Privacy Policy | GEST IN SPA

Last updated: 1 September 2026

1. Introduction

GEST IN SPA, headquartered at Corso A Tassoni 31 A, 10143 Torino, Italy, is committed to protecting the privacy and personal data of all individuals who interact with our website and services. This Privacy Policy describes how we collect, process, store, and safeguard personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Italian Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018.

2. Data Controller

GEST IN SPA acts as the data controller for the personal data processed through this website. For any matter relating to the processing of personal data, you may contact us at support@gestinspa.org or at the postal address indicated above.

3. Types of Data Collected

3.1 Data Provided Voluntarily

When you contact us through our website form, by email, or by telephone, we may collect the following categories of personal data:

Identification data: name, company or organisation name
Contact data: email address, telephone number, postal address
Communication data: the content of your messages and enquiries
Professional data: information relevant to the services you are enquiring about

3.2 Data Collected Automatically

When you visit our website, certain technical data is collected automatically, including:

IP address and browser type
Date and time of access
Pages visited and duration of visit
Referrer URL and general geographic location

4. Purposes and Legal Basis of Processing

Your personal data is processed for the following purposes and on the following legal bases:

Responding to enquiries: processing is necessary to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
Providing services: processing is necessary for the performance of a contract or to take steps at your request (Article 6(1)(b) GDPR).
Legal compliance: processing is necessary to comply with legal obligations (Article 6(1)(c) GDPR).
Legitimate interests: processing is necessary for purposes of website security, fraud prevention, and improvement of our services (Article 6(1)(f) GDPR).
Consent: where you have provided explicit consent, such as for the use of cookies (Article 6(1)(a) GDPR).

5. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

Enquiry data is retained for up to 24 months after last contact
Service-related data is retained for the duration of the engagement plus the period required by applicable law
Technical browsing data is retained for up to 12 months
Data subject to legal retention obligations is kept for the period mandated by applicable regulations

6. Data Sharing and Recipients

Your personal data may be shared with the following categories of recipients:

Legal partners and external counsel involved in recovery proceedings
Competent judicial and administrative authorities where required by law
Technical service providers acting as data processors under written agreement
Auditors and professional advisors in the context of regulatory compliance

We do not sell personal data to third parties under any circumstances.

7. Data Transfer Outside the EU

Personal data is primarily processed within the European Union. Where any transfer to a third country is necessary, it is carried out in accordance with the safeguards provided by Chapter V of the GDPR, including standard contractual clauses adopted by the European Commission.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: the right to obtain confirmation of whether your data is being processed and access to such data
Right to rectification: the right to have inaccurate or incomplete data corrected
Right to erasure: the right to request deletion of your data, subject to legal exceptions
Right to restriction: the right to request limitation of processing in certain circumstances
Right to data portability: the right to receive your data in a structured, commonly used format
Right to object: the right to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: where processing is based on consent, the right to withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at support@gestinspa.org.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable regulations, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or with the supervisory authority of the Member State of your habitual residence or place of the alleged infringement.

10. Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption of data in transit, access controls, regular security assessments, and staff training on data protection obligations.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. The updated version will be published on this page with a revised date. We encourage you to review this page periodically.

12. Contact

For any questions or requests relating to this Privacy Policy or the processing of your personal data, please contact:

GEST IN SPA
Corso A Tassoni 31 A
10143 Torino, Italy
Email: support@gestinspa.org
Phone: +39 011 741 2866