Information on the processing of personal data of users of the website www.eaeitalia.it, provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Last updated: 25 September 2026
01
Data controller
The data controller is EAE Italia S.r.l., with registered office at Via Andegari 4, 20121 Milan, Italy, and operating office at Via San Bovio 3, Segreen Business Park – Building X, 20054 Segrate (MI), Italy, tax code and VAT number IT05825630964.
For any request concerning the processing of personal data and the exercise of rights, you can write to info@eaeitalia.it or send a letter to the address of the operating office.
02
Scope
This notice covers the website www.eaeitalia.it, in its Italian and English versions, and the services available on it (browsing, contact form, job application form, multimedia content). It does not apply to third-party websites reachable through links, including the EAE Group websites (eaeelectric.com, eaelighting.com) and external platforms (YouTube, LinkedIn, Facebook, Instagram), which are governed by their own privacy notices.
03
Categories of data processed
Browsing data: the IT systems and software procedures used to operate the website acquire, during normal operation, some data whose transmission is implicit in the use of Internet protocols (IP address, browser type and operating system, requested pages, time of the request, response status and size). This data is used solely to ensure the correct operation and security of the website and is kept in the server logs.
Data provided through the Contact form: first name, surname, email address, company (optional), telephone (optional), type of request and message text.
Data provided through the Careers form: first name, surname, email address, telephone (optional), position of interest, cover message (optional) and curriculum vitae attached in PDF or Word format. Candidates are asked not to include in their CV special categories of data (for example health, religious beliefs, trade union membership) that are not necessary to assess the application.
Usage statistics: only with your consent, the website uses Google Analytics 4 to collect aggregated information on browsing (pages visited, visit duration, device, approximate geographic area) with anonymised IP address. For details, see the Cookie Policy.
04
Purposes and legal bases
Responding to requests for information, quotations and technical support sent through the Contact form: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) and the controller’s legitimate interest in managing relationships with customers and designers (Art. 6(1)(f)).
Management of applications and staff selection: performance of pre-contractual measures (Art. 6(1)(b)) and, for any special categories of data voluntarily provided, Art. 9(2)(b), in compliance with Article 111-bis of Legislative Decree 196/2003.
Website security and prevention of abuse (limitation of the number of requests per IP address, checking of uploaded files, access logs): the controller’s legitimate interest (Art. 6(1)(f)).
Anonymous statistics on website usage through Google Analytics 4: consent of the data subject (Art. 6(1)(a)), which can be freely withdrawn at any time through the “Manage cookie preferences” link in the footer.
Compliance with legal obligations and defence of rights in court: Art. 6(1)(c) and (f).
05
Nature of the provision of data
Providing the data marked as mandatory in the forms is necessary to follow up the request or the application; without it, we will not be able to respond. Optional data may be omitted without consequences. Consent to the use of statistical tools is optional and refusing it does not limit browsing of the website in any way.
06
Processing methods and security measures
Data is processed with IT tools, by authorised and trained staff, for the time strictly necessary for the stated purposes. The website forms do not store data in an online database: requests and applications are sent by email to the EAE Italia staff in charge, who keep them in the company systems.
The website adopts appropriate technical and organisational measures, including traffic encryption (HTTPS), content security policies, request limiting, verification of the format of uploaded files and system access restricted to authorised personnel.
07
Retention period
Requests sent through the Contact form: up to 24 months from the last contact, unless a business relationship is established, in which case data is kept for the duration of the relationship and for the subsequent statutory periods.
Applications and CVs: up to 12 months from receipt, to allow assessment also for positions that may open during that period; after that the data is deleted, unless the candidate renews the application.
Server security logs: up to 12 months, unless needed to investigate computer crimes.
Google Analytics 4 statistical data: 14 months, in aggregated and pseudonymised form, according to the retention settings of the service.
08
Recipients and data processors
Data may be accessed by EAE Italia staff authorised to process it and, where necessary to handle the request or the selection, by EAE Group companies. Data is not disseminated.
To operate the website, the controller relies on suppliers appointed as data processors under Art. 28 GDPR: Hetzner Online GmbH (website hosting, servers located in Germany); Cloudflare, Inc. (content delivery network and protection against attacks); Resend, Inc. (delivery service for the emails generated by the forms); Google Ireland Limited (Google Analytics 4, only with consent, and the YouTube platform for embedded videos). The updated list of processors is available on request.
09
Transfers of data outside the European Union
Data is stored mainly within the European Union. Some suppliers (Cloudflare, Resend, Google) may process data in the United States: in such cases the transfer is based on the European Commission adequacy decision on the EU-U.S. Data Privacy Framework for certified suppliers and, in any case, on the standard contractual clauses approved by the Commission (Art. 46 GDPR), with supplementary measures where necessary. A copy of the safeguards adopted can be requested by writing to info@eaeitalia.it.
10
Embedded third-party content
Some pages embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com domain): no data is sent to Google until the user starts playback; from that moment Google may process data according to its own privacy policy (policies.google.com/privacy).
The Contact page displays a map provided by OpenStreetMap: loading the map tiles involves transmitting the IP address to the OpenStreetMap Foundation (United Kingdom, a country recognised as adequate by the European Commission), which processes it according to its own privacy policy (osmfoundation.org/wiki/Privacy_Policy).
11
Rights of the data subject
You may at any time exercise the rights provided for in Articles 15-22 GDPR: obtain access to your data and a copy of it, rectification of inaccurate data, erasure, restriction of processing, portability of the data you provided, as well as object to processing based on legitimate interest and withdraw the consent given, without prejudice to the lawfulness of processing carried out before withdrawal.
Requests can be sent to info@eaeitalia.it; the controller replies within one month, which may be extended in the cases provided for by Art. 12 GDPR. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it) or with the supervisory authority of your Member State of residence.
12
Automated decision-making and minors
The controller does not carry out profiling or automated decision-making producing legal effects on data subjects. The website is aimed at professionals and companies and is not intended for children under fourteen; the controller does not knowingly collect data from minors and will delete any such data received.
13
Updates to this notice
This notice may be updated to reflect regulatory changes or new website features. The current version, with the date of the latest revision, is always published at this address. For the use of cookies and similar technologies, please refer to the Cookie Policy.