Privacy policy

1. Data controller

G.F. Carval S.a.s. di Valeri Franco, registered office in Via Nomentana 1105, 00137 Rome (RM), Italy, VAT IT06942761005, REA RM 1000084. Contact: certified e-mail (PEC) gfcarval@pec.it; branch phone numbers are listed on the Contact page.

2. Categories of data processed

Browsing data: in normal operation, the hosting provider's systems collect technical data whose transmission is implicit in Internet protocols (for example IP addresses, date and time of the request, pages visited, request outcome). This data is used solely to ensure the correct operation and security of the site and for aggregate statistics.

Data provided voluntarily: by contacting us by phone, certified e-mail or WhatsApp, users share their contact details and the content of their request. This data is processed only to follow up on the request.

Statistics: subject to consent, the site uses Vercel Web Analytics, a cookieless tool that collects usage data in anonymous and aggregate form, without identifying the individual visitor.

External content: subject to consent, the Google maps embedded in the Contact page may involve data processing by Google, described in the Cookie Policy.

3. Purposes and legal bases

• Responding to enquiries and managing contacts: performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).
• Security and correct operation of the site: legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Statistics and external content (Google Maps): the data subject's consent (Art. 6(1)(a) GDPR), which can be freely withdrawn at any time from the cookie preferences in the footer.

4. Recipients of the data

Data may be processed, as processors or independent controllers, by: Vercel Inc. (site hosting and, subject to consent, anonymous statistics); Google LLC and Google Ireland Ltd (embedded maps, only with consent); Meta Platforms / WhatsApp Ireland Ltd (only if the user chooses to contact us via WhatsApp). Data is neither disseminated nor sold.

5. Transfers outside the EU

Some providers (Vercel, Google, Meta) are based in the United States. Transfers take place on the basis of adequate safeguards pursuant to Art. 44 et seq. GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

6. Data retention

Browsing data is kept for the time strictly necessary for security purposes. Correspondence is kept for the time needed to handle the request and to comply with any legal obligations.

7. Rights of the data subject

Pursuant to Arts. 15-22 GDPR, data subjects may exercise their rights of access, rectification, erasure, restriction, objection and portability, and may withdraw consent at any time. Requests should be sent to the certified e-mail gfcarval@pec.it. A complaint may also be lodged with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Changes to this notice

This notice may be updated, including in connection with new site features. The version published on this page, with its update date, is the authoritative one.