Privacy Notice pursuant to Articles 13-14 GDPR 2016/679

Data Controller: GRAF SRL, Via Isonzo 19, 03100 Frosinone (IT)
Data Protection Officer / Contact: privacy.gdpr@graf.it

1. Purpose of Data Processing

Your personal data (identification, fiscal, and economic data) are processed for:

• Managing contractual relationships and fiscal obligations;

• Complying with legal obligations or requests from authorities;

• Exercising the controller’s rights (e.g., legal defence).

Data provided when subscribing to the newsletter may also be used for promotional and marketing purposes, including social media, statistics, surveys, and sending advertising materials.

2. Types of Data

• Common data: processed without consent for contractual and legal purposes;

• Special categories / judicial data: not processed;

• Data provided with explicit consent: used for newsletters, marketing, and promotional communications.

3. Retention Period

Data will be retained for the duration of the contractual relationship and up to 10 years after its termination for service purposes and legal obligations.

4. Methods of Processing

Data are processed using manual, IT, and telematic tools, ensuring security, integrity, and confidentiality.

5. Data Access and Communication

Data may be accessed by: directors, administrative staff, secretarial staff, accounting personnel, commercial staff, agents, and representatives.

Data will not be disseminated to unspecified third parties but may be communicated to:

• Public or private entities where required by law;

• Consultants and service providers, under confidentiality agreements;

• Partners for marketing purposes, with explicit consent.

6. Your Rights

Under Articles 15–21 GDPR, you have the right to:

• Access, rectify, update, or delete your personal data;

• Restrict processing or request anonymisation;

• Object to processing for legitimate reasons or for marketing purposes;

• Lodge a complaint with the Supervisory Authority.

You may exercise your rights at any time by contacting the Data Protection Officer at privacy.gdpr@graf.it.

Cookies

This website uses cookies to improve navigation and recognise returning users. Cookies do not contain personal identification but may store information related to the user.

Types of Cookies

• Navigation / Essential: required for site operation and login.

• Functional: remember cart items or preferences.

• Analytical: anonymised traffic analysis (e.g., Google Analytics).

• Marketing / Retargeting: used by third parties for displaying relevant ads.

Third-Party Cookies

Examples include: Google Analytics, social media buttons (Facebook, Twitter, LinkedIn), embedded content (YouTube, Vimeo).

Managing Cookies

You can disable or delete cookies through your browser settings. Instructions vary by browser (Chrome, Firefox, Safari, Edge). Third-party cookies can also be managed via the providers’ platforms.