Privacy policy

PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA

Related to browsing the website www.gmsignature.it

Società Grivola srl, with registered office in Breuil Cervinia, Via Carrel 57, VAT No. 01008590075 (hereinafter, the “Data Controller”), in its capacity as Data Controller, informs you pursuant to Art. 13 of Italian Legislative Decree no. 196 of 30 June 2003 (hereinafter, the “Privacy Code”) and Art. 13 of EU Regulation no. 2016/679 (hereinafter, the “GDPR”) that your personal identification data (first name, last name, company name, address, telephone number, email address, business activity, company size) provided through the website www.gmsignature.it will be processed for the following purposes:

Management of contact requests
Exclusively for the purpose of providing a formal response to questions submitted through the relevant contact forms, where available, or via email to the contacts listed in the dedicated section. The optional, explicit, and voluntary sending of emails to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the communication.

Your personal data will be processed both in paper and electronic form (where “processing” means the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2 of the GDPR, namely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data).

For the purposes described above, the data will be retained, unless the data subject explicitly requests their removal, for as long as necessary in relation to the legitimate purposes for which they were collected and, in any case, for no longer than 12 months, after which, if no longer necessary, they will be deleted. The data may be made accessible to employees and collaborators of the Data Controller in their capacity as persons in charge of processing and/or data processors and/or system administrators, whose list is kept and available for consultation at the registered office of the Data Controller.

Any subsequent purchase of products and services offered by the Data Controller will entail the provision of a new privacy notice specifying the types of processing carried out, the purposes thereof, whether the provision of data is mandatory for contractual purposes or to comply with applicable legal provisions, the data retention period, and the parties to whom the data may be disclosed.

RIGHTS OF THE DATA SUBJECT

As a data subject, you are granted the rights referred to in Art. 7 of the Privacy Code and Art. 15 of the GDPR.

Where applicable, you also have the rights set out in Arts. 16–21 of the GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

You may exercise your rights at any time by sending: