INFORMATION ON THE USE OF PERSONAL DATA
ARTICLE 13 OF THE 2016/679 (EU) REGULATION (“GDPR”)
Gi Group S.p.A. (“Gi Group”)
based at Piazza IV Novembre 5, 20124 Milano
e-mail address firstname.lastname@example.org
|DATA PROTECTION OFFICER
Piazza IV Novembre 5, 20124 Milano, for the attention of the “Data Protection Officer”
e-mail address: email@example.com
|WHY ARE YOUR PERSONAL DATA PROCESSED?
WHAT IS THE CONDITION THAT MAKES THE PROCESSING LAWFUL?
|FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?|
|The processing of personal data is carried out to process requests for information on the services offered by Gi Group and to send you free reports of your interest.
The processing of personal data is necessary for the execution of the contract with the data subject or pre-contractual measures adopted at the request of the same, according to art. 6 paragraph (1) let. b) of GDPR.
|For the time necessary to process your service request.
|The processing of personal data is carried out to forward your contact details to the Gi Group company of your country for the purpose of sending commercial messages regarding services similar to the one you requested. You can object to this processing activity at any time, as described below.
The processing of personal data is necessary for the purposes of the legitimate interests pursued by Gi Group, according to art. 6 paragraph (1) let. f) of GDPR and art. 130 paragraph 4 of the Legislative Decree No. 196 of 30 June 2003.
|For the time necessary to forward your data.|
|Once the conservation periods indicated above have elapsed, the personal data will be destroyed, deleted or made anonymous, compatible with the technical deletion and back-up procedures.|
|MANDATORY PROVISION OF PERSONAL DATA|
|The provision of personal data highlighted with an asterisk in the data collection form is mandatory. Refusal to provide such personal data does not allow Gi Group to process your service request.|
|RECIPIENTS OF THE DATA|
|Personal data may only be processed by employees of the companies departments authorised to process such data, as they are responsible for pursuing the above-mentioned purposes. These employees have received adequate operating instructions in this respect.|
|According to your country, the personal data will be communicated to Gi Group Companies for the purpose of sending commercial messages regarding services similar to the one you requested. You can object to this processing activity at any time, as described below.|
|Personal data may also be processed, on behalf of Gi Group, by subjects appointed as Processors, who are given adequate operating instructions. These subjects are included in the following categories:
• companies that provide IT services;
• Site management and maintenance companies.
|The list of data recipients is constantly updated and can be requested free of charge by sending a written communication to the Controller or an e-mail to firstname.lastname@example.org|
|TRANSFER OF THE DATA OUTSIDE THE EU|
|The data may be transferred abroad to countries that do not belong to the European Union, and in particular to Brazil, China, Russia, Serbia and Turkey following the signing by Gi Group with the importer of the data of the standard contractual clauses adopted/approved by the European Commission according to article 46, 2, letters c) and d) of the GDPR.
The standard contractual clauses may be consulted at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
|DATA SUBJECTS RIGHTS|
|You may ask the Controller for access to the personal data that refers to you, for it to be corrected or deleted, for the addition of incomplete personal data or for the use to be limited in the cases referred to in the GDPR, as well as to object to its processing in instances of legitimate interest of the Controller.|
|Furthermore, in cases where the processing is based on consent or on the contract and is carried out using automated tools, you have the right to data portability, in other words to receive the data in a structured, commonly-used and machine-readable format and, where technically feasible, to transmit those data to another controller without any hindrance.|
|At any time, you may submit a complaint to the Data Protection Authority, as well as pursue recourse to other means of protection provided for by the applicable laws.|
|These rights may be exercised by sending a communication in writing to the Controller at the address indicated above or by e-mail to email@example.com|