In line with the transparency obligations of the Lombardy Region and with Italian Legislative Decree 33/2013, GESTLABS publishes below its Code of Ethics, its Model 231 and its Service Charter, together with its quality certifications.
The GESTLABS Code of Ethics defines the binding principles of legality, integrity and transparency that guide shareholders, management, employees, consultants and partners in day-to-day operations. It details company values (passion, quality, collaboration), obligations of fairness toward customers, suppliers and the Public Administration, and the rules protecting the environment, health and safety at work. The document also establishes implementation and control procedures and the sanction system in case of violation.
Privacy Notice for Customers & Suppliers pursuant to EU Regulation 679/2016 (GDPR) — it specifies the data controller, the categories of data processed, the contractual/legal purposes, the legal bases, retention periods and data subjects’ rights (access, rectification, erasure, objection, portability). It also details the technical and organizational security measures adopted, the list of possible recipients (partners, consultants, authorities) and the conditions for any transfer outside the EU.
The Organization, Management and Control Model under Legislative Decree 231/2001 defines the governance structure and the operating protocols adopted to prevent the predicate offenses covered by the Decree. The document maps sensitive activities, assigns specific responsibilities, regulates authorization and traceability flows, establishes the Supervisory Body, and describes the disciplinary system and effectiveness indicators. Implementing the Model protects the company from administrative liability and strengthens its compliance culture.
The Occupational Health and Safety Organization and Management Model (Legislative Decree 81/08) integrates the GESTLABS HSE policy with the requirements of the Decree — risk assessment, safety organization chart, health surveillance, mandatory training, PPE management, emergency procedures and periodic audits. It includes registers, forms and improvement plans for monitoring safety KPIs and reducing accidents and occupational illnesses, ensuring healthy working environments for personnel, visitors and third parties.
