Privacy Policy

Kryalos SGR S.p.A., with registered office in Milan, Via Cordusio n. 1 (hereinafter, the "Company" or the "Owner"), as Data Controller, collects and processes the personal data of users (hereinafter, the "Users") who interact with the website (hereinafter the "Site") in accordance with the methods and for the purposes referred to in this statement, and in accordance with the European Regulation on the protection of personal data 679/2016 (hereinafter the "Privacy Regulation").

  1. Type of Data Processed

    The Company processes personal data spontaneously provided by Users in their interactions with the Site, and in particular:

    • personal and contact data, such as name, surname and email address provided by the User together with requests for information or assistance, sent through the appropriate "Contacts" section;
    • additional data provided by Users together with requests for information or assistance;
    • navigation data relating to the use of the services offered through the Site collected through cookies in accordance with the information on cookies available at the following link;

    (hereinafter jointly referred to as the "Data").

    For navigation and use of the Site, the provision of particular categories of personal data is not required pursuant to Article 9 of the Privacy Regulation. Therefore, the Users of the Site are requested not to communicate them to the Company.

  2. Purpose of the Treatment

    The Company processes User Data for the following purposes:

    • callow Users to use the Site's features, including requesting information or assistance on the Company's services through the appropriate "Contacts" section;
    • fulfill the obligations deriving from the applicable legislation, including the execution of communications to the competent authorities and supervisory bodies and to comply with their requests

      (hereinafter jointly referred to as the "Contractual Purposes");
    • assert or defend one's right in court or out of court also through third parties;
    • carry out activities functional to company and branch sales, acquisitions, mergers, demergers or other transformations and for the execution of such operations

      (hereinafter jointly referred to as the "Purposes of Legitimate Interest").
  3. Legal basis of the Processing 

    The processing of User Data for Contractual Purposes is necessary given its essentiality in order to:

    • allow Users to register on the Site and use the services offered through it; and
    • comply with the provisions of the applicable legislation in the case referred to in paragraph 2 letter b).

    If the User does not provide the Data necessary for the Contractual Purposes, it will not be possible to use the services and features of the Site.

    The processing of User Data for the Legitimate Interest Purpose is carried out, pursuant to Article 6, letter f) of the Privacy Regulation, for the pursuit of the Company's legitimate interest in defending its rights with reference to the case referred to in the previous paragraph 2 letter c) and of the Company and its counterparties to carry out the corporate operations indicated in paragraph 2 letter d) above. The processing for the purpose of legitimate interest is not mandatory and Users may object to said processing in the manner referred to in paragraph 9 below, except in the case in which the Company demonstrates the presence of overriding legitimate reasons or of exercise or defense. of a right pursuant to Article 21 of the Privacy Regulation.

  4. Scope of Data Communication

    For the purposes referred to in paragraph 2 above, the Data provided by Users may be brought to the attention of or communicated to the following categories of subjects - who process the data respectively as owners, managers or processors - located within the 'European Union:

    • to employees and / or collaborators of the Company as part of their duties or contractual obligations, inherent in relations with Users;
    • legal, administrative and tax consultants who assist the Company in carrying out its activities;
    • to companies or consultants in charge of installing, maintaining, updating and, in general, managing the hardware and software of the Site;
    • public bodies and / or judicial and / or control authorities that have access to the Data by virtue of regulatory or administrative provisions;
    • with specific reference, moreover, to the Legitimate Interest Purposes, potential purchasers of the Company and entities resulting from the merger or any other form of transformation concerning the Company.

    All Data provided by Users in relation to the use of the Site are not subject to disclosure.

    A complete list of those responsible can be requested from the Company by sending a communication to the address indicated or in paragraph 9 of this information.

  5. Transfer of Data Abroad

    User Data will not be transferred outside the European Economic Area.

  6. Method of Treatment

    The processing of User Data will be carried out with the aid of telematic, paper and IT tools. The Data will be processed in such a way as to minimize the risks of destruction, loss, unauthorized access or processing that is not permitted or does not comply with the purposes of the collection.

  7. Data Storage

    User Data will be kept only for the time necessary to pursue the specific purposes for which they were collected, as indicated in this statement. In any case, the Data collected for Contractual and Legitimate Interest Purposes will be kept for a period equal to the duration of the request received through the Site and for the 10 years following the same, except in cases where storage for a further period is request for any disputes, requests from the competent authorities or pursuant to applicable legislation. Once the above terms have elapsed, the User Data will be deleted, anonymized and / or aggregated.

  8. The Rights of Users

    Without prejudice to the possibility of Users not to provide their Data, Users, at any time and free of charge, will be able to: (i) obtain confirmation of the existence or not of Data concerning them; (ii) know the origin of the Data, the purposes of the processing and its methods, as well as the logic applied to the processing carried out using electronic tools; (iii) request the updating, rectification or - if interested - the integration of the Data concerning them; (iv) obtain the cancellation, transformation into anonymous form or blocking of any Data processed in violation of the law; (v) ask the Company to limit the processing of Data concerning them in the event that (1) Users contest the accuracy of the Data, for the period necessary for the Company to verify the accuracy of such Data; (2) the processing is unlawful and the Users oppose the deletion of the Data and instead request that its use be limited; (3) although the Company no longer needs it for processing purposes, the Data is necessary for Users to ascertain, exercise or defend a right in court; (4) Users objected to the processing pursuant to Article 21, paragraph 1, of the Regulation pending verification of the possible prevalence of the legitimate reasons of the Company over those of the Users; (vi) object at any time to the processing of Data for Legitimate Interest Purposes, except in the case in which the Company has overriding legitimate reasons or the need to assert or defend a right in any judicial proceeding; (vii) request the cancellation of the Data concerning them without undue delay; (viii) obtain the portability of the Data concerning them; (ix) to lodge a complaint with the Guarantor for the Protection of Personal Data, where the conditions exist.

  9. Contacts

    E-mail address to write to for the exercise of the rights of the interested party: Pursuant to art. 38 GDPR, we also provide you with the contact details of the Data Protection Officer (DPO), Giuseppe Vigna, who can be reached at the e-mail address:

  10. Changes and Updates

    This information is valid from the date indicated in its header. However, the Company could make changes and / or additions to this information, also as a consequence of any subsequent amendments and / or regulatory additions to the Privacy Regulation. Any changes to the information will be notified in advance to the Users. In any case, the updated text will always be available at

Kryalos SGR S.p.A.
Genius Loci Architettura - GLA