IT EN
Header background

Privacy Policy

Last updated: 12 October 2026

This notice explains how we process the personal data of visitors to www.gruppoexcellence.com and of anyone who contacts us through its forms, pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Privacy Code”).

1. Data controller

The data controller is Gruppo Excellence (“we”), Via Vittor Pisani 7, 20124 Milan, Italy, VAT no. 05565700969.
For any question about how your data is processed, write to info@gruppoexcellence.com.

For any data protection matter you can use the same email address.

2. What data we process

Browsing data

While you browse, the systems that run the site record some data that your browser sends automatically: IP address, browser and operating system type, requested page, date and time of the request and the outcome of the response. We do not use this data to identify you, but to run the site, protect it and investigate any abuse or cyber attack.

Cookies

The site uses technical cookies, which it needs to work, and Google Analytics 4 statistics cookies, which we enable only with your consent. The full list of cookies and the preference settings are in the Cookie policy.

Data you give us

When you fill in a form on the site, we process the data you enter:

  • Newsletter: email address.
  • Download of studies and documents: email address.
  • Whistleblowing and reports: subject and description of the report, the certification it refers to and, only if you choose to provide them, your first name and surname.
  • Job applications (“Work with us”): first name, surname, email, phone number, CV and cover letter (see section 4).

Please enter only the data that is needed and do not send us special categories of data (for example health information, political opinions or religious beliefs) unless they are essential.

3. Why we process data and on what legal basis

  • Running and protecting the site (browsing data and technical cookies): our legitimate interest in keeping the site secure and available (Art. 6(1)(f) GDPR).
  • Measuring use of the site in aggregate form (Google Analytics 4): your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from “Cookie preferences” at the bottom of every page.
  • Sending you the newsletter: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us.
  • Sending you the documents you request: performance of your request (Art. 6(1)(b) GDPR).
  • Handling reports and complaints: legal obligations (Art. 6(1)(c) GDPR) and our legitimate interest in running the Group’s certified management systems (Art. 6(1)(f) GDPR). Reports that fall under the whistleblowing rules (Italian Legislative Decree 24/2023) go through the dedicated channel, which has its own notice.
  • Assessing your job application: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR and Art. 111-bis of the Privacy Code).
  • Protecting our rights and complying with the law: our legitimate interest in defending ourselves in court (Art. 6(1)(f) GDPR) and legal obligations (Art. 6(1)(c) GDPR).

We do not use your data for profiling or for decisions based solely on automated processing.

4. Job applications

If you apply through the “Work with us” section, we use your data only to assess your profile for the position you chose and, if suitable, for similar positions that open during the retention period. No consent is needed for unsolicited CVs (Art. 111-bis of the Privacy Code).

Your data is accessed only by the staff in charge of recruitment and by the managers of the areas concerned. If your CV contains special categories of data (for example membership of a protected category of workers), we process it only within the limits set by employment law (Art. 9(2)(b) GDPR).

We keep your application for as long as needed to assess it and to consider you for similar positions, then we delete or anonymise it; you can ask us to delete it at any time.

5. How we process data

We process data electronically, with technical and organisational measures appropriate to protect it from unauthorised access, loss or disclosure. Only people authorised by Gruppo Excellence and the parties listed in section 6 can access it.

6. Who we share data with

Your data is not made public. It may be received, only for the purposes described above, by:

  • the providers that help us run the site, appointed as data processors (Art. 28 GDPR): hosting and cloud services, email delivery service, site maintenance and development;
  • Google Ireland Ltd., for Google Analytics 4 statistics, only if you have given consent;
  • other Gruppo Excellence companies, if your request or application concerns one of them;
  • advisers and public authorities, when needed to comply with legal obligations or to protect our rights.

The up-to-date list of data processors is available on request.

7. Transfers outside the European Union

Data collected through Google Analytics 4 may be transferred to Google LLC in the United States, which participates in the EU-U.S. Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023. If other providers process data outside the European Union, the transfer will take place only with the safeguards set out in Articles 44-49 GDPR, such as standard contractual clauses.

8. How long we keep data

  • Browsing data: for as long as strictly needed to keep the site secure, unless it is needed to investigate crimes.
  • Cookies: for the duration stated in the Cookie policy.
  • Newsletter: until you withdraw your consent.
  • Document requests: for as long as needed to follow up on them.
  • Reports and complaints: for as long as needed to handle them and for the periods set by law and by the certified management systems.
  • Job applications: for as long as needed to assess them and to consider you for similar positions.

When the period ends, data is deleted or anonymised, unless the law requires us to keep it longer.

9. Your rights

At any time you can ask us to:

  • access your data and receive a copy of it;
  • correct or update it;
  • delete it or restrict its processing;
  • receive it in a structured format and transmit it to another controller (portability);
  • object to processing based on our legitimate interest;
  • withdraw your consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to info@gruppoexcellence.com: we will reply within one month of your request. If you believe the processing breaches data protection law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

10. Providing your data

Providing the data requested in the forms is optional, but without the data marked as required we cannot answer your request or assess your application.

11. Changes to this notice

We may update this notice, for example when the site’s services or the law change. The date of the last update is shown at the top of the page.