Privacy policy
Last updated: 1 September 2026.
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Who processes your data
The data controller is Luigi Risi, trading as GJFC Factory, with registered address at Via Amedeo Crivellucci 16, 00158 Rome (RM), Italy — Italian tax code RSILGU00L13F138B.
For any matter concerning your data you can write to info@gjfcfactory.com or call +39 335 162 2042.
What data we collect, why, and on what legal basis
Quote and service requests
When you fill in the form on the Contact page we collect your name, your email address, any contact details you choose to leave us, the text of your request and any photographs you attach so we can assess the work.
We use them only to reply to you, to understand what work you need and to prepare a quote. The legal basis is the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR): without that data we cannot answer you.
We keep it for 24 months from the last contact, and longer only if the request becomes a job and tax or warranty obligations follow from it.
Signing up for updates
If you leave your email address in the sign-up form, we use it to let you know when the new site is live and for later updates about the workshop and our services.
The legal basis is your consent (Art. 6(1)(a) GDPR), which is freely given and which you can withdraw whenever you like: every email we send carries an unsubscribe link, and you can always write to us. Withdrawal does not affect the lawfulness of processing carried out beforehand.
We keep the address for as long as you remain subscribed, and in any case no longer than 24 months from the last contact without interaction.
Browsing the site
The site collects the technical data it needs to work — IP address, browser and device type, pages visited — and, if you consent, statistical data about how the site is used.
For strictly necessary cookies the legal basis is our legitimate interest in providing a secure, working site (Art. 6(1)(f) GDPR); for everything else it is your consent, which we collect with the banner on your first visit and which you can change at any time. The detail is in our Cookie policy.
Who we share the data with
We do not sell your data and we do not pass it to third parties for their own purposes.
The following processes it on our behalf, as data processor:
- Shopify International Ltd. / Shopify Inc. — the platform the site runs on, where the forms we receive and the subscriber list are stored, including the Shopify Forms app that generates the contact form.
Our advisers (accountant, lawyer) and the authorities may also access it, in the cases provided for by law.
Transfers outside the European Union
Shopify is a supplier based in Canada with infrastructure in the United States as well: your data may therefore be transferred outside the European Economic Area. The transfer takes place on the basis of the standard contractual clauses approved by the European Commission, or of an adequacy decision where applicable.
Your rights
At any time you can ask to access your data, to correct it, to have it erased, to restrict its processing, to receive it in a readable format in order to take it elsewhere, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it whenever you like.
To exercise these rights, write to info@gjfcfactory.com. We reply within one month.
If you believe the processing infringes the Regulation you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or take the matter to the courts.
How we protect the data
The site runs over an encrypted connection and access to the data collected is limited to the people who need to handle it in order to answer requests. No measure is perfect, however: please do not send us confidential information that is not necessary for assessing the work.
Minors
The site is not aimed at anyone under 16 and we do not knowingly collect their data. If you think this has happened, write to us and we will delete it.
Changes
If we change the way we process data we will update this notice and change the date at the top. We encourage you to re-read it from time to time.