Privacy policy

Privacy policy of the website WWW.ENGALSERVICES.COM  

This section describes how to manage the site in relation to the processing of personal data of users who consult it.
This document describes the methods used to manage the website (hereinafter, the “Site”) in relation to the processing of personal data of users who consult the Site, as well as the processing of personal data of those who, as clients or for any other reason, have relationships or contacts with Engal services srl or otherwise provide Engal services company with their personal data, for the purposes and on the further terms and conditions of this information notice, or whose personal data are processed by Engal services (hereinafter “Data Subjects”).
The information is provided pursuant to art. 13 of the Regulation (EU) n. 2016/679 (hereinafter the "GDPR") and concerns the site and its sub-pages, and not also the other websites that may be consulted via hyperlink. The Data Controller does not control or supervise the content nor the policies for the processing of personal data of websites and third-party services accessible through the links contained within the Site. Engal Services, therefore, will not be able to no case be held responsible for the processing carried out through or in relation to such third party sites.
1. Data Controller
The data controller is Engal services srl (or called "Owner"), with registered office in Via Pascoli 4, 37010 Affi (Verona), tel. +39 045 9232 222, e-mail:
2. Where and how data are processed
Data treatments connected to the web services of this Site, as well as the treatments that are carried out by Engal services srl in any other way pursuant to this information, take place at the Data Controller's premises and are processed exclusively by internal technical staff as provided by the GDPR .
All personal data are processed both in paper form and mainly in electronic form. Data will be stored in a format that allows the identification of the user exclusively for the time strictly necessary to achieve the purposes for which the data were originally collected and, in any case, within the limits of the law. Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access, in accordance with the provisions of the GDPR.
In order to ensure that personal data is always accurate, up to date, complete and relevant, we invite interested parties to report any changes made to the following e-mail address:
3. Purposes of the processing
Personal data are processed by the Data Controller for the following purposes:

a) within the limits and for the sole purpose of providing services accessible through the Site, as well as to allow users to know and deepen the activities, events and other initiatives, institutional and training, organized or carried out by the Data Controller;
b) manage and develop requests and requests for information on the company or requests for contact, job offers or collaboration with the company;
c) with the express consent of the interested party, for the sending - also by e-mail through automated systems - of communications containing information about the Owner and the activities organized by the Data Controller (such as, for example, invitations to seminars, conferences and in general to events, including the management of the related participations in them), as well as updates on the company's activities and / or promotional material, such as, for example, continuous training sessions, newsletters, presentations, insights and updates on relevant subjects to the activities carried out by the Data Controller, including profiling the Data Subject for such purposes, with the aim of orienting, improving or personalizing the Engal services srl initiatives taking into account the specific needs or specific interests of the Data Subject;
d) even without the consent of the interested party within the limits granted by the GDPR, for the sending - also by e-mail through automated systems - of the communications referred to in letter c) to the Interested party who is already the Customer of the Owner with regard to professional activities similar to those already performed by the owner.
The performance of the activities in letters a) and b) above does not require the consent of the interested party, since these are services or services performed, in most cases, in execution of requests made directly by the interested party pursuant to art. 6, c. 1 of the GDPR.
The processing of data for the purposes sub d) does not require the consent of the customer, as an interested party, as it is necessary for the pursuit of the legitimate interest of the owner, pursuant to art. 6, c. 1, lett. f) of the GDPR.
The processing of personal data for the purpose sub c) requires the consent of the interested party pursuant to art. 6, c. 1, lett. a) of the GDPR.
4. Provision of data
Except as specified for navigation data, the provision of personal data is optional and their failure to provide will result, as a sole consequence, the inability to get a response to contact requests and, for the owner, to manage and fulfill requests for interested or to send the communications indicated above.
5. Recipients
No data may be disclosed or transferred to third parties without the prior consent of the interested party. Where communication to third party suppliers or partners of Engal services should be necessary for organizational, administrative or related needs, it will be the responsibility of the Data Controller to appoint the latter as responsible for the treatment in accordance with the GDPR.
Except for what has been provided for here, the personal data of the interested parties may be freely communicated to third parties, such as law enforcement agencies, whenever permitted by law or required by an order or provision of a competent authority.
6. Retention period
Personal data will be kept for the time strictly necessary to achieve the purposes for which they are collected and processed. Once the purpose of the processing has been completed, or in the case of exercising the right to oppose the processing or revoking the consent given, the holder will still be entitled to further preserve the personal data in whole or in part, for the purposes permitted by the GDPR (such as the need to assert a right in court). As a general rule, personal data will be stored for 2 years from their registration, or 12 months for profiling purposes, without prejudice to the legitimate interest of the Data Controller pursuant to the GDPR, as well as any longer term that will be provided in future cases time governed by the applicable legislation or their authorities.

7. Rights of the interested parties
Access rights, cancellation, limitation and portability
The interested parties are granted the rights referred to in articles from 15 to 20 of the GDPR. By way of example, each interested party can:
a) obtain confirmation of whether or not personal data processing concerning him is underway;
b) if a processing is in progress, obtain access to personal data and information relating to the processing and request a copy of personal data;
c) obtain the correction of inaccurate personal data and the integration of incomplete personal data;
d) obtain, if one of the conditions foreseen by the art. 17 of the GDPR, the cancellation of personal data concerning him;
e) obtain, in the cases provided for by art. 18 of the GDPR, the limitation of the treatment;
f) receive personal data concerning him in a structured format, commonly used and readable by automatic device and request their transmission to another holder, if technically feasible.

Opposition right
Each interested party has the right to object at any time to the processing of his personal data carried out for the pursuit of a legitimate interest of the Data Controllers. In the event of opposition, your personal data will no longer be processed, provided that there are no legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

Right of withdrawal of consent
Each interested party may revoke the consent already given at any time, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation. The consent can be revoked by sending the request to:
Contact us CLICK HERE