سياسة الخصوصية

1. Data controller

The data controller is GS Marmi Srl, with registered office at Via Alfio Maggiani 143, 54033 Carrara (MS), Italy, VAT no. IT01355870450, in the person of its legal representative pro tempore.

For any question about the processing of your data or to exercise your rights, write to info@gsmarmi.com or to the registered office. GS Marmi has not appointed a data protection officer (DPO), as it is not required to.

2. Browsing the website

As with any website, the hosting provider's systems record the technical data needed to serve the pages and protect them from abuse: IP address, date and time of the request, page requested, browser type. This data is used only for the operation and security of the site (legitimate interest, Art. 6(1)(f) GDPR), is not used to identify visitors, and is kept for the period set by the hosting provider, unless needed to investigate computer crimes.

Visit statistics: only if you accept them in the cookie banner, on the website and on the showroom's public pages (booking and access request) we use Google Analytics 4 (Google Ireland Ltd.) to learn, in aggregate form, how many people visit them, from which countries, which pages they view and how many appointment requests, online showroom access requests and newsletter subscriptions are sent. We never send Google names, emails or other form data. Google Analytics 4 does not store full IP addresses; advertising features are disabled. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from “Cookie preferences” at the bottom of every page. Data may be transferred to the United States under the EU-US Data Privacy Framework and the standard contractual clauses.

Map: the Contact page shows the showroom's location with an OpenStreetMap map. To draw it, your browser downloads the map images from the OpenStreetMap Foundation's servers, which receive your IP address; no cookies are set.

3. Availability newsletter

If you subscribe to the newsletter we collect your full name, email address and the language of the site, together with the date of the request and of the confirmation. The subscription is only valid once you have confirmed the link received by email (double opt-in).

We use this data to periodically send you the availability of Portoro blocks and slabs and news about GS Marmi. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time using the link at the bottom of every email or by writing to us; withdrawal does not affect messages already sent.

Your data is kept for as long as you are subscribed. After you unsubscribe we keep only your email address in a suppression list, to make sure we do not write to you again.

4. Appointment and contact requests

When you request an appointment (showroom visit, WhatsApp video call or phone call) we collect the data you enter in the form: full name, company or studio, email, phone, country, project details, approximate square metres and message. We use it to contact you, offer you available times, schedule the appointment and send you the confirmation with a calendar invitation.

The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). We keep this data for 24 months from the last contact; if the request leads to an order, the data follows the retention periods for business relationships (section 6).

If you choose a video call, we will call you on WhatsApp at the number you provided: for that communication WhatsApp (Meta Platforms Ireland Ltd.) processes data as an independent controller, under its own privacy policy.

5. Online showroom (online stock)

To access the online showroom, reserved for trade professionals, we collect the data in your access request: company, name, email, phone, country and message. If the request is approved we create an account with your name, email and password (stored only in encrypted form) and record your logins and the quote requests you send, with the slabs or blocks selected.

The legal basis is pre-contractual measures and the performance of the contract (Art. 6(1)(b) GDPR) and, for access security, our legitimate interest (Art. 6(1)(f) GDPR). The account remains active until you ask us to close it or it is deactivated; quote requests that do not lead to an order are kept for 24 months.

6. Customers and legal obligations

If you become a customer, we process the data needed for quotes, orders, transport documents, invoices and payments, to perform the contract (Art. 6(1)(b) GDPR) and to comply with tax and accounting obligations (Art. 6(1)(c) GDPR). These documents are kept for 10 years, as required by Italian law (Art. 2220 of the Civil Code).

We may send customers information about products similar to those purchased using the email address provided (Art. 130(4) of Legislative Decree 196/2003), unless you object, which you can do at any time, including via the link in every message.

7. Whether providing data is mandatory

Fields marked as mandatory in the forms are necessary to handle your request: without them we cannot subscribe you to the newsletter, schedule the appointment or give you access to the online showroom. All other fields are optional.

8. Who processes the data

Data is processed by authorised and trained GS Marmi staff, using IT tools and appropriate security measures. It is never published or sold. It may be processed on our behalf, as data processors (Art. 28 GDPR), by the providers of our technical services:

• Aruba S.p.A. (Italy): website hosting, online showroom and management system servers, email;
• Resend Inc. (United States): backup email delivery service; the transfer is based on the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission;
• Google Ireland Ltd.: visit statistics with Google Analytics 4, only with your consent;
• consultants and professionals (such as our accountant) for legal obligations, to the extent necessary.

9. Where the data is stored

Data is stored on servers located in Italy. Transfers outside the European Union only concern the possible delivery of emails through the backup service and, if you accept them, Google Analytics statistics, with the safeguards provided by Articles 45 and 46 GDPR.

10. Your rights

At any time you can ask GS Marmi, by writing to info@gsmarmi.com, for:

• access to your data and a copy of it (Art. 15);
• rectification of inaccurate or incomplete data (Art. 16);
• erasure, where applicable (Art. 17);
• restriction of processing (Art. 18);
• portability of the data you provided (Art. 20);
• objection to processing based on legitimate interest and to marketing communications (Art. 21);
• withdrawal of consent, without affecting processing already carried out (Art. 7(3)).

11. Complaints

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

12. Minors

The services on this site are intended for companies, professionals and adults. We do not knowingly collect data from children under 14.

13. Changes

This policy may be updated: the date of the latest update is shown at the top. Significant changes will also be communicated to newsletter subscribers.