This page describes the website management procedures for processing the personal data of users who consult it.

POLICY pursuant to Article 13 of the EU Regulation 2016/679 (GDPR) on personal data protection

Data Controller

Data Controller: Sergio Grasso Srl
VAT Reg. No. and Tax ID 00844670232
Data Processor: Monica Grasso
Email: info@sergiograsso.it
Address and registered office: Via San Nicolò, 24
37015 Sant’Ambrogio di Valpolicella – Monte Verona Hamlet – Italy
Tel. 045 7760133

In accordance with the provisions of EU Regulation 2016/679 “European Union Data Protection Regulation” (hereinafter the “GDPR”), as the “Data Controller”, Sergio Grasso S.r.l. is informing you that processing shall be done by respecting the principles of lawfulness, correctness, transparency, necessity and minimisation whilst safeguarding the privacy and rights of data subjects.
You assume responsibility for the personal details of third parties supplied, published or shared through this Website, guarantee that you have the right to disclose them, and release the Data Controller of any responsibility towards third parties.

Data collected

On this Website a form can be found at the URL: https://www.sergiograsso.it/en/contacts.html to give you the chance to ask us to contact you.
The details collected on it are:

• First name
• Surname
• Telephone number
• Email address
• Text of the message or request
• Consent to processing of personal data

System and maintenance log

For necessities tied to operation and maintenance, this Website and any third-party services it uses could collect system logs, i.e., files that record interactions and can contain personal data such as your IP address for example.

How they are collected

Data given by you are only collected because you chose to provide them when you complete the form or contact us email box found on this site.
Your data can only be processed after obtaining your consent. You can give your consent after reading this notice by ticking the boxes found on the form of this Internet site.

Log files are collected automatically by the server the Website is hosted on.

Where they are stored

The data you provide are not stored on the Website but at Sergio Grasso S.r.l. on magnetic support or on hard copy. Backup copies may be kept for redundancy and safety reasons elsewhere or on online filing systems such as cloud storage.

Your personal data could be transferred to a different country than the one you live in. For further information, you can contact the Data Controller.

Log files are stored on the server that hosts our Website and on backup copies of the same.

Why they are processed

The data received shall be processed for these purposes:

• for replying to any requests and/or communications;
• for fulfilling obligations prior to or after entering into a contract, for accounting and tax obligations if necessary;
• for fulfilling legal obligations, and complying with European Union legislation and orders of the Authorities;
• for exercising the rights of the Data Controller, such as the right to defence in court.

Log files are collected and stored for security purposes (Art. 6, paragraph 1, point F of the GDPR).

Your data are collected to enable the Data Controller to provide its services, and for the following purposes: statistics, interaction with social networks and external platforms, registration and authentication, viewing contents of external platforms, to contact you, handle contacts and send messages.

In addition to the above purposes, your data may be processed in the following services:

Direct contact

By completing the website form with your data, you give your consent for us to contact you to respond to your requests for information you specified in the text box.

Newsletter

MailChimp (The Rocket Science Group LLC)
MailChimp is a newsletter management service that is used for informing users like yourself, who consented to receiving the newsletter, about news, events, information and promotions.
So as to generate reports, the service could collect data concerning interaction with email messages received such as: IP address, the date and time when the email message was opened and clicks on any links contained.

Personal data collected: email address
Place of processing: USA – Privacy Policy The subject adheres to the Privacy Shield

Statistics

Services that monitor user traffic and collect browsing preferences are utilised on our Website.

Google Tag Manager (Google Inc.)
Google Tag Manager is a statistical service provided by Google Inc.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Google Analytics (Google Inc.)

Google Analytics is a traffic monitoring and analysis service that generates statistics and reports on use of our Site and your browsing and viewing preferences.
For respecting your privacy, collected IP addresses are made anonymous by hiding a large portion of them and preventing them from being associated with other data so as to identify you, even indirectly.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy – Opt Out

Viewing external platform contents

On some pages of our Website it is possible to view contents such as fonts, film footage, photos, etc. hosted on external platforms.

It is possible that even if you do not use these services, they gather traffic data about the pages they are inserted on.

Google Fonts (Google Inc.)
It is a font display service managed by Google Inc., enabling this Site to use them on its pages.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

YouTube Video Widget (Google Inc.)
It is a video viewing service managed by Google Inc., enabling this Site to integrate them into its pages.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Instagram Widget (Instagram Inc.)
It is an image viewing service managed by Instagram Inc., enabling this Website to integrate these contents into its pages.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Vimeo Video (Vimeo LLC)
It is a video viewing service managed by Vimeo LLC, enabling this Site to integrate videos into its pages.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Google Maps (Google Inc.)
It is a map viewing service managed by Google Inc., enabling this Site to integrate them into its pages.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Interaction with social networks and external platforms

From this Website it is possible for you to interact with some social networks or external platforms. Data and information exchanged by you with these platforms are subject to their respective privacy policies.

We advise you to check them beforehand by clicking on the links provided below.

Facebook Like button and social network widgets (Facebook, Inc.)
The Facebook “Like” button and social network widgets enable you to interact with the social network of Facebook Inc.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Twitter Tweet button and social network widgets (Twitter Inc.)
The Twitter “Like” button and social network widgets enable you to interact with the social network of Twitter Inc.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Google Plus Button (Google Inc.)
The Google+ “+1” button and social network widgets enable you to interact with the Google+ social network of Google Inc.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

Protection from spam

This site uses a service provided by Google Inc. to protect you from spam.

Google reCAPTCHA (Google Inc.)
It is an anti-spam service provided by Google Inc.

Personal data collected: Cookies and browsing data
Place of processing: USA – Privacy Policy

The amount of time they are kept

Data collected shall be kept for the following length of time:

• Data collected for fulfilment of contracts are kept for the whole term of the contract and for 10 years after its conclusion, except for cases in which storage for an additional period is required for any disputes, requests by the concerned authorities or in accordance with applicable legislation;
• data collected for legal purposes are stored for the prescribed legal term for each type of data;
• data collected for marketing purposes are stored for the duration of the relationship, and for 24 months after conclusion of the same:
• log files are stored on the server that hosts our Website and are periodically deleted by automated procedures.

How they are kept secure

For managing data and log files, certain security measures of an organisational, technical and informative type provided by Articles 24 et seq. of the GDPR have been taken to guarantee secure access and to safeguard information from the risk of accidental loss or destruction.

These measures comprise but are not limited to update of operating systems, use of complex passwords and periodic password changes, use of updated antivirus software, use of firewall, specific policies for storing backup copies and for restoration of data and system availability and any other necessary software or hardware instrument.

For taking these measures, Sergio Grasso S.r.l. may use some external services chosen independently for their high standards of quality and reliability.

Apart from the Data Controller, in some cases, others involved (administrative, commercial, marketing and legal personnel, system administrators), as well as external subjects (such as external technical service providers, courier services, hosting providers, IT companies, communications agencies) appointed if necessary by the Data Controller, may have access to the data. You may ask the Data Controller for an updated list of Data Processors.    

Checking data and the right to be forgotten

As the data subject, you can send a request at any time, to the email address info@sergiograsso.it, to check the personal data you provided and to exercise the rights provided by legislation in force, particularly the right to access, correct, erase, restrict and block processing.

If need be, you can file a complaint to the Data Protection Authority.

It is not possible to erase data if the law or provisions force us to keep them or if erasure can cause problems of a technical or IT nature tied to integrity of the databases, for example, data will be turned into anonymous form so as to make them unavailable to the Data Controller.

Use of cookies

When you visit our site, a small amount of information in small text files called cookies are uploaded to devices used and saved on your Internet browser.

Some information on management of cookies can be found on this page: https://www.sergiograsso.it/en/cookie-policy.html

Links to external sites

This notice does not apply to any other external Website visited after clicking on any links found on this site. You are the one who choose to browse these sites. Consequently, Sergio Grasso S.r.l. shall not be held responsible for any obligations of other owners or administrators of such sites or Internet portals regarding the contents of these sites or for taking adequate protection measures of personal data provided or concerning management of cookies.