Privacy Policy At Gorilli S.r.l. , privacy and personal data protection are our top priorities.

We invite you to read this Privacy Policy as it contains important information on how your personal data will be processed and the safeguards we ensure for anyone visiting our website.

Your personal data will be processed in accordance with the provisions of the European Regulation EU 2016/679 (General Data Protection Regulation, hereinafter "GDPR"), Legislative Decree 196/2003 as amended ("Privacy Code"), and the confidentiality obligations established therein.

This Privacy Policy (i) applies to the website https://www.gorilli.it, its landing pages, and any platform or communication channel we use to receive your data (hereinafter the "Site"); (ii) is an integral part of the Site and the services we offer; (iii) is provided pursuant to Articles 13 and 14 of the GDPR to those interacting with the Site's web services by merely browsing or using specific services made available through the Site (such as filling out online forms to request quotes, information, or other services—hereinafter referred to as "Services").

You can always control your personal data by writing to gorilli@pec.it or directly from your account if you have registered.


1. Definitions

Data Subject: You, as an individual residing in an EU Member State.
Data Controller: Gorilli S.r.l. (hereinafter "GORILLI"), Tax ID and VAT No. 13973770962, with registered office in MILAN (MI), VIA PRIVATA TARVISIO 8, ZIP code 20125, which owns the Gorilli brand and is responsible for processing your data. For any communication regarding this Privacy Policy and the processing of your data, you can write to gorilli@pec.it .
Personal Data: Any information that makes you identifiable as an individual, including name, surname, tax code, address, phone number, and email address.


2. Types of Data Processed

GORILLI collects and processes the following types of data:
Identification Data: Name, surname, personal details, tax code, phone numbers, addresses, email address, ID document data, IBAN, driver's license, etc.
Browsing Data (collected automatically): IP addresses, operating system parameters, and browser details. These are collected for statistical analysis and to ensure the proper functioning of the Site.
Data Provided Voluntarily: If you send an email to the addresses listed on the Site to request information, your email address and any other personal data included in the message will be collected and used solely to respond to your inquiry.

For cookie-related data collection, please refer to our Cookies Policy.


3. Source of Personal Data

GORILLI may collect data in the following ways:
Automatically: Through IT systems that register IP addresses, requested resources, request timestamps, browser details, and system configurations. These are processed only to collect anonymous statistics and monitor system performance.
Voluntarily Provided Data: Data you provide when contacting us via email or filling out forms.

Providing this data is mandatory for web browsing and access to the Site's functionalities.


4. Purposes of Data Processing

GORILLI processes your personal data for the following purposes:
Service Management: Ensuring user identity security and sending service communications.
Legal Compliance: To fulfill legal and regulatory obligations.
Marketing: Sending newsletters, promotions, and offers that may interest you. This may include profiling activities based on your preferences, habits, and choices. You may receive communications via traditional (postal mail, phone calls) or electronic (email, SMS) means. You can opt out at any time.

Your data may also be shared with commercial partners listed on www.Gorilli.it for promotional purposes.


5. Data Sharing with Third Parties

Your data may be shared with:
• Software providers
• Technology service providers
• Marketing and promotional agencies
• Document archiving services

These entities process data either as independent Data Controllers or as GORILLI's Data Processors, following specific agreements.


6. Consent

Providing your personal data is optional. However, refusal to provide mandatory data (e.g., those required to execute a contract) may prevent us from offering certain services.

Consent is not required for legal compliance purposes, but it is mandatory for service provision. Marketing-related consent is optional and revocable at any time.


7. Data Processing and Retention Period

Personal data is processed using manual, digital, and telematic tools that guarantee security and confidentiality. Preventive security measures are implemented and regularly updated.

GORILLI adheres to GDPR principles, including:
Lawfulness: Processing only for authorized purposes.
Minimization: Collecting only necessary data.
Limitation: Processing data solely for the specified purposes.
Security: Implementing robust security measures.
Integrity: Reducing errors and ensuring accurate data management.

We retain your data for:
Legal compliance: 10 years.
Marketing purposes: Until you withdraw consent.
Litigation protection: Data may be stored longer to defend legal claims.


8. Data Subject Rights

As per the GDPR (Articles 15-21), you have the right to:
• Access your personal data.
• Rectify inaccurate information.
• Erase your data ("right to be forgotten").
• Restrict processing in certain cases.
• Object to data processing for marketing purposes.
• Data portability (transfer your data to another controller).

To exercise these rights, contact gorilli@pec.it or send a registered letter, attaching a copy of your ID.

For more information, visit https://www.garanteprivacy.it/ .