(in accordance with Article 13 of EU Regulation no. 2016/679)
Data Controller and DPO
The data controller is GEST SpA, who can be contacted via email at the address or by sending the letter to GEST SpA - Via dell'Unità d'Italia, 10 - 50018 Scandicci (FI).
The DPO can be contacted by writing to or by sending the letter to GEST SpA - Data Controller - Via dell'Unità d'Italia, 10 - 50018 Scandicci (FI) - Italy.
Type of personal data
GEST SpA collects directly from the customer (in the course of this Information, for the sake of brevity, also the "Interested") the personal data of the same (such as, by way of example, the name, address, e-mail address, the mobile phone number of the same and other personal identification data).
Purpose of the processing
Personal data is collected in order to:
to manage complaints and / or reports of anomalies on the service;
to manage redemption requests due to anomalies in the disbursement of securities on automatic issuers
to manage the receipt of self-applications (CVs);
The legal basis of the processing is for the purpose of the execution of a contract pursuant to art. 6 par. 1 letter b) of the 2016/679 EU Regulation;
Personal data will be processed exclusively by employees of GEST SpA
The data may be visible by companies appointed by GEST SpA to review the IT procedures.
GEST SpA will not transfer data to a third country or to an international organization.
The data is not subject to an automated decision-making process.
Personal data will be stored for the purpose:
the data provided during the filing of a complaint and / or reporting anomalies to the service will be kept for 5 years for the after-sales management (complaints, anomalies) and in order to allow the Company to defend itself from possible claims made in relation to request itself;
the data provided when submitting requests for reimbursement will be kept for 5 years and in order to allow the Company to defend itself from possible claims made in relation to the request itself;
the data provided during the submission of self-candidatures (CV) will be kept for 3 years;
At the end of the respective retention periods, the data will be deleted or otherwise irreversibly de-identified, unless the further retention of some or all of the data is required by law.
Rights of the interested party
The interested party has the right to:
ask GEST SpA confirm whether or not the current processing of personal data concerning him and in this case to obtain access (art. 15 of the EU Regulation 2016/679) by writing to email@example.com or by sending the letter to GEST SpA - Via dell'Unità d'Italia, 10 - 50018 Scandicci (FI);
ask GEST SpA to correct inaccurate personal data concerning him and / or the integration of incomplete personal data (Article 16 of EU Regulation 2016/679) by contacting the toll-free number 800 335850;
ask GEST SpA to delete the data processed for the purpose of managing customer complaints only if the personal data:
they are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
are processed unlawfully, must be deleted to fulfill an obligation under EU law or the law of the member state to which the data controller is subject (Article 17 of EU Regulation 2016/679).
The interested party can exercise the right by writing to firstname.lastname@example.org or by sending the letter to GEST SpA - Data Controller - Via dell'Unità d'Italia, 10 - 50018 Scandicci (FI);
ask GEST SpA to limit the processing when one of the following hypotheses occurs:
the data subject disputes the accuracy of the personal data and requests the limitation for the time necessary for the owner to verify the accuracy of the personal data;
the processing is unlawful and the interested party opposes the cancellation of the data and requests instead that its use be limited, although the owner no longer needs it for the purposes of the processing, the personal data are necessary for the interested party to ascertain , the exercise or defense of a right in court (Article 18 of EU Regulation 2016/679).
The interested party can exercise the right by writing to email@example.com or by sending the letter to GEST SpA - Via dell'Unità d'Italia, 10 - 50018 Scandicci (FI);
The interested party does not have the right to object to the processing of the data collected for the purpose of managing data relating to complaints and / or the reporting of service anomalies because the processing is based on art. 6 par. 1 letter b) of EU Regulation 2016/679 (execution of a contract) and not on art. 6 par. 1 letter e) - execution of a task of public interest - or lett. f) - legitimate interest of the owner (Article 21 of EU Regulation 2016/679)
The interested party has the right to lodge a complaint with a supervisory authority if he considers that the processing concerning him violates the 2016/679 EU Regulation. The complaint can be submitted to the supervisory authority of the Member State in which the interested party habitually resides or works or of the place where the alleged violation has occurred (Article 77 of EU Regulation 2016/679).
The personal data are necessary for the conclusion of the treatment, in the absence it will be impossible to manage the complaint and / or the reporting of anomaly of the service.