the rules of the game

Privacy Policy

Last updated: 28 July 2026

This notice is provided pursuant to art. 13 of Regulation (EU) 2016/679 (“GDPR”) to anyone visiting the site gericoagency.com, uses the contact forms or writes to us through the channels linked to the site. No pointless legalese: we tell you what we collect, why, and for how long.

1.Data controller

2.What data we process

• Data you provide us: by filling in the contact form you give us your name, email, phone number, subject and message. We use them solely to reply to you.
• Browsing data: the systems that run the site record, in normal operation, technical data such as IP address, server logs and browser type. They serve to guarantee the site’s operation and security.
• Cookies and measurement tools: described in the Cookie Policy; non-essential ones activate only with your consent.

3.Why we process them (and on what basis)

• Responding to your requests sent through the forms or contact channels — pre-contractual measures at your request (art. 6.1.b GDPR).
• Running and protecting the site — legitimate interest of the Controller (art. 6.1.f GDPR).
• Measuring the site and campaigns with analytics and marketing tools — only with your consent (art. 6.1.a GDPR), which you can withdraw at any time from the Cookie preferences.
• Complying with legal obligations (art. 6.1.c GDPR).

4.Where and how

Data is processed with IT tools and appropriate security measures. The site is hosted on servers in the European Union (Hetzner Online GmbH, Germany). Emails linked to the contact forms travel through Google Workspace (Google Ireland Ltd). Some technical resources (fonts, libraries) are loaded from third-party providers and may involve the communication of your IP address also to non-EU countries, on the basis of Standard Contractual Clauses (SCC).

5.Who can see them

Data may be processed by suppliers acting as data processors: hosting (Hetzner Online GmbH), email (Google Ireland Ltd — Google Workspace), technical resource providers (Google Fonts, CDN jsDelivr/unpkg/jQuery) and — only if you have given consent — the providers of the measurement and marketing tools (Google, Meta) described in the Cookie Policy. Data is not disclosed or transferred to third parties for their own marketing purposes.

6.How long we keep them

Contact request data is kept for the time needed to handle the request and any commercial relationship, and in any case no longer than 24 months from the last contact, unless required by law. Browsing data is kept for the technically necessary time.

7.WhatsApp and social channels

If you contact us through the WhatsApp button or our social profiles, the conversation takes place on the respective providers’ platforms (Meta Platforms, LinkedIn), which process data according to their own privacy policies. We use your contact details solely to reply to you.

8.Conversational tools

Should the site provide a conversational assistant, the messages you type are processed by an artificial intelligence service provider for the sole purpose of generating the reply. In that case you will find clear indication in the interface; in any case, avoid entering sensitive data in the conversations.

9.Your rights

At any time you can exercise the rights provided by artt. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
To exercise them write to info@gericoagency.com.