Linkedin Linkedin
  • ITA

    • Privacy Policy

    PLEASE CAREFULLY READ THE FOLLOWING INFORMATION IN WHICH WE INDICATE ALL THE DETAILS REGARDING THE PROCESSING, BY GEA – MANAGEMENT CONSULTING S.P.A. (“GEA”), OF THE DATA COMMUNICATED BY YOU ON THE OCCASION OF THE CONCLUSION OF CONTRACTS FOR GEA SERVICES AND/OR ON THE OCCASION OF THE REQUEST FOR INCLUSION IN THE DISTRIBUTION LIST OF PERIODIC COMMUNICATIONS (“NEWSLETTER”) ASLO IN RELATION TO THE DATA COLLECTED THROUGH THE WEBSITE WWW.GEA.IT (HEREINAFTER, THE “SITE”).
    THIS INFORMATION IS ALSO PROVIDED PURSUANT TO ART. 13 OF EU REGUALTION 2016/679 “GDPR” (HEREINAFTER THE “PRIVACY REGULATION”).

    Data Controller

    The data controller is GEA – Consulenti di Direzione S.p.A. with registered office in 20122 Milan Via Wolfgang Amadeus Mozart 21, tax code and VAT number 03039490150 REA MI-942251 (“Controller”). The data controller reserves the right to modify, update, add, or remove parts of this privacy notice at its discretion by communicating the change and the date of the change to users.

    Data Protection Officer

    The data controller has appointed a data protection officer, reachable by completing the following form: https://gea.it/en/contacts/.

    Other Parties to Whom Your Data May be Disclosed

    Your data may be shared with:

    • GEA staff and possibly its professionals who have committed to confidentiality or have an adequate legal obligation of confidentiality;
    • delegates and/or persons appointed by GEA to perform activities strictly related to the pursuit of the purposes mentioned above (including technical maintenance interventions on systems);
    • individuals, companies, or professional firms providing assistance and consultancy to GEA;
    • subjects, entities, or authorities to whom the communication of your personal data is mandatory under legal provisions or orders of competent authorities.

    The above-mentioned recipients act either as independent data controllers (e.g., Police and Judicial Authorities) or as Data Processors, specifically appointed pursuant to Article 28 of EU Regulation 2016/679, or authorized to process data pursuant to Article 29 of EU Regulation 2016/679. In addition, your personal data may be accessed by company employees and/or collaborators specifically trained and authorized to process it. Your personal data will not be disclosed and will not be transferred outside the European Economic Area.

    Types of Data Processed

    The types of data and information collected and processed by GEA include:

    • browsing data (collected automatically);
    • data provided voluntarily by the user;
    • data collected through the use of cookies.

    Browsing Data

    The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These are pieces of information that are not collected to be associated with identified individuals, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the website, as well as other parameters relating to the user’s operating system and computer environment. This data is used solely to obtain anonymous statistical information about the use of the Site and to check its correct functioning, and is kept for the time strictly necessary for statistical analysis. The data may be used to ascertain liability in the event of hypothetical computer crimes against the Site.

    Data Provided Voluntarily by the User

    GEA collects personal data voluntarily provided by users in cases such as:

    • sending, by users, of email messages requesting information about activities;
    • spontaneous submission by users of resumes;
    • collection of personal data voluntarily provided by users through the completion of the appropriate form, to access the possibility of receiving newsletters.

    Use of Cookies

    The Site uses cookies as specified in the Cookie Policy.

    Purposes of Processing

    Personal data will be processed for the following purposes:

    • conclusion of contracts for GEA services;
    • fulfillment of pre-contractual, contractual, and tax obligations arising from existing relationships;
    • compliance with obligations provided by law, regulations, EU legislation, or orders from authorities (such as anti-money laundering regulations);
    • exercise of GEA’s rights, such as the right to legal defense;
    • to allow browsing and consultation within the Site and to comply with legal obligations.

    Furthermore, user personal data will be processed to respond to requests received by GEA through the sending of email messages to the Contact page of the Site, to respond to spontaneous applications, and to send newsletters following form completion. Subject to what is indicated regarding browsing data, users are free to provide their personal data. Failure to provide them will result in GEA being unable to send newsletters and unable to consider requests for information and job offers.

    Data Processing Methods

    Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of personal data, unlawful or incorrect uses, and unauthorized access.

    Rights of the Data Subjects

    In accordance with the Personal Data Regulation, you are entitled to the following Specific Rights:

    • access (Article 15 of the GDPR);
    • rectification (Article 16 of the GDPR);
    • erasure (Article 17 of the GDPR);
    • restriction of Processing (Article 18 of the GDPR);
    • data Portability (Article 20 of the GDPR);
    • objection (Articles 21 and 22 of the GDPR);
    • post-mortem directives (Law No. 78-17 of January 6, 1978 concerning data processing, files, and freedoms).

    Right of Access

    You have the right to obtain from GEA confirmation as to whether or not data concerning you are being processed and, where that is the case, access to such data and the following information:

    • the purposes of the processing;
    • the categories of data;
    • the recipients or categories of recipients to whom the data have been or will be disclosed;
    • where possible, the envisaged period for which the data will be stored, or, if not possible, the criteria used to determine that period;
    • the existence of the right to request from GEA rectification or erasure of personal data or restriction of processing of your data or to object to such processing;
    • where the data are not collected from you, any available information as to their source.

    When data are transferred to a third country or to an international organization within the European Economic Area, you have the right to be informed of the appropriate safeguards relating to the transfer.

    Right of Rectification

    You have the right to obtain from GEA without undue delay the rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

    Right to Erasure

    You have the right to obtain from GEA the erasure of personal data concerning you without undue delay for one of the following reasons:

    • the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by GEA;
    • you have withdrawn your consent to the processing of these data, and there is no other legal basis for the processing;
    • you have objected to the processing under the conditions set out below, and there are no overriding legitimate grounds for the processing;
    • the data have been unlawfully processed;
    • the data must be erased to comply with a legal obligation;
    • the data have been provided by a child.

    Right to Restriction

    You have the right to obtain from GEA the restriction of processing your data in the following cases:

    • GEA verifies the accuracy of the data following your objection to the accuracy of the data;
    • the processing is unlawful, and you oppose the erasure of the data, instead demanding the restriction of their use;
    • GEA no longer needs the data for processing purposes, but they are still necessary for the establishment, exercise, and/or defense of legal claims;
    • you have objected to processing under the conditions set out below, and GEA is verifying whether the legitimate grounds pursued by GEA override your reasons.

    Right to Data Portability

    You have the right to receive from GEA the data concerning you in a structured, commonly used, and machine-readable format when:

    • the processing of data is based on consent and/or on a contract, and
    • the processing is carried out by automated means.

    When you exercise your right to data portability, you have the right to have the data transmitted directly from GEA to another data controller that you designate, where technically feasible.

    Right to Object

    You have the right to object at any time, for reasons relating to your particular situation, to the processing of data concerning you based on GEA’s legitimate interest. GEA will no longer process the data in such cases unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or may retain them for the establishment, exercise, or defense of legal claims. When data are processed for marketing purposes, you may object at any time to the processing of such data.

    Data Retention

    Personal data is retained for the time strictly necessary for the purposes of processing. In the event that you delete your account, ceasing to use the newsletter services, your data will be deleted, except for the need to fulfill contractual, administrative, tax, accounting, or legal obligations subsequent to the cessation of service use. Once these obligations are fulfilled, your data will be deleted in any case.

    Third-Party Data

    If you decide to provide us with third-party data, please ensure that these individuals have been previously and adequately informed about the processing methods and purposes indicated here. In this case, you act as independent data controllers, assuming all legal obligations and responsibilities.

    Information Update

    This information was published in May 2018 and may undergo changes over time, also related to the possible entry into force of new sector regulations, the update or provision of new services, or technological innovations. In such cases, the joint data controllers will notify you, highlighting these updates.