Privacy notice
Last updated: September 2026
This notice describes how GRAF S.A.S. di Brakus Fabrizio & C. processes the personal data of users who visit this website or send a request through the contact form, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Data controller
GRAF S.A.S. di Brakus Fabrizio & C. — VAT IT04732170016 — operational headquarters in Caselle Torinese (Turin), Italy.
Email: info@grafsas.com — Phone +39 347 00 33 665.
Data processed and purposes
Browsing data
The systems hosting this website collect, during normal operation, some data whose transmission is implicit in the use of internet protocols (IP address, date and time of the request, page requested, browser). These data are used only to ensure the correct operation and security of the website and are kept for the time strictly necessary.
Data provided through the contact form
Name, company, email, phone and the content of the message are processed solely to answer the user’s request and for any commercial negotiation that follows. Legal basis: pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) and consent (Art. 6(1)(a) GDPR).
Cookies
This website does not use profiling cookies or tracking tools. See the cookie policy.
Provision of data
Providing the data requested in the contact form is optional, but failure to provide the mandatory fields makes it impossible to answer the request.
Recipients
Data may be processed by authorised staff of the controller and by providers of hosting and email services, appointed as data processors under Art. 28 GDPR. Data are not disclosed or transferred to third parties for marketing purposes.
Transfers outside the EU
Data are stored on servers located in the European Union. Should a provider process data outside the EU, this will take place in compliance with Chapter V of the GDPR.
Retention
Data collected through the contact form are kept for the time needed to handle the request and, in case of a commercial relationship, for the related legal obligations. Browsing data are kept for a maximum of 12 months.
Rights of the data subject
You may at any time exercise the rights set out in Articles 15–22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent, by writing to info@grafsas.com. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Changes
This notice may be updated. The version in force is the one published on this page.