GUM GROUP / PRIVACY
How we handle personal data when you browse this website or contact GUM Group.
GUM Group S.p.A., Via del Lauro 9, 20121 Milan, Italy, is the controller. For privacy questions and rights requests, write to info@gumconsulting.com.
Email enquiries: data and purposes
When you email us, we process your name, email address, professional contact details and any information or attachments you choose to send. We use these data to understand your enquiry, respond and manage the related correspondence. Providing data is voluntary; without the information needed to respond, we may be unable to handle your request. Please avoid sending sensitive personal data that are unnecessary for your enquiry. The mailbox is managed internally through Google Workspace.
Legal bases
We handle general business enquiries on the basis of our legitimate interest in communicating with people who contact GUM Group and maintaining business relationships (Article 6(1)(f) GDPR). Where you request steps before entering into a contract with you, the basis is Article 6(1)(b) GDPR. Technical operation and security are based on our legitimate interest in providing a reliable, secure website. Processing necessary to meet a legal obligation is based on Article 6(1)(c) GDPR.
Website operation, analytics and storage
Framer hosts this website and processes technical connection data needed to deliver and secure it, such as IP addresses and browser/request information. Framer Analytics provides traffic statistics, including page views, sources, device type and approximate country. Framer states that its built-in analytics use no cookies or persistent visitor identifiers. We use these statistics to understand website usage. The introduction and portfolio use session storage to remember the animation and browsing position for the current browser session; the selected sector may appear in the URL. These functions do not serve advertising profiling.
Retention
We retain email enquiries for one year from receipt. If correspondence becomes part of a contractual relationship, statutory record or dispute, the relevant documents may be retained for the applicable legal period or the time needed to establish, exercise or defend legal claims. Session storage lasts for the browser session. Technical logs and analytics are retained according to their operational purpose and the limits of the provider’s service; they are not retained by GUM as individual visitor profiles.
Who receives the data
Access is limited to people authorised to handle correspondence and the service providers needed to operate the website and email. These include Framer for hosting and website services, and Google Workspace for email, together with their authorised subprocessors. Authorities or professional advisers may receive relevant data where required by law or necessary to address a specific legal matter. We do not sell enquiry data or use them to send unsolicited marketing.
International processing and external sites
Our providers may process data outside the European Economic Area. Their published data processing terms provide for adequacy decisions where applicable or standard contractual clauses and related safeguards for relevant transfers. You can request information about safeguards for your data at info@gumconsulting.com. Provider details are available in the Google Cloud Data Processing Addendum and the Framer Data Processing Addendum. Links to portfolio companies lead to independent websites governed by their own privacy notices.
Your rights and how to exercise them
Subject to the applicable conditions, you may request access, rectification, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your particular situation. Send requests to info@gumconsulting.com. You may also lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or another competent supervisory authority. We do not use your enquiry data for automated decisions producing legal or similarly significant effects.
Last updated: 5 November 2026.