Gecko Informatica Srl Unipersonale, with registered office at Via Lago di Lugano, 27 36015 Schio (VI), VAT 04162000246 (hereafter "Gecko Informatica"), as Data Controller, informs you pursuant to Legislative Decree 196/2003 ("Italian Privacy Code") and Article 13 of EU Regulation 2016/679 ("GDPR") that your personal data will be processed as described below.

1. Purpose of Data Processing

Gecko Informatica processes personal data you provide, such as name, surname, company name, address, phone, email, and banking/payment details ("personal data"), in relation to contracts for the services provided.

2. Processing Purposes

Personal data are processed without your explicit consent for the following service purposes:

• To execute contracts for Gecko Informatica services;
• To fulfill pre-contractual, contractual, and fiscal obligations;
• To comply with legal, regulatory, or authority obligations (e.g., anti-money laundering laws);
• To exercise the rights of Gecko Informatica, such as legal defense.

3. Processing Methods

Data processing involves operations such as collection, registration, storage, consultation, modification, extraction, use, interconnection, blocking, communication, deletion, and destruction. Data are processed in paper, electronic, or automated form, and retained for no more than 10 years after termination of the relationship for the purposes indicated.

4. Data Access

Your data may be accessed by:

• Employees and collaborators of Gecko Informatica appointed for processing or system administrators;
• Third-party companies or other entities performing outsourced services on behalf of Gecko Informatica, as external data processors.

5. Data Communication

Without explicit consent, data may be communicated to:

• Supervisory bodies (e.g., IVASS) and judicial authorities;
• Insurance companies for the provision of insurance services;
• Entities legally required to receive the data for the purposes indicated.

6. Security

Data are protected using adequate security measures to prevent loss, unauthorized access, unlawful or improper processing.

7. Data Transfer

Data will be processed and stored exclusively within the European Union.

8. Data Subject Rights

As a data subject, you have the right to:

• Obtain confirmation of data existence and intelligible communication;
• Receive information about data origin, purposes and methods of processing, applied logic, data controller, data processors and recipients;
• Request updating, correction, integration, deletion, anonymization, or blocking of unlawfully processed data;
• Object to processing for legitimate reasons, in whole or in part;
• Exercise additional rights under Articles 16-21 GDPR and lodge a complaint with the Supervisory Authority.

9. Exercising Rights

Rights may be exercised by sending a request:

• By email: info@geckoinformatica.it
• By registered mail: Gecko Informatica Srl Unipersonale, Via Lago di Lugano 27 - 36015 Schio (VI), Italy

10. Data Controller and Processors

The Data Controller is Gecko Informatica Srl Unipersonale. The updated list of responsible persons and processors is kept at the Controller's office.