PLEASE CAREFULLY READ THE FOLLOWING INFORMATION IN WHICH WE INDICATE ALL THE DETAILS REGARDING THE PROCESSING, BY GEA – MANAGEMENT CONSULTING S.P.A. (“GEA”), OF THE DATA COMMUNICATED BY YOU ON THE OCCASION OF THE CONCLUSION OF CONTRACTS FOR GEA SERVICES AND/OR ON THE OCCASION OF THE REQUEST FOR INCLUSION IN THE DISTRIBUTION LIST OF PERIODIC COMMUNICATIONS (“NEWSLETTER”) ASLO IN RELATION TO THE DATA COLLECTED THROUGH THE WEBSITE WWW.GEA.IT (HEREINAFTER, THE “SITE”).
THIS INFORMATION IS ALSO PROVIDED PURSUANT TO ART. 13 OF EU REGUALTION 2016/679 “GDPR” (HEREINAFTER THE “PRIVACY REGULATION”).
The data controller is GEA – Consulenti di Direzione S.p.A. with registered office in 20122 Milan Via Wolfgang Amadeus Mozart 21, tax code and VAT number 03039490150 REA MI-942251 (“Controller”). The data controller reserves the right to modify, update, add, or remove parts of this privacy notice at its discretion by communicating the change and the date of the change to users.
The data controller has appointed a data protection officer, reachable by completing the following form: https://gea.it/en/contacts/.
Your data may be shared with:
The above-mentioned recipients act either as independent data controllers (e.g., Police and Judicial Authorities) or as Data Processors, specifically appointed pursuant to Article 28 of EU Regulation 2016/679, or authorized to process data pursuant to Article 29 of EU Regulation 2016/679. In addition, your personal data may be accessed by company employees and/or collaborators specifically trained and authorized to process it. Your personal data will not be disclosed and will not be transferred outside the European Economic Area.
The types of data and information collected and processed by GEA include:
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These are pieces of information that are not collected to be associated with identified individuals, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the website, as well as other parameters relating to the user’s operating system and computer environment. This data is used solely to obtain anonymous statistical information about the use of the Site and to check its correct functioning, and is kept for the time strictly necessary for statistical analysis. The data may be used to ascertain liability in the event of hypothetical computer crimes against the Site.
GEA collects personal data voluntarily provided by users in cases such as:
Personal data will be processed for the following purposes:
Furthermore, user personal data will be processed to respond to requests received by GEA through the sending of email messages to the Contact page of the Site, to respond to spontaneous applications, and to send newsletters following form completion. Subject to what is indicated regarding browsing data, users are free to provide their personal data. Failure to provide them will result in GEA being unable to send newsletters and unable to consider requests for information and job offers.
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of personal data, unlawful or incorrect uses, and unauthorized access.
In accordance with the Personal Data Regulation, you are entitled to the following Specific Rights:
You have the right to obtain from GEA confirmation as to whether or not data concerning you are being processed and, where that is the case, access to such data and the following information:
When data are transferred to a third country or to an international organization within the European Economic Area, you have the right to be informed of the appropriate safeguards relating to the transfer.
You have the right to obtain from GEA without undue delay the rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to obtain from GEA the erasure of personal data concerning you without undue delay for one of the following reasons:
You have the right to obtain from GEA the restriction of processing your data in the following cases:
You have the right to receive from GEA the data concerning you in a structured, commonly used, and machine-readable format when:
When you exercise your right to data portability, you have the right to have the data transmitted directly from GEA to another data controller that you designate, where technically feasible.
You have the right to object at any time, for reasons relating to your particular situation, to the processing of data concerning you based on GEA’s legitimate interest. GEA will no longer process the data in such cases unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or may retain them for the establishment, exercise, or defense of legal claims. When data are processed for marketing purposes, you may object at any time to the processing of such data.
Personal data is retained for the time strictly necessary for the purposes of processing. In the event that you delete your account, ceasing to use the newsletter services, your data will be deleted, except for the need to fulfill contractual, administrative, tax, accounting, or legal obligations subsequent to the cessation of service use. Once these obligations are fulfilled, your data will be deleted in any case.
If you decide to provide us with third-party data, please ensure that these individuals have been previously and adequately informed about the processing methods and purposes indicated here. In this case, you act as independent data controllers, assuming all legal obligations and responsibilities.
This information was published in May 2018 and may undergo changes over time, also related to the possible entry into force of new sector regulations, the update or provision of new services, or technological innovations. In such cases, the joint data controllers will notify you, highlighting these updates.