, details concerning other methods of payment, etc.), email address and phone number. We refer to this information as “Order Information”.
Please note that third party social media or other sharing platforms (like YouTube™ or Vimeo™ for example) may collect information about you when you click on “add’ or “like” in connection with a given social network or play a video when visiting our websites. We do not have any control over this process. We recommend that you read the terms and conditions of use and privacy notice of these social networking sites before using them.
For more information please check our Cookies Policy.
Information You Provide to Us
We collect information you provide to us when you open an account with us, apply for a position with us, conduct or wish to conduct business with us, are employed by us, or otherwise engage in a transaction with us, which may include without limitation: your name, job title, residency, professional email address and phone number, mailing and billing address, employer name, Customer account number. We refer to this information as “Customer Information”.
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information, Order Information and Customer Information. It does not include any information collected by the Company through any offline source or through any third party, including any third party website.
You also may provide information to be published or displayed on public areas of the Sites (if any) or transmitted to other users of the Sites or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we may limit access to certain areas of the Sites through certain privacy settings administered as part of the log-on process for your account profile, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Site with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Sites. By accessing or using any of the Sites, you agree to the provisions of this privacy policy. This policy may change from time to time (see “Changes to Our Privacy Policy” below). Your continued use of this Sites after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Sites (for example, by generating analytics about how individuals interact with the Sites, and to assess the success of our marketing and advertising campaigns).
We use the Order Information that we collect generally to fulfill any orders placed through the Sites (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we may use this Order Information to:
We use Customer Information to engage in a transaction with you.
In addition, Personal Information may be used:
• To present our Sites and its contents to you.
• To provide you with information, products, or services that you request from us.
• To fulfill any other purpose for which you provide it.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Sites or any products or services we offer or provide through it.
• To allow you to participate in interactive features on our Sites.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.
We may also use your information to contact you about goods and services that may be of interest to you. If you do not want us to use your information in this way, please adjust your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our Sites may then be inaccessible or not function properly.
If you do not want us to sell or share your personal information with unaffiliated or non-agent third parties for promotional purposes, or if you wish not to receive any promotional offers or targeted advertising from us, you can “Opt-Out” by sending us an email with your request to http://privacy@thegiorgicompanies.com.
You can also call us at 800-535-9925. Where we have sent a promotional e-mail to you, you may also send a response e-mail asking to be omitted from such future e-mail distributions. Please note, however, that this “Opt Out” option will not apply to information we may provide to you as a result of your product purchase, warranty registration, product service experience evaluation or other direct transaction between you and the Company.
California, Virginia and Colorado residents may have additional personal information rights and choices. Please see “Your California/Virginia/Colorado/Utah/Connecticut Privacy Rights” below for more information
Visitors in the European Economic Area (”EEA”) and in the United Kingdom may have addition information rights and choices. Please see “Visitors Located in the EEA and in the UK” below for more information.
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. Where we aggregate Personal Information from multiple users of our Sites, we may disclose this without restriction. For example, we use Shopify® to power our online store – you can read more about how Shopify® uses your personal information here: http://www.shopify.com/legal/privacy.
We may disclose Personal Information that we collect or that you provide:
• To our subsidiaries and affiliates.
• To contractors, service providers (including providers of services in support of our Sites and cloud service providers that process information identified in this Privacy Policy on their servers for the purpose of supporting communication regarding your inquiry), and other third parties we use to support our business where needed for their services provided that they are bound by contractual or statutory obligations to keep such Personal Information confidential, and they use it only for those purposes.
•. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our Sites users is among the assets transferred.
•. To fulfill a purpose for which you have provided the Personal Information.
• For any other purpose disclosed by us when you provide the Personal Information.
• With your consent.
•. To enforce or apply our Sites terms of use limitations or those terms of any agreements we may have with you or that is entered into for you or on your behalf, including for billing and collection purposes.
•. If We believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This may include exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
DO NOT TRACK
Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. At the present time, the World Wide Web Consortium (W3C) has not yet established universal standards for recognizable DNT signals and therefore, the Site does not recognize DNT.
SECURITY
We store Personal Information using reasonable physical, technical, and administrative safeguards to secure data against foreseeable risks, such as unauthorized use, access, disclosure, destruction, or modification. All Personal Information you provide to us is stored by us or our contractors on secure servers behind firewalls, with any payment transactions being encrypted using SSL technology. The safety and security of your Personal Information also depends on you. Where We have given you (or where you have chosen) a password for access to our Site or any of its parts, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of our Site like message or comment boards. The information you share in public areas may be viewed by any user of the Site. Any transmission of your Personal Information by you is at your own risk.
Although we make good faith efforts to store the information, we collect in a secure operating environment that is not available to the public, we cannot guarantee complete security. Further, while we work to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent third-party “hackers” from illegally obtaining this information.
VISITORS LOCATED IN THE EEA AND IN THE UK
If you located in the EEA or in the United Kingdom (“UK”) or if we process the Personal Information in context of the activities of our establishment in the EEA, the UK or Brazil you have the right to access Personal Information we hold about you and to ask that your Personal Information be corrected, updated, or deleted. If you would like to exercise this right, please contact us at data.protection@canpack.com. You also have the right to lodge a complaint with the applicable supervisory authority.
Additionally, if you are located in the EEA or in the UK or if we process the Personal Information in context of the activities of our establishment in the EEA, the UK we note that we are, at your initiation, processing your Personal Information in order to fulfill contracts we might have with you, including taking pre-contractual steps (for example if you apply for a job through the Sites), where we have obtained your consent to use personal information, or otherwise to pursue our legitimate business interests listed above. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Additionally, please note that your information may be transferred outside of the EEA or the UK including but not limited to the United States.
We transfer data from the European Economic Area (“EEA”) and the UK to the US or other countries outside the EEA and the UK under a valid transfer mechanism. If there is any conflict between the terms in this Privacy Policy and such mechanism, the terms of the transfer mechanism shall govern.
We ensure that this cross-border data processing is protected by adequate safeguards, including using Standard Contractual Clauses according to the EU General Data Protection Regulation (“GDPR”) or the UK laws implementing the GDPR (the “UK GDPR”). You may request a copy of the Standard Contractual Clauses by email at data.protection@canpack.com.
YOUR EEA AND UK RIGHTS
Under EEA, UK Swiss data protection law we are required to advise you on the legal basis for processing your personal data. For the most part, the processing of your Personal Information is based either on a) our legitimate interests related to us providing you services you have requested or otherwise your customer/supplier relationship with us, or b) your consent, where requested.
Where provided under applicable law, you may have the following rights:
If you exercise the rights above and there is any question about who you are, we may require you to provide information from which we can satisfy ourselves as to your identity.
To exercise any of your rights over your personal information, please contact us via email at data.protection@canpack.com or mail using the details provided below:
CANPACK S.A., ul. Marii Konopnickiej 29, 30-302 Krakow, Poland.
DATA RETENTION
We may maintain your Personal Information as necessary for processing requests you may have made to the Company or for those other use purposes as noted above.
If you have entered into a contract with us, the Personal Information is stored for the duration of the contract, as well as following its termination, if necessary for legal, regulatory purposes or corporate governance purposes. Personal Information processed based on your consent will be kept until the consent is revoked, unless otherwise prescribed by applicable legal requirements and presuming that it is necessary for the purpose of processing.
CHILDREN’S PRIVACY
Under Age 13
Our Sites are not specifically directed toward children, and we do not knowingly collect Personal Information from persons under the age of 13 on our Sites without verifiable parental consent. If we learn that a child under the age of 13 has submitted personally identifiable information online without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personally identifiable information, we have collected from children under 13, please contact us at:
CHANGES TO OUR PRIVACY POLICY
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. The date the privacy policy was last revised is identified at the end of this document. You are responsible for ensuring We have an up-to-date active and deliverable email address for you, and for periodically visiting our Sites and this Privacy Policy to check for any changes. Your continued use of our Sites after any updates, indicates your agreement to this Privacy Policy as updated.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at:
For Giorgi companies:
privacy@thegiorgicompanies.com, or by calling us at 800-535-9925, or by mail using the details provided below:
The Giorgi Companies, Inc.
108 Plaza Drive, Suite 200
Blandon, PA 19510
Attn: Data Protection Officer
http://privacy@thegiorgicompanies.com
For CANPACK companies:
Data.protection@canpack.com or by calling us at +48 12 377 74 03 or by mail using the details provided below:
CANPACK S.A.
Ul. Marii Konopnickiej 29
30-302 Kraków
Poland
LAST UPDATED JULY 8, 2024
US STATE PRIVACY RIGHTS
Some states in the US have passed state specific privacy laws. This page supplements our Privacy Policy by explaining your privacy rights if you are a resident in one of these states, and also provides certain mandated disclosures about our treatment of personal information
Colorado, Connecticut, Utah, Virginia, Oregon and Texas:
If you are a resident of Colorado, Connecticut, Utah, Virginia, Oregon or Texas, We may have certain obligations, and you may have certain rights with respect to your personal information, including the:
In certain states, you may also have the right to opt out from profiling in furtherance of decisions that produce legal or similarly significant effects on the consumer (such as Virginia, Colorado,Connecticut, Oregon and Texas) and appeal a decision regarding a request to exercise your rights.
If you wish to exercise one or more of these rights, please review the “Access, Data Portability and Deletion Rights” below.
If you would like to opt out of the sale of personal information, please see the instructions below.
California
In addition to the information described in our Privacy Policy, the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2021) (“CPRA”) also requires us to provide California consumers with some additional information related to how We collect, use, retain, and disclose personal information as well as describe additional rights, which are summarized below under “Your California Privacy Rights”.
Your California Privacy Rights
CPRA Privacy Notice Provisions for California Residents
This Privacy Notice for California Residents supplements the information contained in the Company’s general Privacy notice and applies solely to all consumers in the State of California (“Consumers” or “you”). We adopt this notice to comply with the CPRA “Consumers” has the meaning assigned to it in the CPRA.
INFORMATION WE COLLECT
Our Sites collect information as described within our general Privacy Policy. In particular, our Sites have collected the following categories of Personal Information from its Consumers within the last twelve (12) months:
|
Category |
Examples |
Collected |
|
A. Identifiers. |
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. |
We only collect the following: – Real Name – Postal Address -Telephone Number -Credit Card Information – E-mail Address |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
. |
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card information, debit card information, or any other financial information, medical information, or health insurance information.
Some personal information included in this category may overlap with other categories. |
We only collect the following:
– Real Name – Postal Address – Telephone Number – E-mail Address Credit Card or Debit Card Information |
| C. Protected classification characteristics under California or federal law.
. |
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | We only collect the following:
– Age (if over 16) |
| D. Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | NO
|
| E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO |
| F. Internet or other similar network activity. | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES – browsing or search history |
| G. Geolocation data. | Physical location or movements. | NO |
| H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | NO |
| I. Professional or employment-related information. | Current or past job history or performance evaluations. | NO |
| J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | NO |
| K. Inferences drawn from other personal information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | NO |
| L. Sensitive personal information | Social security, driver’s license, state identification card, or passport number, account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, or union membership, contents of an mail, email, and text messages unless the business is the intended recipient of the communication, genetic data, genetic data, Personal information collected and analyzed concerning health, Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation | NO |
We obtain the Personal Information listed above from the following categories of sources:
USE OF PERSONAL INFORMATION
We may use or disclose the Personal Information we collect for one or more of the purposes as outlined within the general Privacy Policy under “HOW DO WE USE YOUR PERSONAL INFORMATION?”
SHARING PERSONAL INFORMATION
We may share the Personal Information in accordance with the provisions of our general Privacy Policy under “SHARING YOUR PERSONAL INFORMATION”. Our disclosure or “Sale” of your Personal Information is subject to your right to “Opt-Out” of those Sales (see “Personal Information Sales Opt-Out and Opt-In Rights” below). “Sale” has the definition assigned to it in the CPRA. If We disclose Personal Information for a business purpose, We enter into a contract with the recipient that limits use of the Personal Information for the described purpose and requires the recipient to both keep that Personal Information confidential and not use it for other than for the described purpose.
We may share your personal information with the following categories of third parties:
(a) Service providers for purposes of purchases or for management of our Sites;
(b) governmental agencies, where required under subpoena or other legal requirement; and
(c) to entities as part of any merger or acquisition process.
DISCLOSURES OF PERSONAL INFORMATION FOR A BUSINESS PURPOSE
In the preceding twelve (12) months, any Personal Information the Company may have disclosed would be those Categories of Personal Information as identified in the chart under “Information We Collect” and solely for the purpose of product purchases or in response to Consumer questions.
Specifically, we disclose your Personal Information for a business purpose to our service providers.
SALES OF PERSONAL INFORMATION
In the preceding twelve (12) months, Company had not sold Personal Information.
YOUR RIGHTS AND CHOICES
The CPRA provides Consumers with specific rights regarding their Personal Information. This section describes your CPRA rights and explains how to exercise those rights.
| A) Access to Specific Information and Data Portability Rights |
You have the right to request that We disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability, and Deletion Rights” below), we will disclose to you:
(a) the categories of Personal Information we collected about you;
(b) the categories of sources for the Personal Information we collected about you;
(c) our business or commercial purpose for collecting or selling that Personal Information;
(d) the categories of third parties with whom we share that Personal Information; and
(e) the specific pieces of Personal Information we collected about you (also called a data portability request).
If we sold or disclosed your Personal Information for a business purpose, we will provide two separate lists disclosing which Personal Information was “sold” and which were only “disclosed” for a business purpose.
| B) Deletion Request Rights |
You have the right to request that We delete any of your Personal Information that We collected from you and retained, subject to certain exceptions. Once We receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability, and Deletion Rights” below), We will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
EXERCISING ACCESS, DATA PORTABILITY, AND DELETION RIGHTS
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either contacting us at http://privacy@thegiorgicompanies.com or by calling 800-535-9925.
You may also write us at the address provided in the general Privacy Notice under “CONTACT US”.
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
We cannot respond to your request or provide you with Personal Information if We cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
RESPONSE TIMING AND FORMAT
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If We require more time (up to 90 days), We will inform you of the reason and extension period in writing.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons We cannot comply with a request, if applicable. We will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically, it will be either in a written format using a Word, Excel or Access document or be provided in image format using Adobe .pdf or jpeg format.
We do not charge a fee to process or respond to your verifiable consumer request unless it would require an excessive effort to complete, is repetitive, or manifestly unfounded. If we determine that the request warrants a fee, We will tell you why we made that decision and provide you with a cost estimate before completing your request.
PERSONAL INFORMATION SALES OPT-OUT AND OPT-IN RIGHTS
If you are 16 years of age or older, you have the right to direct us to not sell your personal information at any time (the “right to Opt-Out”). Our policies regarding Personal Information of minors (under the age of 18) is specified within our general Privacy Policy under “CHILDREN’S PRIVACY”. We will not sell the Personal Information of consumers We actually know are less than 16 years of age unless we receive affirmative authorization (the “right to Opt-In”) from either the Consumer’s parent or guardian. Consumers who opt-in to personal information sales may opt-out of future sales at any time.
To exercise the right to “Opt-Out”, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page link: Do Not Sell My Information
Once you make an Opt-Out request, We will wait at least twelve (12) months before asking you to reauthorize Personal Information sales. However, you may change your mind and opt back in to Personal Information sales at any time by notifying us at http://privacy@thegiorgicompanies.com or by calling 800-535-9925.
We will only use Personal Information provided in an Opt-Out request to review and comply with the request.
NON-DISCRIMINATION
We will not discriminate against you for exercising any of your CPRA rights. Unless permitted by the CPRA, we will not: deny you goods or services; charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; provide you a different level or quality of goods or services; or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Consumer request metrics for calendar year 2023
We believe transparency is critical to maintaining a trusted relationship with our consumers. To that end, We are further enhancing our transparency with respect to the choices our consumers make regarding personal information. In this privacy transparency disclosure, we are providing metrics on certain requests we received from consumers across the United States during the 2023 calendar year, in compliance with the CCRA.
Requests to know: We didn’t receive any consumer requests to know personal information collected about them.
Requests to delete: We didn’t receive any consumer requests to delete their personal information.
Requests to opt out: We didn’t receive any requests to opt out of personal information.
Please note that our Savory Wild website through which we sell our products online uses an application providing for an automated option for removal of personal information of consumers browsing the website in California. Due to the nature if the information, we are unable to see a list of these removals.
OTHER CALIFORNIA PRIVACY RIGHTS
California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Sites that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please refer to the section “YOUR CALIFORNIA PRIVACY RIGHTS” within our general Privacy Policy.