Ecaconsult Srl with registered office in Via San Francesco 1903, Mordano (BO), Italy (hereinafter“Ecaconsult”) constantly undertakes to protect the online privacy of its users. This document was drafted pursuant to art. 13 of EU Regulation 2016/679 (hereafter: “Regulations”) in order to let you know our privacy policy, to understand how your personal information is handled when you are using our sites (, hereinafter collectively “Site” ) and, where appropriate, to give a expressed and aware consent to the processing of your personal data. The information and data you have provided or otherwise acquired in the context of using the services of Ecaconsult, hereinafter “Services”, will be processed in compliance with the provisions of the Regulations and the confidentiality obligations that inspire the activity of Ecaconsult.

According to the rules of the Regulations, the processing carried out by Ecaconsult will be based on the principles of lawfulness, correctness, transparency, purpose and retention limits, data minimization, accuracy, integrity and confidentiality.


  1. Data controller
    2. Personal data processed
    2.1 Navigation data
    2.3 Data provided voluntarily by the interested party
    2.4 Cookie
    Purpose of the processing
    4. Legal basis and mandatory or optional nature of the processing
    Personal data recipients
    6. Personal data transfers
    7. Personal data storage
    8. Rights of the data subjects
    9. Changes

  2. Data Controller

The Data Controller processed through the Website is Ecaconsult as defined above. For any information regarding the processing of personal data by Ecaconsult, including the list of data processors, you can write to the following address:

  1. Personal data processing

Following the navigation of this website, we inform you that Ecaconsult will process personal data that may be made up of an identifier such as the name, an identification number, an online ID or one or more characteristic elements of your physical, physiological, psychic, economic identity, cultural or social suit to make the data subject identified or identifiable (hereinafter only “Personal Data“).

Personal data processed through the website are the following:

2.1. Navigation data

The computer systems and software procedures used to operate the Site, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This informations are not collected to be associated with identified subjects, but by their very nature could allow to identify users, through processing and association with data held by third parties. This category of data includes IP addresses or domain names of the computers used by users who connect to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment. These data are used for the only purpose to obtaining anonymous statistical information on the use of the website and to check its correct functioning, to identify anomalies andor abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site or third parties: except for this possibility, the data on web contacts do not persist for more than thirty days.


2.3. Data provided voluntarily by the data subject

Using some website services, personal Data may be processed by third parties sent by you to Ecaconsult. With respect to these assumptions, you are the independent data controller, assuming all the legal obligations and responsibilities. In this sense, it confers on the point the widest indemnity with respect to any dispute, claim, request for compensation for damage from treatment, etc. that it should reach Ecaconsult from third parties whose Personal Data have been processed through its use of the functions of the website in violation of the rules on the protection of applicable personal data. In any case, if it provides or otherwise processes Personal Data of third parties in the use of the website, it guarantees from now – assuming all related liability – that this particular hypothesis of treatment is based on an appropriate legal basis pursuant to art. . 6 of the Regulation that legitimizes the processing of the informations.

2.4. Cookie

Definitions, characteristics and application of the legislation

Cookies are small text files that the sites visited by the user send and record on his computer or mobile device, to be then re-transmitted to the same sites at the next visit. Thanks to cookies, a site remembers the user’s actions and preferences (such as login data, the chosen language, font size, other display settings, etc.) so that they do not have to be re-indicated when the user returns to visit that website or browse from one page to another. Cookies, therefore, are used to perform computer authentication, monitoring sessions and storing information regarding the activities of users accessing a site and may also contain a unique identification code that allows you to track the user’s navigation inside of the site itself for statistical or advertising purposes. During navigation on a website, the user can also receive on his computer cookies from websites or web servers other than the one he/she is visiting (c.d. “third party” cookies). Some operations could not be performed without the use of cookies, which in some cases are therefore technically necessary for the same functioning of the website.
There are various types of cookies, depending on their characteristics and functions, and these can remain on the user’s computer for different periods of time: c.d. session cookies, which are automatically deleted when the browser is closed; CD. persistent cookies, which remain on the user’s equipment until a pre-established expiry date.

According to the italian legislation, the user’s express consent is not always required for the use of cookies. In particular, “technical cookies”, ie those used for the sole purpose of transmitting a communication over an electronic communications network, or to the extent strictly necessary to provide a service explicitly requested by the user, do not require such consent. In other words, these are cookies that are essential for the operation of the website or necessary to perform activities requested by the user.

Among technical cookies, which do not require an express consent for their use, the Italian Data Protection Authority (see Determination of the simplified procedures for information and the acquisition of consent for the use of cookies May 8, 2014 and subsequent clarifications, hereinafter only “Determination“) also includes:

  • “analytics cookie ” when used directly by the website operator to collect information, in aggregate form, on the number of users and how they visit the website;
  • “cookies browsing or session” (to authenticate);
  • “cookies functionality”, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected to purchase) in order to improve the service provided.
  • “Profiling cookies”, instead, ie that create profiles related to the user and used to send advertising messages in line with the preferences expressed by the same in the context of web browsing, it’s required a prior consent by the user.

Types of cookies used by the Site and the possibility of (de-) selection

The Website uses the following cookies that can be de-selected, except for third-party cookies for which it must refer directly to the relative methods of selection and de-selection of the respective cookies, indicated by means of links:

  • Technical cookies for navigation or session and strictly necessary for the operation of the website or to allow it to use the content and services requested.
  • Functional cookies, that is used to activate specific functions of the website and a series of selected criteria (for example, the language) in order to improve the service rendered.

ATTENTION: by disabling technical and / or functional cookies, the website may not be available or certain services or certain functions of the website may be unavailable or may not work properly and you may be forced to change or manually enter some information or preferences each time you visit the website.

Third-party cookies, ie cookies of sites or web servers other than that of Ecaconsult, used for the purposes of these third parties. It should be noted that these third parties, listed below with the related links to privacy policies, are typically independent data controllers collected through the cookies they serve; therefore, it must refer to their policies regarding the processing of personal data, information and consent forms (selection and de-selection of the respective cookies), as specified in the aforementioned provision. For the sake of completeness, we also specify that Ecaconsult will do the maximum to track cookies on our website. These are updated regularly in the table below, where we give transparency on the cookies directly sent by Ecaconsult and about their purposes. Regarding the third parties that send cookies through our site, we provide below the links to the respective privacy policies: to these third parties we demand, as already specified, the responsibility to provide the information and collect your consent, as provided by the Determination. This responsibility is referred not only to cookies that third parties send directly, but also to any additional cookies that they send via our website using services that the third parties themselves enjoy. In fact Ecaconsult doesn’t control and does not know  characteristics or purposes of these cookies, sent by service providers of the aforementioned third parties.

In detail, cookies sent by Ecaconsult through the website are shown below:

Cookies inside the website

Da inserire


Third-party cookies, ie cookies of sites or web servers other than Ecaconsult, used for the purposes of these third parties. It should be noted that such third parties are typically independent data controllers collected through the cookies they serve; therefore, it must refer to their policies regarding the processing of personal data, information and consent forms (selection and de-selection of their respective cookies), as specified in the aforementioned Determination. For completeness it is also specified that Ecaconsult does its utmost to be able to track cookies on its Site.

This site uses cookies from the following third parties:
– Google Inc. For information on the use of data and their processing by Google, it is recommended to read the privacy policy of Google and the way Google uses data when using sites or apps of partners.
– Google Analytics: used to analyze the use of the site by users, compile reports on site activity and user behavior, check how often users visit the site, how the site is tracked and which pages are visited most frequently. The information is combined with information collected from other sites in order to create a comparative picture of the use of the site compared to other sites of the same category.
Data collected: browser identification, date and time of interaction with the site, page of origin, IP address.
Place of data processing: European Union being active the anonymization of the service.

The data collected do not allow personal identification of users, and are not intersected with other information relating to the same person. They are treated in an aggregate and anonymised form (truncated to the last octet).

Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page

Cookie settings

You can block or delete (in whole or in part) technical and functional cookies through the specific functions of your browser. We inform you, however, that if you don’t allow technical cookies it could be impossible to use the website, view the contents and take advantage of the related services. Inhibiting functional cookies could mean that some services or certain functions of the website are not available or do not work properly and you may be forced to change or manually enter certain information or preferences each time you visit the website.

The choices made in reference to cookies on the website will be registered in a special cookie. This cookie may not work properly, however, in some circumstances: in such cases, we advise you to delete unwanted cookies and to inhibit their use through the functionality of its browsers.

Your preferences regarding cookies will be reset if you use different devices or browsers to access the website.

How to view and modify cookies through the Browser

You can authorize, block or delete (in whole or in part) cookies through the specific functions of your browser. For more informations on how to set preferences on the use of cookies through the browser, you can consult the relevant instructions

  1. Processing finality

The treatment we intend to carry out, with its specific consent where necessary, has the following purposes:
a. Allow the provision of the Services requested by you, namely: i) access to the reserved area of the website; ii) sending the newsletter; iii) _______
b. respond to requests for assistance or information;
c. analyze the CVs and recontact the candidates who submitted their application through the “Work with us” section;
d. fulfill any legal, accounting and tax obligations

  1. Law basis and mandatory or optional processing

The legal basis of the Personal Data processing for the purposes set out in Section 3 (a-b-c) is art. 6 (1) (b) of the Regulations as the processing is necessary for the provision of the Services or for the response of requests by the interested party. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the Services provided by the website, find requests or evaluate CVs. With specific reference to the objective 3.c and to the connected analysis of the professional social profiles freely available on the Internet as per section 2.b, the legal basis of the processing is art. 6 (1) (f) of the Regulations, ie the legitimate interest of Ecaconsult to verify any risks on the suitability of the candidate to hold the specific position.

The purpose set out in section 3.d represents a legitimate processing of Personal Data pursuant to art. 6 (1) (c) of the Regulation. Once the Personal Data have been provided, the processing is indeed necessary to fulfill a legal obligation to which Ecaconsult is subject.


  1. Recipients of personal data

Your Personal Data may be shared, for the purposes referred to in Section 3 above, with:

  1. subjects that typically act as data controllers, that is: i) persons, companies or professional firms that provide assistance and advice to Ecaconsult in accounting, administrative, legal, tax, financial and debt collection with respect to the provision of the Services; ii) subjects with whom it is necessary to interact for the provision of the Services (for example hosting providers) iii) or subjects delegated to perform technical maintenance activities (including maintenance of network equipment and electronic communications networks); (collectively “Recipients”);
    b. subjects, bodies or authorities that are obliged to communicate their personal data in accordance with the provisions of law or orders of the authorities;
    c.persons authorized by Ecaconsult to the processing of Personal Data necessary to carry out activities strictly related to the provision of the Services, which are committed to confidentiality or have an appropriate legal obligation of confidentiality (eg employees of Ecaconsult).

  2. Personal data transfer

Some of your Personal Information are shared with Recipients that could be found outside the European Economic Area. Ecaconsult ensures that the processing of their Personal Data by these Recipients takes place in compliance with the Regulation. Indeed, transfers can be based on an adequacy decision, on the Standard Contractual Clauses approved by the European Commission or on another appropriate legal basis. Further informations are available at Ecaconsult by writing to the following address

  1. Data Retention

Personal Data processed for the purposes set out in section 3 (a-b) will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments performed for the provision of Services,Ecaconsult will process Personal Data up to the time allowed by Italian law to protect its own interests (Art. 2946 c.c. and ss.). With regard to the CVs transmitted through the “Work with us” form referred to in section 3.c, Personal Data will be kept as long as the position for which the CV was sent is available or, in the case of a spontaneous application, up to a 1 year. The possibility for Ecaconsult to recontact the candidate shortly before the indicated deadline to request an extension of this retention period is reserved.Personal Data processed for the purposes set out in section 3.d will be kept until the time required by the specific obligation or applicable law.

Further information on the data retention period and the criteria used to determine this period may be requested by writing to DPO to the following address

  1. Data subject rights

Pursuant to articles 15 and following of the Regulation, you have the right to ask Ecaconsult, at any time, access to your Personal Data, to rectify or cancel them or to oppose their treatment, you have the right to request the limitation of the processing in the cases foreseen by the art. 18 of the Regulations, as well as obtaining, in a structured format, in common use and readable by automatic device, the data concerning it, in the cases provided by art. 20 of the Regulation.
Requests must be sent in writing to Ecaconsult at the following address:
In any case, you are always entitled to propose a complaint to the competent Supervisory Authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulations, if you believe that the processing of your Personal Data is contrary to the law.

  1. Change

This privacy policy is effective from 2018 25th May. Ecaconsult reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. Ecaconsult will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the website. Ecaconsult therefore invites you to regularly visit this section to get to know the most recent and updated version of the privacy policy in order to be always updated on the data collected and its use Ecaconsult.