Privacy Policy

1. Data controller

The data controller is Global Building S.r.l. a Socio Unico, with registered office in Via delle Industrie, Treviso (TV), Italy.
Email: [email protected]

2. Categories of data processed

We process the following categories of data:

• Identification data (first name, surname, company name).
• Contact data (email, telephone, address).
• Professional data (company, role, type of activity).
• Browsing data (truncated IP address, technical cookies, analytics).
• Website usage data — pages visited and documents downloaded (catalogues, technical data sheets, BIM files) — collected only with your consent to analytics cookies and, if you are registered for the download area, linked to your account.
• The content of messages sent through the contact forms.

3. Purposes of processing

• Responding to requests for contact, quotations or technical advice.
• Handling requests to download technical documentation.
• Sending the newsletter and technical and commercial communications (only with explicit, separate consent, withdrawable at any time — from the /profilo area for registered users, or by writing to [email protected]).
• Producing website usage statistics and understanding which documents are of most interest (only with consent to analytics cookies).
• Complying with legal, tax and contractual obligations.
• Assessing applications during recruitment.

4. Legal basis

Processing is based on:

• Art. 6 GDPR, point (b) — performance of pre-contractual measures and contracts.
• Art. 6 GDPR, point (c) — legal obligations.
• Art. 6 GDPR, point (a) — consent, for marketing communications and profiling.
• Art. 6 GDPR, point (f) — legitimate interest, for security management and the analysis of anonymised browsing data.

5. Processing methods and retention periods

Data are processed by automated means and are retained only for as long as strictly necessary for the purposes for which they were collected: generally 24 months for commercial contacts, 10 years for tax/contractual data, and 24 months for job applications (unless consent is given to keep them on file). Download-area account data are kept for as long as the account exists; website usage data not linked to an account are automatically deleted after 13 months. For each consent (newsletter, marketing) we keep the date and the version of the notice accepted, for accountability purposes.

6. Recipients

Data may be shared with third parties appointed as data processors, including:

• Aruba S.p.A. — website hosting (Italian data centre)
• Cloudflare, Inc. — CDN, WAF and DDoS protection
• Resend — transactional email delivery
• Google Ireland Ltd. — usage statistics via GA4 (only with your consent; anonymised IP)
• Tax and legal advisers and certification bodies, for legal obligations

Cloudflare and Google may transfer data outside the European Economic Area on the basis of appropriate safeguards (standard contractual clauses approved by the European Commission). Data hosted with Aruba remain in Italy.

7. Rights of the data subject

You may exercise at any time the rights set out in Articles 15-22 of the GDPR:

• Right of access to your data.
• Right to rectification and completion.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right to object and to withdraw consent.
• Right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

To exercise these rights, write to [email protected]. If you are registered for the download area you can do it yourself from the profile page: update your details (rectification), subscribe to or unsubscribe from the newsletter (withdrawal of consent) and permanently delete your account. Deleting the account also deletes the website usage data linked to it.

8. Amendments

This notice may be updated. The version in force is always available on this page. Last revised: July 2026.