top of page


Privacy information pursuant to art. 13 and 14 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 Grabat srl, with registered office in 34 Localita 'Ponte A Chiani, Arezzo, AR 52100, in the capacity of Data Controller of your data provided by filling in a specific paper form or present on the website ("Form"), in compliance with the aforementioned regulations, informs you of the following:


1) Purpose of the processing of personal data and nature of the consent.


A) The personal data you entered in the Form are primarily aimed at purchasing Grabat srl products through the website and the related contractual obligations. The indication of personal and / or contact data is necessary and consent to their processing is mandatory; the refusal to provide such data and / or the lack of consent to their treatment will make it impossible for Grabat srl to contact and supply the purchased products.


B) The e-mail address indicated by you, with your specific and further consent, will also be used for sending newsletters and / or communications on products sold by Grabat srl.

Our company is hosted on the platform. Stripe provides us with the online platform that allows us to sell our products and services. Your data may be stored through's data storage, databases and general applications. Your data is stored by them on secure servers, protected by firewalls.

All direct payment gateways offered by and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands such as Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its suppliers.

C) Furthermore, personal data will also be processed to fulfill the obligations established by law, by a regulation or by community legislation.


2) Methods and timing of processing.

The processing is carried out at Grabat srl, by its employees and collaborators (in charge of the processing) within the limits strictly necessary to achieve the aforementioned purposes, both through paper supports and through the aid of electronic or, in any case, automated means. , subject to the adoption of suitable measures to guarantee the security and confidentiality of the personal data collected, as well as to prevent their loss, illicit or incorrect use and unauthorized access.

The data are processed and stored for the time strictly necessary to achieve the purposes for which they were collected and therefore variable in relation to the nature of the activity.

We inform you that your personal data may be disclosed to third parties when it is required by law.


3) Owner and manager of the treatment.

The data controller is Grabat srl, with registered office in 34 Localita 'Ponte A Chiani, Arezzo, AR 52100, while the updated name of the Data Processor is available at the indicated office.


4) Rights of the interested party.

We inform you that, in particular pursuant to art. 11 and ss. of the Law ( of articles 7 of the Code ( and 13, paragraph 2, letters (b) and (d), 15, 18 , 19, 20 and 21 of the Regulation (, you have the right at any time to obtain confirmation of the existence or not of your personal data or of the person represented and to know its content and origin, to verify its accuracy, to request its integration or updating, or correction, as well as portability. You also have the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing.


Requests can be sent via e-mail to

bottom of page