With this document the company Iconsulting S.p.A., with registered office located in (40033) Casalecchio di Reno (BO), via bazzanese 32/7, owner of the website www.iconsulting.biz (“website”), informs about the management of the web Site related to the processing and protection of the users’ personal data interacting within it and with the different services offered (“Users”) .
DATA CONTROLLER AND CONTROLLERS
The data controller is the company itself as indicated in the previous paragraph. The data is mainly processed at the head office of the Data Controller, by the company’s technical staff who is appointed in charge of the processing pursuant to the art. 28 of the Regulation, Data Processors, also located outside the Italian State and/or the European Union. Data transfers to non-EU countries shall be authorised on the basis of general authorisations approved by the EU Commission or, where missing, by the signing of appropriate standard contractual clauses, also approved by the EU Commission. An up-to-date list of the Managers is available by the owner’s office or by writing to the following email address firstname.lastname@example.org
FINALITY AND LEGAL BASIS OF PROCESSING
The company may process the users’ data collected by the website for the following purposes:
Contact us. The owner might send communications to the company, to the users, questions and requests for information about the activities, initiatives and/or services offered by the company through the section “Contacts”. In this regard, the personal data provided by the user will be processed by the company in order to take charge, manage correctly and respond to the users’ communication. The legal basis of the processing is represented by the execution of the service expressly requested by the user itself and the possible refusal to provide the personal data entails the inability for the company to manage and find the communication or the requested information.
Purpose for collecting applications. The Company offers the opportunity to the user to submit their application to work with the Owner or with companies belonging to the same owner’s Group through the section of the Website “Job opportunities” in order to send applications, send an email. In any case, we invite the User not to enter in his CV data of a sensitive nature (e.g. health status, political opinions, sex life, etc.) only those strictly required by law for the purposes of CV selection and evaluation (e.g. membership of protected categories).
Execution of pre-contractual information activated by User’s request: The Company offers the possibility to provide data filling in special forms to receive information about specific services and activities offered by the Company.
Commercial information purposes about the Company’s products and services. The Owner uses users’ data to send informative communications related to the services offered, after receiving express consent by the User. This has to be issued at the bottom of specific data collection forms. The user will always have the possibility to discuss and oppose this purpose by clicking on the relevant link at the bottom of each email.
Pursue company’s legitimate interests and/or third parties. The data of the User may also be used for the exercise of the rights and legitimate interests of the Company and/or third parties, such as the right of defense in court, the management of complaints and litigation, recovery of debts, prevention of fraud and/or illegal activities. In such cases, even if the provision of the User’s personal data is not mandatory, it is still necessary, as such data is strictly connected and tool to the pursuit of such legitimate interests, that do not prevail over the fundamental rights and freedom of the User, and any refusal to provide them may result in the inability to provide the services requested (e.g. request information to the company)
Fulfilment of legal obligations and/or applicable obligations. The Company may also use the personal data provided by the User or otherwise acquired during the User’s interaction with the Site for purposes which are related to the execution of legal obligations, regulations, national and/or Community regulations, and provisions issued by authorities empowered to do so by law, which constitute the legal basis for processing, without the need to obtain the prior consent of the User.
Navigation data shall be:
The computer systems and software procedures responsible for the operation of the website acquire, in the course of their normal operation, personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and associations with data held by third parties, enable users to be identified.
This category of data includes IP addresses or domain names of computers used by users connecting to the site, the navigation browser and operating system used, addresses in URI notation (uniform Resource identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good end, error, etc.) and other parameters related to the operating system and computer environment of the user.
Navigation data could, by their very nature, make it possible to identify the User also through processing and associations with data held by third parties. However, the Company uses this data for the sole purpose of obtaining statistical and anonymous information on the use of the webSite for purposes which are strictly related to its operation. Navigation data may also be used to ascertain liability in the event of any computer crime against the webSite. The data collected could be used to ascertain liability in case of any cyber-crimes against the website.
Data provided directly by the user
The optional, explicit and voluntary sending of data as required by various sections of the website mentioned above is used in order to act on user’s requests (purely indicative and non-exhaustive example: when you request information or explanations by writing to the e-mail addresses on the website on the home page or on the internal pages or when you spontaneously send curriculum vitae in order to propose yourself as candidates, or when making direct calls or sending faxes to the numbers always in the “contacts” section).
With particular regard to the data entered by companies and professionals in the registration page necessary for the application and the application for training.
There are specific information within the above mentioned website for particular services requested by the user.
NATURE OF DATA PROVISION
Navigation data is processed to give effect to computer and telematic protocols; the provision of personal data by users is free and optional.
METHODS OF TREATMENT
The data collected through the above website is processed through computerized and telematic procedures. Technical data is kept in the servers of the company that assure all the security measures provided by the Regulation and the applicable legal provisions regarding the processing of personal data.
COMMUNICATION OF DATA TO THIRD PARTIES
companies belonging to the Iconsulting Group, for administrative purposes, for the pursuit of the legitimate interests of the Company and/or third parties, and for the purpose of carrying out the services expressly requested by the User;
companies, collaborators, consultants or freelance professionals the Company uses to carry out tasks of a technical or organizational nature (such as IT service providers), or with whom the Company cooperates (including other Iconsulting Group Companies), for the provision and operation of its services, or for any communication activities;
people, companies or professional practices providing assistance and advice to the Company, with particular but not exclusive reference to matters related to accounting, administrative, legal, tax and financial matters;
people whose right to access data is recognised by law or by authorities’ order.
Individuals belonging to the above categories will use the data in quality of independent data controllers according to the law or as data controllers regularly appointed by the Company.
These entities can be appointed both inside and outside the European Union. Data transfers to non-EU countries shall be authorised on the basis of general authorisations approved by the EU Commission or, where missing, by the signing of appropriate standard contractual clauses, also approved by the EU Commission.
The list of subjects to whom data are or may be disclosed may be requested from the Company through the section “Contacts” of the Site.
The data of the User will be kept for the necessary time to the pursuit of the purposes for which they were collected and for the performance of the related and its instrumental activities, as indicated in paragraph 2. After which they will be kept, where applicable, in compliance with the terms of ordinary prescription identified by the Civil Code or by specific law provisions, for administrative purposes and/or to assert or defend a legitimate right or interest and they will be deleted at the loss of the purposes for which they were collected.
The data transmitted by the CV will be kept for a 12 months period, the Data collected through the contact forms will be kept for 24 months unless the User does not consent to the processing of the data for marketing purposes, in the latter case, the data will be used until the User unsubscribes or opposes further sending of commercial information.
We also inform you that your personal data may be kept for longer periods of time for analysis and statistical purposes only, realized in anonymous and aggregated mode, in compliance with the technical and organizational measures required by law to protect your rights and freedom
The User may exercise, in expressly provided by law cases and where applicable, the rights provided by the Regulation. In particular, the User has the right to:
request confirmation that the processing of personal data is ongoing and, in this case, ask the Data Controller access to the information related to the processing (e.g. purposes, categories of data processed, recipients or categories of recipients of data, retention period, etc.);
request the correction of inaccurate or incomplete data;
request the deletion of data;
request the limitation of processing.
receive personal data commonly used, in a structured format and readable by automatic devices, concerning the user and transmit it to another holder or, if technically feasible, request direct transmission from one holder to another (d.d. “data portability”).
The User also has the right to object in whole or in part, for legitimate reasons, to the processing of personal data concerning him.
These rights can be exercised directly by sending a notice to the following email address: email@example.com
Finally, if the User considers that the processing of the data provided violates the law on the protection of personal data, it has the right to complain to the Authority Guarantor for the protection of personal data (www.garanteprivacy.it).
user’s personal data is not acquired from the website mentioned above.
cookies are not used for the transmission of personal information, nor are used c.d. persistent cookies of any kind, or systems for tracking users.
The use of c.d. session cookies (which are not stored persistently on the user’s computer and vanish with the closing of the browser) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) needed to enable secure and efficient site exploration.
The c.d. session cookies used in the aforementioned website avoid the use of other computer techniques that could be potentially detrimental to the privacy of users’ navigation and do not allow the acquisition of user’s personal data identifiers.
The Owner uses some cookies as detailed in the specific cookies informative section on the company’s website.
If the changes are significant and/or have a high impact on the rights of the User, the Company may also communicate them to the User in a different way (for example, sending an email).