Privacy Policy

1. Data Controller

The data controller is:

2. Personal Data Collected

We collect the following personal data:

• Contact Form Data: Name, email address and message sent through the contact form on our website.
• Visit Data: Page visited, IP address, browser user agent, referrer (source page). This data is automatically recorded during each site visit.
• Session Cookies: PHPSESSID to store language preference during browsing.

3. Purposes of Processing

Personal data is processed for the following purposes:

• To respond to contact inquiries and communicate with website visitors.
• To analyze site traffic to improve user experience and usability.
• To store user language preference for better navigation.
• To comply with any legal and regulatory obligations.

4. Legal Basis for Processing

• Contact Form: Explicit consent of the data subject (Article 6(1)(a) GDPR).
• Visit Data: Legitimate interest in analyzing and improving the website (Article 6(1)(f) GDPR).
• Session Cookies: Technical necessity for the functioning of the website (Article 6(1)(b) GDPR).

5. Data Retention

• Contact Form Data: Retained for 12 months after the last communication, unless accounting/tax obligations extend retention.
• Visit Data: Retained for 12 months for statistical and improvement purposes.
• Session Cookies: Automatically deleted at the end of the browser session.

6. Data Recipients

Personal data is not shared with third parties, except for:

• Technical vendors necessary for website operation (hosting provider).
• Public authorities, if required by law.

7. Rights of the Data Subject

In accordance with EU Regulation 2016/679 (GDPR), you have the right to:

• Access: Request access to your personal data.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request erasure of your personal data (right to be forgotten).
• Restriction of Processing: Request restriction of processing of your data.
• Data Portability: Request your data in a structured, commonly used and machine-readable format.
• Objection: Object to processing of your data for legitimate reasons.

8. How to Exercise Your Rights

To exercise any of the rights listed above, contact us at the email address:

info@grafikgroup.it

We will respond to your request within 30 days of receipt.

9. Data Security

We implement technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure or destruction. However, no method of transmission over the Internet is completely secure.

10. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. Changes will take effect immediately upon posting to the website. We recommend you review this page periodically.

11. Contact

For questions about this privacy policy, contact us: