Privacy notice

1. Data controller

The data controller is G.P.V. INTERNATIONAL 2 S.r.l., registered office Via degli Artigiani snc – 25030 Maclodio (BS) – Italia, VAT no. 04228120988.

For any question about data processing and to exercise your rights, write to info@gpvinternational2.com or, by certified e-mail (PEC), to gpvinternational2@legalmail.it.

2. Data we process

Browsing data: like any website, the server hosting the site automatically records some technical data (IP address, date and time of the request, page visited, browser type). It is used only to run the site and keep it secure; it is not used to identify or profile you.

Quote request form data: first name, last name, e-mail, phone and, if you provide them, company (registered name) and notes.

Data sent by e-mail: the data you send us by writing to the addresses shown on the site.

Anti-abuse technical data: to block automated form submissions we keep, for one hour, an encrypted, non-reversible fingerprint (hash) of the IP address, without storing the IP itself.

Visit statistics: we use Plausible Analytics (Plausible Insights OÜ, Estonia, servers in the European Union). It uses no cookies and collects no personal data: it counts visits in aggregate, anonymous form, without storing the IP address or device identifiers.

The site uses no cookies and loads no other content from third-party websites.

3. Purposes and legal basis

Replying to your quote and information requests: legal basis is the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). We do not ask for consent because it is not required for this purpose.

Ensuring the operation and security of the site and preventing abuse of the form: legitimate interest of the controller (Art. 6(1)(f) GDPR).

Measuring, in aggregate and anonymous form, how many people visit the site and which pages they view: legitimate interest of the controller (Art. 6(1)(f) GDPR).

Complying with legal obligations, for example tax and accounting obligations if the request leads to a contract: legal obligation (Art. 6(1)(c) GDPR).

Your data is not used for newsletters or promotional communications.

4. Providing your data

Fields marked * are required to reply to your request: without them we cannot get back to you. Company and notes are optional.

5. How data is processed

Data is processed electronically with appropriate security measures: encrypted connection (HTTPS), form data not stored on the server (it is only sent by e-mail to the sales address), access limited to authorised staff. There is no automated decision-making or profiling.

6. How long we keep data

Quote and information requests: for the time needed to handle the request and, if no contract follows, for up to 24 months from the last contact, after which they are deleted.

If the request leads to a business relationship: for the duration of the relationship and for 10 years after it ends, as required by Article 2220 of the Italian Civil Code and tax law.

Server technical logs: 30 days, unless needed to investigate computer crimes.

Anti-abuse IP fingerprint: 1 hour.

7. Who receives the data

Data is processed by the controller’s authorised and trained staff. It may be processed on the controller’s behalf, as processors under Art. 28 GDPR, by the hosting provider (NTT S.r.l., on OVHcloud infrastructure with servers in Germany) and the e-mail service provider (Microsoft (Microsoft 365)).

Anonymous statistics are processed by Plausible Insights OÜ (Estonia), with servers in the European Union.

Data is not disclosed or transferred to third parties for marketing purposes. It may be disclosed to authorities only where required by law.

8. Transfers outside the European Union

Data is processed within the European Union. If a provider were to process it outside the EU, the transfer will only take place to countries covered by a European Commission adequacy decision or with the safeguards of Art. 46 GDPR (for example standard contractual clauses).

9. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR), by writing to info@gpvinternational2.com. We reply within one month.

If you believe the processing breaches the law you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

10. Minors

The site also presents alcoholic beverages and is not intended for persons under 18. We do not knowingly collect data from minors.

11. Changes

We may update this notice. The version in force is always the one published on this page, with the date of the last update.