Privacy policy

Last updated: October 2026

This notice is provided under Article 13 of Regulation (EU) 2016/679 ("GDPR") to visitors of the Grandi Stabili S.r.l. website and to anyone contacting the company through the details shown. It applies to this website only and not to third-party sites reachable through links.

1. Data controller

2. Data processed

Browsing data. The systems that run this website collect, in the course of normal operation, some data whose transmission is implicit in the use of Internet protocols: IP address, browser and device type, date and time of the request, pages visited. They are used only to ensure the operation and security of the site and not to identify users.

Data provided voluntarily. If you write to the email address shown, we process the sender's address and the other data contained in the message, in order to reply to the request.

The site contains no data-collection forms and uses no profiling cookies, analytics or tracking tools (see the Cookie policy).

3. Purposes and legal bases

• Enabling browsing and ensuring the security of the site: legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Replying to requests sent by email and handling any negotiations: pre-contractual measures or performance of a contract at the data subject's request (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
• Complying with legal obligations and, where necessary, establishing or defending a legal claim: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).

4. Nature of provision

Providing data by email is optional; without it, however, we cannot reply to the request.

5. Processing methods and retention

Data are processed by electronic means with appropriate security measures. Browsing data are retained by the hosting provider for the time strictly necessary for the operation and security of the service. Correspondence received is kept for the time needed to handle the request and, where a relationship follows, for the period required by law (generally 10 years for accounting and contractual records).

6. Recipients

Data may be processed by authorised staff of the controller and by suppliers acting as processors (website hosting, email services, administrative and legal advisers). Data are neither disclosed to the public nor sold to third parties.

7. Transfers outside the European Economic Area

Where a supplier processes data outside the EEA, the transfer is based on an adequacy decision of the European Commission (for example the EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the Commission.

8. Rights of the data subject

You may at any time exercise the rights set out in Articles 15–22 GDPR: access, rectification, erasure, restriction, portability and objection to processing based on legitimate interest. Requests should be sent to info@grandistabili.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Changes

This notice may be updated. The version in force is always the one published on this page, with the date of the last update.