Egea

Privacy

Information in compliance with art. 13 and 14 of the EU Regulation 2016/679

Dear Sir/Madam,
in compliance with articles 13 and 14 of the EU Regulation nr. 2016/679 (hereinafter “GDPR”), Egea Spa (hereinafter “Egea” or “Company), as data controller, provides the information regarding the processing of personal data related:
A.  to the registration and navigation on the websites www.egeaeditore.it and https://www.egeaonline.it/ (hereinafter also only the “Sites”), also for the purpose of acquiring information from Egea;
B.  to the registration and navigation on the reserved areas mybook.egeaonline.it, digitalibri.egeaonline.it/, catalog.egeaonline.it/, digitabook-easytest.egeaonline.it/, digitabook.egeaonline.it (hereinafter also only, generically, the “Reserved Areas”);
C. to the transmission of commercial and promotional communications, also through newsletters.
 
The following information is provided only for the Sites and the Reserved Areas; it does not apply to other websites of third parties that may be consulted by the User through links on those channels.

1. Data controller
The data controller is Egea Spa in the person of its legal representative pro tempore, based in Milan, via Sarfatti 25; tel 02 58365751; fax 02 58365753; e-mail egea.edizioni@unibocconi.it; website: www.egeaeditore.it (hereinafter, the " Controller").
The Controller acknowledges that it has appointed a Data Protection Officer ("DPO"), who can be contacted at dpoegea@unibocconi.it.

2. Information we collect about you 

2.1 Registration on the Sites
On Registration Page of our Sites we will collect these information: First Name*, Last Name*, Country*, State*, Email*, Phone, Tax Identification Number*, Username*, Password*, password confirmation*, Company, Sector, Role, Function, User Profile*, Unlock Book Code. All fields marked with an asterisk are mandatory.
With the credentials thus obtained, it will also be possible to access the Restricted Areas.
 
2.2. Registration on the Reserved Areas
The User can register on the Restricted Areas, alternately:
  • by giving the following personal data:
    First Name* and Last Name*, Username*, email*, password*, repeat password*, company*, industry, role and function.
  • authenticating via IDEM (a consortium of universities and research institutions), which will validate the User’s membership in a university or research institution affiliated with the Company, allowing the access of that person to the Reserved Area. Via IDEM, the User provide the Company with the following personal data: First name, last name, home institution, role, institution identifier, username.
    For more information with reference to the latter data processing, please see the specific privacy notice for the authentication service via IDEM.
2.3 Navigation Data
The computer systems and software procedures used to operate the Sites and Reserved Areas acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified persons, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. The aforementioned data are collected for the sole purpose of obtaining anonymous statistical information on the use of the Sites and Reserved Areas and to check their correct functioning. The same could be used to allow the ascertainment of responsibility in case of hypothetical computer crimes to the detriment of the Sites and Reserved Areas: except for this eventuality, the data are kept for the time defined by the reference legal regulations for the time strictly necessary to provide the User with the requested service to ensure the transmission of the communication.
 
2.4 Cookie
Cookies are short text files that are downloaded to your device when you visit a website. On each subsequent visit, cookies are sent back to the website that originated them (first-party cookies) or to another website that recognizes them (third-party cookies). Cookies are useful because they allow a website to recognize the User's device. They serve various purposes such as, for example, allowing you to navigate efficiently between pages, remember your favorite sites, and generally improve your browsing experience. They also help to ensure that advertising content displayed online is more targeted to the User and their interests. Depending on the function and purpose of use, cookies can be classified into technical cookies, profiling cookies, and third-party cookies.
For more information about the use of cookies on the Site, please see the cookie policy.
 
2.5 Data provided voluntarily by the User
Any optional, explicit and voluntary sending of electronic mail to the addresses indicated on the Site and on the Reserved Areas entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

2.6 Data collected from publicly accessible sources
The Controller may collect data from publicly accessible sources in compliance with relevant regulations.

3. Purposes of the processing and the legal basis

Save what already indicated for navigation data, the personal data may be processed by the Company for the following purposes
a. to allow the User the access to the Sites and the Reserved Areas, for purposes strictly related to the provision of online services requested by the User (i.e. the purchase of books and/or manuals, as well as purchase, consultation or lending of digital publications and taking tests and accessing supplementary content in support of purchased or borrowed books and/or manuals).
Legal basis of the processing: performance of contractual and pre-contractual obligations;
b. to receive the informative newsletter of Egea Spa, in order to be always informed about news in the publishing sector, as well as to achieve an effective management of business relationships, with particular reference to the purposes of commercial promotion, advertising communication, statistical processing and marketing in the broadest sense, relating to products and services provided by the Company, ("Marketing"), using automated methods of contact (e-mail, sms, telefax, WhatsApp, etc.), and traditional methods of contact (paper mail or calls with operator).
Legal basis of the processing: the User's consent. Any consent given by the User may be withdraw at any time by writing to egea.edizioni@unibocconi.it.
c. to subscribe to the "Egea Bookshop New Products Service", which allows the User to indicate the areas of his/her interest, in order to remain informed and updated in relation to editorial news concerning the aforementioned areas.
Legal basis of the processing: the User's consent. Any consent given by the User may be withdraw at any time by writing to egea.edizioni@unibocconi.it.
d. to transmit commercial and promotional communications due to the interest shown in the products and services provided by the Company (for example, through a specific contact request from you, the adoption or evaluation of adoption of a volume of the Controller for the inclusion of the same in the bibliography of exam), using automated methods of contact (e-mail, sms, telefax, WhatsApp, etc.), and traditional methods of contact (paper mail or calls with operator).
Legal basis for processing: the legitimate interest of Egea. At any time it is possible to object to the processing carried out for this purpose by writing to egea.edizioni@unibocconi.it.
e. to fulfil requests made by sending e-mail to the Controller's email addresses indicated on the Sites.
Legal basis for processing: performance of contractual and pre-contractual obligations.

4. Methods of data processing
The processing is carried out with the support of electronic or otherwise automated instruments with logic strictly related to the purposes expressed above and, in any case, so as to ensure the security of the data.

5. Consequences of any refusal to provide personal data
Save what already indicated for navigation data, the provision of personal data is a contractual obligation for the purpose indicated in paragraph 3.a. The provision of data for the other purposes mentioned in paragraph 3 above is optional. A refusal, however, would make it impossible for the Controller to proceed as indicated.

6. Recipients of data
The User's personal data may be accessed by individuals duly authorized by the Company pursuant to Article 29 of GDPR, as well as suppliers designated by the Company as data processors, pursuant to Article 28 of GDPR.
An updated list of these subjects is available on request to the Controller.

7. Data Retention period
Personal data will be kept for a period of time not exceeding the achievement of the purposes indicated in paragraph 3) herein. In particular:
  • the data for the purposes referred to in paragraph 3.a above will be kept for the duration of the relationship established with the User, after which they will be kept only in order to comply with the legal obligations in force, for administrative purposes and/or to assert or defend a right, in case of litigation and pre-litigation;
  • personal data processed for the purposes referred to in paragraphs 3.b and 3.c above until the revocation of the consent of the data subject;
  • personal data processed for the purpose referred to in paragraph 3.d will be kept for a period not exceeding 24 months;
  • data processed for the purpose referred to in paragraph 3.e above will be processed for the time necessary to provide feedback and in any case no longer than 12 months; with specific reference to the data processed in the Reserved Areas via IDEM, they will be deleted upon the User's request or if the User has not used the service for 2 years.
8. Rights of the subject (art. 15 – 22 GDPR)
The User has the right to obtain from the Company, access to personal data, a copy (portability), the rectification or cancellation of personal data, the limitation of the processing or to oppose to the processing.
A special request may be forwarded to: egea.privacy@unibocconi.it or dpoegea@unibocconi.it. After verification of the legitimacy of the request, the rights will be confirmed by the Company, as a rule, within one month.
The User who has accessed the Reserved Areas via IDEM, may obtain the rectification of the data released by its home institution contacting its IT helpdesk.

9. Right to submit a complaint
You have the right to submit a complaint to the supervisory authority for the protection of personal data (based in Piazza Venezia 11, 00187 ROMA) with the modalities indicated at the Internet address: http://www.garanteprivacy.it – mail garante@gpdp.it

Updated: 14 May 2024
Previous update: 30 August 2023