PRIVACY POLICY

Information on the Protection of Personal Data

Last update:23.06.2026

This Privacy Notice has been prepared to explain how personal data are processed by Marmi Savas SRL (“MARMISAVAS”, the “Company” or the “Data Controller”) in relation to individuals who visit the website www.marmisavas.com, use the contact forms, contact us through WhatsApp, telephone, e-mail or similar communication channels, or subscribe through the e-mail subscription area.

MARMISAVAS takes care to process your personal data in accordance with applicable personal data protection legislation, in particular the European Union General Data Protection Regulation (“GDPR”).

This Privacy Notice applies only to the website www.marmisavas.com and to the data processing activities carried out through this website. Third-party links, social media platforms, WhatsApp, Google services or other external services available through the website are subject to their own privacy policies.

1. Data Controller

Your personal data are processed by the following Data Controller:

Marmi Savas SRL

Address: Via Dorsale, 54, 54100 Massa-Carrara, Tuscany

Tax / Registration Number: 01448410454

E-mail: info@marmisavas.it

Phone: +39 333 613 0335

For any questions, requests or applications regarding your personal data, you may contact us through the communication channels indicated above.

2. Personal Data Processed

If you visit our website, use our contact forms, contact us via WhatsApp or e-mail, or subscribe to our e-mail communications, the following categories of personal data may be processed.

2.1. Technical data relating to website visits

When you visit the website, certain technical data may be processed in order to ensure the proper technical operation, security and performance of the website.

Such data may include:

IP address,
browser type and version,
device and operating system information,
pages visited,
date and time of visit,
referring link information,
server logs,
cookie preferences,
technical error and security records.

2.2. Data processed through the contact form

If you complete the contact forms available on our website, the following data may be processed:

name and surname,
telephone number,
e-mail address,
subject information,
message content,
IP address,
date and time of form submission,
technical security and log information.

Personal data submitted through the contact form may be stored in the administration panel of the website. These records may be viewed only by authorised persons and are processed for the purposes of evaluating the incoming request, contacting the user, preventing spam or misuse, keeping technical records and, where necessary, protecting legal rights.

2.3. Data processed within WhatsApp, telephone and e-mail communications

If you contact us through WhatsApp, telephone, e-mail or other communication channels available on the website, the following data may be processed:

name and surname,
telephone number,
e-mail address,
WhatsApp profile information,
message and conversation content,
date and time of communication,
information relating to your request,
product, service, catalogue, project or quotation requests.

If you contact us through WhatsApp, the communication takes place through the WhatsApp/Meta infrastructure. Therefore, data processing activities carried out by WhatsApp are subject to the privacy policies of the relevant platform.

2.4. E-mail subscription and newsletter records

If you use the e-mail subscription area available on our website, the following data may be processed:

e-mail address,
subscription date and time,
IP address,
subscription confirmation information,
technical records relating to e-mail communications sent,
unsubscribe or communication preference information.

Within the scope of e-mail subscription, your personal data may be processed for the purpose of sending newsletters, product updates, collection information, catalogues, commercial communications, campaigns or brand announcements, based on your explicit consent where required.

You may unsubscribe or withdraw your communication consent at any time.

2.5. Data processed through cookies and analytics tools

Cookies and similar technologies may be used on our website. In this context, data may be processed through, in particular, the following tools:

Google Analytics,
Google Tag Manager,
Google Search Console,
necessary cookies,
analytics cookies,
marketing cookies,
cookie preference management tools.

Google Analytics and similar analytics tools may be used to measure how often the website is visited, how users interact with the website, which pages are visited and the performance of the website.

Google Tag Manager may be used to manage various tags and analytics tools used on the website.

Google Search Console may be used to monitor the technical performance, visibility and indexing status of the website in Google search results.

Non-essential analytics and marketing cookies are activated only after obtaining the user’s explicit consent where required by applicable legislation. For more detailed information on the use of cookies, please review the Cookie Policy.

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

ensuring that the website operates securely, properly and efficiently,
detecting errors and technical issues on the website,
receiving and evaluating requests submitted through contact forms,
responding to product, catalogue, showroom, project, quotation or commercial cooperation requests,
communicating with users via telephone, e-mail or WhatsApp,
keeping and tracking form records in the administration panel,
preventing spam, misuse, fake submissions or security risks,
sending newsletters, announcements, catalogues, product information and commercial communications within the scope of e-mail subscription,
analysing website traffic and user experience,
measuring website performance through tools such as Google Analytics, Google Tag Manager and Google Search Console,
managing cookie preferences,
fulfilling legal obligations,
responding to requests from public authorities and official institutions,
protecting and defending our rights in the event of potential disputes.

4. Legal Bases for Processing Personal Data

Your personal data are processed based on the following legal bases, depending on the purpose of processing.

4.1. Management of contact requests

Your personal data are processed in order to evaluate the requests you submit through the contact form, e-mail, telephone or WhatsApp and to respond to you.

Legal basis: Taking steps at your request prior to entering into a contract, or legitimate interest.

4.2. Operation and security of the website

IP address, technical records, security logs and necessary cookies are processed for the operation and security of the website, technical maintenance and prevention of misuse.

Legal basis: Legitimate interest of the Data Controller.

4.3. E-mail subscription and commercial communications

Your personal data may be processed for the purpose of sending newsletters, catalogues, product updates, campaigns or commercial communications within the scope of e-mail subscription.

Legal basis: Explicit consent.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4.4. Analytics and marketing cookies

Google Analytics or similar analytics and marketing tools are activated based on your cookie consent where required by applicable legislation.

Legal basis: Explicit consent.

4.5. Legal obligations

Your personal data may be processed in order to fulfil administrative, legal, tax-related or official obligations arising from applicable legislation.

Legal basis: Legal obligation.

4.6. Protection of rights

Your personal data may be processed in order to protect, establish, exercise or defend our rights in the event of potential disputes, complaints or legal proceedings.

Legal basis: Legitimate interest of the Data Controller.

5. Parties to Whom Personal Data May Be Transferred

Your personal data may be shared, limited to the purposes stated above, with the following persons or organisations:

hosting and server service providers,
website software and maintenance service providers,
information technology service providers,
e-mail and communication infrastructure providers,
administration panel, CRM or form record system providers,
analytics and performance tool providers such as Google services,
communication platforms such as WhatsApp/Meta,
newsletter or e-mail delivery service providers,
accounting, legal and consultancy service providers,
authorised public institutions and official authorities,
legally authorised persons, institutions and organisations.

Your personal data are transferred only to the extent necessary and in accordance with applicable legislation.

6. International Data Transfers

Some service providers, software tools or digital platforms used on the website may be located outside the European Economic Area or may process data in countries outside the European Economic Area.

In particular, your personal data may be transferred abroad through Google, Meta/WhatsApp, e-mail delivery systems, hosting providers or other digital service providers.

Such transfers are carried out in accordance with applicable personal data protection legislation, within the framework of adequacy decisions, standard contractual clauses, explicit consent or other appropriate safeguards provided under applicable law.

7. Retention Period of Personal Data

Your personal data are retained for the period required by the purposes of processing and by taking into account the limitation, retention and evidence periods prescribed under applicable legislation.

In general:

contact form records are retained for the period necessary to evaluate the request and provide the required response;
records that turn into commercial quotations, projects or business relationships may be retained throughout the business relationship and for the applicable legal retention periods;
IP addresses and technical log records are retained for reasonable periods within the scope of security and technical requirements;
e-mail subscription data are retained as long as the subscription continues or until consent is withdrawn;
cookie preferences are retained for the period specified in the relevant cookie tool;
in the event of a legal dispute or official request, the relevant data may be retained for the necessary period.

Personal data whose retention period has expired are deleted, destroyed or anonymised.

8. Cookies

Necessary, analytics and marketing cookies may be used on our website.

Necessary cookies are required for the basic functions and secure operation of the website.

Analytics cookies may be used to measure website performance and improve user experience.

Marketing cookies may be used for advertising, retargeting, campaign measurement or similar marketing activities.

Non-essential cookies are used only with your explicit consent where required by applicable legislation. You may change your cookie preferences through the cookie preference panel available on the website.

For detailed information about cookies, please review the Cookie Policy.

9. WhatsApp and Third-Party Platforms

Our website may contain links to WhatsApp, telephone, e-mail or third-party platforms.

When you contact us through WhatsApp, your telephone number, profile information, message content and technical communication data may also be processed by WhatsApp/Meta. Such processing activities are subject to the privacy policies of the relevant third-party platform.

MARMISAVAS is not responsible for the independent data processing activities of third-party platforms. Therefore, we recommend that you review the privacy policies of the relevant platforms separately.

10. E-mail Subscription and Commercial Communication

If you share your e-mail address through the e-mail subscription form, we may send you information about MARMISAVAS products, collections, catalogues, services, announcements, campaigns or commercial communications.

Such communications are sent based on your explicit consent where required.

You may unsubscribe or withdraw your consent for commercial communications at any time. If you unsubscribe, your e-mail address will be removed from commercial communication mailing lists. However, certain records may be retained for a limited period where required for legal obligations or the protection of rights.

11. Automated Decision-Making and Profiling

No automated decision-making activity that produces legal effects concerning users or similarly significantly affects users is carried out through the website.

If analytics and marketing tools are used, such tools may be used for measuring website performance, improving user experience or managing marketing activities. Such processing is carried out subject to the user’s explicit consent where required.

12. Personal Data of Children

Our website is not designed for children.

MARMISAVAS does not knowingly aim to collect personal data belonging to children. If it becomes aware that personal data belonging to children have been processed, the relevant data will be deleted or necessary measures will be taken in accordance with applicable legislation.

13. Rights of the Data Subject

Under applicable legislation, you may have the following rights regarding your personal data:

to learn whether your personal data are being processed,
to request information if your personal data have been processed,
to learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
to learn the third parties to whom your personal data have been transferred,
to request correction of incomplete or inaccurate personal data,
to request deletion or destruction of personal data,
to request restriction of processing,
to exercise the right to data portability,
to object to processing based on legitimate interest,
to withdraw consent in processing activities based on explicit consent,
to lodge a complaint with the competent data protection authority.

You may contact us at the following address to exercise these rights:

info@marmisavas.it

Additional information may be requested in order to verify your identity when evaluating your application.

14. Right to Lodge a Complaint

If you believe that your personal data are being processed unlawfully, you have the right to lodge a complaint with the competent data protection authority.

Since Marmi Savas SRL is established in Italy, the competent authority is:

Garante per la protezione dei dati personali

Website: www.garanteprivacy.it

This right does not prevent you from using any other administrative or judicial remedies.

15. Changes to this Privacy Notice

MARMISAVAS may update this Privacy Notice depending on changes to the website, technologies used, services or applicable legislation.