Privacy Policy


GTA Moda S.r.l. (hereinafter also "GTA", the "Company", "we", "our" or "us") has developed this Privacy Policy to describe how this website is managed, with reference to the processing of personal data of users/visitors consulting it.

This information is provided in accordance with Article 13 of the European Regulation 679/2016 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as additional national and European legislation in force on the matter. 

This information is addressed to those who connect to this website and use its web services and is provided only for this website and not also for other websites that may be consulted by the user through appropriate links.

This Privacy Policy is an integral part of the site and the services we offer through it. 

Access to and use of the site assumes that this Privacy Policy has been read and understood. 

If you do not agree with this Privacy Policy, we ask the courtesy of not using our site.

The Company may modify or simply update all or part of this Privacy Policy. Any changes or updates to the Privacy Policy will be available to all users in the Privacy section of the site as soon as the updates are active and will be binding as soon as they are posted on the site in this section. If you do not wish to accept such changes, you may discontinue your use of our site.

Your continued use of our website and our products and services following the posting of such changes and/or updates will be tantamount to acceptance of the changes and acknowledgement of the binding nature of the new terms and conditions.

The site is owned and operated entirely by the Company.

Data controller  

The data controller is GTA Moda S.r.l. (c.f. and p.iva 01054650286), with registered office in Selvazzano Dentro (PD), Via Padova 115. The company processes data in accordance with the requirements of the above-mentioned privacy regulations. 

To obtain more information and/or report possible violations, please contact us:

- by phone, at +39 049 8685623

- by e-mail, at

Type of data processed, purpose of processing and legal basis

It should be noted that the protection provided for in the European legislation concerns only personal data inherent to individuals or one-person enterprises. The same legislation also provides that any processing carried out by the controller is legitimate only insofar as it is based on one of the legal bases provided for in the Regulation.

On-line sales

This site contains a section ("Shop" and "Archive") that allows the user to proceed with the on-line purchase of the products of the owner of the site.

The system requires, for the submission and acceptance of Purchase Orders as well as for the subsequent execution of the contract, the user's provision of personal data, such as first name, last name, date and place of birth and other data (e.g., personal residence, place of delivery of goods, contact data such as telephone numbers, e.mail addresses and/or other computer contact information).

By default, the sending of the Purchase Order is conditional on the User, by following the system's instructions and ticking on the appropriate box, confirms that he/she has read and understood this policy, consenting to the processing of his/her personal data.

The provision of this data is compulsory for the use of the online sales service, in the sense that - in the absence of its provision - it will not be possible to conclude the contract or, consequently, to execute it.

These data will be used only for the purposes for which they are collected, i.e. the proper execution of the contract and any activity provided for and/or imposed by it.

The legal basis for the processing of this data is the user's consent, the pursuit of legitimate interests of the data controller or third parties, the need to execute the concluded contract as well as legal obligations to which the data controller is subject.

Newsletter service and site registration

If users/visitors, by connecting to this site and accessing the data collection area aimed at subscribing to the newsletter service (banner "Join the Circle"), fill in the relevant form with the requested data, this entails the acquisition by the Company owner of the data provided.

The user has, in addition, the right to register on the site by entering the required personal data, such as name, surname, date and place of birth and their e.mail addresses and/or other computer contact information.

These data will be used only for the purposes for which they are collected, i.e., the use of the newsletter service, marketing purposes and fulfillments related to registration on the site.

The provision of this data is mandatory for the use of services, in the sense that - in the absence of provision of the data required for registration to the site - the user/visitor will not be able to register on the site but will access it as a visitor; similarly, in the absence of provision of the data required for access to the newsletter service, it will not be possible to provide the service in question.

In any case, it will not be possible to subscribe to the site, nor activate or receive the newsletter service, without accepting this Privacy Policy, by ticking the corresponding box. 

The legal bases for this processing are: the execution of pre-contractual measures between the owner and the data subject, the consent of the data subject, and the legitimate interest of GTA in the exercise of its business activities and the pursuit of its corporate purpose.

Navigation data

The computer systems and software procedures used to operate this site acquire, during normal operation, some personal data that are then transmitted implicitly in the use of Internet communication protocols. 

This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. 

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing.

Data could be used to investigate responsibility in case of hypothetical computer crimes to the detriment of the site: except for this eventuality, data on web contacts do not persist for more than 24 months.

The legal bases for this processing are: the consent of the data subject and the pursuit of the legitimate interest of the data controller.


As part of this site, certain information about web access is collected through the use of cookies. 

For more information on the Company's Cookie-Policy please visit the following link (

The legal bases for this collection are the consent of the data subject and the pursuit of the legitimate interest of the data controller.

Site navigation

Apart from what is specified for the data voluntarily provided by the user to use the services offered by the site, for navigation data and cookies, visitors are able to navigate the site even without revealing personal information and data.

Data processing

The processing of personal data (in terms of, for example, collection, storage, use, transfer, deletion, etc.) will be carried out in compliance with the provisions of Article 5 of European Regulation 679/2016 (GDPR), in manual, paper, computer, digital and telematic form, including automated form, and, in any case, in compliance with the rules dictated regarding the security of the processing of Personal Data in accordance with the Regulations and applicable Italian legislation.

Personal Data may be processed within the limits and in the manner set forth in this notice, by employees and collaborators of the Company designated as authorized processors, who will receive appropriate operating instructions and will operate under the direct authority of the data controller.

With particular regard to the data provided by users/visitors for the purpose of online purchases, they may be processed and come to the attention of the following categories of appointees: administrative office, marketing office, sales office, product office, directors and consultants of the Company.

The data of users who register for the site and/or the newsletter service will be processed by the sales office employees assigned to the services in question.

Communication to third parties

In general, the personal data acquired by GTA will not be communicated to third parties, except for the fulfillment of legal obligations or to fulfill requests from the Public Authorities, and except as follows: a) the data provided by the user for the purpose of online purchases may be communicated to defined categories of recipients, such as professionals in charge of accounting, tax declarations and civil/tax compliance, legal advisors, lawyers, credit institutions, insurance companies, external warehouses, couriers/shippers/transporters for the purpose of carrying out deliveries, who may have access only to the personal data strictly necessary, and to the extent strictly necessary, to the performance of their tasks; b) the data provided by the user for the request for the newsletter service may also be communicated to MailChimp, a company that GTA uses for the performance of the service; also in this case, the processing will be limited to the data and to the extent strictly necessary to render the service itself; c) the data may also be accessed by the employees of the IT support firms (software houses) that GTA turns to for the maintenance and implementation of its IT technologies and equipment.

In the event that GTA makes use of digital cloud services, automated services (e.g., marketing automation for sending newsletters), platforms or other management programs hosted on servers located outside the European Union, this will be done after verification of the existence of adequacy decisions issued by the EU Commission regarding the level of protection of personal data in the country of destination, or of the existence, in that country, of adequate safeguards for the data subject as well as effective enforceable rights and remedies.

Data retention

Personal data collected in connection with online sales will be retained by GTA until the complete execution of the contractual relationships and, thereafter, for the time required by law and, in any case, until the ten-year prescriptive terms of the rights dependent on and/or related to the aforementioned relationships have fully run their course. 

Data and information collected for other purposes, including the newsletter service, will be retained for the sole purpose of providing the requested service and for the duration necessary for the same purpose, i.e. until the data subject's consent is revoked. 

Upon expiration of the aforementioned terms, the data will be deleted or stored anonymously, unless otherwise requested by the Authority or retention requirements established by law.

Exercise of the data subject's rights 

Pursuant to Articles 15-22 of European Regulation 679/2016 (GDPR), data subjects have the right at any time to obtain confirmation of the existence or non-existence of the same data and to know its content and origin, verify its accuracy or request its supplementation, updating, or rectification. 

Pursuant to the same provisions, they also have the right to request the deletion of the data, the restriction of their processing as well as to object to it, for legitimate reasons related to their particular situation, if the processing is carried out on the basis of a legitimate interest of the owner or in the public interest.

Data subjects may at any time object, without giving reasons, to the processing of their personal data for marketing purposes, and revoke their previously given consent by following the instructions on the Site and in each marketing communication.  

Data subjects also enjoy the right to data portability. 

Relevant requests should be made by writing to or contacting the data controller at the following address: 

Finally, pursuant to Article 77, data subjects enjoy the right to lodge complaints with the competent Supervisory Authority, which for Italy is the Garante per la protezione dei dati personali (, as well as the right to take legal action.

Revocation of consent

Data subjects may revoke the consent given for the purpose of data processing at any time, without affecting the lawfulness of processing based on the consent given before revocation.

Data security

The Company protects personal data through the application of security levels and procedures that protect personal data from unauthorized access, misuse, disclosure of the same, unauthorized modification, loss or destruction accidental or caused by unlawful act.


The site is not intended for use by minors. We understand the importance of protecting information intended for minors, especially in the online environment, and therefore we do not knowingly collect or maintain personal information referring to minors.