Privacy Policy

This Privacy Policy is provided in accordance with Article 13 of Regulation (EU) 2016/679 (“GDPR”) and describes how Groppalli S.r.l. collects, uses, stores and protects the personal data of users visiting the website www.groppalli.it.

This privacy policy applies exclusively to the website www.groppalli.it and not to any third-party websites that may be accessed via connections on the site.

The Data Controller reserves the right to update this Privacy Policy at any time, in particular following changes in legislation, the introduction of new services or changes to the way in which personal data is processed. Updates will be published on this page, indicating the date of the last revision.

1. Data controller

The data controller is:

Groppalli S.r.l.
Località Pilastro di Gragnanino SNC
29010 Gragnano Trebbiense (PC) – Italy
VAT No.: IT01161850332
Email: info@groppalli.it

For any enquiries regarding the processing of personal data or to exercise your rights under the GDPR, please contact the Data Controller at the email address given above.

2. Types of data processed

Whilst browsing the website, various categories of personal data may be collected.

Browsing data

The IT systems and software procedures used to operate the website automatically collect certain technical information, the transmission of which is inherent in the use of Internet protocols.

These include, by way of example:

• IP address;
• browser type;
• operating system;
• information about the device being used;
• date and time of the request;
• pages visited;
• Referring URL;
• technical information required for the website to function correctly.

This data is used solely to ensure the website functions correctly, to safeguard the security of our systems, to carry out technical diagnostics and to compile aggregated statistical information.

Data provided voluntarily by the user

Users may voluntarily provide their personal data by completing the contact form on the website.

The data collected may include:

• name;
• surname;
• email address;
• telephone number;
• company;
• message content;
• any further information provided voluntarily by the user.

The provision of data is optional but necessary in order to process the requests submitted.

Cookies and tracking tools

This website uses technical cookies that are essential for its operation and, subject to the user’s consent, cookies and statistical analysis tools.

Further details can be found in the Cookie Policy.

3. Purposes of processing and legal basis

Personal data is processed solely for specific, explicit and legitimate purposes.

(a) Handling of enquiries submitted via the website

The data provided via the contact form is processed for the following purposes:

• to respond to requests for information;
• to provide technical or commercial support;
• contact the user again;
• to draw up quotations or pre-contractual information.

Legal
basis: Article 6(1)(b) of the GDPR (the performance of pre-contractual measures requested by the data subject).

(b) Compliance with legal obligations

Data may be processed in order to comply with obligations laid down by national and European legislation, including tax, administrative and accounting regulations, or in response to requests from the relevant authorities.

Legal
basis: Article 6(1)(c) of the GDPR.

(c) Site security

Browsing data may be used to ensure the security of the website, prevent unauthorised access, detect technical anomalies and combat fraudulent use.

Legal
basis: Article 6(1)(f) of the GDPR — the Data Controller’s legitimate interest in the security of its IT infrastructure.

(d) Statistical analyses

Subject to the user’s consent, the website uses analytics tools that enable us to understand how the website is used, with a view to improving its content, structure, performance and user experience.

Legal
basis: Article 6(1)(a) of the GDPR (consent).

Consent may be withdrawn at any time via the cookie management panel.

4. Methods of processing

Personal data is processed using IT and telecommunications tools in accordance with the principles of lawfulness, fairness, transparency, data minimisation, storage limitation and confidentiality as set out in the GDPR.

The Data Controller implements appropriate technical and organisational measures designed to prevent unauthorised access to, loss, alteration, disclosure or destruction of personal data.

5. Recipients of the data

Personal data may only be disclosed to those parties whose knowledge of such data is necessary for the purposes set out above.

These include:

• authorised staff of the Data Controller;
• IT service providers;
• web hosting provider;
• technical consultants;
• companies responsible for maintaining the site;
• providers of statistical analysis services;
• public bodies or competent authorities in the cases provided for by law.

These entities act, where applicable, as data processors within the meaning of Article 28 of the GDPR or as independent data controllers.

The updated list of data processors may be requested from the data controller.

6. Data retention period

Personal data is retained for no longer than is necessary to fulfil the purposes for which it was collected.

Specifically:

• data submitted via the contact form: for the time necessary to process the enquiry and any subsequent correspondence, subject to any legal obligations;
• data processed for administrative and tax purposes: for the period specified by current legislation;
• data collected via analytical cookies: as set out in the Cookie Policy and in the settings of the tools used;
• Data collected for statistical purposes: until consent is withdrawn or in accordance with the retention periods set out by the service used.

At the end of the retention periods, the data will be deleted or anonymised.

7. Transfer of data to countries outside the EEA

Some of the services used by the website may involve the transfer of personal data to countries outside the European Economic Area (EEA), including the United States.

Such transfers take place exclusively in accordance with Articles 44 et seq. of the GDPR.

Where necessary, the transfer is carried out by means of:

• adequacy decisions by the European Commission;
• Standard Contractual Clauses (SCC);
• further protective measures provided for under European legislation.

8. Rights of the data subject

The data subject may exercise the rights set out in Articles 15–22 of the GDPR at any time.

In particular, you have the right to:

• to obtain confirmation as to whether personal data concerning you exists;
• access the data;
• request that it be corrected;
• request that it be deleted;
• to have the processing restricted;
• to object to processing in the cases provided for by the GDPR;
• to receive data in a structured format (portability);
• to withdraw consent previously given;
• to lodge a complaint with the Data Protection Authority.

To exercise your rights, please write to: info@groppalli.it

9. Services used by the website

Hosting – Serverplan.com

The website is hosted on the www.serverplan.com infrastructure (opens in a new tab)

The service ensures the website is available and processes the technical data essential for the platform to function, including IP addresses, system logs and browsing data.

Data processed

• IP address;
• access log;
• technical navigation data.

Purpose

• provision of the service;
• safety;
• infrastructure maintenance.

WordPress

The website's development was carried out using WordPress.

The platform uses technical cookies that are essential for the website to function correctly, for session management and for security.

These cookies do not require the user’s consent.

Contact Form 7

The contact form allows users to send enquiries directly to Groppalli S.r.l.

The data collected may include:

• name;
• surname;
• company;
• email address;
• telephone number;
• message.

The data is not stored in the website’s database but is sent exclusively by email to company email addresses within the @groppalli.it domain and is processed solely for the purpose of responding to enquiries received.

TranslatePress

The website uses TranslatePress to manage its multilingual versions.

The service uses only a technical cookie, which is necessary to remember the language selected by the user whilst browsing.

No profiling activities are carried out.

Consent management system

The website uses an integrated consent management system based on the WP Consent API.

The system stores only the user’s choice regarding the use of cookies by means of first-party technical cookies.

Google Tag Manager

Google Tag Manager is used solely to manage the activation of analytics services.

The service does not set its own cookies and is only loaded once the user has given their consent.

Google Analytics 4

Subject to the user’s consent, the website uses Google Analytics 4 to collect aggregated statistics on website usage.

The information collected may include:

• pages visited;
• session duration;
• device used;
• approximate geographical area;
• interactions with the website.

The service uses analytics cookies and may involve the transfer of data to the United States in accordance with the safeguards provided for under the GDPR.

You can withdraw your consent at any time via the cookie management panel.

CARTO Maps

On the Contact page, the website incorporates maps provided by CARTO.

In order to display the map, the user’s IP address is transmitted to the provider’s servers.

The map does not load automatically: the images are only retrieved from CARTO if the user specifically chooses to view it.

The service does not use cookies for profiling purposes.

10. Changes to this Privacy Policy

The Data Controller reserves the right to amend or update this Privacy Policy at any time.

The changes will take effect from the date of their publication on this website.

Users are therefore advised to check this page regularly for any updates.

Last updated: July 2026