PRIVACY POLICY
(last update: 29 June 2026)
This Privacy Policy is provided pursuant to Regulation (EU) 2016/679 (the “GDPR”) and the applicable national legislation on the protection of personal data for users visiting www.gemintercapital.com.
1. Data Controller
The Controller of Personal Data is:
GEM InterCapital S.r.l.
Via della Fonte Veneziana, 6
52100 Arezzo (AR) - ITALIA
Tax Code & VAT No: 02529800514
Email: info@gemintercapital.com
PEC: gemintercapital@pec.it
2. Categories of Personal Data Processed
During your visit to the website, the following categories of personal data may be collected:
• Browsing data.
• Data voluntarily submitted through the contact form.
• Data contained in email communications.
The contact form requires the following information:
• Full Name
• Telephone Number
• Email Address
• Message
3. Purposes of Processing
Personal data are processed exclusively for the following purposes:
• Responding to requests for information.
• Providing information about our services.
• Managing pre-contractual relationships.
• Complying with legal obligations.
The website does not carry out automated marketing activities or send newsletters.
4. Legal Basis for Processing
Processing is based on Article 6 GDPR:
• Performance of pre-contractual measures requested by the data subject.
• Compliance with legal obligations.
• The Data Controller’s legitimate interest in managing incoming requests.
5. Methods of Processing
Personal data are processed using electronic and IT systems in accordance with the principles of lawfulness, fairness, transparency, data minimisation and security. Appropriate technical and organisational measures are implemented to prevent unauthorised access, loss, destruction or unlawful disclosure.
6. Nature of Data Provision
Providing the data requested in the contact form is voluntary. Failure to provide mandatory information may prevent the Data Controller from responding to your request.
7. Recipients of Personal Data
Personal data may be processed exclusively by authorised persons or by service providers acting as Data Processors pursuant to Article 28 GDPR, solely for activities strictly necessary to provide the requested services.
Examples include:
• Hosting provider
• IT service providers
• Administrative, tax and legal advisers, where necessary.
Personal data will not be disclosed.
8. Website Hosting
The website is hosted on infrastructure provided by Aruba S.p.A. Data processing takes place within the European Economic Area (EEA), unless technical requirements make otherwise necessary while ensuring full compliance with the GDPR.
9. Transfers of Personal Data Outside the EEA
Personal data are not transferred outside the EEA. Should such a transfer become necessary, it will be carried out in compliance with Articles 44 et seq. of the GDPR.
10. Data Retention
Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected and in compliance with applicable legal obligations. Contact requests are retained for the time required to manage them and, where applicable, for the retention period required by law.
11. Data Subject Rights
Data subjects may exercise the rights provided for under Articles 15–22 GDPR, including the right to:
• Obtain confirmation as to whether personal data are being processed.
• Access their personal data.
• Request rectification.
• Request erasure.
• Request restriction of processing.
• Object to processing where permitted by law.
• Request data portability.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to:
info@gemintercapital.com
12. Right to Lodge a Complaint
If a data subject believes that the processing of personal data infringes applicable data protection laws, they have the right to lodge a complaint with the Italian Data Protection Authority or seek judicial remedy.
13. Cookies
This website uses only technical cookies strictly necessary for the proper functioning of its pages and requested services.
The website does not use:
• Profiling cookies
• Advertising cookies
• Remarketing systems
• Third-party analytics or tracking tools
• Google Analytics
• Google Tag Manager
• Meta Pixel
• LinkedIn Insight Tag
The use of technical cookies does not require the user's prior consent.
14. Links to third-party websites
The website may contain links to third-party websites. The Data Controller is not responsible for the processing of personal data carried out by such websites, which are governed by their own privacy policies.
15. Changes to this Privacy Policy
The Data Controller reserves the right to update this Privacy Policy at any time, including as a result of legal or technical changes.
The latest version will always be published on this page together with the date of the last update.