This privacy policy describes how we process the personal data of users of the gresio.it website, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
HD casa S.r.l.
Via Eduardo De Filippo 24 – 84062 Olevano sul Tusciano (SA)
P.IVA 05688500650
Email: info@gresio.it – PEC: hdcasa@legalmail.it
Data Protection Officer (DPO): not appointed.
2. What data we collect
- Contact and purchase data: name, surname, address, email, phone, billing details, provided when you place an order or write to us.
- Payment data: handled directly by the payment providers; we do not store full card details.
- Browsing data: IP address, device and browser type, pages visited, collected through cookies and similar tools.
3. Purposes and legal basis
- Managing orders, shipping and support – legal basis: performance of the contract.
- Complying with legal obligations (tax, accounting) – legal basis: legal obligation.
- Responding to requests sent through the forms or by email – legal basis: performance of pre-contractual measures / legitimate interest.
- Marketing and newsletter, where activated – legal basis: consent, which can be withdrawn at any time.
- Site usage statistics – legal basis: consent (analytics cookies) or legitimate interest for aggregated data only.
4. Data retention
We retain data for as long as necessary for the stated purposes and for legal obligations: order and billing data are kept for the period required by tax law (normally 10 years); contact data for as long as needed to manage the relationship, unless consent is withdrawn.
5. Who we share data with
Data may be processed, solely for the purposes indicated above, by parties that provide us with services (couriers, payment providers, hosting, management software, analytics tools), appointed as data processors where required. We do not transfer your data to third parties for their own marketing purposes.
6. Your rights
At any time you can exercise the rights provided by the GDPR:
- access to your data;
- rectification and updating;
- erasure (“right to be forgotten”);
- restriction of and objection to processing;
- data portability;
- withdrawal of consent, without affecting processing already carried out.
To exercise them, write to info@gresio.it. You also have the right to lodge a complaint with the Italian Data Protection Authority.
7. Cookies
The site uses cookies and similar technologies:
- Technical cookies: necessary for the site to work (cart, session, preferences). They do not require consent.
- Analytics cookies: they help us understand how the site is used so we can improve it. They are installed only with your consent, except for anonymised ones comparable to technical cookies.
- Marketing/profiling cookies: not currently active. Should we introduce analytics or marketing tools in the future (for example Google Analytics or Meta Pixel), we will update this policy and activate them only with your prior consent.
You can manage or withdraw your preferences at any time from the cookie banner or from your browser settings. Disabling technical cookies may impair the functioning of the site.
Last updated: 6 July 2026.