Privacy policy pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR)
This page describes the methods of processing the personal data of users who consult the website of GECO Srl, accessible electronically at the following address: https://www.gecoitalia.biz
Data controller
The data controller is GECO Srl, with registered office in Via Ugo Foscolo 9 - 28066 Galliate (NO), reachable at the following contacts: tel. +39 0321 806957 and email privacy@gecoitalia.biz.
Place of data processing
The processing connected to the web services of this site takes place at the aforementioned registered office and is handled only by personnel in charge of processing, or by persons in charge of occasional maintenance operations.
Types of data processed
- Browsing data: During their normal operation, the computer systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This data category includes IP addresses or domain names of the computers used by users connecting to the site, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user's operating system and IT environment.
- Data voluntarily provided by the user: The optional, explicit and voluntary sending of emails to the addresses indicated on this site, as well as the filling out of forms, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the communication.
- Cookies: For details on the use of cookies, please refer to the specific cookie policy.
Purpose of processing
The personal data provided by users who submit requests or intend to use services or products offered through the site will be used solely to provide the requested service or provision and will be disclosed to third parties only if necessary for this purpose. The legal basis of the processing is the execution of pre-contractual measures (Art. 6, para. 1, letter b of the GDPR).
In particular, the data collected will be processed:
- to allow navigation on the site;
- to respond to requests sent through the form;
- for purposes related to the execution of a contract to which the user is a party or to the execution of pre-contractual measures taken at the user's request;
- to fulfill legal, accounting or tax obligations;
- to assert or defend a right in court;
- to send newsletters and promotional communications (subject to consent).
Processing methods and data retention
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
Optional provision of data
Except as specified for browsing data, the user is free to provide personal data through request forms. Failure to provide such data may make it impossible to obtain the requested service.
Data communication
The personal data provided may be disclosed to third parties for purposes related to the provision of the requested service or product. These parties will process the data as independent data controllers or as data processors duly appointed by GECO Srl. In particular, data may be disclosed to the following categories of recipients: companies providing IT services, consulting firms, and administrative service providers.
Rights of the data subject
The data subject has the right to request access to their personal data from the data controller, as well as rectification or erasure of such data, restriction of processing, or to object to processing, in addition to the right to data portability. The data subject also has the right to lodge a complaint with the Data Protection Authority.
Requests can be sent to the data controller at the above-mentioned addresses.
Changes to this policy
This privacy policy may be subject to updates. Users are therefore invited to consult it periodically to stay informed of any changes.