privacy policy

For your subscription to the program for sending of newsletter and commercial communications, Gres Art s.r.l. Società Benefit processes the personal data that you voluntarily provide by filling in the form on the website www.gresart671.org (hereinafter the “Site”).

This Privacy Notice is provided to the Data Subjects in accordance with Article 13 of EU Reg. 679/2016 ("GDPR") by publication on the "newsletter" page of the Site. You are required to have read the Privacy Notice in order to submit your data.


1. Data Controller

The Data Controller is Gres Art s.r.l. Società Benefit (hereinafter the “Data Controller”) whit its registered office at Via S. Bernardino, 149/a, 24126 Bergamo (BG), Italy tax identification and VAT no. 04688290164, in the person of the legal representative pro tempore, domiciled at the Data Controller's registered office. You can contact the Data Controller at the following addresses:

• by e-mail: info@gresart671.org;
• by postal mail: Via San Bernardino, 141, 24126 Bergamo (BG), Italy.

The Data Controller may appoint other entities responsible for processing (hereinafter the "Data Processors"), as well as authorized subjects to carry out processing operations (hereinafter the "Authorized subjects") pursuant to Articles 28 and 29 of the GDPR. A complete and updated list of Data Processors and Authorized subjects is available by contacting the Data Controller at the contact details above.


2. Purpose of processing

The data will be processed for marketing purposes, i.e. to contact you by e-mail to send you (also by automated means) our newsletter, communications, also of a commercial nature, information and advertising material as well as invitations to workshops, events and initiatives, or to invite you to take part in market research or other surveys and/or activities aimed at detecting your degree of satisfaction with respect to the Data Controller's initiatives.


3. Nature of data provision

The provision of consent to the use of the requested data for the purposes described is optional. If consent is not given, it will not be possible for the Data Controller to contact you to carry out marketing activities.


4.Disclosure of data

Your personal data will not be subject to dissemination but may be shared, for the purposes described above, with the following recipients:

• subjects typically acting as data processors, i.e. persons or companies appointed by the Data Controller to manage the processing and sending of commercial communications and to carry out marketing activities;
• Persons authorised to process personal data necessary to carry out activities strictly related to the purposes described above or to exercise your rights according to privacy regulations;
• subjects, entities or authorities to whom it is mandatory to communicate your personal data under legal provisions or orders by the authorities.

5. Legal basis for the data processing

The legal basis for the processing of data for marketing purposes is Article 6 (a) of the GDPR (consent). Consent may be withdrawn at any time by writing to info@gresart671.org. Any withdrawal shall not affect the lawfulness of the processing prior to the withdrawal. The data subject may also opt out of the receipt of commercial communications by clicking on the 'unsubscribe' link at the bottom of e-mails sent by the Data Controller.


6. Data retention

Personal data will be processed for marketing purposes for up to 5 years from the date of issue of the relevant consent. At the end of the data processing period, the data will be deleted or permanently anonymised. However, data for which there is a legal obligation will be retained.


7. Transfer of data outside the European Economic Area (EEA)

The Data Subject's personal data will not be transferred outside the European Economic Area (EEA).Should it become necessary to transfer data outside the European Economic Area (EEA), the Data Controller will update this Privacy Notice. In any event, any data transfers will be carried out in compliance with and within the limits provided for by applicable legislation and, in particular, by Art. 44 et seq. GDPR.


8. Data Subject’s rights

The Data Subject is entitled to: the right of access to his/her own data; the right to rectification; the right to erasure; the right to restriction of processing; the right to obtain notification in the event of rectification, erasure or restriction; the right to data portability; the right to object; the right to withdraw consent given; the right not to be subject to a decision based solely on automated processing. The exercise of each of these rights is free of charge.

Should the Data Subject notify the Data Controller of his/her intention to exercise one or more of the rights guaranteed to him/her by the GDPR, the Data Controller will provide, without undue delay and, in any case, within one month of the request, information on the actions taken in this regard.

In order to exercise one or more of the rights provided for by the GDPR, the Data Subject may contact the Data Controller at the above-mentioned addresses.

The Data Subject also has the right to lodge a complaint with the supervisory authority (Italian Data Protection Authority).


9. Right to object

Pursuant to Art. 21 par. 1 and par 2. of the GDPR for the purposes of marketing and sending commercial communications you have the right to object, which can be exercised by writing to info@gresart671.org. By writing to this address, you may no longer receive commercial communications from the Controller. In addition, to unsubscribe from the newsletter service or stop receiving commercial communications, you may also click at any time on the “unsubscribe” link at the bottom of each communication you receive.

10. Amendments

The Data Controller reserves the right to amend this Privacy Notice at any time, including due to changes in applicable legislation, by updating this page. We therefore invite you to periodically check the Privacy Notice for updates.

In order to manage your request and/or your reservations at the restaurant "Gres Cafè" and/or “Portico”, as well as for any additional purposes for which you may consent, Gres Art s.r.l. Società Benefit processes the personal data that you voluntarily provide to the Company.

This Privacy Notice is provided to the Data Subjects in accordance with Article 13 of EU Reg. 679/2016 ("GDPR") by publication on the "contact" page of the website.


1. Data Controller

The Data Controller is Gres Art s.r.l. Società Benefit (hereinafter the “Data Controller”) whit its registered office at Via San Bernardino, 149/A, 24126 Bergamo (BG), Italy, tax identification and VAT no. 04688290164, in the person of the legal representative pro tempore, domiciled at the Data Controller's registered office. You can contact the Data Controller at the following addresses:

• by e-mail:info@gresart671.org;
• by postal mail: Via San Bernardino, 141, 24126 Bergamo (BG), Italy.

The Data Controller may appoint other entities responsible for processing (hereinafter the "Data Processors"), as well as authorized subjects to carry out processing operations (hereinafter the "Authorized subjects") pursuant to Articles 28 and 29 of the GDPR. A complete and updated list of Data Processors and Authorized subjects is available by contacting the Data Controller at the contact details above.


2. Purpose of processing

The data will be processed in order to manage your requests and manage your reservations at the "Gres Cafè" and/or “Portico” restaurant.
The personal data you provide relating to how you became aware of the Data Controller will be aggregated and anonymized for statistical purposes.


3. Nature of data provision

The provision of data is necessary to enable the Data Controller to reply your requests and/or to register your reservation at the restaurant.The provision of data for statistical purposes is optional, any refusal to provide such data does not compromise the management of the request.


4. Disclosure of data

Your personal data will not be subject to dissemination but may be shared, for the purposes described above, with the following recipients:

• subjects typically acting as data processors, i.e. persons or companies appointed by the Data Controller to manage the restaurant;
• Persons authorised to process personal data necessary to carry out activities strictly related to the purposes described above or to exercise your rights according to privacy regulations;
• subjects, entities or authorities to whom it is mandatory to communicate your personal data under legal provisions or orders by the authorities.

5. Legal basis for the data processing

The legal basis of the processing for the purpose of managing your requests and/or your reservations at the restaurant is Article 6(b) of the GDPR (execution of pre-contractual and contractual measures taken at the request of the data subject).

The legal basis of the processing for statistical purposes is Article 6 lett. (f) of the GDPR, the legitimate interest of the Data Controller in identifying the information channels in which to invest resources to increase the public and its visibility.


6. Data retention

The personal data processed for the management of your requests will be kept for the time necessary to process the request, while personal data processed for the management of your restaurant reservation will be kept for the time necessary to process your reservation. At the end of the data processing period, the data will be deleted or permanently anonymised. However, data for which there is a legal obligation will be retained. For statistical purposes, personal data will be processed for the time necessary for their anonymization and aggregation for the purpose of creating statistics.


7. Transfer of data outside the European Economic Area (EEA)

The Data Subject's personal data will not be transferred outside the European Economic Area (EEA).Should it become necessary to transfer data outside the European Economic Area (EEA), the Data Controller will update this Privacy Notice. In any event, any data transfers will be carried out in compliance with and within the limits provided for by applicable legislation and, in particular, by Art. 44 et seq. GDPR.


8. Data Subject’s rights

The Data Subject is entitled to: the right of access to his/her own data; the right to rectification; the right to erasure; the right to restriction of processing; the right to obtain notification in the event of rectification, erasure or restriction; the right to data portability; the right to object(see the next paragraph); the right to withdraw consent given; the right not to be subject to a decision based solely on automated processing. The exercise of each of these rights is free of charge.

Should the Data Subject notify the Data Controller of his/her intention to exercise one or more of the rights guaranteed to him/her by the GDPR, the Data Controller will provide, without undue delay and, in any case, within one month of the request, information on the actions taken in this regard.

In order to exercise one or more of the rights provided for by the GDPR, the Data Subject may contact the Data Controller at the above-mentioned addresses.

The Data Subject also has the right to lodge a complaint with the supervisory authority (Italian Data Protection Authority).


9. Right to object

Pursuant to art. 21 par. 1 of the GDPR, for data processing based on legitimate interest, the data subject has the right to object. This right can be exercised by writing to info@gresart671.org.


10. Amendments

The Data Controller reserves the right to amend this Privacy Notice at any time, including due to changes in applicable legislation, by updating this page. We therefore invite you to periodically check the Privacy Notice for updates.

Date of last update: October 10,2024

In order to manage your purchases, exhibition bookings and/or registration and participation in workshops and events, as well as for any additional purposes for which you may consent, Gres Art s.r.l. Società Benefit processes the personal data that you voluntarily provide by filling in the form on the website www.gresart671.org (hereinafter the “Site”).

This Privacy Notice is provided to the Data Subjects in accordance with Article 13 of EU Reg. 679/2016 ("GDPR") by publication on the "ticket" page of the Site. You are required to have read the Privacy Notice in order to submit your data.


1. Data Controller

The Data Controller is Gres Art s.r.l. Società Benefit (hereinafter the “Data Controller”) whit its registered office at Via San Bernardino, 149/A, 24126 Bergamo (BG), Italy tax identification and VAT no. 04688290164, in the person of the legal representative pro tempore, domiciled at the Data Controller's registered office. You can contact the Data Controller at the following addresses:

• by e-mail: info@gresart671.org;
• by postal mail: Via San Bernardino, 141, 24126 Bergamo (BG), Italy.

The Data Controller may appoint other entities responsible for processing (hereinafter the "Data Processors"), as well as authorized subjects to carry out processing operations (hereinafter the "Authorized subjects") pursuant to Articles 28 and 29 of the GDPR. A complete and updated list of Data Processors and Authorized subjects is available by contacting the Data Controller at the contact details above.


2. Purpose of processing

Personal data voluntarily provided by you are processed for the following purposes:

• manage your purchases and bookings for visits to exhibitions and/or registration for workshops and events, including the administrative management of the contract (even where participation is free of charge), the dispatch of tickets, the management of payments, credits and any disputes and prevention of fraud as well as in fulfilment of all obligations required by applicable laws and regulations;
• manage your participation in events, exhibitions and workshops, including the sending of communications and information related to the event/exhibition/workshop, the inclusion of your name in the list of participants, as well as in fulfilment of all obligations required by applicable laws and regulations (e.g., regarding safety).

In addition, with your consent, your personal data may be processed for the purposes of:

• marketing, i.e. to contact you by e-mail and/or to send you our newsletter, communications, also of a commercial nature, information and advertising material, invitations to workshops, events and initiatives or to invite you to take part in market research or other surveys and/or activities aimed at detecting your degree of satisfaction with respect to the Data Controller's initiatives. Should you decide not to receive any more marketing communications, you may unsubscribe using the appropriate button at the bottom of the commercial e-mails, or by writing to info@gresart671.org.
• save your credit card details or the details of the means of payment used by you, for the sole purpose of facilitating your further purchases.

During the event, photos and videos may be taken in areas appropriately marked by signs with specific information on the processing of personal data. Where required, participants will be provided with release forms to be signed, also pursuant to Article 10 of the Italian Civil Code and Articles 96 and 97 of the Italian Copyright Law.


3. Nature of data provision

The provision of data for the management of the contractual relationship and to enable you to participate in the event/exhibition/workshop is necessary, while the provision of data to inform you by e-mail for marketing purposes or to save your credit card data to facilitate your further purchases is always optional.


4. Disclosure of data

Your personal data will not be subject to dissemination but may be shared, for the purposes described above, with the following recipients:

• subjects typically acting as data processors i.e. persons or companies appointed by the Controller to manage ticketing and services related to events/exhibitions/workshops;
• subjects typically acting as data processors, i.e. persons or companies appointed by the Data Controller to manage the processing and sending of commercial communications and to carry out marketing activities;
• Persons authorised to process personal data necessary to carry out activities strictly related to the purposes described above or to exercise your rights according to privacy regulations;
• subjects, entities or authorities to whom it is mandatory to communicate your personal data under legal provisions or orders by the authorities.

5. Legal basis for the data processing

The legal basis for the processing of data to manage your purchases and your bookings for visits to exhibitions and/or registration and participation in workshops and events is Article 6 letter b) of the GDPR (execution of pre-contractual and contractual measures taken at the request of the data subject) and Article 6 letter c) of the GDPR (fulfilment of legal obligations to which the Data Controller is subject). The legal basis of data processing for marketing purposes is Article 6 letter a) of the GDPR (consent). The legal basis for the processing of your credit card’s data to facilitate your further purchases is Art. 6 letter a) of the GDPR (consent).


6. Data retention

Personal data are kept for the time strictly necessary to achieve the purposes for which they were collected. In particular:

• for the management of your purchases and bookings for visits to exhibitions and/or registration for workshops and events, the data will be retained for up to ten years after the purchase/booking or registration as well as for any further period required by law;
• for the management of your registration and participation in events, exhibitions and workshops, the data will be kept for the time strictly necessary to ensure your participation in the event/exhibition/workshop as well as for the further period required by law;
• for marketing purposes, the data will be kept for 5 years from the date you gave your consent;
• your credit card details or the details of the means of payment used by you, will be retainedfor 6 months from the date you gave your consent.

At the end of the data processing period, the data will be deleted or permanently anonymised.


7. Transfer of data outside the European Economic Area (EEA)

The Data Subject's personal data will not be transferred outside the European Economic Area (EEA).Should it become necessary to transfer data outside the European Economic Area (EEA), the Data Controller will update this Privacy Notice. In any event, any data transfers will be carried out in compliance with and within the limits provided for by applicable legislation and, in particular, by Art. 44 et seq. GDPR.


8. Data Subject’s rights

The Data Subject is entitled to: the right of access to his/her own data; the right to rectification; the right to erasure; the right to restriction of processing; the right to obtain notification in the event of rectification, erasure or restriction; the right to data portability; the right to object; the right to withdraw consent given; the right not to be subject to a decision based solely on automated processing. The exercise of each of these rights is free of charge.

Should the Data Subject notify the Data Controller of his/her intention to exercise one or more of the rights guaranteed to him/her by the GDPR, the Data Controller will provide, without undue delay and, in any case, within one month of the request, information on the actions taken in this regard.

In order to exercise one or more of the rights provided for by the GDPR, the Data Subject may contact the Data Controller at the above-mentioned addresses.

The Data Subject also has the right to lodge a complaint with the supervisory authority (Italian Data Protection Authority).


9. Right to object

Pursuant to Art. 21 par. 1 and par 2. of the GDPR for the purposes of marketing and sending commercial communications you have the right to object, which can be exercised by writing to info@gresart671.org. By writing to this address, you may no longer receive commercial communications from the Controller. In addition, to unsubscribe from the newsletter service or stop receiving commercial communications, you may also click at any time on the 'unsubscribe' link at the bottom of each communication you receive.


10. Amendments

The Data Controller reserves the right to amend this Privacy Notice at any time, including due to changes in applicable legislation, by updating this page. We therefore invite you to periodically check the Privacy Notice for updates.