Privacy Policy

This policy describes the management of our web site concerning the processing of your personal data when visiting us at the following web page or when registering to the following web page, according to Regulation (EU) 2016/679 (hereinafter “GDPR”):
(hereinafter “Website”)

Specifically, it regards the content of our Website only and it does not concern any other web site that might be visited by users by clicking on external links, which may be present on the Website.

“You” in this Privacy Policy means you as an individual.

“We” or “us” in this Privacy Policy means, in relation to your personal data, the Data Controller (as specified under the following paragraph 6).

1. What information is collected?

“Personal data” means information about you.

When you visit this Website we may collect personal data either:

  • (i) directly, where you are asked to provide your data. If you voluntarily decide to interact with the Website’s features, request for services offered by the Website, access reserved sections within the Website you may need to provide us with your information by filling in specific forms. Such information might include title, first name, last name, profile, company, country, email address, phone number; or
  • (ii) indirectly, tracking your use of certain pages of the Website (e.g., your internet protocol address) and by other technical means to monitor your access to the Website. The acquisition of this data is automatic and inevitable to permit the Website to run properly. We collect this data exclusively in anonymous form in relation to the access of the Website and for the purposes of monitoring its correct functioning and enhancing the Website functioning and content.

2. How will personal data be used?

We may process and use personal data collected via this Website for the following purposes:

a) to administer, monitor and manage the Website;
b) to fulfill your request to register to the Website;
c) to provide information and services to you at your request;
d) to send you communication via email related to information and updates on our activities or initiatives.

The legal bases for these processing activities are the legitimate interests pursued by us to provide our services through the Website and to promote our activities according to article 6 paragraph 1 letter f) GDPR, the need to fulfill your requests according to article 6 paragraph 1 letter b) GDPR and the need to comply with a legal obligation to which we are subject.

Subject to the specifications made below concerning the navigation data, the transmission of which is automatic and represents an inherent feature of Internet communication protocols, you are free to decide whether or not providing your personal data.

However, should you intend to register to the Website and/or have access to other services and features provided on the Website, filling in the required fields of the relevant specific forms with your personal data is necessary. In these cases, failure to submit your personal data will prevent you from accessing and using said services and features.

3. How can I exercise my right on my personal data?

At any time, you are entitled to exercise you rights on your personal data recognized by the GDPR as the right to request access to and rectification or erasure of your personal data or restriction of processing or to object to processing as well as the right to data portability.

You also have the right to lodge a complaint before the competent supervisory authority, in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

To exercise the above-mentioned rights and for any further information about the processing activities carried out by us, and/or the exercise of your rights, you may contact us at the email address

4. Are personal data transferred to another country and are personal data disclosed to other entities?

For the purposes specified under paragraph 2 above, your personal data may be transferred to other legal entities within Design Holding Group located in countries inside the European Union for the purposes listed above.

In case the transfers of your personal data to extra-EU countries is necessary, it will occur on the basis of appropriate measures designed to protect personal data and in accordance with Chapter V GDPR.

In addition, your personal data will be processed by third parties belonging to the following categories:

a) third parties that provides services for the management of the IT system;
b) third parties that provides legal, accounting and consulting services;
c) law enforcement or regulatory agencies.

The subjects pertaining to the categories indicated above shall act, in some cases, as autonomous data controllers, in other cases, as data processors specifically appointed by us pursuant to Article 28, GDPR.

5. How long are personal data retained?

Your personal data will be processed and stored for as long as required for the purposes for which they were collected, and in accordance with the storage periods provided for by the applicable laws. After such period, your personal data will be automatically and permanently erased or made anonymous.

Should you register to the Website, your personal data will be deleted following your unsubscribing from the Website, as long as no dispute regarding the services we have provided to you are pending at the time of your unsubscribing from the Website.

6. Who is the data controller and data protection officer?

Design Holding S.p.A., with registered office in 20121 Milan, Via Alessandro Manzoni, 38, in person of its legal representative pro tempore, is the Data Controller with respect to the processing of your personal data as described in this privacy notice.