Privacy & Cookies Policy

Last update: 23/04/2020

PRIVACY DISCLAIMER
Pursuant to art. 13 of EU Regulation 2016/679

With this privacy policy Gamma Innovation S.p.A., pursuant to art. 4 of EU Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter “EU Regulation”), wants to inform all those who visit this website about how data will be used and processed your personal data.

For more information click on the links below:
Definitions
Who is the Data Controller? where can I contact him?
Data Processing
Rights of the interested party
Use of cookies
Notice regarding children under 16
Changes and updates
Legislative references on the rights of the interested party

“Personal data” (pursuant to art. 4 number 1 of the EU regulation) means any information concerning an identified or identifiable physical person (“concerned”); The natural person can be identified that can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, data relating to the location, an online identifier or one or more characteristic elements of its physical identity, physiological, genetics, psychic, economic, cultural or social.

“Treatment” (pursuant to art. 4 number 2 of the EU regulation) means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or personal data sets, such as collection, the registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or the Interconnection, limitation, cancellation or destruction.

Company name: Gamma Innovation S.p.A.
Address Registered and operational office: Centro Direzionale Milanofiori, Strada 4, Palazzo A6 – 20057 Assago (MI)
Phone contact data: 02 3654 3970
Data contact email: privacy@gammainnovation.it

Personal data collected

Gamma Innovation S.p.a. It collects and deals with the personal data provided by the interested parties, such as identifying and personal identification (for example, name, surname and e-mail).

Furthermore, computer systems and software procedures responsible for the operation of this website acquire, during their normal exercise, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that are not collected to be associated with identified interested parties, but that by their very nature could, through processing and associations with data held by third parties, allowing users to identify.

Among the information that can be collected we have the IP addresses, the type of browser or the operating system used, the addresses in notation URI (Uniform Resource Identifier), the domain name and the addresses of the websites from which the Access or exit (Refferring / Exit Pages), the time in which the request was made to the server, the method used and information on the response obtained, more information on user browsing on the site (see also the relative section to cookies) and other parameters relating to the operating system and the user’s computer environment.

These same data could also be used to identify and ascertain the responsibilities in the event of any computer crimes against the site.

Purpose of treatment

Gamma Innovation S.p.a. Treats the data of the interested party for electronic tools, and possibly paper for the following purposes:

1. Answer requests or questions from you presented, solve problems related to our goods or services and receive useful advice to improve our offer;
2. Periodic sending, by e-mail, of newsletters..

The following table specifies the legal basis, data categories, personal data categories, and the relative storage period are specified for each of the purposes:

TABLE 1

*Categories of recipients

In relation to the purposes indicated, the data may be communicated to the following subjects and / or the categories of subjects indicated below, or may be communicated to companies and / or persons, in the EU countries, which provide services, even external, on behalf of the owner. Among these ** are indicated for greater clarity and to a mere exemplary title but not exhaustive their different typology:

• IT Services Companies;
• Control and supervisory bodies;

(**) The list of external recipients / managers with additional identification data is available at the owner of the processing of personal data.

Data transfer to third-EU country

The owner tells him that, making use of a Cloud data storage offered by third parties, for the provision of which the use of data centers is provided abroad, carries out data transfer to non-EU countries.

The aforementioned data storage service is offered by the Google company. The latter, including Google LLC and subsidiaries in the United States, guarantees the transfer of data to countries not belonging to the European Union or to the European Economic Area (EEA) recognized by the European Commission with an adequate level of protection of personal data.

The owner also communicates that the supply company of the service has stipulated, with the third parties to which it shall transfers personal data, Standard Contractual Clauses, pursuant to letter c) of point 2 of Article 46 of the GDPR), which, incorporated into Contract stipulated with these parties, allow to ensure adequate protection for data transfer carried out.

The Standard Contractual Clauses will be used to legitimize, pursuant to GDPR, data transfer to those countries, which are outside the European Union and European Economic Area (EEA), which, in compliance with the provisions of art .46 of the GDPR, are not considered by the European Commission as countries that ensure an adequate level of protection of personal data.

In detail, the non-EU countries to which the data will be transferred in compliance with the provision referred to in Article 45 of the GDPR are as follows:

• Canada
• Japan

In detail, the extra EU countries to which the data will be transferred using the Standard Contractual Clauses are as follows:

• United States
• Chile
• Taiwan
• Singapore
• India
• Malaysia

Storage period

Please refer to Table 1 to column 4 (“Personal data storage period”).

The interested party, in relation to the personal data subject to this information, has the right to exercise the rights provided for by the EU regulation reported below:

• Access right of the interested party [art. 15 of the EU Regulation];
• Right to adjust your personal data [art. 16 of the EU regulation];
• Right to cancel your personal data without unjustified delay (“right to oblivion”) [art. 17 of the EU Regulation];
• Right to restrict treatment of your personal data [Art. 18 of the EU regulation];
• Right to data portability [art. 20 of the EU regulation];
• Right of opposition to the processing of their personal data [art. 21 of the EU regulation];
• Right not to be subjected to automated decision-making processes [art. 22 of the EU Regulation].

The aforementioned rights can be exercised as established by the EU regulation by sending an e-mail to privacy@gammainnovation.it.

GAMMA INNOVATION S.P.A., IN VAT TO THE ART. 19 of the EU regulation, proceeds to inform the recipients who were communicated the personal data of any adjustments, cancellations or restrictions of the treatment required, where this is possible.

If the purpose of treatment pursued by Gamma Innovation S.P.A.. It has a legal basis the consent, the interested party has the right to proceed, at any time, to revocation by sending an e-mail to privacy@gammainnovation.it. Pursuant to art. 7 of the EU regulation, the revocation of consent does not lead to prejudice to the lawfulness of the treatment based on the consent made before the revocation.

The person concerned, if it deems that its rights have been compromised, has the right to propose complaint to the authority for the protection of personal data, according to the procedures indicated by the same authority to the following Internet address: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.

For more information on the rights and the exercise of the same please refer to the section “Regulatory references on the rights of the interested party”.

Optional assignment of personal data

Please note that if the treatment purpose pursued by Gamma Innovation S.P.A. It is the legal basis, the consent, the provision of personal data by the interested party is optional. The consent refers exclusively to the specific treatment purposes for which it is expressed and its failure to transfer does not affect the pursuit by the owner of the other purposes.

Automated decision-making processes

The company does not use any automated decision-making process.

Treatment methods

Personal data will be treated in paper, computerized and telematic form and inserted in the relevant databases (potential customers, customers, users, etc.) to which they can access, and therefore learn about, the employees expressly designated by the owner as responsible and responsible for processing of personal data, which will be able to carry out consultation, use, processing, comparison and any other appropriate operation also automated in compliance with the legal provisions necessary to guarantee, among other things, the confidentiality and security of data as well as the accuracy, updating and relevance of data compared to the declared purposes.

This site uses technical and analytical cookies, even third part. To learn more and for a detailed information, you can consult our Cookie Policy.

Children under 16 cannot provide personal data. Gamma Innovation S.p.A. It will in no way be responsible for any collections of personal data, as well as mendaci statements, provided by the child, and in any case, if the use of Gamma Innovation S.P.A. It will facilitate the right of access and cancellation forwarded by the legal guardian or by those who exercise their homeland.

This information reports the date of its last update in its header.

Gamma Innovation S.p.A. It could also make changes and / or additions to said privacy policy also as the consequence of any and subsequent modifications and / or regulatory integrations.

Article 15
Right of access to the interested party

1. The interested party has the right to obtain the owner of the treatment confirmation that is in progress a processing of personal data concerning him and in this case, to obtain access to personal data and the following information:
   a) the purposes of treatment;
   b) the categories of personal data in question;
   c) recipients or categories of recipients to which personal data have been communicated, in particular if recipients of third countries or international organizations;
   d) whenever possible, the preserved personal data period or, if it is not possible, the criteria used to determine this period;
   e) the existence of the right of the interested party to ask the data controller the adjustment or cancellation of personal data or the limitation of the processing of personal data concerning him or opposing their treatment;
   f) the right to propose complaint to a control authority;
   g) if the data is not collected at the person concerned, all the information available on their origin;
   h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and consequences of this treatment For the interested party.
2. If personal data are transferred to a third country or an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to Article 46 relating to the transfer.
3. The data controller provides a copy of personal data processing. The case of additional copies required by the interested party, the data controller can charge a reasonable fee based on administrative costs. If the interested party presents the request by means of electronic means, and unless otherwise indicated in the interested party, the information is provided in an electronic format of common use.
4. The right to obtain a copy referred to in paragraph 3 must not lede the rights and freedoms of others.

Article 16
Right of rectification

The interested party has the right to obtain the correction of the inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of treatment, the interested party has the right to obtain the integration of incomplete personal data, even providing an integrative declaration.

Article 17
Right to cancellation («right to oblivion»)

1. The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller is obliged to cancel the personal data without unjustified delay, if there is one of the following reasons:
   a) personal data are no longer necessary than the purposes for which they were collected or otherwise treated;
   b) the interested party revokes the consensus on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a), and if there is no other legal basis for treatment ;
   c) the interested party opposes the treatment pursuant to Article 21 (1) and there is no prevalent legitimate reason to proceed with treatment, or opposes the treatment pursuant to Article 21, paragraph 2;
   d) personal data were processed illegally;
   e) personal data must be canceled to fulfill a legal obligation provided by Union law or Member State to which the data controller is subject;
   f) Personal data has been collected in relation to the service company offering referred to in Article 8, paragraph 1.
2. The data controller, if it has made public data public and is obliged, pursuant to paragraph 1, to cancel them, taking into account the available technology and the implementation costs adopt reasonable measures, including techniques, to inform treatment holders Whether they are dealing with the personal data of the interested party request to delete any link, copy or reproduction of your personal data.
3. Paragraphs 1 and 2 do not apply to the extent that the treatment is necessary:
   a) for the exercise of the right to freedom of expression and information;
   b) for the fulfillment of a legal obligation that requires the treatment provided by Union law or Member State to which the owner of the treatment or for the execution of a task carried out in the public interest or in the exercise of public authorities whose treatment holder is invested;
   c) for reasons of public interest in the public health sector in accordance with Article 9 (2) (H) and i), and Article 9, paragraph 3;
   d) stored in public interest, scientific or historical research or statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right referred to in paragraph 1 risks making it impossible or to seriously affect the achievement of the objectives of this treatment; or e) for the assessment, exercise or defense of a judicial right.

Article 18
Treatment limitation right

1. The interested party has the right to obtain the treatment of the treatment of treatment when the following hypotheses occurs:
   a) the interested party disputes the accuracy of personal data, for the period necessary for the treatment owner to verify the accuracy of such personal data;
   b) the treatment is illegal and the interested party opposes the cancellation of personal data and asks instead that use is limited;
   c) although the data controller does not need it for the purposes of treatment, personal data are necessary for the interested party for the assessment, exercise or defense of a judicial right;
   d) the interested party opposed the treatment pursuant to Article 21 (1) awaiting the verification regarding the prevalence of the legitimate reasons for the treatment owner compared to those of the interested party.
2. If the treatment is limited pursuant to paragraph 1, these personal data are treated, unless for conservation, only with the consent of the interested party or for the assessment, the exercise or defense of a right in judicial site or to protect the rights of another natural or legal person or for reasons of relevant public interest of the Union or a Member State.
3. The person concerned which obtained the limitation of the treatment pursuant to paragraph 1 and informed by the data controller before that limitation is revoked.

Article 19
Notification obligation in the event of rectification or cancellation of personal data or treatment limitation

The owner of the treatment communicates to each of the recipients who were transmitted the personal data or cancellations or limitations of the treatment carried out pursuant to Article 16, Article 17 (1) and Article 18, unless this It reveals itself impossible or involved a disproportionate effort. The owner of the treatment communicates to the interested party such recipients if the interested party requires.

Article 20
Right to data portability

1. The interested party has the right to receive in a structured format, of common use and readable by automatic device the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without Impediments by the owner of the processing which they provided them if:
   a) treatment is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) or on a contract pursuant to Article 6 (1) (1) b): e
   b) The treatment is carried out by automated means.
2. In the exercise its rights in relation to data portability pursuant to paragraph 1, the person concerned has the right to obtain the direct transmission of personal data from one handling owner to another, if technically feasible.
3. The exercise of the law referred to in paragraph 1 of this article does notifiable Article 17, this right does not apply to the treatment necessary for the execution of a task of public interest or connected to the exercise of public authorities of which And invested the owner of the treatment.
4. The right referred to in paragraph 1 should not lede the rights and freedoms of others.

Article 21
Opposition right

1. The interested party has the right to oppose at any time, for reasons connected to its particular situation, to the processing of personal data concerning him pursuant to Article 6 (1), letters e) of), including profiling on The basis of these provisions, the data controller refrains from further dealing with personal data except that he demonstrates the existence of merely legitimate reasons to proceed to the treatment that prevail over interest, on the rights and freedoms of the interested party or for the assessment, the exercise or defense of a judicial right.
2. If the personal data is processed for direct marketing purposes, the person concerned has the right to oppose the processing of personal data concerning it for these purposes, including profiling to the extent that it is connected to this marketing direct.
3. If the interested party opens to treatment for direct marketing purposes, personal data are no longer the subject of treatment for such purposes.
4. The right referred to in paragraphs 1 and 2 is explicitly brought to the attention of the interested party and is clearly presented and separately from any other information at the latest at the time of the first communication with the interested party.
5. In the context of the use of information society services and subject to Directive 2002/58 / EC, the interested party can exercise its right of opposition by automated means using technical specifications.
6. If personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1), the interested party, for reasons connected to its particular situation, has the right to oppose the processing of personal data that concerns it, except if the treatment is necessary for the execution of a task of public interest.

Article 22
Automated decision-making process related to natural persons, including the profiling

1. The person concerned has the right not to be subjected to a decision based solely on automated treatment, including profiling, which produces legal effects that concern it or affects significantly analogously on your person.
2. Paragraph 1 does not apply in the event that the decision:
   a) is necessary for the conclusion or execution of a contract between the interested party and a data controller;
   b) is authorized by Union law or Member State to which the owner of the treatment is subject, which also specifies adequate measures to protect the rights, freedoms and the legitimate interests of the interested party;
   c) it is based on the explicit consent of the interested party.
3. In the cases referred to in paragraph 2, letters a) and c), the data controller implements appropriate measures to protect the rights, freedoms and the legitimate interests of the interested party, at least the right to obtain human intervention by the owner of treatment, to express their opinion and challenge the decision.
4. The decisions referred to in paragraph 2 are not based on the particular categories of personal data referred to in Article 9, paragraph 1, unless Article 9, paragraph 2 letters a) or g) is not included, and adequate measures are not in force to protect rights, freedoms and legitimate interests of the interested party.