INFORMATION ON THE PROCESSING OF PERSONAL DATA – ART. 13 OF REGULATION (EU) 2016/679 (‘GDPR’)
WHO IS THE DATA CONTROLLER?
Gi Group Holding S.p.a.
based in Piazza IV Novembre 5, 20124 Milan
telephone n.: +3902444111, e-mail: it.privacy@gigroupholding.com (‘Gi Group’)
HOW CAN YOU CONTACT THE DATA PROTECTION OFFICER (‘DPO’)?
Piazza IV Novembre 5, 20124 Milan, to the attention of the ‘Data Protection Officer’
e-mail: dpo@gigroup.com
WHY ARE YOUR PERSONAL DATA PROCESSED AND WHAT IS THE CONDITION THAT MAKES THE PROCESSING LAWFUL?
The processing of personal data is carried out to receive information and promotional communications from other companies of the Group – also located outside the European Economic Area – relating to the services offered by the same companies, or for carrying out of studies and statistical and/or market research, using both traditional and automated contact methods (e.g., E-mail, sms, phone calls, etc.).
The legal basis that legitimizes the processing is consent. It is understood that the consent to the processing of data for this purpose is purely optional.
By clicking “Download“, you consent to the processing of data for the purpose of Marketing of Group Companies.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
The data will be processed until the consent is withdrawn.
Once the retention terms indicated above have elapsed, the personal data will be erased or rendered anonymous, compatibly with the technical cancellation and backup procedures.
ARE YOU OBLIGED TO PROVIDE THE PERSONAL DATA?
The refusal to provide your personal data does not allow Gi Group to process your request to download the Report.
This consent can be withdrawn at any time by following the procedures in the paragraph below “How can you withdraw your consent?“.
WHO ARE THE RECIPIENTS OF THE PERSONAL DATA?
Personal data will be processed exclusively by employees of the company functions authorized to process data for the aforementioned purposes, who have been expressly authorized to the processing and who have received adequate operating instructions.
Personal data may be disclosed to the following categories of subjects that act as controllers:
- Group companies, even outside the European Economic Area.
Personal data may also be processed, on behalf of the Company, by persons designated as Data Processors. These subjects are included in the following categories:
- Site management and maintenance services;
- Customer database management and maintenance services;
- Archiving services;
- Communications mailing services;
- Market research services.
The list of data recipients can be obtained by sending a written communication to the Data Controller or an e-mail to it.privacy@gigroupholding.com
DO WE TRANSFER DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)?
The data can be transferred abroad to countries not belonging to the EEA, and in particular to:
- Argentina, Switzerland and the United Kingdom, whose data protection level has been deemed adequate by the European Commission pursuant to art. 45 of the GDPR
- Brazil, China, Colombia, Hong Kong, India, Montenegro, Russia, Serbia, Turkey, upon signing the Standard Contractual Clauses adopted / approved by the European Commission pursuant to art. 46, 2, c) and d) of the GDPR
Adequacy decisions can be consulted at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
WHAT ARE THE DATA SUBJECTS RIGHTS?
Data subjects can ask the Data Controller for access to their personal data, their correction or cancellation, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as the opposition to processing in case of data processed for direct marketing purposes or legitimate interests.
Furthermore, for cases in which the processing is based on consent or the contract and is carried out with automated tools, data subjects have the right to exercise the right to data portability by receiving their personal data in a structured, commonly used and device-readable format, as well as, if technically feasible, to transmit them to another controller without impediments.
These rights can be exercised by sending an e-mail to it.privacy@gigroupholding.com.
Data subjects have the right to lodge a complaint with the competent Supervisory Authority (in particular in the Member State in which they usually reside or work or in the State in which the alleged violation has occurred).
HOW CAN YOU WITHDRAW YOUR CONSENT?
At any time, you can withdraw your consent to the processing of personal data carried out for direct marketing purposes by writing to the e-mail address: it.privacy@gigroupholding.com and / or by clicking on the appropriate links contained in the communications that will be sent to you.
The withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal.