Last updated: October 2026
This notice explains how personal data of visitors who send a request through this site is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian data protection law (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).
In short
Your personal data is processed in compliance with the laws in force in Italy and in the European Union. It is not sold, transferred or disclosed to third-party companies for marketing, profiling or any other purpose of their own. The only exceptions are the technical providers strictly necessary to run the service (such as hosting and email), which process data on behalf of the Controller and under its instructions, and disclosures required by law or requested by an authority.
1. Data controller
GVE S.r.l. (Giovanni Varesi Exclusive), based in Milan, Italy, VAT number IT13556580960. Contact for any privacy request: giovannivaresiexclusive@gmail.com.
2. Data processed
- The data you enter in the forms: name, contact details (email or phone), message, watch information (brand, model, photo), approximate budget and the choices you make.
- Technical browsing data (for example IP address, date and time of the request), recorded by the server for security and proper operation of the site.
3. Purposes and legal bases
- Replying to and following up your requests: pre-contractual measures taken at your request and your consent (Art. 6.1.a and 6.1.b GDPR).
- Site security and prevention of abuse and spam: legitimate interest of the Controller (Art. 6.1.f GDPR).
- Compliance with legal obligations (Art. 6.1.c GDPR).
Providing the form data is optional, but without it the request cannot be answered. You can withdraw your consent at any time by writing to the address above.
4. Recipients of the data
Data is not sold or transferred to third parties. It may be processed only by the necessary technical providers (site hosting and email service), appointed as data processors, and disclosed to public authorities only when required by law.
5. Transfers outside the European Union
If technical providers process data outside the European Economic Area, this takes place with the safeguards required by the GDPR (for example standard contractual clauses). [to be verified with the chosen providers]
6. Retention
Data is kept for as long as needed to handle the request and any resulting relationship, and then for the period required by law. Requests left without follow-up are deleted within [period to be confirmed, for example 12 months]. Photos sent through the forms travel only in the email addressed to the Controller and are not stored on the site.
7. Security
The site uses a secure connection (HTTPS), checks uploaded files, limits the number of requests to block abuse, and uses neither profiling cookies nor analytics tools that track visitors.
8. Third-party services
- Fonts (Google Fonts): loaded from Google servers, which may receive the visitor's IP address. [to be hosted on the server before launch]
- Video (YouTube): the video is loaded only after you click, in enhanced privacy mode.
- Instagram and WhatsApp: links to external services; if you use them, your data is processed by those platforms under their own notices.
9. Your rights
You may request access to your data, rectification, erasure, restriction of processing, portability, and object to processing, by writing to giovannivaresiexclusive@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
