Privacy Policy

Information note pursuant to the Italian law D. Lgs. 196/2003 (“codice privacy”), to the EU Regulation 2016/679 (GDPR) and the Italian law D. Lgs. 101/2018 (GDPR) to the users of the websites gm-management.it owned by GM Management.

1. Data controller

The data controller is GM Management. You may contact the Data Controller at [email protected].

2. Purpose of data processing

2.1 Data provided by the user

The personal data given by the user on a voluntary and explicit way, are used in order to give effect to any requests (for example when requesting information or clarification by calling the numbers listed on the site or by writing to e-mail addresses therein). The data collected are used to manage a contacts database to communicate with users. The personal data collected are: Name, Surname, Email, and all other data written in the messages. Except for navigation data, necessary in order to initiate the computer and data protocols, the provision of personal data by the users is free and optional. But the absence of data will make it impossible to proceed to requests or that you want to forward

2.1.1 Request for information through the Website

Your Data may be used by GM Management to meet any request for information you have made by filling in the forms available on our Website. Providing your Data for the purposes under this subparagraph is mandatory and the legal basis consists of meeting a request provided by you. Any refusal by you to provide your Data will make it impossible for GM Management to meet the request you have made through our Website. GM Management does not need your specific consent to achieve these purposes. The Data collected by the Data Collector for these purposes may be stored for the period strictly required to meet your request and, in any case, will be cancelled 12 months after your request has been processed.

2.1.2 Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet. This information is not collected to be associated with users, but by their very nature could, through processing and association with data held by third parties, used to identify users. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) ​​of requested resources, time of request, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the status of response from the server (successful, error, etc.) and other parameters regarding the operating system and computer environment. The data collected in such a way could be used to ascertain responsibility in case of any computer crimes against the site.

2.2 Cookies

About cookies usage please refer to the following paragraphs specifically prepared by order of 8 May 2014 of the Italian DPA, i.e. the Italian Data Protection Authority.

2.3 Data collected by third parties software used by this website

2.3.1 Social network interaction

These services allow you to make interactions with social networks or any other external platforms directly from the pages of the Application. Interactions and the information gained from this application are in any case subject to the User’s privacy settings related to each social network.

• https://www.facebook.com/policy.php
• https://policies.google.com/privacy
• https://www.linkedin.com/legal/privacy-policy
• https://twitter.com/privacy
• https://help.instagram.com/402411646841720

2.3.2 Statistics

Google Analytics is a web analytics service provided by Google Inc. Google uses Personal Information collected for the purpose of evaluating the use of this application, compile reports and share them with other services developed by Google. This site allows the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour. Personal data collected: Cookie and data usage. Place of treatment: US and Ireland – Privacy Policy. Company complying with the Privacy Shield.

2.3.3 Displaying content from external platforms

Personal Data collected: Cookies; Usage Data. YouTube is a video content visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages. Place of processing: United States and Ireland – Privacy Policy. Google Font is a typeface visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages. Place of processing: United States and Ireland – Privacy Policy. Google Maps is a geographic maps visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages. Place of processing: United States and Ireland – Privacy Policy. Vimeo is a video content visualization service provided by Vimeo Inc. and Livestream LLC. that allows this Application to incorporate content of this kind on its pages. Place of processing: United States – Privacy Policy.

3. Processing methods

We will process the Data for the purposes described in previous paragraph 2 using paper, computerised and electronic tools, and in a way to ensure their security and confidentiality in accordance with the provisions set out under article 32 GDPR (General Data Protection Regulation).

3.1 Place

The data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the treatment are located. For more information, contact the owner.

3.2 Duration

The Data are kept for the time necessary to perform the service requested by you, or required by the objectives described in this document, and the User can always ask for discontinuation of treatment or deletion of data.

4. Communication and data disclosure

In order to achieve the purposes described in previous paragraph 2, GM Management may need to disclose your Data to third parties and, more specifically, to the following categories:

• a) Authorities and supervisory and control bodies, and in general public or private subjects performing state duties;
• b) Subjects that perform administrative and tax obligations on behalf of GM Management;
• c) Subjects that provide services for managing the information system of GM Management and of the telecommunication networks;

In some cases, the subjects listed above act in a completely autonomous manner as Data Controllers. In other cases, they act as Data Processors specifically appointed by the Data Controller. Furthermore, in order to achieve the purposes referred to in paragraph 2, your Data will be processed by and become known to the Data Controller’s employees and associate workers, specifically appointed as persons in charge of data processing, depending on the different tasks assigned to each of them and on the instructions given to them. Personal data processed by GM Management will not be disclosed.

5. Data subject’s rights

The interested party may exercise at any time, by contacting the data controller by sending an email to [email protected], the rights under the Italian law as in Art. 7 of Legislative Decree no. 30 June 2003 n. 196, and EU Regulation 2016/679.

• You have the right to obtain confirmation of the existence of personal data concerning him, even if not yet registered, and their communication in intelligible form. (Right of access and Right to data portability – articles 15 and 20 GDPR).
• You have the right to obtain information (article 15 GDPR):
  • origin of personal data;
  • the purposes and methods of treatment;
  • the logic applied in case of treatment with the help of electronic means;
  • the identity of the owner, manager and the representative appointed;
  • the subjects or categories of persons to whom the data may be communicated or who can learn about them as appointed representative in the State, managers or agents.
• You have the right to obtain (article 16, 17 and 18 GDPR):
  • updating, rectification or, when interested, integration of data;
  • the cancellation, anonymization or blocking of data processed unlawfully, including data that need not be kept for the purposes for which the data were collected or subsequently processed;
  • the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disclosed, except in the case where such fulfillment is it proves impossible or involves a use of means manifestly disproportionate to the protected right.
• You have the right to object, in whole or in part (article 21 GDPR):
  • for legitimate reasons to the processing of personal data, pertinent for collection purposes;
  • to the processing of personal data for purposes of sending advertising materials or direct sales or for carrying out market research or commercial communication.
• You have the right to lodge a complaint with the Data Protection Authority, Piazza di Montecitorio no. 121, 00186, Rome (RM)