privacy & cookie policy

1. Data Controller

The Data Controller of personal data is GATTUSO CONTRACT S.R.L., with registered office at Viale della Scienza 38, 36100 Vicenza (VI), Italy — VAT and Tax Code 04067370249 (EU VAT number IT04067370249), registered with the Vicenza REA (Economic and Administrative Index) under no. VI-376355.

Certified email (PEC): designfornituresrl@legalmail.it — Telephone: +39 0444 023 214.

The contact person for the protection of personal data is Arianna Gattuso, legal representative of the Controller. To exercise your rights or for any information about the processing, you may write to maison@gattusocontract.com.

2. Legal basis for processing

The processing of your data is based, depending on the purpose, on different legal grounds (Art. 6 GDPR):

1. Consent — given through the cookie banner and use of the website. Consent is freely given, specific and revocable at any time, without prejudice to the lawfulness of processing carried out before its withdrawal.

2. Legitimate interest — to ensure the security of the website and to produce statistics in aggregate form, in compliance with the rights and freedoms of the data subject.

3. Purposes of processing

Personal data are processed for the following purposes:

1. Production of statistics in aggregate form on the use of the website, in order to understand its performance and improve its content.

2. Security of the website and prevention of unlawful activities, such as spam and fraud.

3. Ancillary activities supporting the operation of the website, provided through third-party service providers.

4. Data collected

The website collects two categories of data:

1. Data collected automatically — IP address, browser type, connection provider (ISP), date and time of the visit. These data are acquired by the IT systems during the normal operation of the website.

2. Data provided voluntarily — the name and email address that the user provides by completing and submitting the contact forms on the website.

5. Place of processing

Processing connected to the website's services takes place at the Controller's premises and is carried out by authorised personnel. Some processing operations may be carried out, on behalf of the Controller, by the following parties:

1. EDGE Studio (VAT no. IT04135970244) — external data processor, for the development and technical management of the website.

2. Webflow, Inc. — hosting provider of the platform, adhering to the EU-U.S. Data Privacy Framework.

6. Data retention period

Data are retained for the time strictly necessary to achieve the purposes for which they are collected:

1. IP addresses and technical data for security purposes — approximately 30 days.

2. Statistical data (analytics) — approximately 24 months, kept in aggregate form.

At the end of the indicated periods, the data are deleted or irreversibly anonymised.

7. Disclosure of data to third parties

Personal data are neither disseminated nor disclosed to third parties, except where disclosure is required by a legal obligation or requested by an order of the authorities, or where it is necessary for the provision of the service expressly requested by the user.

8. Transfer of data to non-EU countries

Through social plugins, tracking pixels and Google Analytics, some data may be processed by parties established outside the European Union, in particular Google, Meta and Microsoft (LinkedIn).

Such transfers take place in compliance with the safeguards provided by the GDPR, on the basis of the adequacy decisions of the European Commission and the providers' adherence to the EU-U.S. Data Privacy Framework.

9. Security measures

The Controller adopts appropriate technical and organisational measures to ensure lawful and fair processing and to protect data from unauthorised access, loss or unlawful use. In particular, the website uses SSL/HTTPS encryption for data transmission and provides for controlled access reserved to authorised personnel only.

10. Rights of the data subject

As a data subject, you may exercise at any time the rights provided by Articles 15-22 of the GDPR:

1. The right of access to your personal data and to information about its processing.

2. The right to rectification, erasure ("right to be forgotten") and restriction of processing.

3. The right to data portability and the right to object to processing.

4. The right to withdraw consent at any time and to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

To exercise your rights you may write to maison@gattusocontract.com or, via certified email (PEC), to designfornituresrl@legalmail.it.

11. Cookie Policy

Definitions

Cookies are small text files that the websites visited send to the user's device, where they are stored to be retransmitted to the same websites on the next visit. Among other things, they make it possible to recognise the device, store preferences and collect information on the use of the website.

Types of cookies

1. Technical cookies — necessary for the proper functioning of the website; they do not require the user's consent.

2. Profiling cookies — used to track browsing and offer content in line with preferences; they require the user's consent.

3. Third-party cookies — installed by domains other than that of the website, managed by their respective controllers.

Third-party cookies

The website integrates social network plugins and pixels, which may install third-party cookies. For details of the processing and for opt-out, please refer to the privacy policies of the respective providers:

1. Meta (Facebook / Instagram) — privacy policy · opt-out.

2. LinkedIn (Microsoft) — privacy policy · opt-out.

Analytics cookies

The website uses Google Analytics to collect statistical information in aggregate form. You can disable the collection of your data by Google Analytics by installing the browser add-on available on the opt-out page: https://tools.google.com/dlpage/gaoptout.

Cookie duration

Cookies may be session cookies, automatically deleted when the browser is closed, or persistent cookies, which remain stored on the device until their expiry or their removal by the user.

Managing cookies

You can manage your cookie preferences directly from the banner on the website and, at any time, from your browser settings. Below are the official links for managing cookies in the main browsers:

1. Google Chrome — support.google.com/chrome/answer/95647

2. Mozilla Firefox — support.mozilla.org

3. Microsoft Edge — support.microsoft.com

4. Opera — help.opera.com/en/latest/web-preferences

5. Apple Safari — support.apple.com/en-us/guide/safari