Privacy e Cookie Policy

COOKIE POLICY

GR Pubblicità S.r.l., as Data Controller, informs that this website uses COOKIES, i.e., technologies designed to improve the user’s browsing experience.

This policy aims to inform the user about the characteristics, purposes of cookies, and how to disable them via the web browser.

This Cookie Policy applies exclusively to the GR Pubblicità website; however, it may contain links to other websites that have their own cookie policies, which may differ from those adopted by the Company. The owner of www.grgroup.srl is not responsible for the cookie policies of such external sites nor for any damages they may cause to the user.

WHAT ARE COOKIES?

Cookies are small text files sent by the websites visited by the user in the form of information packets and stored on the device used to browse the Internet. These are automatically sent back to the server on every subsequent access to the same site. Cookies enable a website to remember the user’s actions and preferences (e.g., login data, language, font size, etc.) so that they do not need to be re-entered each time the user returns or navigates between pages.

Cookies are used for authentication, session monitoring, and storing information regarding user activities on the website. They may also contain a unique identifier code to track user navigation within the site for statistical or advertising purposes.

During browsing, the user may receive “first-party” cookies installed directly by the site operator, as well as “third-party” cookies installed by entities other than the site operator.

Some functions cannot be performed without cookies, which are technically necessary to ensure proper site operation.

TYPES OF COOKIES

A website may use various types of cookies, alone or combined, classified according to the Italian Data Protection Authority and the European Article 29 Working Party (EU Regulation 2016/679). Cookies differ based on their features and functions and may remain on the user’s device for varying durations.

• Session cookies: automatically deleted when the browser is closed.
• Persistent cookies: remain until expiration or user deletion.

Under current law, user consent is not always required for cookies. Specifically, technical cookies — used to transmit communication over electronic networks or strictly necessary to provide a service explicitly requested by the user — do not require consent. These include essential cookies needed for website functionality and some anonymized first- and third-party analytics cookies.

Conversely, profiling cookies — used to create user profiles and deliver targeted advertising — require prior user consent.

COOKIES USED ON www.grgroup.srl

We use cookies to ensure proper website functionality and to monitor user behavior. Users may choose to accept all or part of these operations.

The cookies used by GR Pubblicità are detailed below, including type, name, duration, source, and purpose:

TECHNICAL COOKIES

• Ensure normal navigation and basic site functions, including access to protected areas.
• Their use is permitted without user consent to safeguard the legitimate interest of the Company.
• These cookies are mandatory and cannot be disabled.

COOKIES REQUIRING CONSENT

The installation of this type of cookies requires the visitor’s explicit consent, obtained through the mechanisms described in the banner displayed upon accessing the website. If consent is not given, the basic functionalities of the website or access to the information contained therein will in no way be restricted, nor will the services provided by the Company be affected.

• Analytical Cookies: These cookies help the website owners understand how visitors interact with the site by collecting and reporting information anonymously.

HOW TO DISABLE COOKIES VIA BROWSER SETTINGS

Most browsers are set to accept cookies by default but allow users to control or disable them through their settings. Please note that to ensure an optimal browsing experience, it is recommended to keep cookies enabled; without them, some website functionalities may be limited. Analytical cookies can always be disabled if preferred.

Below are links to guides for managing cookies on major browsers:

• Internet Explorer: http://windows.microsoft.com/en-us/windows7/block-enable-or-allow-cookies
• Safari: http://support.apple.com/kb/PH19255
• Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Additionally, users can review and modify their cookie consents at any time by accessing the Cookie Settings Panel via the blue icon located at the bottom left of the webpage.

METHODS AND CONTACTS FOR EXERCISING PRIVACY RIGHTS

Within the limits established by applicable law, data subjects have the right to request from GR Pubblicità S.r.l., at any time, access to their personal data, rectification or deletion thereof, objection to their processing, restriction of processding, and to obtain their data in a structured, commonly used, and machine-readable format. They also have the right to withdraw consent previously given (Articles 15 et seq. of EU Regulation 2016/679).

Requests to exercise these rights will be acknowledged within 30 days, with a possible extension of another 30 days as provided by law. In cases where data processing violates the aforementioned Regulation or related national provisions, data subjects have the right to lodge a complaint with the Supervisory Authority or seek legal remedies.

To exercise these rights, data subjects may contact:
Data Controller:
GR Pubblicità S.r.l.
Registered office: Via Picasso, 22/24 – 20025 Legnano (MI), Italy
Email: info@grgroup.mi.it
Phone: +39 0331 577547

CHANGES TO THE COOKIE POLICY

New sector regulations, ongoing reviews and user service update may require modifications to the terms and conditions described in this Policy. Therefore, this document may be updated over time, Users are encouraged to consult this page periodically.

PRIVACY POLICY

Welcome to our website www.grgroup.srl

GR Pubblicità S.r.l. acknowledges the importance of maintaining the confidentiality, integrity, and availability of personal data. For this reason, we invite you to carefully read this Privacy Policy, which applies whenever you access and navigate the website and/or make use of the services offered.

This Policy outlines the methods through which we process the personal data of users collected via the website and is provided to individuals interacting with the services accessible electronically via the website, pursuant to Article 13 of EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 as amended.

Please note that this Privacy Policy applies exclusively to this website and not to any other websites that may be accessed through external links, which fall outside the domain of GR Pubblicità S.r.l.

1. DATA CONTROLLER CONTACT INFORMATION

• Data Controller: GR Pubblicità S.r.l., with registered office at Via Picasso 22/24 – ZIP Code 20025, Legnano (MI), Italy. Email: info@grgroup.mi.it – Tel.: +39 0331 577547

2. TYPES OF DATA PROCESSED

Automatically Acquired Data – Browsing Data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.

This category includes IP addresses or domain names of the devices used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (success, error, etc.), and other parameters related to the user’s operating system and IT environment.

To ensure the proper functioning of the site, cookies may be used, as detailed in the Cookie Policy.

Data Voluntarily Provided by the User

The Data Controller collects and processes personal data voluntarily and knowingly provided by the user through the website in the “Contact Us” or “Request PDF Catalogue […]” sections. These communication methods involve the completion of a personal data collection form.

Voluntary messages sent to contact addresses, direct messages on GR Pubblicità’s social media profiles/pages (where applicable), and form submissions via the website involve the acquisition of the sender’s contact details and any personal data included in the communications.

Redirects to External Websites

The website contains direct links to third-party sites (e.g., Facebook, Instagram, LinkedIn, Phygitalenterprise).

For information regarding the purposes, types, and methods of data collection, processing, use, and storage by such third parties, as well as how to exercise your rights, please refer to each respective site’s privacy policy.

3. PURPOSES AND LEGAL BASIS FOR PROCESSING

The user’s personal data are processed without the need for explicit consent, as the processing is necessary for the execution of pre-contractual or contractual measures or for the legitimate interest of the Company in ensuring optimal and secure management of its website (Art. 6(1)(b) and (f) of EU Regulation 2016/679). Specifically, the data may be processed to:

1. a) Allow users to directly contact GR Pubblicità and request advice or information regarding products and solutions;
2. b) Enable users to receive specific documentation regarding products and solutions via email, upon completion of the catalogue request form;
3. c) Allow users to be contacted by a GR Pubblicità consultant to discuss specific needs;
4. d) Access GR Pubblicità’s social media profiles through redirects from the corporate website;
5. e) Monitor and optimize the functionality of the website services;
6. f) Collect system logs, i.e., files that record interactions, for operational and maintenance purposes;
7. g) Use the data for legal purposes or in preparation for potential legal claims to protect against misuse of the website or related services.

With the user’s prior explicit consent (Art. 6(1)(a) GDPR), data will also be processed for:

1. h) Marketing and communication purposes: to allow users to receive regular informative communications and updates (newsletters) from the Company.

Furthermore, subject to prior user consent, personal data may be collected via cookies as described in the Cookie Policy, for the following purpose:

1. Analytics: to help the website owner understand how visitors interact with the site by creating personal usage profiles based on user behavior.

4. NATURE OF DATA PROVISION AND CONSEQUENCES OF FAILURE TO PROVIDE DATA

• Contact requests / information inquiries: The provision of personal data is necessary to send and manage the message. Failure to complete required fields will prevent submission.
• Catalogue request: The provision of data is necessary to send the requested catalogue. Failure to provide data will prevent processing of the request.
• Consultation request: Data provision is necessary to be contacted by a GR Pubblicità consultant. Failure to complete required fields will prevent further contact.
• Newsletter subscription: Data provision is required to register for the newsletter. Without registration, it will not be possible to receive updates or promotional communications.
• Cookies requiring consent: Refusing to give consent will not affect website functionality or business relationships.
• Monitoring and security: Certain data are essential to ensure the secure management of the website and prevent cyberattacks.

5. DATA RETENTION PERIOD

The data will be processed for as long as necessary to fulfill the purposes outlined above. Specifically:

• Data from the “Contact Us” form: retained until the request has been fully processed.
• Data from the “Request PDF Catalogue” form: retained until the requested materials have been sent.
• Data from the consultancy request form: retained until the request is processed and, if applicable, in accordance with contractual terms.
• Newsletter subscription data: retained until the user withdraws consent.
• Website usage data: retained for the time necessary to fulfill the purposes described, as stated in the Cookie Policy.
• Cookie retention: as defined in the Cookie Policy.

Should the data subject consider the purpose of the processing to be exhausted, a written request may be submitted to the Company for data deletion, unless legal obligations prevent it.

6. DATA SOURCES

Personal data may be acquired through the GR Pubblicità website or directly from data owners.

7. RECIPIENTS

User personal data are a valuable part of our operations and are not sold to third parties. Data may be shared within the Company and with designated employees and collaborators duly authorized to process the data. They may also be shared with external companies and professionals responsible for IT system and website management/maintenance, or marketing support (e.g., data analytics, research, newsletter distribution).

These entities operate as Data Processors, processing data according to the instructions provided by the Data Controller.

Additionally, data may be disclosed to supervisory authorities and law enforcement agencies, acting as independent Data Controllers, as required by law.

Data may also be shared with the owners of social media platforms where GR Pubblicità maintains accounts, in accordance with the user’s acceptance of those platforms’ terms of service — a prerequisite for interacting with GR Pubblicità’s social pages.

8. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

Data are stored on servers located within the European Union, owned by the Data Controller or third-party service providers duly appointed as Data Processors.

No personal data are currently transferred outside the EU.

If necessary, the Data Controller reserves the right to transfer server locations to Italy, the EU, or non-EU countries, ensuring such transfers comply with applicable legal requirements, including the adoption of Standard Contractual Clauses or other appropriate safeguards as mandated by the European Commission.

9. DATA SUBJECT RIGHTS

Within the limits of applicable legislation, data subjects may exercise the following rights at any time:

• Access their personal data;
• Request rectification or deletion;
• Object to or restrict processing;
• Receive data in a structured, commonly used, and machine-readable format (data portability);
• Withdraw consent, where previously given.

(Articles 15 et seq. of EU Regulation 2016/679).

Requests will be addressed within 30 days, with a possible extension of an additional 30 days as provided by law.

If the processing is deemed non-compliant with the Regulation or related national laws, the data subject has the right to file a complaint with the Supervisory Authority or take legal action.

To exercise any of the above rights, please refer to the contact details listed in Section 1 of this Policy.

10. CHANGES TO THE PRIVACY POLICY

Changes in applicable laws and continuous improvements to the services to users may require changes to this Privacy Policy.

We encourage you to check this page periodically for any updates or modifications.