Articles 12 et seq. of Regulation (EU) 2016/679 (GDPR)
G.S. SRL UNIPERSONALE - INDUSTRIAL SERVICE ITALIA, with headquarters in Via Industrie, 8 - 26010 Ripalta Cremasca (fraz. San Michele (CR) - Italy, is constantly committed to adopting technical and organizational solutions aimed at guaranteeing high standards of lawfulness, safety and protection in the processing of personal data. To this end, the requirements of the General Data Protection Regulation of the European Union (hereinafter in the text "GDPR", acronym for General Data Protection Regulation) and other legal provisions are implemented, including, in particular , those of the Code regarding the protection of personal data (hereinafter "Privacy Code" or "Code").
1. Who is the data controller?
G.S. SRL UNIPERSONALE - INDUSTRIAL SERVICE ITALIA, with headquarters in Via Industrie, 8 - 26010 Ripalta Cremasca (fraz. San Michele (CR) - Italy, is the owner of the processing of your personal data in accordance with the GDPR and the Code.
For the preparation of estimates and offers, for the stipulation of the contract and for its execution, G.S. SRL will process certain personal data for the purposes indicated in this data protection statement.
2. What data do we process?
Personal data means any type of information relating to an identified or identifiable natural person (hereinafter "Data"). As part of the preparation of Order Confirmations (sales contracts), the conclusion and execution of the contract between the final customer and G.S. SRL, we process your personal data within the limits of what is permitted by law, especially taking into account the principle of data minimization.
This concerns in particular the following information:
Data provided by you: when requesting and receiving a quote, or during the execution of a contract between G.S. SRL and your company, you will have to provide us with some information, such as for example (the following list is not intended to be exhaustive, but is given only by way of example): your name and surname and your contact details (including address, telephone number and e-mail box). The provision of such information is a necessary requirement for the conclusion of the contract with G.S. SRL; failure to communicate such data may make it impossible to conclude the contract with G.S. SRL and its inability to provide the related services and products.
Data collected by third parties: as part of the initial phase of preparing the offer or order confirmation, we may also use personal data that will be provided to us by third parties. These data include, for example, a series of data from creditworthiness assessment databases, such as, for example, chamber of commerce surveys (through access to databases such as, for example, that of Cerved), or other accessible information through the aforementioned databases.
Particular categories of personal data: by particular categories of personal data we mean information that reveals your ethnic or racial origin, your political opinions, your religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose to uniquely identify a natural person, data on the health or sexual life and sexual orientation of the person. As a rule, we avoid collecting and processing particular categories of personal data.
3. On what legal basis will we process your data?
We will only process your Data where permitted by applicable legal provisions. Specifically, we will process your data on the basis of articles. 6 and 9 GDPR and on the basis of consent pursuant to art. 7 GDPR, as well as in compliance with the corresponding rules of the Code:
Consent (art. 6 (1) paragraph 1 (a), art. 7 GDPR: we will process certain Data only in the presence of your preliminary, free and express consent. You have the right to revoke the consent given at any time with effect for the future.
Execution of a contract or pre-contractual measures (Article 6 (1) paragraph 1 (b) GDPR): in order to enter into your Contract with G.S. SRL and to execute it, we need to have access to certain Data.
Compliance with a legal obligation (Article 6 (1) paragraph 1 (c) GDPR): G.S. SRL is subject to a number of regulatory requirements. In order to ensure compliance with these requirements, we need to process certain data.
Protection of legitimate interests (Article 6 (1) paragraph 1 (f) GDPR): G.S. SRL will process certain data in order to protect its interests, or the interests of third parties. This, however, only applies if, in the specific case, your interests do not prevail.
4. For what purposes will we process your data?
We will process your data exclusively for the purposes permitted by the data protection legislation. This concerns the following purposes: i) purposes previously approved by you; ii) data processing in order to execute our Agreement; iii) execution of pre-contractual measures at your request; iv) fulfillment of the legal obligations to which we are subject (including legal obligations and provisions established by the competent authorities); v) safeguarding our legitimate interests or the legitimate interests of third parties, unless your interests prevail over them; vi) exercise of our rights and fulfillment of our obligations under social security and social protection laws; vii) assessment, exercise or defense of a right or legal claim; viii) for reasons of significant public interest; ix) marketing and advertising, in particular direct marketing activities.
Among other things, we will process your data for the specific purposes set out below. Please note that this is not a complete and exhaustive list of individual purposes, but only a series of examples intended to illustrate the above purposes.
4.1 Purposes of processing relating to the Contract
We must process your data above all to execute the contract entered into with you. As part of the Contract, we will process your Data in particular to carry out the following tasks / activities:
a) Formulation of offers and estimates: in order to formulate one or more offers that you can evaluate according to your needs, we may need to process some of your personal data.
b) Decision on the conclusion of the Contract: in order to decide whether to enter into a Contract with you, and possibly under what conditions, we may have to examine and process the Data concerning you. To determine whether or not to grant a deferred payment to your company, we may request company registration (through access to databases such as, for example, that of Cerved), or other information accessible from these databases.
c) Contact you in relation to the Contract: as part of the initial phase of the pre-contractual and contractual relationship and for the entire duration of the Contract, there may be the opportunity or the need to contact you for reasons related to your Contract. For this, we need your personal information.
d) Contract Management: Contract management activities include the management, modification, execution and updating of our agreements in general.
e) Customer service: to offer you a valid customer service, we will regularly process your data, in order, for example, to give you comprehensive advice.
f) Debt collection: in the context of contractual agreements and current regulations, we have the right to carry out activities aimed at debt collection, pursuant to the Agreements entered into with you. To carry out these activities we may have to process your data, in particular in the presence of debts to be paid.
g) Transfer to third parties. G.S. SRL collaborates in concert with partners to provide, if the Customer requests it, operating rental services on its products and services. In such cases, only if the Customer explicitly requests it, we may transfer your data to third parties.
4.2 Processing purposes subject to consent
In some cases, we only process your data if you have given your consent to do so.
a) Market research, possibly based on profiling activities: we conduct market research regarding the interests of our customers, in order to offer them interesting and targeted offers. This includes, for example, customer satisfaction studies with our services. As part of our market research activities, we exclusively process - whenever possible - anonymised and aggregated data. For these activities, however, we may also process your personal data.
b) Advertising and marketing: if you have previously given your consent to this effect, we will process your data to inform you of any offer that may interest you and we will contact you using the communication channels authorized by you. The promotional and marketing activities in question can be carried out through traditional methods of contact (such as calls via an operator, letters, sending promotional material via paper mail) or through automated methods (such as automated call systems or call communication without the intervention of a operator, e-mail, fax, MMS or SMS messages). It is possible to object to the processing for these purposes at any time.
4.3 Purpose of processing to comply with legal obligations
We are subject to various legal obligations. Where necessary, we will process your Personal Data to ensure compliance with these obligations.
to. Data security purposes: Data security represents a relevant legal obligation. If necessary, we will also process your data as part of the indispensable measures to evaluate and ensure data security, for example by simulating a cyber attack.
b. Preventive measures, legal obligations and legal defense. Where required by the laws in force, we will process your data to the extent necessary to comply with these obligations, and we may forward your data to the competent authorities, in case of legal obligations regarding communication. We may also process your data in the event of a legal dispute, if this is required.
c. Administrative, accounting and tax purposes: G.S. SRL will also process your data to manage your contract for administrative, accounting and tax purposes.
4.4 Processing purposes based on legitimate interests
We process part of your data in order to safeguard the legitimate interests of G.S. SRL, unless your interests prevail over the latter.
5. How long will we keep your data?
In accordance with art. 5, co. 1, lett. e) of the GDPR, we will keep your data only for the time necessary to process them for the purposes for which they are processed. If we process the data for multiple purposes, they will be automatically deleted or saved in a format that does not allow any direct conclusions to be reached in relation to your identity, as soon as the last specific purpose has been fulfilled. In order for all your data to be deleted or made anonymous in line with the principle of data minimization and in accordance with art. 5, co. 1, lett. e) of the GDPR, G.S. SRL has developed an internal cancellation program. The basic principles according to which your Personal Data is deleted under this program are described below.
In general, in accordance with the provisions regarding the obligations to keep documents for accounting purposes and the general rules relating to the ordinary limitation period of contractual actions, we will delete the Data relating to the contractual relationship after the ten-year term provided for by law.
6. How are your data protected?
We will process your personal data on the basis of the security obligations relating to data processing pursuant to art. 32 GDPR.
In order to guarantee an adequate level of data protection aimed at limiting the risk of using the same in an improper or illicit way, technical measures are being implemented that will be subjected to verification over time.
7. Who will we share your data with?
We will share your data with third parties external to G.S. SRL solely for the purposes indicated in this data protection statement.
During the communication and transfer of your data, we will always take adequate measures to ensure that your data are processed, protected and transferred in accordance with the applicable legal provisions.
The updated list of third parties identified as "independent owners" and "responsible" is available at the registered office of G.S. SRL A copy of this list may be provided upon written request to G.S. SRL.
7.1 Transfer of data to other third parties
We may also transfer your data to other third parties, to the extent that this is necessary or appropriate to achieve the purposes referred to in points 3 and 4, or as part of any legal obligation regarding information and reporting.
These third parties are, in particular, external service providers including IT services, external consultants or collaborators, within the following contexts:
a) transmission of communications to customers, as well as archiving and substitutive storage of data;
b) supply and management of administrative procedures and IT systems, communication networks and protection and security systems;
c) assistance to customers and contractual counterparties (including with call centers, help desks, etc.);
d) appraisal, auditing and certification of financial statements;
G.S. SRL will designate these third parties as Data Processors, in the event that the relevant conditions exist, and in any case it will bind these third parties to maintain the confidentiality of your data.
8. Your rights as an interested party and your right to lodge a complaint with the supervisory authority
As an interested party, you may exercise certain rights towards us pursuant to the GDPR and other applicable data protection provisions, with specific reference to the Code. The following point contains explanations relating to your rights as an interested party under the GDPR and the Code.
8.1 Rights of interested parties
As an interested party, he has in particular the following rights under the GDPR towards G.S. SRL:
Right of access (Article 15 of the GDPR): you may at any time request that you be provided with information on your data stored by us. This information refers, among other things, to the categories of data processed by us, the purposes of the processing, the origin of the Data if we did not obtain it directly from you, as well as the recipients to whom we may have transferred your data. , where applicable. You can receive a free copy of your data which are the subject of the contract. If you wish to obtain additional copies, we reserve the right to request a fee.
Right of rectification (Article 16 of the GDPR): you may request a rectification of your data. We will take adequate measures aimed at ensuring that your data stored by us and processed continuously, are kept correct, complete, updated and relevant, on the based on the most recent information you provide to us.
Right of cancellation (Article 17 of the GDPR): you may request the cancellation of your data, provided that the relative conditions provided by law exist. For example, this could occur based on art. 17 of the GDPR:
- if the Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- if you revoke the consent on which the data processing is based, and there is no other legal basis for the processing;
- if you object to the processing of your data and there are no overriding legitimate reasons to proceed with the processing, or if you object to the processing of data for direct marketing purposes;
- if the data have been processed unlawfully;
The right of cancellation does not apply, unless the processing is necessary:
- for the fulfillment of a legal obligation that requires the processing of your data; in particular as regards the retention periods of documents provided for by law;
- for the assessment, exercise or defense of a legal right or claim.
Right to limitation of treatment (Article 18 of the GDPR): you will be able to obtain a limitation of the processing of your data:
- if you dispute the accuracy of the Data, for the period that allows us to verify the accuracy of such Data;
- if the processing is unlawful and you oppose the cancellation of your data and instead request that its use be limited;
- if we no longer need your data, but these are necessary for you to ascertain, exercise or defend a right in court;
- if you have opposed the processing pending verification of the possible prevalence of our legitimate reasons, as data controller, with respect to yours.
Right to object (Article 21 of the GDPR): you may object at any time, for reasons related to your particular situation, to the processing of your data, pursuant to art. 6, paragraph 1, letters e) or f) of the GDPR, or if the personal data are processed for direct marketing purposes. In this case, we will no longer process your data. This last condition does not apply if we can demonstrate the existence of compelling legitimate reasons that justify the processing and that prevail over your interests, or if we need your data to ascertain, exercise or defend a right in court.
Right to request a copy of the protection measures (Article 13 of the GDPR) set up regarding the transfer of data to third countries, if applicable.
Right to withdraw consent at any time (Article 13 of the GDPR) - if the processing is based on consent - without prejudice to the lawfulness of the processing based on the consent given before the revocation, by sending the related request to the contacts listed below or through the technical methods eventually made available by GS SRL for its treatment.
8.2 Terms of fulfillment in relation to the rights of the interested parties
We always try to handle requests within a 30 day period. However, this period may be extended for reasons relating to the specific right of the interested party or the complexity of your request.
8.3 Limitation relating to the communication of information during the fulfillment of the obligations relating to the rights of the interested parties
In certain situations, we may not be able to provide you with information on all of your data due to legal provisions. If we are forced in this case to decline your request for information, we will also clarify the reasons for our refusal.
8.4 Complaint to the supervisory authority
Where the feedback provided by G.S. SRL to any of your requests and / or reports, you have the right to lodge a complaint with a competent data protection authority, pursuant to art. 77 of the GDPR.
Below you will find the contact details of the local authority responsible for data protection: Guarantor for the protection of personal data - www.garanteprivacy.it
9. Normative references
The full text of the GDPR can be consulted by accessing the following website:
http://eur-lex.europa.eu/legal-content/IT/TXT/?uri=CELEX%3A32016R0679
Further relevant national legislation in the field of data protection can be consulted on the website of the Guarantor accessible at the following link: www.garanteprivacy.it
10. Changes to this data protection information
If there are any substantial changes with reference to the way your data is processed, we will promptly inform you of such changes.
11. Contacts
Any requests for information and for the exercise of your rights can contact G.S. SRL:
- by post by writing to: G.S. SRL Via Industrie, 8 - 26010 Ripalta Cremasca (fraz. San Michele (CR) - Italy;
- by e-mail to the box: gs@gsindustrial.it
- by Certified Electronic Mail (PEC) to the box: gssrl@ricevutacerta.it
- by phone at: 0373-620710.
It is also possible to contact our Data Protection Officer directly at the following e-mail address: gs@gsindustrial.it
Automatic navigation detection technologies
This site is equipped with an application able to record some navigation data, including the pages visited, the time and the time spent. Only in some cases, defined below, can such data be associated with an identifiable person:
1) browsing via static IP, registered in public domain lists
the technology in question does not detect any personal data of the actual visitor to the site, but simply provides the holder of the public static IP, typically the company to which the provider has attributed the IP;
2) navigation by registered user
the user is provided with suitable information and specific consent is requested when registering on this site;
3) browsing via social profile
the user is provided with appropriate information and specific consent is requested when registering on the social network. The data is used by the Data Controller in order to improve its online presence, analyzing the Return on Investment and supporting any strategic marketing actions.
The data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected (typically the data relating to the last 6 months of navigation are kept).
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access (server placement in a qualified and ISO 27001 certified data-center).
The data controller is G.S. SRL Via Industrie, 8 - 26010 Ripalta Cremasca (fraz. San Michele (CR) - Italy. Only internal agents formally designated by the Data Controller or third-party companies (in charge of maintenance / development of the application) expressly designated as external data processors may access the data. .
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of such data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification (Article 7 of the Code regarding the protection of personal data). Pursuant to the same article, one has the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Requests should be addressed to:
- G.S. SRL Via Industrie, 8 - 26010 Ripalta Cremasca (fraz. San Michele (CR) - Italy
- by post by writing to: G.S. SRL Via Industrie, 8 - 26010 Ripalta Cremasca (fraz. San Michele (CR) - Italy;
- by e-mail to the box: gs@gsindustrial.it
- by Certified Electronic Mail (PEC) to the box: gssrl@ricevutacerta.it;
- by phone at: 0373-620710.
It is also possible to contact our Data Protection Officer directly at the following e-mail address: gs@gsindustrial.it
