PRIVACY POLICY – WEB GENERAL – Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you the due information concerning the processing of collected personal data. This notice is not to be considered valid for other websites attainable trough links and data processor shall not be held responsible for third parties web pages.
This notice is provided pursuant to art. 13 of the Regulation (EU) 2016/679 (General Data Protection Regulation) and according to the provisions of the Directive 2002/58/CE, as amended by Directive 2009/136/CE on Cookies, as well as according to the Provision of the Data Protection Authority dated 08.05.2014 on cookies.
Personal data we may collect and process
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30).
Navigation data: IP addresses, domain name, URI/URL addresses, time and methot of the request, response code from server and a few information regarding the useragent (OS version, resolution, devise type).
Voluntarily provided data: The optional, explicit and voluntary transmission of messages to contact addresses or forms, entails the subsequent acquisition of sender’s address; the latter, along with any other personal information provided, will be necessary for us to reply.
Social media:
For more information regarding the processing of personal data carried out by any Social Media platforms deployed on this website, please refer to their respective privacy policies. The Data Controller processes the personal data through the pages of the dedicated Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.
Specific privacy statement may be furnished with regards to specific processings or services offered by the website.
COOKIES: More information available in the specific statement; please click here
DATA CONTROLLER pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is TORNERIA AUTOMATICA ALFREDO COLOMBO SRL – with registered office in Milano 13, 23879 Verderio (LC), represented by the legal representative pro tempore whom you may contact for any information via: privacy@torneriacolombo.it
PURPOSES AND LAWFULNESS OF PROCESSING
|
PURPOSE OF PROCESSING |
LEGAL BASIS |
DATA RETENTION |
DATA CONFERRAL |
|
|
A) |
Website browsing Activities strictly related to site operations and to platform browsing service provision. The data required to avail yourself of this website, will be processed as well in order to: · Gather statistical information (most viewed pages, number of visitors, timeline visits, geographical source of visit) · Monitor the status of services |
Legitimate interest | Data subject rights Art. 6 lett. f) and recital 47 GDPR: the processing is necessary for pursuing the legitimate interest of data controller or third parties’ |
Single browsing session. |
Necessary in order to guarantee the navigation |
|
B) |
Website Analytics By means of cookies and similar technologies More information available in the cookie policy |
Cookies other than technical ones (or similar) require users’ consent in order to be deployed (art. 6.a GDPR) Whether required, the consent will be requested by means of our cookie policy and its banner |
More information available in the cookie policy |
More information available in the cookie policy |
|
C) |
Contact or information request By means of phone calls, contact forms, Whatsapp |
Contract Art. 6(1)(b) and recital 44 GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; |
Up to 12 months. |
Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms |
|
D) |
Management of interested subjects’ requests pursuant to art. 15 and following (GDPR) |
Legal obligation Art. 6.1.c) and recital 45 GDPR processing is necessary for compliance with a legal obligation the controller is subject to;
|
5 years after its closure, except from controversy |
Necessary: The provision of personal data is mandatory in order to execute legal obligations |
|
E) |
Careers area -Recruiting staff research and selection of personnel for the purpose of establishing an employment relationship, also for any positions different from those for which the data subject is a candidate; storage of personal data also for future selections; managing applications in response to job vacancies posted on our website; interviews and any video-interviews (data processing including image / audio). |
Contract Art. 6(1)(b) and recital 44 GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; |
Up to 24 months. As a general rule, data collected during the recruitment process will be deleted as soon as it becomes clear that no employment offer will be made or that the offer will not be accepted by the candidate. |
Necessary: The provision of personal data is mandatory where mandatory and in case of lack the Data Controller will not be able to consider your candidacy |
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data will be disclosed, also depending on the purposes specified in specific sections, to entities that will process the data either as independent Data Controllers or as Data Processors (Art. 28 GDPR), and will be handled by natural persons (Art. 29 GDPR) acting under the authority of the Controller or the Processors, based on specific instructions given with respect to the purposes and methods of the processing, and for specific purposes according to the relevant area.
Data may be disclosed to recipients belonging to the following categories:
- Entities providing services for the website and communication networks, including email, hosting, and platform management.
- Entities providing consultancy and assistance services.
- Entities providing services related to the management of the aforementioned processing purposes.
- Entities based in Italy with whom the Controller has signed agreements and, where required, upon obtaining consent.
- For the “Work with Us” section, entities involved in recruitment activities;
Competent authorities to fulfil legal obligations and/or comply with requests from public bodies.
The list of Data Processors is available upon request by writing to: privacy@torneriacolombo.it
DATA TRANSFER TO A THIRD COUNTRY AND/OR TO INTERNATIONAL ORGANISATION
Personal data provided won’t be transferred to a third Country outside the SEE.
Moreover, all the data will be hosted and retained in Europe; all the third parties to whom data may be disclosed, do have registered office in Europe.
AUTOMATED-MEAN PROCESSINGS
Personal data will be manually and electronically processed, as well as by automated-mean activity. It is specified that fully automated decision-making processes are not carried out. With reference to profiling activity carried out with prior and express consent, it will be carried out through the intervention of operators who will elaborate the profile of the interested party and analyse his habits and consumption choices, in order to improve the commercial offer and data controller’s services (non-automated profiling).
DATA SUBJECT’S RIGHTS
You may freely exercise your rights at any time under Reg. EU 2016/679 –GDPR, Sections15, 16, 17, 18, 19, 20, 21 by contacting the Data Controller to the above-mentioned email address.
You have the right, at any time, to request access to your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), and restriction of processing (Art. 18). The data controller shall inform (Art. 19) each recipient to whom the personal data have been disclosed of any rectification or erasure or restriction of processing carried out. The data controller shall inform the data subject about those recipients if the data subject so requests.
Where applicable, you have the right to data portability (Art. 20), and in such case, your data will be provided in a structured, commonly used and machine-readable format. You also have the right to object (Art. 21) at any time to the processing of your data based on legitimate interest. Where the legal basis is consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
If you believe that the processing of personal data by the Controller is in breach of Regulation (EU) 2016/679, you have the right to lodge a complaint with the Supervisory Authority, in particular in the Member State of your habitual residence, place of work, or where the alleged infringement occurred (Garante Privacy – https://www.garanteprivacy.it/), or to seek judicial remedy before the competent courts.
Informative amendments: Data processor retains the right to modify, update, add or remove some parts of this informative at any time.