Privacy policy

Information in accordance with Art. 13 of Reg. (EU) No. 2016/679 (“GDPR”).

This notice describes which of your personal data is collected by Grivel srl (hereinafter “we”), the purposes for this and how it is processed. You will also find the information necessary to exercise your rights under GDPR.

In general, we collect your data when you create an account on our website or online store (hereinafter jointly defined “Website”), when you buy products offered on the Website, and when you contact us by email or telephone for assistance. The personal data collected will be processed in order to respond to your requests, allow you to use the services offered by the Website through the private areas (for example, to process your orders and perform related tasks, including transactions required for administrative and tax compliance, and, at your request, to send newsletters and information), and to provide better services, marketing and support to you and other customers.

1 // Who processes your data, Data Controller

Grivel srl, with registered offices at Loc. Champagne 5, 11020 Verrayes (Aosta), Italy, is the controller of your data processing.

2 // Which data we process, Type of data processed

Your contact and account data. We retain the contact information you provide (for example, your first name, surname, address, telephone number, email, country of residence) when you create an account on the Website, purchase a product and/or take part in our competitions or promotions.

Your payment and invoicing data. We retain the payment and invoicing data you provide (for example, delivery and billing addresses) when you purchase a product, for the purpose of managing your order and shipping the products. At your request, we may also retain invoicing data to make future purchases easier. We do not store your credit card information.

Browsing data and activities on the Website. By using the Website, you agree that we may process data from your browser and the device you are using, including your IP address (the number that identifies a specific device on the internet, needed for your device to communicate across the Internet). We can analyse which website you came from and what you did on our Website. To send you commercial information about our products and personalised proposals reflecting your tastes, we may use your email address and your name, together with data about your web browsing and behaviour on the Website, to understand which products you are interested in, provided you have previously authorised such processing.

3 // Where we get your data, Data collection method

We collect your data directly from you. For example, when you register to make a purchase from the Website, create an account, take part in a competition, ask us a question, or contact our customer service.

If you do not provide your data, you will not be able to register on the Website and will therefore be unable to purchase any products offered for sale.

We also use cookies and similar technologies on our Website and in our emails to collect usage data and improve communications and promotions. For more information, see section 5 below.

4 // Why and how long we process your data, Purpose, legal basis and retention period

To supply products and services you have purchased and send you information about your order or payment. We use your data to manage your order, confirm your purchase and manage any related services, such as shipping your purchased products. We cannot manage and process your order without your data.

The legal basis is the performance of the purchase agreement to which you are party from the moment you accept the Website's terms and conditions of sale. The retention period is equal to the period required to process the order. Where you have created a Website account, the retention period will correspond to the activity of your account, which will be dismissed one year after your last access or action on your account.

To provide after-sales support in accordance with applicable product warranty laws. We use your data to provide support and to manage the return and/or repair of products purchased from the Website, in accordance with applicable laws and the Website's terms and conditions of sale.

The legal basis is compliance with legal requirements and the retention period is equal to the period required by law (in particular, by the Italian Consumer Code).

To correctly manage your billing status. We process your data for accounting, administrative and tax purposes directly related to our business activities and required by applicable laws.

The legal basis is compliance with legal requirements and the retention period is equal to the period required by law (in particular, fiscal, money laundering, banking and public security laws).

To interact with our customer service team. We may use your email address or phone number, as well as your name and/or postal address, to help you if you need support when using products purchased from the Website or one of our distributors.

The legal basis is the performance of the purchase agreement you entered into with Grivel srl when you accepted the Website's terms and conditions of sale, and compliance with legal obligations regarding warranties and customer support. The retention period is the time necessary to fulfil your request, provided that, if other processes apply, the retention period indicated for those processes in this Privacy Policy will prevail.

To send commercial proposals and offer products reflecting your preferences. With your consent, we analyse your personal and usage data, preferences and consumption of our products in order to improve our offer for you and our customers in general. We do so through automated processing that includes profiling. This is done to make better decisions regarding services, advertising, products and content based on a greater understanding of how our customers use our services, and to provide a more personalised user experience. We may also collect your IDFA (Identifier for Advertising) for iOS devices and your AAID (Google Advertising ID) for Android devices so that we can provide you with targeted, relevant adverts based on your preferences and interests.

The legal basis is your explicit consent. The retention period of your data is 12 months from data collection.

To prevent or investigate illegal behaviour or to protect and assert rights. We may use your data to prevent breaches of our intellectual property rights (for example, counterfeiting of our or our partners' trademarks) or theft (including credit card cloning and thefts that we believe occurred during a competition, activity or event), or other illegal activities, as permitted by applicable law.

The legal basis is the legitimate interest of the data controller. The retention period is the time reasonably necessary to assert our rights from the point at which we become aware of the illegal behaviour or the potential for illegal behaviour.

For marketing purposes. Subject to your consent, you may be contacted by email, text message, telephone or other means with information or offers concerning the events, products or services we make available from time to time.

The legal basis is your explicit consent. The retention period is 24 months from the date the data was collected.

Other purposes permitted by law. In certain circumstances, we may process your data where there is a legitimate interest for Grivel srl in accordance with Art. 6, paragraph 1 (f) of the GDPR, respecting your rights and any statutory limitation.

For the above purposes, personal data is processed using manual, digital and online tools with software closely related to those purposes and, in any case, in a way that keeps the data secure and confidential in accordance with the law.

5 // Cookies and similar technologies

Cookies are small text files sent to your device when you visit a website. Your device saves them and sends them back to the website on subsequent visits.

The Website uses the following categories of cookies:

Technical cookies, which allow the Website to function correctly, including access to the private area. The legal basis is the controller's legitimate interest in providing efficient services. They remain active from your first visit until disabled.

Functional cookies, which enable certain features and save preferences such as language. The legal basis is the controller's legitimate interest. They remain active from your first visit until disabled.

Analytical cookies, which collect aggregated, anonymous statistical information about browsing habits. The legal basis is the controller's legitimate interest. They remain active from your first visit until disabled.

Profiling cookies (third-party), which allow us to tailor advertising to your interests and preferences. These are installed by third parties specialised in online profiling. The legal basis is your consent. They remain active until disabled, and in any case no longer than 12 months.

When you first visit the Website, a banner allows you to accept or refuse cookies. You can update your preferences at any time through the cookie management tool available on the Website, or through your browser settings. Disabling technical cookies may affect the correct functioning of certain areas of the Website.

We use Google Analytics, a web analysis service provided by Google Inc. Data collected is aggregated and does not identify you personally. You can learn more about Google's privacy practices at policies.google.com/privacy, and opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

We also use Facebook Pixel, a tracking technology provided by Meta Platforms, Inc., to measure the effectiveness of our advertising and better understand how visitors interact with our Website. You can manage your preferences at facebook.com/ads/website_custom_audiences.

6 // Where your data is processed, Data transfer

Data is processed and stored at Grivel srl, Loc. Champagne 5, 11020 Verrayes (Aosta), Italy, as well as at our suppliers' premises within the European Union and, provided the guarantees under Articles 45 to 47 of the GDPR are met, outside the European Union.

7 // Who we share your data with, Personal data recipients

Where required by law, we will obtain your prior consent and carry out any formalities required before sharing your data with third parties acting as external data processors.

Our service providers. We may share your data with third parties so that they can provide services (for example, IT service providers for Website management, profiling and compliance automation providers, couriers, call centre companies, warehousing and logistics companies). In all cases we enter into agreements compliant with Art. 28 GDPR to protect your data. These parties only receive the data required to perform their functions and may only use it to provide services on our behalf or to comply with the law. You can obtain details of such data processors by emailing privacy@grivel.com. Where providers operate outside the European Union, we ensure the conditions of Articles 45 to 47 of the GDPR are met before transferring your personal data.

Where necessary to comply with our legal obligations or to legally protect third parties or ourselves, and where permitted or required by law, we may share data with government bodies or other authorised third parties for the purpose of protecting or exercising our rights or those of third parties, or to limit or prevent fraud (including credit card fraud and fraud occurring during a lottery, promotion or event) and other illegal activities.

8 // Minors

Our Website is intended for an adult audience and is not directed at persons under 18. If you are a parent or guardian and believe your child may have transmitted data to us, please contact privacy@grivel.com.

9 // Safety measures

We adopt the security measures required by law to protect your data. The standard measures applied depend on the type of data processed and meet the legal requirements and standards of European regulatory authorities.

10 // Your rights

You may contact Grivel srl to request access to your personal data, to modify or delete it, to limit its processing, to object to its processing, and to request data portability. You may also withdraw your consent at any time, without prejudice to the lawfulness of processing based on consent granted before its withdrawal.

When exercising your right of access, you have the right to know whether your data is being processed, the purpose of processing, the categories of data processed, the recipients or categories of recipients (and, if located in a third country, the guarantees applied to the transfer), the retention period or criteria for determining it, whether automated processing is carried out (for example through profiling), the reasons for the processing, and the origin of the data if not collected directly from you.

You have the right to submit a complaint to the Italian National Data Protection Authority (Autorità Garante per la Protezione dei Dati Personali) and, at any time, to ask the controller for information about data processors and parties authorised to process your data.

You can exercise your rights by contacting Grivel srl at the address indicated above or by emailing privacy@grivel.com.

You can also modify or withdraw your consent using the Website's settings, and control or disable cookies and other profiling tools through your browser or the Website's cookie management tool. You can change your preferences regarding marketing emails and profiling through the privacy settings of your account or by writing to the email address above.

11 // What happens if we change this Policy

We may update this Privacy Policy. We will inform you of any changes in accordance with the law and publish an updated version on the Website, with a different date and version number. Please visit the Website regularly to check for updates.