Privacy notice

1. Data controller

The data controller is GSVDESIGN Soc. Coop., registered office at Via Simone Ghini 32, 00133 Rome, Italy, operational office at Via Gregoriana 43, 00044 Frascati (Rome), tax code and VAT no. 15306881002. For any matter concerning personal data, the controller can be contacted at general@gsvdesign.com or by certified email (PEC) at gsvdesign@legalmail.it. GSVDESIGN has not designated a data protection officer, as the conditions set out in Article 37(1) of the Regulation do not apply.

2. Browsing data

As with any website, the server hosting the site automatically records certain technical data of each request, including the submission of the contact form: IP address, date and time of the request, address of the page requested, server response code, browser type and operating system. These data are not collected in order to identify visitors.

Purpose: ensuring the operation and security of the site, preventing abuse and ascertaining any computer crimes. Legal basis: the controller’s legitimate interest in the security of the site (Article 6(1)(f) of the Regulation). Retention: the server access logs are replaced automatically every day, are kept for no more than two days and are not archived, except where needed to ascertain unlawful acts. From the logs GSVDESIGN also derives, by means of an automated procedure run on the server, aggregate daily counts only: the number of views of each page, broken down by category of origin (direct access, navigation within the site, individual search engines, social networks and artificial intelligence services, other website, without recording the name or address of the referring website), the total number of form submissions and the number of automated accesses excluded. Form submissions are not linked to the pages visited. During processing the browser type is used solely to exclude automated accesses and the IP address solely to exclude accesses from the company’s premises; neither is included in the counts. The counts contain no IP addresses, device identifiers or other data relating to an individual visitor. The daily detail is kept for 24 months; after that period only the monthly totals are kept. Purpose: understanding how the website is used in order to improve its content. Legal basis: the controller’s legitimate interest (Article 6(1)(f) of the Regulation). The hosting provider’s system derives access statistics from the logs which also contain IP addresses: GSVDESIGN does not use them and the related data are deleted automatically every day.

3. Data provided through the “Request a meeting” form

The form on the Contact page collects first name and surname, organisation or company, email address, telephone number, type of request and message text. First name and surname, email address and message are mandatory: without them the request cannot be followed up. The other fields are optional.

Purpose: answering the request and, where it concerns an assignment, preparing an offer or arranging a meeting. Legal basis: for those acting on their own behalf, pre-contractual steps taken at the data subject’s request (Article 6(1)(b) of the Regulation); for those writing on behalf of a public body or a company, and for requests not concerning an assignment, the controller’s legitimate interest in following up the requests received and in managing relations with the bodies and companies represented (Article 6(1)(f) of the Regulation).

The request is sent by email to the mailbox general@gsvdesign.com; the site keeps no copy of it, without prejudice to the server technical logs described in section 2. To prevent automated submissions, on the basis of the controller’s legitimate interest in the security of the form (Article 6(1)(f) of the Regulation), the site counts the submissions of each IP address within the hour by means of a counter whose name contains the address in pseudonymised form through a hash function; the counter is deleted automatically within two hours.

Retention: messages are kept in the mailbox for 24 months from the request and then deleted, unless the request is followed by an assignment: in that case the data become part of the assignment records and are kept for ten years pursuant to Article 2220 of the Italian Civil Code.

4. Email communications and applications

Anyone writing spontaneously to the email addresses shown on the site provides the data contained in the message, which are processed solely to reply, on the same legal bases and with the same retention periods set out in section 3.

Curricula vitae sent spontaneously are processed to assess a possible collaboration, on the basis of the pre-contractual steps requested by the data subject (Article 6(1)(b) of the Regulation), and kept for 24 months from receipt, after which they are deleted. Please do not include irrelevant data in your CV, in particular health data or other special categories of data.

5. Recipients of the data

The data are processed by the members and collaborators of GSVDESIGN authorised and instructed by the controller. They are not disclosed or transferred to third parties for their own purposes. The providers of the necessary technical services may have access to them as processors under Article 28 of the Regulation:

• Newfold Digital Inc. (Bluehost), provider of the website hosting service, for browsing data and for forwarding the form messages;
• Microsoft Ireland Operations Ltd (Microsoft 365), provider of the email service, for the messages received.

6. Transfer of data outside the European Union

The website server is located in the United States. Browsing data and the messages forwarded by the form are transferred on the basis of the appropriate safeguards referred to in Article 46(2)(c) of the Regulation, namely the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021, incorporated in the hosting provider’s data processing agreement.

The email service provider may transfer data to its parent company in the United States, Microsoft Corporation, which participates in the EU-U.S. Data Privacy Framework: the transfer is based on the Commission adequacy decision set out in Implementing Decision (EU) 2023/1795 of 10 July 2023, pursuant to Article 45 of the Regulation.

A copy of the safeguards may be requested from the controller at the contact details given in section 1.

7. Cookies and tracking tools

The site does not set cookies or use any other tracking tools on the visitor’s device: there are no profiling cookies, no statistics tools on the device, no social network buttons and no content embedded from third parties, and the fonts are hosted on the site’s server. No consent is therefore required under Article 122(1) of Italian Legislative Decree No. 196 of 30 June 2003, and no banner is shown, in accordance with the “Guidelines on cookies and other tracking tools” issued by the Italian Data Protection Authority (Garante per la protezione dei dati personali) on 10 June 2021 (doc. web no. 9677876).

The map on the Contact page is a static image; the link to OpenStreetMap opens the external service only at the visitor’s choice, and from that moment the privacy notice of its operator applies.

8. Rights of the data subject

Data subjects may at any time ask the controller for access to their data (Article 15 of the Regulation), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20), and may object to processing based on legitimate interest (Article 21(1)). Requests should be sent to the contact details given in section 1.

Data subjects who consider that the processing infringes the Regulation have the right to lodge a complaint with the Italian Data Protection Authority (Article 77 of the Regulation), as explained on www.garanteprivacy.it, or with the supervisory authority of their habitual residence or place of work.

The data are not subject to automated decision-making.

9. Legal notice

The texts, drawings, photographs and the GSVDESIGN trademark published on the site are owned by GSVDESIGN Soc. Coop. or published with the consent of their respective owners, and may not be reproduced, in whole or in part, without written authorisation. The information on the site illustrates the company’s activity and does not constitute an offer or professional advice. Links to third-party websites are provided for the visitor’s convenience: GSVDESIGN is not responsible for their content or for the processing of data carried out on them.

Last updated: 30 October 2026