Privacy Policy

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), this page describes how the personal data of users who visit the website www.marbamarmi.it (the “Site”) is processed.

1. Data Controller

Marba Marmi Srl
Via Ilice, 16 – 54033 Carrara (MS)
Tax Code/VAT No.: IT 01165990456
Email: info@marbamarmi.it
Phone: +39 333 7856028

2. Data processed

a) Browsing data. The computer systems that run the Site acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (for example IP address, browser type, operating system, pages visited, date and time of the request). This data is used to ensure the correct operation and security of the Site.

b) Data provided voluntarily by the user. By filling in the contact form or writing to the addresses shown on the Site, users provide their own data (first and last name, email, optionally phone number, subject and content of the message). This data is used exclusively to respond to the request.

c) Cookies and statistics tools. The Site uses technical cookies, necessary for its operation, and – only with the user’s prior consent – statistics cookies (Google Analytics). Before the user makes a choice, the Site loads Google’s tools with all consents denied (Google Consent Mode): no cookies are installed, but Google may receive anonymous, cookie-free signals relating to the visit (for example the page viewed and basic technical information). For details, please refer to the Cookie Policy.

d) Anti-spam protection. The contact form is protected by Google reCAPTCHA v3, a Google service that analyses technical data about the visit (for example IP address, browser and device type, behaviour on the page) in order to tell real users apart from automated programs. The service may set or read cookies. Google’s privacy notice and terms apply.

3. Purposes and legal basis for processing

  • Responding to requests sent through the contact form, email or phone – legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR);
  • Ensuring the operation and security of the Site and protecting it from spam and abuse – legal basis: legitimate interest of the Controller (Art. 6.1.f GDPR);
  • Collecting aggregate statistics on the use of the Site (Google Analytics) – legal basis: user consent (Art. 6.1.a GDPR), revocable at any time;
  • Complying with legal obligations or with requests from the authorities – legal basis: legal obligation (Art. 6.1.c GDPR).

4. Nature of provision

Providing the data marked as mandatory in the contact form is necessary in order to respond to the request; otherwise it will not be possible to follow up on the contact. Consent to statistics cookies is optional and refusing it does not limit browsing of the Site in any way.

5. Processing methods and retention

Data is processed using computer tools, adopting security measures suitable to prevent loss, unlawful use or unauthorised access.

  • Contact requests: retained for the time necessary to handle the request and, in any case, no longer than 24 months from the last contact, unless a commercial relationship is established (in which case the periods provided for by civil and tax law apply);
  • Statistics data (Google Analytics): retained for a maximum of 14 months, in aggregate form;
  • Browsing data: retained for the time strictly necessary for security purposes, subject to the need to investigate offences.

6. Recipients of the data

The data may be processed, on behalf of the Controller and as data processors, by:

  • Aruba S.p.A. – hosting services for the Site and email services (data processed in Italy/EU);
  • Google Ireland Limited – Google Analytics (statistics) and Google reCAPTCHA v3 (anti-spam protection of the contact form, which processes technical data about the visit such as the IP address and behaviour on the page): for Analytics, statistics cookies are installed only with the user’s prior consent; before consent Google receives only anonymous, cookie-free signals. Google may transfer data to the United States; such transfers are covered by the EU-US Data Privacy Framework and the Standard Contractual Clauses;
  • technical service providers in charge of building and maintaining the Site.

The data is not disclosed or transferred to third parties for marketing purposes.

7. Links to external sites

The Site contains links to third-party sites and services (Instagram, Facebook, WhatsApp, YouTube). These links do not involve any transfer of data until the user clicks on them; once reached, the privacy policies of the respective operators apply.

8. Rights of the data subject

Users may at any time exercise the rights provided for by Articles 15-22 of the GDPR: access to their data, rectification, erasure, restriction of processing, objection, portability, as well as withdrawal of any consent given (without affecting the lawfulness of processing based on consent before withdrawal).

Requests may be sent to info@marbamarmi.it.

Users also have the right to lodge a complaint with the Data Protection Authority (“Garante per la protezione dei dati personali”) (www.garanteprivacy.it).

9. Changes

This notice may be updated over time; you are invited to check this page periodically.

Last updated: 19 October 2026

Privacy