This information has been drawn up pursuant to art. 13 of EU Regulation 2016/679 (hereinafter: "Regulation" or "GDPRGDPR") in order to allow you to know our privacy policy, to understand how your personal information is managed when you visit our sites (with domain gekoit.it, hereinafter collectively “Site”) and, where appropriate, to give express and informed consent to the processing of your personal data.

According to the rules of the Regulation, the processing carried out by Geko will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, data minimisation, accuracy, integrity and confidentiality.

INDEX
1. Data controller
2. The personal data being processed
2.1 Browsing data
2.2 Data provided voluntarily by the interested party
2.3 Cookies
3. Purpose of the processing
4. Legal basis and mandatory or optional nature of the processing
5. Recipients of personal data
6. Transfers of personal data
7. Storage of personal data
8. Rights of the interested party
9. Changes

1. Data controller
The owner of the processing carried out on personal data coming from the website www.gekoit.it is Geko s.r.l. with registered office in Via Nona Strada 23/G 35129 Padova - Italy (hereinafter "Geko") VAT number 03465270282, which constantly strives to protect the online privacy of its users. For any information regarding the processing of personal data by Geko, you can write to the following address: info@gekoit.it

2. The personal data being processed
Following navigation on the Website, personal information may be collected automatically or upon your voluntary communication which may directly or indirectly allow identification such as the name, an identification number, an online identifier, an address, a contact and other expressly communicated by you (hereinafter only “Personal Data”). Specifically, the types of personal data processed through the Site are the following:

2.1. Browsing data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site or third parties: except for this eventuality, data on web contacts currently do not persist for more than 30 days.<7p>

2.2. Data provided voluntarily by the user
When using the section of the Site dedicated to contacts ("Contact Us") there is a data entry form in which you can enter useful information to be contacted, any requests and communications, you are therefore offered the possibility of providing your personal data. Geko cannot be held responsible for the correctness and updating of any incorrect information voluntarily sent by you. We invite you not to publish and send in this section or through other channels - unless strictly necessary - any special categories of personal data. The data falling within the category of special personal data, referred to in art. 9 of the EU Regulation, are literally "[...] data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to identify unambiguously a natural person, data relating to the health or sexual life or sexual orientation of the person".. Indeed, we remind you that in the event of the transmission of special categories of Personal Data, but in the absence of specific manifestation of consent to process such data (an eventuality which obviously allows you to send a curriculum vitae), Geko cannot be held responsible in any way, nor will it be able to receive any complaints, since in this case the processing will be permitted as it concerns data made manifestly public by the interested party, in accordance with the art. 9(1)(e) of the Regulation. However, we specify the importance, as already indicated above, of expressing explicit consent to the processing of personal data which in this case also extends to special categories of personal data. We also inform you that, for the purposes of searching for resources, Geko may view the professional social profiles you have made freely available on the Internet (e.g. LinkedIn).

2.3. Cookies: definitions, characteristics and application of the legislation
Cookies are small text files that the sites visited by the user send and record on their computer or mobile device, to be then re-transmitted to the same sites on the next visit. Thanks to cookies, a site remembers the user's actions and preferences (such as, for example, login data, the chosen language, font size, other display settings, etc.) so that they do not have to be indicated again. when the user returns to visit said site or navigate from one page to another of it. Cookies, therefore, are used to perform computer authentication, monitor sessions and store information regarding the activities of users who access a site and can also contain a unique identification code that allows tracking of the user's navigation within of the site itself for statistical or advertising purposes. While browsing a site, the user may also receive cookies on their computer from sites or web servers other than the one they are visiting (so-called "third party" cookies).
Some operations could not be carried out without the use of cookies, which in certain cases are therefore technically necessary for the functioning of the site.
There are various types of cookies, depending on their characteristics and functions, and these can remain on the user's computer for different periods of time: so-called. session cookie, which is automatically deleted when the browser is closed; CD. persistent cookies, which remain on the user's equipment until a pre-established expiry date.
Based on current legislation in Italy, express user consent is not always required for the use of cookies. In particular, "technical cookies" do not require such consent, i.e. those used for the sole purpose of transmitting a communication over an electronic communications network, or to the extent strictly necessary to provide a service explicitly requested by the user. In other words, these are cookies that are essential for the functioning of the site or necessary to carry out activities requested by the user. Among the technical cookies, which do not require express consent for their use, the Italian Guarantor for the protection of personal data (see Provision Identification of simplified methods for the information and the acquisition of consent for the use of cookies of the 8 May 2014 and subsequent clarifications, hereinafter only "Provision") also includes:

• "analytics cookies" where used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site itself;
• navigation or session cookies (to authenticate);
• functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided to the user.

For "profiling cookies", on the other hand, i.e. those aimed at creating profiles relating to the user and used for the purpose of sending advertising messages in line with the preferences expressed by the user when browsing the internet, prior consent is required from the user.
Types of cookies used by the Site and possibility of (de-)selection
The website www.gekoit.it uses the following cookies which can be de-selected through the specific functions of your browser, except for third-party cookies for which you will have to refer directly to the relevant selection and de-selection methods of the respective cookies, indicated by means of links:

• Technical navigation or session cookies and strictly necessary for the functioning of the Site or to allow you to use the contents and services requested.
• Functionality cookies, i.e. used to activate specific features of the Site and a series of selected criteria (for example, the language) in order to improve the service provided.

ATTENTION: by disabling technical and/or functional cookies the Site may not be available for consultation or some services or certain functions of the Site may be unavailable or may not function correctly and you may be forced to modify or manually enter some information or preferences every time you visit the site.

To find out how to authorize, block or delete (in whole or in part) cookies through the specific functions of your browser and for further information visit the links:
Internet Explorer
Firefox
Chrome
Safari

• Third-party cookies, i.e. cookies from sites or web servers other than Geko's, used for the purposes of said third parties. It should be noted that these third parties, listed below with the relevant links to the privacy policies, are typically independent data controllers of the data collected through the cookies they serve; therefore, you will have to refer to their personal data processing policies, information and consent forms (selection and de-selection of the respective cookies), as specified in the aforementioned Provision.

In detail, the cookies sent by Geko via the Site are session cookies which are automatically deleted from the system at the end of the internet browsing session. This Site may also use or provide cookies from the following third parties:

• Google Inc. For information on the use of data and their processing by Google, it is recommended to read Google's privacy policy and the methods of use of data by Google when using partner sites or apps.
• Google Analytics: used to analyze the use of the site by users, compile reports on site activities and user behavior, check how often users visit the site, how the site is tracked and which pages are visited most frequently. The information is combined with information collected from other sites in order to create a comparative picture of the use of the site compared to other sites in the same category. The data collected does not allow the personal identification of users, and is not cross-referenced with other information relating to the same person. They are treated in aggregate form and anonymized (truncated to the last octet).

3. Purpose of the processing
The processing that we intend to carry out, with your specific consent where necessary, has the following purposes:

1. allow the provision of services requested by the user;
2. respond to requests for assistance or information;
3. analyze the material sent via the form on the Site or via email (e.g. in the case of any spontaneous applications to recontact the candidates who sent their application via the "Contacts" section);
4. fulfill any legal, accounting and tax obligations. For no reason will the data provided voluntarily be transferred to third parties with methods or for purposes other than those expressed in this information (see point 5. Recipients of personal data, point 6. Transfer of personal data) or used for sending advertising or for marketing analysis and profiling by Geko.

4. Legal basis and mandatory or optional nature of the processing
The legal basis for the processing of Personal Data for the purposes referred to in section 3 (a-b-c) is art. 6(1)(b) of the Regulation as the processing is necessary for the provision of the Services or for responding to requests from the interested party. The provision of Personal Data for these purposes is optional but failure to provide it would make it impossible to activate the Services provided by the Site, respond to requests or evaluate the material sent.

5. Recipients of personal data
Your Personal Data may be shared, for the purposes referred to in section 3 above, with:

1. subjects who typically act as data controllers, i.e.: i) people, companies or professional firms who provide assistance and consultancy to Geko in accounting, administrative, legal, tax, financial and debt collection matters relating to the provision of the Services; ii) subjects with whom it is necessary to interact for the provision of the Services (for example hosting providers) iii) or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communications networks); (collectively “Recipients”);
2. subjects, bodies or authorities to whom it is mandatory to communicate your personal data pursuant to legal provisions or orders of the authorities;
3. persons authorized by Geko to process Personal Data necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. Geko appointees and designees).

6. Transfers of personal data
Some of your Personal Data collected automatically through a visit to the Website is shared with recipients who may be located outside the European Economic Area. Geko ensures that the processing of your Personal Data by these recipients takes place in compliance with the Regulation. Indeed, transfers to third parties, if necessary, can be based on an adequacy decision, on the Standard Contractual Clauses approved by the European Commission or on another suitable legal basis.

7. Data retention
The personal data processed for the purposes referred to in section 3(a-b) will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, Geko will process personal data for up to the time permitted by Italian legislation to protect its interests (Art. 2946 of the Civil Code et seq.). As regards any material transmitted through the "Contact us" section or via email or social media for application and personnel selection purposes, personal data will be retained as long as the position for which the CV was sent is available or, in the case of application spontaneous, up to 1 year. This is without prejudice to the possibility for Geko to contact the candidate again shortly before the indicated deadline to request an extension of this retention period. The Personal Data processed for the purposes referred to in section 3.d will be kept for the time required by the specific obligation or applicable law. Further information regarding the data retention period and the criteria used to determine this period can be requested at the following address: info@gekoit.it

8. Rights of interested parties
Pursuant to articles 15 and following of the GDPR, you have the right to ask Geko, at any time, for access to your personal data, for rectification or cancellation of the same or to oppose their processing, you also have the right to request the limitation of processing in the cases provided for by the art. 18 of the Regulation, as well as to obtain the data concerning you in a structured, commonly used and automatically readable format, in the cases provided for by the art. 20 of the Regulation. Requests must be sent in writing to Geko via the form on the "Contact us" website or to the following email address: info@gekoit.it. In any case you always have the right to lodge a complaint with the competent Supervisory Authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulation, if you believe that the processing of your personal data is contrary to the legislation in force.

9. Changes
This privacy policy is in force from 25 May 2018.
Geko reserves the right to modify or simply update its content, in part or completely, also due to changes in applicable legislation.

Geko therefore invites you to regularly visit this section to become aware of the most recent and updated version of the privacy policy in order to always be updated on the data collected and the use made of it.