Privacy notice

1. Data controller and contact details

The data controller is Gravinese Industrie Grafiche S.r.l., Via Lombardore 276/F, 10040 Leinì (TO), Italy. VAT / tax identification number 02868060019 · REA TO-631548.

For questions about this notice or to exercise your rights, write to preventivi@tipografiagravinese.it or to the postal address above, specifying “Privacy request”. Telephone: +39 011 9980654.

2. Personal data we process

• Browsing data. The server receives the IP address and technical information needed to deliver pages, such as the requested resource, date and time, browser information and response status. The hosting service may record these in technical and security logs.
• Enquiries and quotations. Company or publisher, contact name, email address, project title and any optional phone number, printing specifications, delivery information and notes you provide. Emails may also contain attachments and other information you choose to send.
• Abuse prevention. The quotation service uses a pseudonymous identifier derived from the IP address and the time of the latest submission attempt to limit repeated requests. This identifier is stored on the server, not in a browser cookie.

Send only information relevant to your printing project. Please do not include health information, identity documents or other sensitive personal data in the form.

3. Purposes and legal bases

• Answering enquiries and preparing quotations: steps taken at your request before entering into a contract, or performance of a contract to which you are a party (Article 6(1)(b) GDPR). For contacts acting on behalf of a company, our legitimate interest in handling business communications and the requested commercial relationship applies (Article 6(1)(f)).
• Operating and protecting the website: our legitimate interest in delivering a secure service, preventing spam and abuse, and investigating technical problems (Article 6(1)(f)).
• Legal obligations and protection of rights: compliance with applicable legal obligations (Article 6(1)(c)) and, where necessary, our legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f)).

Sending a request does not subscribe you to a newsletter or authorise advertising. The website does not perform profiling or make automated decisions producing legal or similarly significant effects.

4. Required fields and how the form works

Providing data is voluntary. Fields marked with an asterisk are necessary to submit a quotation request through the form; without them we cannot handle the request through this channel. Other fields are optional. You can also contact us by email or phone.

On tipografiagravinese.it, selecting “Send your request” transmits the information to our server and then to our quotation mailbox. The form does not create a customer account or save requests in a website database. Information remains in the email correspondence used to handle the enquiry. The privacy checkbox records that you have read this notice; it is not consent to marketing.

“Open email” opens your own email application: the message is sent only when you send it there. “Save summary” downloads a text file onto your device. The summary is held in the page’s memory and is not saved by the site in localStorage or sessionStorage.

5. Who may receive the data

Data may be accessed by authorised company personnel handling enquiries and by providers of hosting, email, technical support and professional services, to the extent necessary for their tasks. The public website hosting and the quotation mailbox are provided by Aruba S.p.A. Providers processing data on our behalf act as processors under Article 28 GDPR; providers with their own statutory or independent purposes act as separate controllers for those activities.

Data may also be communicated to competent authorities when legally required. Contact details and project requests are not published or sold. You can request further information on relevant recipients by contacting us.

6. Retention criteria

• Requests and quotations: for the time needed to reply, prepare the quotation and complete the related exchanges. Any further retention is assessed according to whether negotiations remain active, a contract is concluded, or specific legal obligations or protection of rights require it. Unnecessary information should not be retained solely because it was received by email.
• Contractual and administrative records: if a commercial relationship follows, for the retention periods required by the applicable civil, accounting and tax rules and, where relevant, for the duration of a dispute. This does not mean that every website enquiry is automatically kept for the same period.
• Technical and security records: retention is limited according to the operational, diagnostic and abuse-prevention purposes, taking into account the hosting service’s settings and any specific incident or legal preservation requirement. You can ask us for information about the records relating to your interaction.

When the applicable retention purpose ends, data must be deleted or made anonymous, subject to any justified legal preservation requirement.

7. Processing methods and international transfers

Data are processed using electronic tools and, when necessary, paper records, with access limited according to the tasks performed. The public website uses HTTPS. Its pages do not embed advertising networks, external fonts, interactive maps or third-party analytics.

Aruba states that its hosting and email services are operated in its Italian data centres. Provider information.

Any transfer of personal data outside the European Economic Area in the delivery of the services must comply with Chapter V GDPR, using an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. You can contact us for information about any relevant transfer and to obtain a copy of the applicable safeguards.

8. Your rights and complaints

Subject to the conditions in Articles 15–22 GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal; the purposes described above do not rely on marketing consent.

Send your request to preventivi@tipografiagravinese.it. We may ask for information proportionate to verifying your identity. We will respond within one month of receipt; where permitted by the GDPR, this may be extended by up to two further months, with an explanation within the first month.

If you believe your data are being processed unlawfully, you can lodge a complaint with the Garante per la protezione dei dati personali or the competent supervisory authority, without prejudice to judicial remedies.

9. Cookies, external links and updates

For details of browser storage and external services, read our cookie notice. External websites reached through links apply their own privacy notices. This notice concerns tipografiagravinese.it and its www version; it does not govern access to private review platforms.

We update this notice when the website’s services or relevant processing change. The date at the top identifies the version you are reading.