Pursuant to and for the purposes of Articles 13 and 14 (in the case of data not obtained from the concerned party) of the EU Regulation 679/2016 in force from 25/05/2018 as well as pursuant to Legislative Decree 101/2018 in force from 19/09/2018, we inform the subjects (henceforth “Person Concerned”) who interact with the trameauree.it website, which can be reached at the address corresponding to the initial page https://www.trameauree.it regarding the processing of personal data. The information is provided only for trameauree.it and not for other websites that may be consulted by the user through links contained therein.

1. CONTACTS

The Data Controller is DOPPIORITORTO s.r.l. with registered office in Via Corfù 50, 25124 Brescia (BS) and operational headquarters in Via Trebeschi 25, 25124 Brescia (BS). VAT number 04205790985 and SDI code M86INRS. The concerned party, to exercise their rights, or simply for information on the processing of personal data, can contact the Data Controller by email at the address info@trameauree.it.

2. DATA PROCESSED

Like all websites, this site also makes use of log files in which information collected in an automated manner is stored during user visits:

  • internet protocol (IP) address;
  • type of browser and device parameters used to connect to the site;
  • name of the internet service provider (ISP);
  • visit date and time;
  • web page of origin of the visitor (referral) and exit;
  • possibly the number of clicks.

If the site allows the insertion of comments, or in the case of specific services requested by the user, including the possibility of sending the Curriculum Vitae for a possible working relationship, the site automatically detects and records some identification data of the user, including the email address. These data are voluntarily provided by the user at the time of the request for service provision. By entering a comment or other information, the user expressly accepts the Privacy Policy, and in particular agrees that the contents entered are freely disseminated to third parties. The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.

As indicated above, the optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

The information that users of the site will deem to make public through the services and tools made available to them, are provided by the user knowingly and voluntarily, exempting this site from any liability for any violations of the laws. It is up to the user to verify that they have permission to enter personal data of third parties or content protected by national and international regulations.

3. PURPOSE OF THE DATA PROCESSING

The data collected by the site during its operation are used for:

  • purposes indicated in point 2);
  • security purposes (spam filters, firewalls, virus detection);
  • internal statistical analysis;
  • marketing activities (sending information, promotional and advertising material) – with explicit consent;

4. LEGAL BASIS

The processing of data for the purposes indicated in point 3) finds its legal basis in art. 6 paragraph 1 letter. a) (consent) – limited to the purpose indicated in letter d) of point 3) of this information – and letter f) (legitimate interest) of EU Regulation 679/2016.

5. DATA PROCESSING METHOD

Personal data will be processed in an automated form and entered in the relevant databases which can be accessed by the persons in charge of data processing. All data processing operations are implemented in such a way as to ensure the integrity, confidentiality and availability of personal data.

6. DATA RETENTION PERIOD

The data provided, whether for institutional purposes or for marketing activities – with explicit consent, will be kept for a period not exceeding the purposes for which they were collected and subsequently processed. As for the retention times of the data collected through the use of profiling tools (e.g. cookies), see the Cookie Policy.

7. RECIPIENTS OF THE DATA

In relation to the purposes indicated in point 2), in addition to the owner, in some cases, categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects may have access to the data (by way of example but not limited to: third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies).

8. PROFILING AND DISSEMINATION

The data may be profiled electronically and with automated procedures for internal and organizational statistical analysis purposes. The Site uses Cookies, both technical (i.e. to facilitate navigation and use of the Site), and profiling (i.e. to analyze users and their behavior and preferences, and let them have personalized advertisements). For a detailed explanation on the cookies used and how to disable them, see the Cookie Policy.

The data will not be disseminated in any way.

9. TRANSFER OF DATA TO NON-EU COUNTRIES

This site may share some of the data collected with services located outside the European Union area. The transfer is authorized on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data (see https://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/ transfer-of-data-to-third-countries), for which no further consent is required.

10. RIGHTS OF THE CONCERNED PARTY

As an concerned party, in addition to the right to lodge a complaint with the Supervisory Authority, Articles from 15 to 22 of EU Regulation 679/2016 recognize the rights listed below that you can assert by making a specific request to the Data Controller at the contacts indicated in point 1):

  • obtain confirmation as to whether or not personal data is being processed and, in this case, to obtain access to personal data and information regarding the processing;
  • obtain the correction of inaccurate personal data without undue delay. Taking into account the purposes of the processing, the concerned party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration;
  • obtain the cancellation of personal data without undue delay and the Data Controller is obliged to cancel the personal data without undue delay;
  • obtain the limitation of processing when one of the following hypotheses occurs:
  1. the concerned party disputes the accuracy of personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;
  2. the processing is unlawful and the concerned party opposes the deletion of personal data and instead requests that its use be limited;
  3. although the Data Controller no longer needs it for processing purposes, the personal data are necessary for the concerned party to ascertain, exercise or defend a right in court;
  4. the Data Subject opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the Data Controller’s legitimate reasons with respect to those of the Data Subject;
  • receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a Data Controller and has the right to transmit such data to another Data Controller without impediments by the Data Controller to whom them provided; in exercising their rights relating to data portability in accordance with paragraph 1, the concerned party has the right to obtain the direct transmission of personal data from one Data Controller to the other, if technically feasible;
  • the concerned party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions;
  • not be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.

Last revision – Disclosure version: 26/10/2018