How we handle personal data

Introduction

ICA World Gate Group S.r.l. considers the protection of the personal data of clients, users and visitors to be of fundamental importance, and ensures that every processing operation, whether automated or manual, complies with Regulation (EU) 2016/679 (the "Regulation" or "GDPR") and other applicable rules.

This notice describes how this website is managed with regard to the processing of personal data of users who browse it or who contact the company through the digital channels indicated here. It does not apply to any other websites that may be reached via links on these pages.

Processing connected to the information, investigation and risk-analysis services provided by the company is governed by specific notices, provided to data subjects as part of the relevant contractual relationships, and is not covered by this document.

Data controller

For any question relating to this notice, to the protection of personal data or to the exercise of your rights, you can write to the email address shown above.

What data we collect

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: IP addresses, browser and operating system type, domain name, pages visited, access times and other parameters relating to the user's computing environment.

This data is recorded in the hosting provider's log files, is used in aggregate form to derive statistical information on the use of the site and to verify its correct operation, and may be used to establish liability in the event of computer crimes against the site.

Data provided voluntarily by the user

The site provides a membership and contact form. By filling it in, the user provides: the profile they represent (Municipality or public body, business, professional, partner), full name, organisation or company, role, city or region, email address, phone number and the text of their message.

Only the fields marked with an asterisk are mandatory: profile, full name, email, message and consent to processing. The other fields are optional and leaving them blank does not prevent the request from being sent.

The same data may also be provided by writing directly to the email addresses or calling the phone numbers published on the site.

Purposes and legal basis for processing

• Responding to requests received via the form, email or phone and assessing any possible path towards joining the ICA System. Legal basis: the data subject's consent and the performance of pre-contractual measures taken at their request (Art. 6(1)(a) and (b) of the Regulation).
• Ensuring the security and correct operation of the site. Legal basis: the controller's legitimate interest (Art. 6(1)(f)).
• Complying with legal obligations set out in law, regulation or by an authority. Legal basis: legal obligation (Art. 6(1)(c)).

Data collected through the site is not used for marketing purposes, profiling, or sending unsolicited commercial communications, and is not subject to automated decision-making.

How data is processed

Processing is carried out using IT and telematic tools, with logic strictly related to the purposes indicated and for no longer than strictly necessary, adopting security measures suitable to prevent unauthorised access, disclosure, alteration or destruction.

The message sent through the form is delivered to the company's mailbox via an encrypted connection to the provider's mail server. In addition to the controller, the data may be accessed by persons authorised to process it within the organisation, within the scope of their respective duties.

Recipients of the data

Personal data is not disclosed to the public. It may be processed, on behalf of the controller and as data processors appointed pursuant to Article 28 of the Regulation, by parties that provide services instrumental to the operation of the site, in particular:

• the hosting and email service provider;
• providers of site maintenance and technical support services;
• professionals and consultants, for statutory compliance purposes.

The up-to-date list of data processors may be requested from the controller at any time.

Place of processing and transfers

Data is processed at the controller's offices and at the data centres of the providers indicated, located within the European Union. No transfers of personal data to third countries are currently planned. Should they become necessary in future, they will only take place subject to the safeguards provided for in Chapter V of the Regulation, and this page will be updated accordingly.

Retention period

• Data provided via the form or by email is kept for as long as necessary to manage the request and any resulting contact, and in any case for no more than 24 months from the last contact, unless a contractual relationship results or legal obligations require longer retention.
• Technical log files are kept for the limited period set by the hosting provider, except where needed to investigate offences.

At the end of the retention period, the data is deleted.

Data subject rights

At any time, the data subject may exercise the following rights against the controller:

• Access (Art. 15): obtain confirmation that processing of their data is taking place and access that data and information on purposes, categories, recipients, retention period and origin.
• Rectification (Art. 16): correct inaccurate data or complete incomplete data.
• Erasure (Art. 17): obtain the deletion of data, in the cases provided for by the Regulation.
• Restriction (Art. 18): obtain that data be processed, other than for storage, only with consent or for the defence of a legal claim.
• Portability (Art. 20): receive their data in a structured, commonly used and machine-readable format, or request that it be transmitted to another controller.
• Objection (Art. 21): object to processing based on legitimate interest.
• Withdrawal of consent (Art. 7): withdraw consent given at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Requests should be sent to info@icaworldgategroup.it; they are free of charge and are answered as soon as possible and in any case within one month of receipt.

Complaints to the supervisory authority

Without prejudice to any other administrative or judicial remedy, anyone who believes that the processing of their data breaches the Regulation has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, Italy – www.garanteprivacy.it.

Cookies

This site does not install cookies of any kind and does not use analytics or profiling tools. Details are described in the Cookie Policy.

Links to third-party sites

From this site it is possible to reach, via dedicated links, third-party websites, including the magazine Financial Project. The controller is not responsible for the processing of personal data carried out by such sites: to find out more, please consult their respective privacy notices.

Changes to this notice

The controller reserves the right to modify or update this notice, including as a result of regulatory changes. Any changes will be published on this page along with the update date.

Last updated: 16 September 2026