PRIVACY DISCLAIMER

 

Dear Customer,

In compliance with the obligations established by the European Privacy Regulation EU/2016/679 (GDPR) we hereby inform you that G-Action SRL as Data Controller will process the personal data concerning you and that there have been or may come to us - by you or by other subjects – conferred/communicated during the relationship with our structure. The processing of data, freely given by you or collected in any other way, will be carried out in compliance with the privacy regulations in force; based on the principles of correctness, lawfulness and transparency and carried out in compliance with the principles of pertinence, completeness and non-excess.

1. Data controller

G-Action srl, via Abbondio Sangiorgio n°1, 20145 Milan, VAT number: 08457000969, e-mail: info@g-action.it

1. Time and place of data retention

The data will be kept for a period not exceeding 10 years from their collection and may be processed and transferred to subjects located in other countries belonging to the European Union or outside the European Union on the basis of an Adequacy Decision of the European Commission and in the presence of Adequate Privacy Guarantees.

1. Purpose of the treatment

The data you provide will be processed for the following purposes:

• For the performance of the assigned assignment

• For needs relating to the stipulation of contracts and assignments, their execution, subsequent modifications or variations and for any obligation envisaged for the fulfillment of the same.

• For operational, organisational, managerial, fiscal, financial, insurance and accounting needs relating to the established contractual and/or pre-contractual relationship.

• To fulfill any type of obligation established by laws, regulations or community legislation.

1. Methods of treatment

The processing will be carried out manually or partially automatically and may consist of the following operations: collection, registration, organization and conservation, consultation and use, processing, modification, selection, extraction, comparison, interconnection, transmission and communication.

The treatment will be carried out both with the use of paper supports and with the aid of electronic, IT and telematic tools suitable for guaranteeing the security and confidentiality of the data in compliance with the provisions of art. 32) of the European Privacy Regulation EU/2016/679 (GDPR).

In carrying out the processing operations, however, all technical, IT, organisational, logistic and procedural security measures will always be adopted, so that the minimum level of data protection required by law is guaranteed.

1. Legal basis of the treatment

The provision and processing of data is:

• mandatory and does not require your consent for the achievement of purposes related to obligations established by laws, regulations or community legislation.

• indispensable and does not require your consent for all personal data essential for the correct establishment, management and continuation of the commercial and/or contractual relationship.

• essential and does not require your consent to safeguard the vital interests of a natural person.

• indispensable and does not require your consent for the pursuit of legitimate corporate interests

• optional and requires your explicit consent for all personal data collected for purposes not directly and/or indirectly connected to contractual, pre-contractual, legal obligations, the protection of vital interests, the performance of public tasks, the exercise of public powers or pursuit of legitimate interests.

Any refusal, even if legitimate, to provide all or part of the above data, could compromise the smooth running of the relationship with our structure and in particular, for the personal data defined above as mandatory and indispensable, could result in the impossibility for us to carry out the normal course of business operations and the regular delivery of the requested products/services.

1. Data communication

The subjects or categories of subjects who may become aware of the data or to whom the personal data may be communicated are the following:

• Data Processors: Consultants and Consulting Firms, Freelancers, Self-Employed Workers, Technical and Engineering Studies, Agents and Representative Agencies, Banking and Insurance Institutions, Accounting Studies, Transport and Logistics Companies, Contractors, System Administrators

• Persons in charge of processing: employees and internal collaborators

Personal data may also be disclosed, but only in aggregate, anonymous form and for statistical purposes.

Personal data may also be communicated to public bodies, police forces or other public and private subjects, but exclusively for the purpose of fulfilling legal obligations, regulations or community legislation.

The data in question will not be communicated to other subjects other than those provided for in this disclosure and the data suitable for revealing the state of health of the interested party will in no case be disclosed.

1. Particular Data

If the processing could also concern personal data falling within the category of "particular" data (i.e. data suitable for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political , trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data suitable for revealing the state of health and sex life) or "judicial" (i.e. data suitable for revealing criminal records , of the registry of administrative sanctions dependent on crimes and the related pending charges or the quality of defendant or suspect) the treatment will be carried out in compliance with the guarantee measures established by the Privacy Guarantor and for the purposes strictly necessary for the regular performance of the company activity , of operations relating to the supply of products/services and the fulfillment of contractual and/or legal obligations gorge.

1. Rights of the interested party

By writing to privacy@g-action.it you can always request a copy of your personal data at any time, information regarding the location where your personal data is processed and an updated list with the identification details of all the Data Processors and of the System Administrators authorized to process your data. At any time, you can freely revoke the consent given, without any charge and prejudice to the lawfulness of the processing carried out up to that moment, and exercise the following rights of the interested party towards the Data Controller as provided for by the European Privacy Regulation EU / 2016/679: access, rectification, cancellation, limitation, opposition, portability.

 

Milan, April 15th 2019