privacy policy

data controller

The data controller for the processing described in this Privacy Policy is Granstudio S.p.A., Via Giovanni Pacini 53, 10154 Turin, Italy.

DigiPHY is presented through the website at https://www.digiphy.eu. If you contact us through the website, your inquiry may be handled by the relevant Granstudio team and, where necessary, related group entities involved in evaluating or responding to the request.

categories of personal data

We may collect personal data directly from you and, in limited cases, automatically from your device when you use the website.

• Contact form data: first name, last name, email address, phone number, company or organization, country, and the type of inquiry you submit.
• Communication data: any information you include when corresponding with us after your inquiry.
• Technical and usage data: IP address, browser and device information, pages viewed, and general interaction data processed by hosting systems and, if you consent, analytics tools.
• Cookie preference data: whether you accepted or rejected optional cookies on the website.

Please do not send special categories of personal data or confidential information that is not necessary for your request.

purposes of processing

We may use personal data to:

• respond to your inquiries and requests for information, demos, workshops, rentals, or projects;
• manage pre-contractual discussions and business communications;
• operate, secure, and improve the website and related systems;
• measure website performance and visitor behavior where you have provided consent for analytics;
• comply with legal obligations, accounting rules, and regulatory requests;
• establish, exercise, or defend legal claims when necessary.

legal bases for processing

Under the GDPR, we rely on one or more of the following legal bases, depending on the context:

• pre-contractual steps: when you ask us to discuss a product, service, workshop, rental, or collaboration;
• legitimate interests: to manage business communications, maintain website security, and run the website effectively;
• consent: for non-essential cookies and analytics tools where consent is required;
• legal obligations: where we must retain or disclose information to meet applicable laws.

cookies and analytics

The website uses essential storage to remember your cookie preference. If you accept optional cookies, the website may also load Google Analytics to help us understand website traffic and usage patterns.

Further details about the technologies currently in use, legal basis, consent handling, and browser controls are available in our Cookie Policy.

recipients of personal data

We may share personal data with:

• internal teams and relevant Granstudio group entities involved in your request;
• website hosting, infrastructure, and technical support providers;
• email, communications, and form-processing service providers;
• analytics providers, but only where the relevant cookies or tools have been activated lawfully;
• professional advisers, auditors, insurers, or authorities where disclosure is required or justified.

We do not sell your personal data.

international transfers

Some service providers we use may process data outside the European Economic Area. Where that happens, we will rely on a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with additional safeguards where appropriate.

data retention

We retain personal data only for as long as necessary for the purposes for which it was collected and, where applicable, for as long as required by legal, regulatory, accounting, or defensive needs.

• inquiry and communication data is retained for the time needed to handle your request, manage any follow-up, and protect our legal position where appropriate;
• cookie consent records are kept in line with the retention described in the Cookie Policy;
• analytics data retention depends on the settings and retention periods applied by the relevant analytics provider.

your rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• request access to your personal data;
• request rectification of inaccurate or incomplete data;
• request erasure of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request portability of data where applicable;
• withdraw consent at any time where processing is based on consent.

The website does not use your data for solely automated decisions that produce legal or similarly significant effects.

how to exercise your rights

Requests concerning your personal data may be sent to the contact details listed below. To help us process your request, please provide enough information to identify you and to understand the scope of your request.

Where permitted by law, we may request additional information to verify your identity before acting on your request.

complaints

If you believe that your personal data has been processed in breach of applicable law, you may contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with your local data protection authority or with the Italian supervisory authority, the Garante per la protezione dei dati personali.

contact details

For privacy-related questions or to exercise your rights, please contact: