Updated on 12/06/2026.

Data subjects: newsletter subscribers

In accordance with Articles 13 and 14 of European Regulation 2016/679, we inform you that Gallery Holding S.p.A., with registered office in Via Roma, 183 - 61032 - Fano (PU), Italy, VAT: IT02121020412, as Data Controller, processes your data (name, email, phone) to respond to your requests. The provision of data for the management of the contact service is optional, but it is necessary for the execution of the contract pursuant to Art. 6.1.b). Your data, subject to your consent given by selecting the appropriate marketing box, will be used to send commercial and advertising information in the form of informative messages and commercial and promotional communications relating to the activities and products of Gallery Holding S.p.A. via email, social, in full compliance with the principles of lawfulness and fairness and the provisions of the law. The provision of your data for this purpose is optional and does not compromise the response to your request for information. The legal basis for the processing is Art. 6.1.a.) of the GDPR. You may object to the processing at any time by using the unsubscribe link at the bottom of the email or by sending a request to the Data Controller at the addresses indicated in this policy.

Your personal data will be processed manually, electronically and/or telematically, through the use of cookies (as indicated in the cookie policy available on the website), by means of electronic computers using third-party software, automated contact methods (e.g. automated email campaigns), in compliance with the methods referred to in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures provided for.

Your data will be processed by appropriately appointed personnel and will be communicated externally to companies acting as independent Data Controllers or Data Processors:

• external parties providing cloud services;
• technical support service providers;
• third-party companies that provide IT system management services, including server hosting and backup services;

Your data may also be viewed by the company that manages the website, limited to technical access for maintenance and web server management purposes.

The complete list can be requested by writing to the Data Controller's contact details.

Your data will not be disclosed.

For the purpose of sending company communications, your data is transferred to countries outside the European Union: this transfer is in any case legitimate as it is guaranteed by the existence of adequacy decisions issued by the European Commission and/or standard protection clauses based on the models adopted by the European Commission pursuant to Article 46 of the GDPR.

You may request from the Data Controller a copy of the safeguards adopted for the transfer of your personal data outside the EU, as well as information on the places where they have been made available, by sending a specific request to the Data Controller via email at  [email protected].

Please note that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the retention period for your personal data is established until you decide to cancel your subscription to the service.

The Data Controller is Gallery Holding S.p.A., with registered office in Via Roma, 183 - 61032 - Fano (PU), Italy, VAT: IT02121020412,  [email protected], in the person of its pro-tempore legal representative.

The Data Controller has appointed a Data Protection Officer, who can be contacted at [email protected].

You have the right to obtain from the Data Controller the deletion (right to be forgotten), limitation, updating, rectification, portability, and opposition to the processing of your personal data, as well as, in general, to exercise all the rights provided for in Articles 15 et seq. of European Regulation 2016/679 by writing to  [email protected]. The data subject has the right to lodge a complaint with the Supervisory Authority.

EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Rights of the Data Subject

1. The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and

their communication in intelligible form and the possibility of lodging a complaint with the Supervisory Authority

2. The data subject has the right to obtain information on:

a) the origin of the personal data;

b) the purposes and methods of processing;

c) the logic applied in the case of processing carried out with the aid of electronic instruments;

d) the identification details of the data controller, data processors and designated representative pursuant to Article 5, paragraph 2;

e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or persons authorised to process personal data.

3. The data subject has the right to obtain:

a) the updating, rectification or, where interested therein, integration of the data;

b) the erasure, anonymisation or blocking of data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed;

c) certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected;

d) the portability of the data.

4. The data subject has the right to object, in whole or in part:

a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;

b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication