1. Response to request for information

The processing of personal data is carried out to process requests for information on the services offered by Group companies. Gi Group may provide the contact details or forward them directly to the related Group company for the purpose of a suitable and timely reply by the same.

Pursuant to art. 6(1)(B) of the UK GDPR, the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

2. Periodic notification of candidates

The processing of personal data is carried out to send periodic communications to report candidates in administration or for direct insertion.

The legal basis that legitimizes the processing is consent. It is understood that the consent to the processing of data for this purpose is purely optional

3. Gi Group Marketing

The processing of personal data is carried out to send information and promotional communications relating to the services offered by Gi Group,  for carrying out studies and statistical and/or market research, using both traditional and automated contact methods (e.g. e-mail, sms, phone calls, etc.).

The legal basis that legitimizes the processing is consent. It is understood that the consent to the processing of data for this purpose is purely optional.

4. Marketing of Group companies

The processing of personal data is carried out to receive information and promotional communications from other companies of the Group – also located outside the European Economic Area – relating to the services offered by the same companies, or for carrying out of studies and statistical and/or market research, using both traditional and automated contact methods (e.g. E-mail, sms, phone calls, etc.).

The legal basis that legitimizes the processing is consent. It is understood that the consent to the processing of data for this purpose is purely optional.

1. Response to request for information

The data will be stored for the time necessary to process requests for information.

2. Periodic notification of candidates

The data will be processed until the consent is withdrawn.

3. Gi Group Marketing

The data will be processed until the consent is withdrawn.

4. Marketing of Gi Group companies

The data will be processed until the consent is withdrawn.

Once the retention terms indicated above have elapsed, the personal data will be erased or rendered anonymous, compatibly with the technical cancellation and backup procedures.

The provision of personal data highlighted with an asterisk in the form is mandatory: the refusal to provide such personal data does not allow Gi Group to process requests for information.

Personal data will be processed exclusively by employees of the company functions authorized to process data for the aforementioned purposes, who have been expressly authorized to the processing and who have received adequate operating instructions.

Personal data may be disclosed to the following categories of subjects that act as controllers:

• Group companies in Italy or abroad, even outside the European Economic Area, if the request for information concerns services offered by other Group companies.

Personal data may also be processed, on behalf of the Company, by persons designated as Data Processors. These subjects are included in the following categories:

• Site management and maintenance services;
• Customer database management and maintenance services;
• Archiving services;
• Communications mailing services;
• Market research services.

The list of data recipients can be obtained by sending a written communication to the Data Controller or an e-mail to it.privacy@gigroup.com

The data can be transferred abroad to countries not belonging to the EEA, and in particular to:

• Argentina, Switzerland and the United Kingdom, whose data protection level has been deemed adequate by the European Commission pursuant to art. 45 of the GDPR
• Brazil, China, Colombia, Hong Kong, India, Montenegro, Russia, Serbia, Turkey, upon signing the Standard Contractual Clauses adopted / approved by the European Commission pursuant to art. 46, 2, c) and d) of the GDPR

Adequacy decisions can be consulted at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

A copy of the standard contractual clauses signed by Gi Group can be obtained by sending an e-mail to it.privacy@gigroup.com

What are the data subjects rights?

At any time, you can withdraw your consent to the processing of personal data carried out for direct marketing purposes by writing to the e-mail address: it.privacy@gigroup.com and / or by clicking on the appropriate links contained in the communications that will be sent to you.

The withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal.