Data Protection Statement
Last updated: 08/2024
This data protection statement provides an overview of the processing of your data
by Granducato Gestioni srl, Granducato Natura Sarl, and Granducato di Toscana srls,
owners of the brands Allegra Toscana, Villa al Castello, La Corte del Re, Granducato
Collection, Allegra Toscana Viareggio, Vio VIllas, Granducato Natura, Granducato
Gestioni, Borgunto, L'Oro di Borgunto, Libercredit, and any other brand present on
www.granducatocollection.com. This statement applies to all websites, apps, other
services, and offerings provided by the companies and individuals of the group.
For requests regarding this data processing statement or the processing of data
by Granducato Gestioni srl, Granducato Natura sarl, and Granducato di Toscana srls,
please contact the Data Protection Officer of the companies at granducatogestioni@gmail.com. If you wish to exercise your right
to information or to be forgotten, including withdrawal of consent for marketing purposes,
removal from the newsletter, etc., please contact the Data Protection Officer via email. For further information, please consult the contact sections of our website.
We offer alternative ways to read this personal data processing statement.
In this section, you will first find some fundamental information. Subsequently,
we have divided this data protection statement into chapters based on topics
we believe may be of interest to you.
Chapter Selection
Each chapter is preceded by a brief introductory text in which we briefly summarize the
content of the chapter. If you want to have a complete overview of all data processing activities,
we recommend reading the introductory texts. If you wish to know the details, you can click
on "learn more" below each respective introductory text. You will then be shown the full
content of the relevant chapter.
For which offerings and services does this data protection statement apply:
The type and methods of data processing carried out by Granducato are consistent for
most of our offerings. Therefore, this data protection statement applies to all services and
offerings we provide to our customers in Europe. This applies regardless of the platform
through which we offer the service: website, app, physical points of sale, by phone,
events, or via social networks.
However, there are also services for which we process your data differently or for other purposes.
This may depend on the type of service or on requirements based on the country of use.
When we refer to these cases, which are exceptions to the standard practice, we speak of "service-specific"
or "country-specific" provisions.
Granducato Collection is not a single company. Granducato Gestioni is a group and
therefore consists of the companies Granducato Gestioni srl, Granducato Natura sarl, and
Granducato di Toscana srls. For simplicity, only the companies of the Granducato Collection group
that actually handle the processing of your data are listed below. If in the following we refer to "Granducato"
or "we", we mean the respective companies responsible within the Granducato Collection group.
Specifically, this refers to the following Granducato companies.

What you learn from this privacy statement:
What data is stored by Granducato.
What we do with this data and what it is needed for.
What data protection rights and choices you have available.
What technologies and data we use for personalization and adaptation of
our services and content to offer you a safe, simple,
seamless, and personalized shopping experience.
What technologies and data we use for advertising, including
tracking technologies.
1. What data is processed by Granducato?
Granducato offers various services that you can use in different ways. Depending on whether
you contact us online, by phone, in person, or otherwise, different data from different sources comes into play. Much of the data we process is provided by you
yourself while using our services, for example when you contact us and
register by providing your name, email address, or physical address. However, we also
receive technical data about devices and access that is automatically collected during
interaction with our services and visits. This may refer to the type of device
you are using. We collect additional data based on analyses we carry out (for example
within the scope of market research or customer evaluation). We may also receive
third-party data about you, for example from credit reporting agencies or payment
service providers.
2. For what purpose does Granducato use the data?
Granducato processes your data in compliance with all applicable data protection laws.
In doing so, we refer to the principles of data protection law for the processing of personal
data. Therefore, in principle, we only process your data for the purposes explained in this
privacy statement and declared at the time of their collection. These
are primarily the processing of purchases and the provision,
personalization, and development as well as the security of our service. In addition,
we use your data within the framework of strict German and EU data protection regulations but also for other purposes, such as product development, scientific
research (particularly in the fields of machine learning, artificial
intelligence, and deep learning) and market research for the optimization of
business processes, the needs-based design of our services as
well as personalized advertising and Google ads.
3. Personalized services
The development and provision of personalized features and services is our
top priority. Regardless of location, time, and type of device
used, we offer you an individual shopping experience and offerings tailored to
your individual interests. The processing of your data for the personalization of our
services at Granducato is an integral part of the services.
4. Information about websites and apps
We use your data to provide Granducato websites and apps.
In addition to device and access data, which is generated during every use of these
services, the type of data processed and the purpose of processing depend in particular on how
you use the functions and services made available through our services. Furthermore,
we use the data generated during the use of our services to understand how
our online offer is being used. Among other things, we use this information within the scope

of personalization to improve our services as well as for personalized advertising.
5. Information about social media fan pages
Granducato owns social media profiles on the Facebook and Instagram social networks. On our fan pages, we regularly publish and share content, offers, and tips. Social network operators record your usual behavior via cookies and similar technologies with every interaction with our fan pages or on other Facebook or Instagram sites. Fan page operators can view general statistics on the interests and demographic characteristics (e.g., age, gender, region) of their visitors. When using social networks, the nature, scope, and purposes of data processing are primarily determined by the operators themselves.
6. Newsletter
We offer various newsletter services that include our services. By subscribing to the newsletter, you can receive some of the newsletter services as indicated above (based on the purpose of subscription). There are also service-specific newsletters, which are an integral part of a specific service.
7. Product recommendations via email and top service
In relation to our services, we present you with information and offers from Granducato based on your interests. You may receive a limited number of individual product recommendations, surveys, and product review requests from us, regardless of whether you are subscribed to a newsletter or not. In accordance with legal provisions, we preferentially use data relating to previous orders to select individual product recommendations.
8. Gift vouchers
We use the data provided in connection with a Granducato voucher order for verification and order fulfillment, as well as for shipping and voucher redemption. This also includes the processing of data related to the use of the voucher, in particular for the purpose of preventing fraud and scams.
9. How does Granducato use my data for advertising purposes?
We and our advertising affiliates use your data for personalized advertising that is shown to you in Granducato services and on the websites and apps of other providers. For this purpose, we and our advertising partners use common internet technologies available on the market. This allows us to advertise with greater precision and present you with only advertising and offers that are relevant to you, as far as possible. This enables us to better respond to the personalization needs and new product research of our users, as well as to engage them long-term with our services through a personalized shopping experience.
10. Who are my data shared with?
Granducato shares data only if permitted by Italian or European data protection law. We maintain particularly close collaborations with certain service companies, such as in the customer service sector, with technical companies, or with logistics companies

(e.g. couriers such as Poste). In principle, these companies are permitted to process your
data only under specific conditions and on our behalf. To the extent that we employ
such companies as data processors acting on our behalf, service companies receive
authorization to access your data only to the extent and for the period necessary
to provide the respective service. If you purchase from a Granducato partner,
we transmit certain purchase data of yours to the Granducato partner, so that the
Granducato partner can deliver the ordered goods to you.
11. What data protection rights can I assert?
References to data protection: right of access (Article 15 GDPR), right to erasure (Article 17 GDPR), right to rectification (Article 16 GDPR), right to restriction of processing (Article 18 GDPR), right to data portability (Article 20
GDPR), right to lodge a complaint with a supervisory authority (Article 77 GDPR),
right to withdraw consent (Article 7 paragraph 3 GDPR) as well as the right to
object to certain data processing measures (Article 21 GDPR). If
you wish to assert your rights regarding data processing, you may contact the Data Protection Officer
at any time at the address granducatogestioni@gmail.com. Further information is available in the
Contact section of the website.
12. When are my data deleted?
We store your personal data for as long as necessary for the purposes of this
data processing declaration, in particular to fulfill legal and contractual obligations. Occasionally, we will also store your personal data for
other purposes, if and for as long as the law permits us to retain data for
specific purposes, including defense against legal claims.
13. How does Granducato protect my data?
Your personal data is transmitted securely via encryption. This also applies
to your order and customer login. For this purpose, we use the
SSL (Secure Socket Layer) encryption system. Furthermore, we protect our web pages and other
systems through preventive measures against loss, destruction, access,
tampering, or dissemination of your data by unauthorized persons.
14. Modifications to this data processing declaration
In the course of developing our websites and apps and implementing
new technologies to improve our services for you, modifications to these data protection notices may become necessary. Therefore, we recommend that you review
this data processing declaration periodically.
15. Contact
You may contact granducatogestioni@gmail.com at any time, our team
dedicated to data protection, for general inquiries or to exercise your rights.
16. Service-specific information
The data processing we carry out may vary depending on the service. Here you can
find information about the specific differences that apply.

17. Country-Specific Information
Our data processing may vary from country to country, and you can learn about country-specific differences here.
18. Cookie Notices
We and selected third parties use cookies or similar technologies for technical purposes and,
with your consent, also for other purposes as specified in the specific cookie policy.
Refusal of consent may make the relevant website features unavailable.
With regard to advertising, we and selected third parties may use precise geolocation data and identification through device scanning to store and/or access information on a device and process personal data such as your
usage data for the following advertising purposes: personalized ads and content, ad and content measurement, sales, audience insights, and innovative product development. new.
You can freely give, refuse, or withdraw your consent at any time by
accessing the preferences panel.
Here you can learn about the cookies we use.
To access an overview of all cookies, visit www.granducatogestioni.com/privacy or
unsubscribe from the site's contact form.