PRIVACY

Privacy notice

Last updated: October 2026. This is a courtesy translation; the Italian version prevails.

This notice is provided under Article 13 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 to visitors of griffifinancial.it / griffifinancial.com and to anyone using the contact form.

1. Data controller

Marco Griffi, owner of the sole proprietorship Marco Griffi Financial, Viale del Poggio Imperiale 9, 50125 Florence, Italy, VAT IT07161930487. Contact: marco@griffifinancial.com · PEC marco@pec.griffifinancial.com.

2. Data processed

• Data provided voluntarily: name and surname, email address, company, type of need and message content sent through the form, by email or via WhatsApp.
• Browsing data: technical data automatically collected by the systems that run the website (IP address, browser type, date and time of the request), used only to ensure its operation and security.

Please do not enter special categories of data (for example health data) or confidential information about third parties in the form.

3. Purposes and legal bases

• Replying to contact and information requests and carrying out pre-contractual activities requested by the data subject (Art. 6.1.b GDPR).
• Complying with legal obligations, for example tax and accounting obligations, if the request leads to an engagement (Art. 6.1.c GDPR).
• Ensuring website security and protecting the controller's rights in court (legitimate interest, Art. 6.1.f GDPR).

Data is not used for marketing purposes nor disclosed to third parties for such purposes.

4. Provision of data

Providing the data marked as mandatory is necessary to receive a reply; otherwise the request cannot be followed up.

5. Processing methods and recipients

Data is processed by the controller using electronic tools and appropriate security measures. Providers of website hosting and management and email services, as processors under Art. 28 GDPR, and professionals assisting the controller, bound by confidentiality, may have access to it. Data is not disseminated.

6. Transfers outside the European Union

Where technical providers process data outside the European Economic Area, the transfer is based on a European Commission adequacy decision or on Standard Contractual Clauses (Art. 46 GDPR).

7. Retention

Contact request data is kept for as long as needed to handle the request and in any case no longer than 24 months from the last contact, unless an engagement follows: in that case it is kept for the duration of the relationship and for the following 10 years required by civil and tax law. Browsing data is kept only as long as strictly necessary for website security.

8. Data subject rights

Data subjects may at any time request access to their data, rectification, erasure, restriction of processing and portability, and may object to processing based on legitimate interest (Arts. 15–22 GDPR), by writing to marco@griffifinancial.com. They also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Automated decision-making

No automated decision-making or profiling is carried out.

10. Changes

This notice may be updated; the current version is always published on this page. For cookies, see the cookie policy.