Our Privacy Policy

LIST OF CONTENT

COGES S.P.A., in the capacity of Data Controller, in accordance with and for the effects of Regulation EU 2016/679, hereinafter ‘GDPR’, hereby informs users of the website https://www.coges.it , as “data subjects”, of the purposes of the collection and methods of processing the personal data, in accordance with Art. 13 of the Regulation.

Controller – Identity and contact details

COGES S.P.A. (Tax Code and VAT no.: IT00527790240) with registered office in Via G. Leopardi 23, 36030 Caldogno, certified email address: cogesspa@pec.it

Data Protection Officer – DPO

It is noted that the Data Controller, along with the Group Companies, has designated a Data Protection Officer, in accordance with Art. 37 of the GDPR, who can be contacted using the following details: Telephone: +34 948709872 – Email: responsableseguridad@Azkoyen.com

For which purposes do we process the personal data?

The User’s Data are collected by the Controller for the following specific purposes:
a) to facilitate browsing on the website;
b) to contact the User following a contact request received through completion of the contact form entitled “further information”;
c) to facilitate the commercial promotion and illustration of the products and services offered, with possible transmission of further offers of services or products, with the data subject’s consent;
d) to provide the user with the requested information and services also as a result of contact established by way of the switchboard service;
e) to comply with legal obligations, to fulfil orders from Public Authorities, to ascertain any liability in the event of hypothetical computer crimes to the detriment of the website or its users;
f) to interact on social networks on which Coges S.p.A. has a user profile (Linkedin, Facebook and X);
g) to facilitate registration in the technical area and the creation of a user profile;
h) to manage cookies. See the specific cookie policy published on the website.

The legal bases for processing are those indicated in Art. 6(1) GDPR
letter a) – (“consent”) concerning the transmission of offers of services and products; registration to the newsletter;
letter b) – (“performance of a contract to which the data subject is party” or “to take steps prior to entering into a contract”);
letter c) – “processing is necessary for compliance with a legal obligation to which the controller is subject”;
letter f) – “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”.
The User may deny consent and may, at any time, withdraw consent already provided.
However, denying consent may involve the impossibility of providing some services and may compromise the browsing experience.

To whom are the personal data disclosed?

Your personal data may be disclosed to external providers of auxiliary services instructed by Coges S.p.A., such as technical maintenance companies, providers of IT services, consultancy firms, administration agencies, personnel selection companies, advertising and marketing agencies and similar companies, which will act as processing officers in accordance with the instructions of Coges S.p.A.
If you have given your consent, your data may be transferred for commercial purposes to other companies of the Azkoyen Group that have signed a commercial collaboration agreement with Coges S.p.A.
If legitimate, your data may be transferred to public administration bodies and to security corps or forces in the exercise of their roles.

Methods of processing the data collected. How are the data collected processed?

The personal data collected are processed in compliance with principles of legality, fairness, and transparency, as per Article 5 of the GDPR, also with the aid of computer and telecommunication tools designed to store and manage the data, and, in any case, in a manner that ensures their security and protects the utmost confidentiality of the data subject.

For how long are the data retained?

Coges S.p.A. will retain your data only for the time taken to fulfil the purposes for which they were obtained; when your data are no longer necessary for the purposes for which they were collected, they will be erased.

More specifically:
Personal data obtained via the contact form or other communication channels are retained exclusively for the time taken to respond to the information requests received.
Personal data included in databases for commercial purposes will be retained until the consent previously provided is changed.
In all other cases, the personal data will be retained for the time taken to achieve the purposes and for no longer than one year from the completion of the aforementioned purposes.

Which security measures will be applied to your personal data?

The processing of the personal data provided will be carried out by adopting the physical, logical and organisational security measures necessary to avoid the loss, improper use, alteration and unauthorised access to the same, in light of the technological state-of-the-art, the nature of the data and the risk analysis carried out.

How can the data subject exercise rights and which rights are available?

In accordance with Articles 15 to 22 GDPR, the data subject may exercise, where the presuppositions are in place, the right to request from the data controller access to the personal data regarding him/her, the rectification or erasure of the data, the restriction of processing, the portability of the data by contacting the Controller or the DPO as indicated above.

Right to lodge a complaint with a Supervisory Authority or Judicial Authority

Data subjects who believe that the personal data relating to them is being processed in violation of the provisions of the Regulation have the right to lodge a complaint with the Data Protection Supervisory Authority as envisaged by Art. 77 of the Regulation itself or to take legal action through the courts in accordance with Art. 79 of the Regulation.

Changes to this Privacy Policy

The data controller reserves the right to make changes to this privacy policy, informing the data subjects any changes made.

The Data Controller
Coges S.p.A.