PRIVACY POLICY
Information on the processing of personal data (Article 13 of the GDPR 2016/679)
- WHY THIS NOTICE
This page describes the processing of personal data carried out by the writer towards all forms of interested parties, and with the intention of expressing the Company Policy aPDOted to ensure compliance with the provisions of GDPR 2016/679, Legislative Decree 196/2003, National provisions for this matter, Guidelines issued by the European Data Protection Board as well as Community Directives relating to the protection of data of natural persons.
This is an information provided pursuant to art. 13 of EU Regulation 2016/679 with respect to those who establish any form of relationship with the writer, the latter represented primarily by this web address
https://www.salumigiordano.com/
The Privacy Policy of this website does not refer to other processing carried out or described following the navigation of websites through links that may be present on the website indicated above.
- DATA CONTROLLER
The Data Controller is Giordano Srl with registered office in Strada Provinciale Case Draghi, 28- 29013 – Carpaneto Piacentino (PC), in the person of the Legal Representative
- TYPES OF DATA PROCESSED
3.1 DATA FOR APPLICATION
The personal data communicated by the interested parties through the voluntary sending of curricula vitae using the indicated e-mail addresses are processed for purposes related to the research, selection and management of any future employment relationship.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, letter c) | Personal data sent by the interested parties by sending the curriculum vitae or filling in any and all appropriate fields provided. The data is processed as a pre-contractual measure, for activities prior to the formalization of a possible employment contract and related legal obligations. |
| Scope of communication (GDPR Art.13, par. 1, lett. e, f) | The data are processed exclusively by internal personnel employed by the Human Resources office, duly authorized and instructed to process (GDPR Art. 29) and will not be disclosed to external parties, disseminated or transferred to non-EU countries. In different cases it will be specified in the eventual and relative form. |
| Data retention period (GDPR, Art.13, paragraph 2, lett. a) | The curricula received are kept for six months from the date of receipt. |
| Provision (GDPR, Art.13, par. 2, letter f) | The sending of curricula, and the relative provision of personal data is optional; failure to provide data may, however, make it impossible to carry out a correct assessment of the position for the purposes of the selection itself and consequently the impossibility for the company to manage the application. |
3.2 DATA FOR CONTACT REQUEST
The optional, explicit, and voluntary sending of personal data necessary for requesting information, through any e-mail addresses indicated, involves the subsequent acquisition of data that is only necessary for responding to the requests sent.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, letter c) | This data is used for the sole purpose of responding to requests for information sent through the indicated e-mail addresses. |
| Scope of communication (GDPR Art.13, par. 1, lett. e, f) | The data are processed exclusively by internal personnel, duly authorized and instructed to process (GDPR Art. 29) and will not be disclosed to external parties, disseminated or transferred to countries outside the EU. Only in the event of an investigation may they be made available to the competent authorities. |
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of data, the illicit or incorrect use thereof, and unauthorized access. |
| Data retention period (GDPR, Art.13, par. 2, letter a) | The data are usually kept for short periods of time, only to satisfy the requests received. |
| Provision (GDPR, Art.13, par, 2, lett. f) | The data are provided optionally by the interested parties. |
| Lawfulness (GDPR, Art. 6 par. 1) | The processing is necessary to respond to the requests received, therefore the consent is expressed by filling in the forms. |
3.3 BROWSING DATA
During their normal operation, the computer systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected with the intent of associating it with identified users but, by its nature, it could lead to the identification of users through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, failed, etc.) and other parameters about the operating system and the user’s computer environment.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, letter c) | This data is used only to obtain anonymous statistics about the use of the website and to check that it is functioning correctly; it is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the website. |
| Scope of communication (GDPR Art.13, par. 1, lett. e, f) | The data are processed exclusively by internal personnel, duly authorized and instructed to process and are not communicated to external parties, disseminated or transferred to countries outside the EU. Only in the event of an investigation may they be made available to the competent authorities. |
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools. Specific security measures are observed to prevent the loss of data, the illicit or incorrect use thereof, and unauthorized access. |
| Data retention period (GDPR, Art.13, par. 2, letter a) | Data are usually kept for short periods of time, with the exception of any extensions related to investigation activities. |
| Provision (GDPR, Art.13, par. 2, letter f) | The data is collected automatically from the data subjects and for the purposes indicated above. |
| Lawfulness (GDPR, Art. 6 par. 1) | The processing is necessary to fulfill a legal obligation, and therefore consent is not required. |
3.4 COOKIES
The description of the type of cookies used, their management of use and purpose, is referred to in the paragraph “Cookie Policy” in the document published on this website.
- RIGHTS OF THE DATA SUBJECT (GDPR, Articles 15-22)
At any time, the data subject may exercise the right to:
- request confirmation of the existence or otherwise of their personal data.
- obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data has been or will be communicated and, where possible, the retention period.
- obtain the rectification and erasure of personal data.
- obtain the restriction of data processing.
- data portability, i.e. to receive personal data from the Data Controller in a structured, commonly used and machine-readable format and have the right to transmit those data to another Data Controller without hindrance.
- oppose the processing at any time, even in the case of processing for direct marketing purposes.
- object to an exclusively automated decision-making process concerning individuals, including profiling.
- file a complaint with the Data Protection Authority.
Requests should be addressed to the Data Controller by writing to info@salumigiordano.com. Every effort will be made to make the functionality of this site as interoperable as possible with the automatic privacy control mechanisms available in some products used by users.
- PERSONAL DATA PROTECTION OFFICER:
The Data Protection Officer (DPO) has not been identified as the writer does not process data of natural persons falling within the definition of art. 37 European Regulation RGPD 2016/679.
- UPDATE
Considering that the state of improvement of the automatic control mechanisms does not currently make them free from errors and dysfunctions, it is specified that this document, published at:
https://www.salumigiordano.com/privacy-policy/
constitutes the “Privacy Policy” of this site which will be subject to updates (the various versions remain available at the same address).
