Skip to main content

Privacy Policy

This Privacy Policy exclusively applies to the website www.granafina.it (hereinafter referred to as the “Website”) and does not cover any third-party websites accessible via links on the Website.

1. Data Controller 

The Data Controller is GRANA FINA S.r.l. (hereinafter referred to as “GRANA FINA” or the “Controller”), headquartered at Via Battistig No. 42, 33100 Udine, Italy (VAT No. 03114160306). For any inquiries, you may reach us at info@granafina.it.

2. Types of Data Collected

GRANA FINA may collect and process the following categories of personal data when you navigate the Website:

  • Browsing data: While navigating www.granafina.it, certain data necessary for the operation of the Website’s information systems and internet protocols may be collected. This data includes IP addresses or domain names of computers accessing the site, URIs (Uniform Resource Identifiers) of requested resources, request times, the method used to submit requests to the server, the file size of responses, numeric codes indicating the server response status (success, error, etc.), and other technical parameters regarding the user’s operating system and IT environment. This data is collected solely to compile anonymous statistics on site usage and to ensure its proper functioning. Data may be retained to ascertain responsibility in the event of hypothetical cybercrimes affecting the Website.

  • Data Provided Voluntarily: Personal data provided freely when contacting us (e.g., email) to request information.

  • Curriculum vitae (CV): data included in the CV you submit when applying for a position at GRANA FINA.

  • Cookies: Small text files stored on the user's device by the Website, which may enhance site usability or enable certain functionalities. For more details, please see the Website’s Cookie Policy.

3. Purpose and Legal Basis of Data Processing

Data will be processed for the following purposes: 

a. Providing Assistance and Responding to Inquiries: data is processed to respond to your questions and provide assistance. Legal Basis: contractual necessity.

b. Compliance with Legal Obligations: data may be processed to fulfill legal obligations applicable to the Controller. Legal Basis: Legal obligation compliance.

c. Job Applications: if you apply for a job at GRANA FINA, the data in your CV will be processed solely for recruitment purposes. Processing is lawful as explicitly authorized by law, and no consent is required for CVs submitted voluntarily.

d. Website Operation: browsing data is processed to operate the Website’s information systems, necessary for proper functionality and security. Legal Basis: Legitimate interest of the Controller.

e. Data Protection and Security: for purposes such as managing requests to exercise rights, notifying you of data breaches, or informing you of significant updates to this Privacy Policy.

4. Data Provision and Consequences of Refusal

Providing data for the purposes stated in sections 3(a), 3(b), 3(c), and 3(e) is optional but necessary to fulfill contractual obligations. Failure to provide this data may prevent GRANA FINA from fulfilling contractual obligations, responding to inquiries, evaluating your application, or meeting regulatory requirements.

5. Data Processing and Disclosure

Your data may be processed by GRANA FINA personnel, who are trained and authorized to process data, or by third parties providing services to the Company (acting as “Data Processors”), such as internet providers, email service providers, IT service companies (e.g., webmasters), or customer service providers. Data may also be disclosed to third parties when required by law, including public authorities that process data as independent controllers for institutional purposes.

6. Data Transfer Outside the EU

Certain third-party providers may be located outside the European Union (EU) or European Economic Area (EEA), in countries not ensuring adequate data protection standards under the GDPR. GRANA FINA takes necessary measures for lawful data transfer (e.g., using EU-approved Standard Contractual Clauses). You may request further details regarding international data transfers by contacting us.

7. Data Retention Period

Personal data is retained for a limited period, closely tied to the purpose of collection and in compliance with applicable laws and regulations. At the end of the retention period, data will be deleted or irreversibly anonymized unless further retention is required to fulfill legal obligations or exercise or defend a legal claim.

Retention periods vary by purpose:

  • Inquiries: Data related to support or contact requests is retained until the request is fulfilled.

  • CV Submissions: CV data is retained for up to 24 months and then deleted.

  • Legal Disputes: Data will be retained for the duration of judicial or administrative proceedings, as necessary to protect the rights of GRANA FINA or third parties, or as directed by judicial or administrative authorities.

8. Your Rights

You may contact the Controller (see section 1) at any time to exercise your GDPR-recognized rights, including:

  • Right of Access: to confirm whether your data is being processed and obtain access to it.

  • Right to Rectification: to correct, modify, or update inaccurate or outdated data, and to supplement incomplete data.

  • Right to Erasure: to request deletion of your data if it is no longer needed, has been unlawfully processed, must be deleted to comply with legal obligations, or if you object to its processing without overriding legitimate grounds.

  • Right to Restriction: To request limited processing, where applicable, to ensure data is stored but not used.

  • Right to Data Portability: To request your data or have it transferred to another data controller. If you believe your data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority responsible for data protection. In Italy, complaints may be filed with the Garante per la Protezione dei Dati Personali.

The Website’s features, functionalities, and services may change over time; therefore, this Privacy Policy may be updated periodically. You are encouraged to check this policy regularly. Significant changes will be communicated appropriately.