This Privacy Policy explains the policies of https://graficomgroup.com/ regarding the collection, use, disclosure, and protection of the personal data we collect when you access https://graficomgroup.com/ (the “Service”). This Privacy Policy sets out and describes your privacy rights and how you are protected under applicable privacy laws.

By using our Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy. Please do not access or use our Service if you do not consent to the collection and use of your information as described in this Privacy Policy. This Privacy Policy was created with the help of the CookieScript Privacy Policy Generator .

What information we collect, for what purposes, and on what legal basis

The definitions of the legal bases used below are to be understood as follows:

• Legitimate interest: the interest of the Company or of a third party, provided that your interests or your fundamental rights and freedoms do not override it, and such use of your personal data is balanced against your rights and freedoms.
• Performance of a contract: processing of your personal data necessary for the performance of a contract to which you are a party, or in order to take pre-contractual steps at your request.
• Legal obligations: processing of your personal data necessary to comply with legal or regulatory obligations to which we are subject.
• Consent: your consent means any freely given, specific, informed, and unambiguous indication of your wishes by which, through a statement or a clear affirmative action, you agree to the processing of your personal data. We may ask for your consent to processing when we do not have another legal basis.

Usage data

What we collect: Information about how users interact with our website or application, including pages visited, time spent, click paths, and browser details. Purpose: To analyze user behavior, optimize performance, and improve the user experience. Retention period: 365 days Legal basis: Consent

Online identifiers and device information

What we collect: Device identifiers (e.g., MAC, IMEI), Browser type and version, Operating system Purpose: To protect the platform, optimize performance, and understand technical usage. Retention period: 365 days Legal basis: Consent

Geolocation data

What we collect: Geolocation (GPS coordinates, IP-based location) Purpose: To personalize experiences and services based on your location. Retention period: 365 days Legal basis: Consent

Demographic data

What we collect: Gender, Age range Purpose: To tailor services and marketing campaigns. Retention period: 365 days Legal basis: Consent

Preferences and behavioral data

What we collect: User interests and preferences Purpose: To personalize recommendations, ads, and content. Retention period: 365 days Legal basis: Consent

How we obtain your personal data

We collect information that you provide to us directly when:

• You use our Services

Requirements for providing personal data

In some cases, providing personal data is a legal or contractual requirement, or a requirement necessary to enter into a contract.

How we share your information

Graficonsul may disclose your personal data to recipients in the following categories:

• With your consent. graficonsul will share your information for any purpose with your explicit consent.

We do not transfer personal data to any third country outside the European Economic Area (EEA).

Data subject rights

You have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to erasure (right to be forgotten): Under certain conditions, you can request the deletion of your personal data.
• Right to restriction of processing: You can request the restriction of the processing of your personal data in specific circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
• Right to object: In some cases, you can object to the processing of your personal data.
• Right to be informed: You have the right to receive clear, transparent, and easily understandable information about how we process your personal data.

Withdrawal of consent:

In accordance with Article 13(2)(c) of the GDPR, you have the right to withdraw your consent to the processing of your personal data at any time. As a visitor to this website, you can easily adjust or withdraw your consent directly through the consent banner on the site. Alternatively, if you prefer, you can contact the website operator using the contact details provided in this privacy policy. Please note that the withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. To exercise these rights, contact us at graficonsul@legalmail.it. We will fulfill your rights only after receiving your written request for the exercise of a specific right indicated above, and only after verifying the validity of your identity. Your requests will be fulfilled, or fulfillment will be refused stating the reasons for such refusal, within one month from the date the request was submitted in accordance with our internal rules and the GDPR. This period may be extended by a further two months where the request concerns a large volume of personal data or other requests examined at the same time. We will inform you of any such extension within one month of receiving the request, stating the reasons for the delay. We will provide you with a response in the manner you have chosen. We may refuse to fulfill your request if the exceptions and/or limitations to the exercise of data subject rights provided for by the GDPR apply, and/or if your request is manifestly unfounded or excessive. If we refuse to fulfill your request, we will provide you in writing with the reasons for such refusal.

Right to lodge a complaint with a competent supervisory authority

You have the right to lodge a complaint with a competent supervisory authority if you believe that your personal data is being processed in a way that violates your rights and legitimate interests established by applicable legislation. You can file a complaint in accordance with the procedures established by the Italian Data Protection Authority (Garante per la protezione dei dati personali), available at the following link: http://www.garanteprivacy.it/. Please note that, although no technological system is completely secure, we adopt appropriate security measures to minimize the risk of unauthorized access to or misuse of your personal information.

Security

Please note that, although no technological system is completely secure, we implement appropriate security measures to minimize the risks of unauthorized access to or misuse of your personal information.

• We and our third-party service providers who may be involved in processing personal data on our behalf (for the purposes indicated above) are contractually required to respect the confidentiality of personal data.
• We apply reasonable security practices and procedures to help protect the confidentiality and security of your information, including any non-public personal information. We protect your information using reasonable physical, technical, and administrative security measures, including by limiting access to your information to employees who have a genuine need for it.

Changes to this policy

We regularly review this Privacy Policy and reserve the right to modify it at any time in accordance with applicable laws and regulations. Any changes will take effect immediately upon publication on our Website. We encourage you to review this Privacy Policy periodically to stay informed of any changes.

Contact us

For any questions, contact us through the following methods:

• Name: graficonsul
• Address: Via Carlo Dragoni 47/49
• Email: graficonsul@legalmail.it
• Website: https://graficomgroup.com/
• Last updated: December 19, 2025