Data protection statement

Update: 10/2022

This data protection statement gives an overview of the processing of your data at Granducato Gestioni srl, Granducato Natura Sarl and Granducato di Toscana srls owners of the brands Allegra Toscana, Villa al Castello, La Corte del Re, Granducato Collection, Allegra Toscana Viareggio, Vio VIllas Granducato Natura, Granducato Gestioni, Borgunto, L’Oro di Borgunto and any brands on www.granducatocollection.it. This statement applies to all websites, apps, other services and benefits offered by the companies and people in the group.

Inquiries regarding this data processing statement or the processing of data by Granducato Gestioni srl and Granducato Natura sarl and Granducato di Toscana srls contact the Data Processor of the companies at granducatogestioni@gmail.com. If you wish to assert your right to information or to be forgotten, ivi compreesa withdrawal of consent for marketing purposes, cancellation from the newsletter, etc., please contact the Data Processor by email. For more information see the contact sections of our website.

We offeralternative ways to read this data processing statement. In this section, first, you will find some basic information. Then we have divided this data processing statement into chapters based on the topics we thought would be of interest to you.

Chapter selection

Each chapter is preceded by a short introductory text in which we briefly summarize the content of the chapter. If you want to have a complete overview of all data processing, we recommend that you read the introductory texts. If you want to know the details you can click on “in-depth” under each related introductory text. You will be shown the full content of the chapter covered.

For which offers and services this data processing statement applies:

The type and manner of data processing carried out by Grand Duchy is unique to most of our offerings. Therefore, this data processing statement applies to all services and benefits we offer to our customers in Europe. This applies regardless of the platform in which we offer the service: website, app, point of sale, over the phone, events or via social networks.

There are also services, however, for which we process your data in another way or for other purposes. It may depend on the type of service or requirements depending on the country of use. When we refer to these cases, exceptions from the normal case, we speak of “service-specific” or “country-specific.”

Granducato Collection is not a single enterprise. Granducato Gestioni is a group and therefore consists of many enterprises. For simplicity’s sake, in the following we list only those companies in the Granducato Collection group that actually deal with the processing of your data. If we refer to “Granducato” or “we” in the following, we mean the companies respectively responsible for the Granducato Collection group.

Concretely, this refers to the following Grand Duchy companies.

What you come to know with this data processing statement:

  • What data is stored by Grand Duchy.
  • What we do with this data and what it is needed for.
  • What data protection rights and choices are available to you.
  • What technologies and data we employ to personalize and adapt our services and content we use to provide you with a safe, easy, seamless, and individual shopping experience.
  • What technologies and data we employ for advertising, including tracking technologies.

1. What data is processed by Grand Duchy?

Grand Duchy offers different services that you can take advantage of in different ways. Depending on whether you make contact with us online, on the phone, in person or otherwise different data from different sources come into play. Much of the data we process comes to us from you yourself while you are making use of our services, for example when you get in touch with us and register by giving your name, email address or address. However, we also receive technical data about your devices and access that are automatically collected during your interaction with our services and visit. These may relate to the type of device you use. We collect additional data on the basis of analyses we perform (e.g. as part of market research or in customer evaluation). We also possibly receive data from third parties about you, for example economic information services or payment service agencies.

2. What purpose does Grand Duchy use the data for?

Grand Duchy processes your data in compliance with all applicable data protection laws. This is done by referring to the principles of data protection law for the processing of personal data. So as a matter of principle we process your data only for the purposes explained in this data processing statement and stated at the time of their collection. These are in the first line the performance of the purchase and the provision, customization and development as well as the security of our service. In addition to this we use your data within the framework of the strict German and EU regulations of data protection law but also for other purposes, such as product development, scientific research (especially in the areas of machine learning, artificial intelligence and deep learning) and market research for the optimization of business processes, the need-appropriate setup of our services as well as personalized advertising and google ads.

3. Customized services

Developing and providing customized features and services is a top priority for us. Regardless of location, time of day and type of device used, we offer you an individual shopping experience and an offer defined according to your individual interests. The processing of your data for the personalization of our services at Granducat is an integral part of the services.

4. Information on websites and apps

We use your data for the provision of the Grand Duchy websites and apps. In addition to device and access data, which are formed during each use of these services, the type of data processed and the purpose of processing depend in particular on how you use the functions and services made available through our services. We also use data formed during the use of our services to find out how our online offerings are employed. We use such information among other things in the context of personalization to improve our services as well as for personalized advertising.

5. About fan pages on social media

Grand Duchy owns social media profiles on social networks Facebook and Instagram. We regularly post and share content, offers and tips on our fan pages. Social media operators record your usual behavior via cookies and similar technologies each time you interact with our fan pages or on other Facebook or Instagram sites. Fan page operators may display general statistics about the interests and demographics (e.g., age, gender, region) of visitors to the fan pages. When using social networks, the nature, scope and purposes of data processing are determined primarily by the operators of those networks.

6. Newsletter

We offer various newsletter services that include our services. By subscribing to the newsletter, you can receive some of the newsletter services as indicated above (depending on the purpose of your subscription). There are also service-specific newsletters, which are an integral part of a specific service.

7. Product recommendations via email and top service

In connection with our services, we present you with information and offers from Granducato based on your interests. You may receive a limited number of individual product recommendations, surveys, product review requests from us, whether or not you are subscribed to a newsletter. In accordance with legal requirements, we preferentially use data from previous orders to select individual product recommendations.

8. Purchase vouchers

We use the data disclosed as part of a Granducato voucher order for order verification and processing as well as for voucher shipment and redemption. This also involves the rattament of data related to the use of the voucher, particularly for the purpose of fraud and scam prevention.

9. How does Granducato use my data for advertising purposes?

We and our advertising associates use your data for personalized advertising that is shown to you in Grand Duchy services and on other providers’ websites and apps. For this purpose we and our advertising partners use internet technologies common in the market. In this way we can advertise more accurately and present you as far as possible only advertisements and offers relevant to you. This allows us to better respond to our users’ needs for personalization and new product recdrch as well as to interest them in our services in the long term through a personal shopping experience.

10. To whom are my data forwarded?

Grand Duchy forwards data only if this is permitted by Italian or EU data protection law. We enter into particularly close cooperation with certain service companies, such as in the customer service sector, with technical companies or with logistics companies (e.g. courier companies such as Poste). As a matter of principle, these companies are only allowed to process your data under special conditions and on our behalf. Insofar as we employ such companies as commissioned processors, the service companies receive authorization to access your data only for the scope and period necessary for the provision of the respective service. If you purchase from a Grand Duchy partner, we transmit certain of your purchase data to the Grand Duchy partner so that the Grand Duchy partner can deliver the ordered goods to you.

11. What data protection rights can I claim?

References to data protection: right to information (Article 15 GDPR), right to erasure (Article 17 GDPR), right to correction (Article 16 GDPR), right to restriction of dissemination (Article 18 GDPR), right to data portability (Article 20 GDPR), right to appeal to a public data protection body (Article 77 GDPR), right to revoke consents (Article 7 para. 3 GDPR) as well as the right to object against certain data dissemination measures (Article 21 GDPR). If you wish to assert your rights regarding data processing, you may contact the Data Processor at any time at granducatogestioni@gmail.com. Further information is available in the Contact section of the website.

12. When is my data deleted?

We will storeyour personal data as long as it is necessary for the purposes of this data processing statement, in particular for the fulfillment of legal and contractual obligations. Ocassionally we will also store your personal data for other purposes, if and as long as the law allows us to store it further for certain purposes, including defense against legal claims.

13. How does Grand Duchy protect my data?

Your personal information is disseminated n securely by encryption. This also applies to your order and customer login. We employ the SSL (Secure Socket Layer) encryption system for this purpose. We also protect our web pages and other systems by means of preventive measures against the loss, destruction, access, tampering or dissemination of your data by unauthorized persons.

14. Amendments to this data processing statement

As we develop our websites and apps and implement new technologies to improve our services for you, changes to these data protection notices may become necessary. Therefore, we recommend that you read this data privacy statement.

15. Contact

You can contact granducatogestioni@gmail.com, at any time, our dedicated data protection team for general questions or to exercise your rights.

16. Service-specific information

The data processing we perform may be different for each service. You can find out about the specific differences that exist here.

17. Country-specific information

Our data processing may differ from country to country, and you can find out about country-specific differences here.

18. Notices about cookies

We and selected third parties use cookies or similar technologies for technical purposes and, with your consent, also for other purposes as specified in the specific cookie policy. Refusal of consent may make related features of the site unavailable.

Regarding advertising, we and selected third parties may use precise geolocation data and identification through device scanning in order to store and/or access information on a device and process personal data such as your usage data, for the following advertising purposes: personalized ads and content, ad and content evaluation, sales, audience observations, and innovative and new product development.

You can freely give, refuse or revoke your consent, at any time, by accessing the preference panel.

Here you can find out what cookie we use.

To access the overview of all cookies www.granducatogestioni.com/privacy or unsubscribe from the site’s contact form.