This privacy notice describes how the personal data of users who visit the website of GD Italia S.r.l. (hereinafter "GD Italia" or "Data Controller"), accessible at www.gditalia.it, is processed.
Data controller — GD Italia S.r.l., with registered office at Via Roma 42, 20121 Milan (MI), VAT no. 12345678901, email: privacy@gditalia.it.
Types of data collected — While browsing the site, the following are collected: browsing data (IP address, browser type, operating system, pages visited, access times), data voluntarily provided by the user through the contact forms (name, email, telephone, message), data collected through cookies and tracking technologies (see Cookie Policy).
Purposes of processing — Personal data are processed for the following purposes: (a) provision of the requested services and management of contact requests; (b) fulfilment of legal and regulatory obligations; (c) anonymous statistical analysis to improve the website and the services offered; (d) sending commercial and promotional communications, subject to the user’s explicit consent.
Legal basis — Processing is based on: the data subject's consent (Art. 6.1.a GDPR) for marketing purposes and non-essential cookies; performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) for handling requests; legal obligation (Art. 6.1.c GDPR) for tax and regulatory compliance; the legitimate interest of the Controller (Art. 6.1.f GDPR) for site security and aggregated statistical analysis.
Data recipients — Data may be disclosed to: IT and hosting service providers (Vercel Inc., Supabase Inc.); email service providers (Resend); analytics service providers (Sentry, Vercel Analytics); CRM service providers (Brevo). All providers are appointed as data processors pursuant to Art. 28 GDPR.
Non-EU data transfer — Some service providers are based in the United States. The transfer takes place on the basis of standard contractual clauses approved by the European Commission (Art. 46.2.c GDPR).
Retention period — Browsing data is kept for a maximum of 12 months. Data provided through the contact forms is kept for 24 months from the last interaction. Marketing data is kept until consent is withdrawn.
Rights of the data subject — In accordance with Articles 15-22 of the GDPR, users have the right to: access their personal data; obtain its rectification or erasure; restrict processing; object to processing; request data portability; withdraw consent at any time. To exercise these rights, write to: privacy@gditalia.it.
Right to lodge a complaint — Users have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Changes to this notice — This notice may be updated periodically. The date of the latest update is indicated at the top of the page.