This Privacy Policy explains how we process the personal data of users who visit www.cegesrl.it or contact C&G Engineering srl through it, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Data controller
The data controller is C&G Engineering srl, Via F.lli Maggini 18H, 62019 Recanati (MC), Italy, VAT no. IT02085910434.
For any request concerning the processing of personal data, please write to info@cegesrl.it or to our certified email (PEC) address cegesrl@pec.it.
2. Data we process
Browsing data
In the course of normal operation, the computer systems and software that run the website collect certain data whose transmission is inherent in the use of Internet communication protocols: for example IP address, browser type, date and time of the request and pages visited. These data are used only to ensure that the website works properly and securely, not to identify users.
Data you provide voluntarily
- Contact form: name, email address, subject and message text, used solely to reply to your enquiry.
- Email: the data contained in messages sent to the addresses shown on the website.
- Job applications: CVs and any portfolios sent to info@cegesrl.it, used to assess the candidate’s profile. Please do not include unnecessary data in your CV, in particular special categories of data (Art. 9 GDPR).
Cookies
The website uses technical cookies and, only with the visitor’s consent, Google Analytics 4 statistics cookies. For details, please see the Cookie Policy.
3. Purposes and legal bases
- Replying to requests for information, quotations and contact: steps taken at the data subject’s request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in managing correspondence (Art. 6(1)(f)).
- Assessing unsolicited job applications: pre-contractual steps at the data subject’s request (Art. 6(1)(b)) and, for the data contained in the CV, Art. 111-bis of Legislative Decree 196/2003.
- Ensuring the operation and security of the website: the controller’s legitimate interest (Art. 6(1)(f)).
- Collecting aggregate visit statistics through Google Analytics 4: the visitor’s consent (Art. 6(1)(a) GDPR and Art. 122 of Legislative Decree 196/2003), which can be withdrawn at any time.
- Complying with legal obligations or requests from authorities: Art. 6(1)(c).
4. Whether providing data is mandatory
Providing the data requested in the contact form is optional, but without them we cannot reply to your enquiry. Browsing data are necessary for the website to work.
5. How data are processed
Data are processed electronically and, where necessary, on paper, by authorised staff and with appropriate security measures to prevent loss, unlawful use or unauthorised access. No automated decision-making or profiling for marketing purposes takes place.
6. Recipients of the data
Data are not disclosed to the public. They may be shared, only to the extent strictly necessary, with:
- Aruba S.p.A., provider of the website hosting and email services, appointed as data processor;
- IT service providers and consultants supporting the controller, acting as data processors;
- Google Ireland Ltd, for the Google Analytics 4 statistics service (only with the visitor’s consent) and for the Google Maps map (only if the visitor chooses to display it);
- public authorities, where required by law.
7. Transfers of data outside the European Union
Data are stored on servers located in the European Union. If the user consents to statistics cookies or activates the Google Maps map, some browsing data may be transferred to Google LLC in the United States; Google participates in the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.
8. Retention period
- Contact requests: for as long as needed to handle the request and any subsequent relationship, and in any case no longer than 24 months from the last contact, unless the law requires otherwise.
- Job applications: up to 24 months from receipt, unless an employment or collaboration relationship begins.
- Browsing data: for the technical period set by the hosting provider for security purposes.
- Google Analytics statistical data: 14 months, according to the service’s retention setting.
9. Your rights
You may exercise the rights set out in Articles 15–22 GDPR at any time: access to your data, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest. Requests can be sent to info@cegesrl.it or cegesrl@pec.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Changes
This notice may be updated. The version in force is always the one published on this page, with the date of the last update.