Privacy Policy

TERMS OF USE 

This website serves as an information portal and does not constitute an offer to the public within the meaning of Article 1336 of the Civil Code. The information contained on this website is subject to change and cannot be relied upon as a basis for any legitimate expectation regarding the use of the products: the sole prevailing and applicable technical and legal reference is constituted by the official Technical Data Sheets (TDS) and Safety Data Sheets (SDS). The contractual relationship is established exclusively upon written acceptance and signature of the specific terms and conditions agreed between the parties.

PRIVACY POLICY

The purpose of this Privacy Policy is to describe how the website currently accessible at www.ggdesmac.com is managed with regard to the processing of the personal data of users/visitors who access it.

This notice is provided in accordance with current national legislation (Legislative Decree 196/2003, as amended and supplemented, and Legislative Decree 101/2018) and also in accordance with Article 13 of Regulation (EU) 2016/679 (hereinafter also referred to as the ‘General Data Protection Regulation’ or ‘GDPR’) to those who access the aforementioned website.

Users/visitors are invited to read this Privacy Policy carefully before providing any personal information and/or completing any electronic form on the website.

1. Data controller

The data controller is G&G DESMAC Srl (VAT No. 02345340687), represented by its current legal representative, with its registered office at Contrada Cocullo snc, 66026 Ortona (CH), administration@ggdesmac.com.

2. Fundamental principles

G&G DESMAC Srl attaches great importance to the privacy and confidentiality of the personal data of its website users. Below you will find information regarding the processing of personal data and the technical and organisational measures adopted to ensure compliance with current legislation.

3. Types of personal data processed, purposes and legal basis

The subject matter of data protection law is personal data. Personal data refers to any information relating to an identified or identifiable natural person, e.g. personal details and contact details. 

a) For information purposes only:

If you use our website for information purposes only, the following data is collected, stored and processed:

  1. the IP address of the requesting computer
  2. the date and time of access
  3. the name and URL of the file accessed
  4. the browser used
  5. the number of bytes transmitted
  6. the status of the website request
  7. the session ID
  8. the referrer

The purpose of collecting and processing this data is to enable the use of our website, to ensure the ongoing security and stability of the system, and to facilitate the technical administration of the network infrastructure and the optimisation of our website (legal basis: Article 6(1), first sentence, point (b) of the GDPR). 

b) data provided by the user:

The optional, explicit and voluntary sending of messages to contact addresses, private messages sent to official social media profiles, and the completion and submission of electronic forms, entail the collection of the sender’s contact details which are necessary to respond to enquiries as well as any other personal data included in the communications. This information is stored and processed within G&G DESMAC Srl’s CMS (Content Management System) for the time strictly necessary to fulfil the requests, in accordance with the principle of data minimisation. Processing for the purposes of responding to enquiries or recruitment is carried out in accordance with Article 6(1)(b) of the GDPR; processing for promotional or informational purposes, on the other hand, is subject to the provision of express, freely given and revocable consent, which is given by ticking the relevant checkboxes on the CONTACTS form.

4. Transfer of data to third parties

Your personal data will only be disclosed to third parties if this is necessary for the performance of the contract and the settlement of accounts or a claim (legal basis: Article 6(1), first sentence, point (b) or (f), Article 9, (2)(h) or (f) of the GDPR) or with your consent (legal basis: Article 6(1), first sentence, point (a), and Article 9(2)(a) of the GDPR).

5. Methods of processing and data retention period

Data processing is carried out using automated means (e.g. electronic procedures and media) and/or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, in any event, in accordance with the relevant regulations in force.

Personal data will be retained for the period strictly necessary to fulfil the specific purposes of the processing and, in particular:

– for the data referred to in Article 3a, for the time necessary to carry out the specified activities, unless any cybercrimes against the website are investigated;

– for the data referred to in Article 3b, for the time necessary to provide the requested services or to respond to enquiries, unless investigations into criminal offences are required.

6. Hosting

The User is informed that the website’s technological infrastructure is managed by Aruba SpA, an operator with its registered office and data centres located in Italy (EU). Aruba acts as a Data Processor in relation to the provision of hosting services and the physical storage of data (databases and archive files). This arrangement ensures that the personal data provided, including CVs and communications submitted via the form, are not transferred outside the EU. The Data Controller remains responsible for the administration and logical configuration of the portal, ensuring that access to the hosted data is restricted exclusively to authorised personnel.

7. Rights of data Intersted

  • Users may exercise the following rights:
  • the right to receive, free of charge, information about the personal data processed in relation to you, a copy of such data, and information regarding its source and recipient, the purpose of the data processing and the retention period (Article 15 of the GDPR);
  • where applicable, the right to have inaccurate or incomplete data rectified (Article 16 of the GDPR), to have such data erased (Article 17 of the GDPR) or to have the processing of such data restricted, Article 18 of the GDPR);
  • objection to processing, insofar as it is carried out on the basis of a legitimate interest of the data controllers (Article 6(1), first sentence, point (f) of the GDPR) and by providing grounds that preclude such processing (Article 21 of the GDPR)
  • the right to request that the data you have provided be transferred to you or to another controller (Article 20 of the GDPR).
  • If you have given us your consent to the processing of your personal data, you may withdraw it at any time with effect for the future. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected.
  • To lodge a complaint pursuant to Article 77 of the GDPR with the Data Protection Authority, which can be contacted using the contact details provided on the website http://www.garanteprivacy.it. The aforementioned rights may be exercised by sending a specific request to the Data Controller by the contact channels indicated in Article 1 of this policy, or by the DPO’s email to the following address: federica.digiandomenico@ggdesmac.com.
  • Requests relating to the exercise of these rights will be dealt with without undue delay.

 

Last updated 13 May 2026