English 
Italian 
Information provided pursuant to Articles 13-14 of GDPR 2016/679 (General Data Protection Regulation)
ECOGEST SPA, as Data Controller, processes your personal data in compliance with the regulations dictated by EU Regulation 2016/679, guaranteeing the correct protection of the personal data of the data subject.
Data controller
The data controller is the company "ECOGEST SPA", in the person of its acting director, with registered office: Via del Torchio n.6/8 - 20100 Milano / Operating Office: Zona ind.le, Lotto 24 - 73042 Casarano (Le), VAT no.: 12820181001 - Cap.Sociale € 3,000,000 i.v. - REA: MI-2615151 - Lic.c/terti MI/890270/S - REN M0118876, PEC: ecogest_srl@legalmail.it - E-Mail: info@ecogest.srl - Tel and Fax 0833.505425
What personal data do we collect?
The data subject to processing may be collected by the Controller from the data subject or from third parties, in the context of their respective contractual relations and for the purposes thereof. The types of data subject to processing may include, in particular:
- identification data of the person concerned (name, surname, CF, VAT number);
- contact details (address, e-mail, telephone);
- business and billing information (orders, bank data, solvency, accounting and tax data) and other categories of data necessary for the performance of contractual relationships.
For what purposes do we collect your data and on what legal basis?
The processing of your personal data is necessary for the establishment and execution of contractual relations with Ecogest, as well as for the fulfilment of the resulting legal obligations. The legal basis for the processing is, therefore, the performance of a contract to which the data subject is party or of pre-contractual measures taken at the request of the same, or the fulfilment of legal obligations to which the Data Controller is subject, pursuant to Article 6(1)(b) and (c) of Regulation (EU) 679/2016 (GDPR). In particular, your personal data are collected and processed for the following purposes:
- management of the request for quotation;
- handling requests made by the person concerned regarding the services rendered and, more generally, fulfilling all pre-contractual obligations;
- provision of after-sales service or rental of vehicles and equipment;
- protection of legal positions arising from contractual obligations with the customer and/or supplier in out-of-court proceedings and possibly in litigation.
For the purposes described above, the provision of data is necessary. Failure to provide the data and/or refusal to allow them to be processed will make it impossible for the Data Controller to follow up on the data subject's pre-contractual/contractual requests and to perform the services covered by the contractual relationship.
How does the Controller process your personal data and for how long does it store them?
The processing will be carried out by means of paper and/or computer tools, also by persons authorised to do so, operating under the direct authority and according to the instructions given by the Data Controller, with logic strictly related to the purposes indicated and, in any case, in such a way as to guarantee the security and confidentiality of the data processed.
Specific security measures shall be adopted in order to minimise the risks of destruction or loss, even accidental, of the processed data, of unauthorised access, of unauthorised processing or processing that is not in accordance with the purposes set out in this notice.
The Data Controller retains your personal data only for as long as is necessary to pursue the purposes for which it was collected or subsequently processed, but not longer than 10 years from the termination of the contractual relationship with the data subject.
The Data Controller will, after the retention periods have expired, take measures to delete or make anonymous any data that should not be retained for specific regulatory obligations.
To whom do we disclose your personal data?
- internal communication scope. Personal data can be accessed by the owner's collaborators who need it to manage the relationship, with particular reference to administrative staff. Our employees have been informed and trained on the importance of respecting the principles and rules regarding the processing of personal data;
- external scope of communication. The Data Controller shares the personal information of data subjects with certain suppliers who assist it in managing the relationship. In particular, third parties that the Controller uses for services functional to the proper performance of the obligations undertaken. If the supplier accesses the data, he shall do so in compliance with the regulations in force on the protection of personal data and the instructions given by the Controller. The latter shall not disclose personal information to other third parties without the consent of the person concerned, unless required to do so by law or by an Authority:
- when necessary for reasons of national security;
- for reasons of general interest;
- in connection with a request from public authorities.
Are your data transferred abroad?
Your personal data will not be transferred abroad, to non-EU countries or international organisations that do not guarantee an adequate level of protection, recognised, pursuant to Article 45 GDPR, on the basis of an adequacy decision by the EU Commission.
What are your rights as a data subject and how can you exercise them?
The European Data Protection Regulation (2016/679) grants you, as a data subject, specific rights. For each processing, you may exercise the following rights:
- right of accessyou have the right to obtain a copy of the personal data we hold and process;
- right to rectificationyou have the right to rectify your personal data stored by the Controller if they are not up-to-date or correct;
- Right to object to the processing of personal data for commercial purposesmay request that the Controller cease sending commercial communications at any time;
- right to object to decisions based on purely automated processesmay request not to be the addressee of decisions taken on the basis of exclusively automated processes, including profiling;
- right to revoke a consent givenif the processing is based on consent, withdraw their consent at any time (formerly 7 para. 3 GDPR).
- right to appeal to the Data Protection Authorityhas the right to appeal to the Data Protection Authority if he has doubts about the processing of personal data by the Controller.
You may exercise the following rights:
- right to cancellationyou may request that the Controller delete your personal data if the purposes of the processing have ceased to exist and there are no legitimate interests or legal provisions requiring its continuation;
- right to object to processingyou may request that the Controller cease to carry out a certain processing operation on your personal data;
- right to restrict processingyou have the right to request that the Controller restrict processing operations on your personal data;
- right to data portabilityyou have the right to obtain a copy of your data in a structured, commonly used and machine-readable format. Pursuant to Article 20 GDPR, the Data Subject also has the right to transmit such data to another controller without hindrance and, if technically feasible, to obtain the direct transmission of personal data from one controller to another. Should you wish to exercise your rights, please send an e-mail or write to the following address specifying your request and providing us with the information necessary to identify you: ECOGEST SPA, Via del Torchio n.6/8 - 20100 Milano , e-mail info@ecogest.srl. In order to exercise his/her rights, the data subject may avail him/herself of non-profit bodies, organisations or associations whose statutory objectives are in the public interest and which are active in the field of the protection of the rights and freedoms of data subjects with regard to the protection of personal data, conferring, to this end, the appropriate mandate. The data subject may also be assisted by a trusted person. To find out about their rights, lodge a complaint and be kept up-to-date on the legislation on the protection of persons with regard to the processing of personal data, the data subject may contact the Data Protection Authority by consulting the website at http://www.garanteprivacy.it/
How can you contact us?
The purpose of this statement is to inform you of what personal data is collected by ECOGEST SPA and how it is processed. If you need any kind of clarification, please contact us at the following references: ECOGEST SPA,Registered office: Via del Torchio n.6/8 - 20100 Milano / Head office: Zona ind.le, Lotto 24 - 73042 Casarano (Le), P.iva: 12821000181 - Cap.Sociale € 3.000.000 i.v. - REA: MI-2615151 - Lic.c/terti MI/890270/S - REN M0118876, PEC: ecogest_srl@legalmail.it - E-Mail: info@ecogest.srl - Tel and Fax 0833.505425