1. Data controller

The data controller is SPECTRUM BUSINESS GROUP S.R.L..

Contact for privacy-related requests: office@gripfixsolutions.com, +39 366 907 0671.

2. Categories of personal data

• Data provided via the contact form: name, email address, phone number, message content.
• Technical/usage data: IP address (depending on configuration), browser, operating system, device type, website interaction data.
• Cookie-related data and similar technologies, according to your consent preferences.

3. Purposes of processing

• Responding to contact requests and inquiries.
• Commercial/technical communication initiated by the user.
• Website administration, security and abuse prevention.
• Traffic analytics and website improvement (subject to consent where required).
• Legal compliance and defense of legal claims/interests.

4. Legal bases

• Art. 6(1)(b) GDPR – pre-contractual steps at the request of the data subject.
• Art. 6(1)(f) GDPR – legitimate interests (security, anti-abuse, technical administration).
• Art. 6(1)(a) GDPR – consent (e.g., analytics/non-essential cookies where applicable).

5. Data sources

• Directly from you (contact form, email, phone).
• Automatically through website use and cookies/analytics (subject to consent settings).

6. Data recipients

We do not sell or rent personal data. Data may be accessed by service providers strictly as needed (hosting, email, analytics, embedded content providers) and by authorities where legally required.

7. International transfers

Some third-party providers may process data outside the EEA. Where applicable, transfers are based on recognized legal mechanisms (e.g., Standard Contractual Clauses or other lawful safeguards).

8. Retention period

We keep personal data only as long as necessary for the purposes for which it was collected, legal compliance, and legitimate business recordkeeping.

Contact form messages are currently sent by email and (under the current implementation) are not stored in the website database.

Cookie consent preferences may be retained for up to 180 days.

9. Data subject rights

• Right to information
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability (where applicable)
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with the competent supervisory authority
• Right to seek judicial remedy

10. Exercising your rights

For requests related to personal data, please contact us at office@gripfixsolutions.com. We may request reasonable information to verify identity before responding.

11. Data security

We implement appropriate technical and organizational measures to protect personal data. However, no internet transmission or IT system can be guaranteed to be completely secure.

12. Minors

The website is intended for a general/professional audience and is not designed to intentionally collect personal data from minors.

13. Policy changes

We may update this Privacy Policy from time to time. The latest version will be published on this page together with the update date.