Pursuant to current legislation and the provisions of art. 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, as well as on the free dissemination of such data, we inform you that the Data Controller of the data provided by you is DIERRE S.p.a. with headquarters in Circonvallazione S. Giovanni Evangelista 23, 41042 Spezzano di Fiorano (MO). and VAT no. IT03665190363, Telephone: +39 0536 922911 – Email: firstname.lastname@example.org.
COLLECTION AND PROCESSING OF PERSONAL DATA
During their normal operation, the computer systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified individuals, but which, by their very nature, could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses scripted in the Uniform Resource Identifier (URI) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check it is functioning correctly, and are deleted immediately after processing.
The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
DATA SUPPLIED VOLUNTARILY BY THE USER
No user personal data is required to consult the site. We particularly emphasize that cookies are not used for the purpose of profiling, just technical cookies, with the aim of improving the quality of user browsing within the site in question.
However, it is possible for the user to subscribe to the site’s NEWSLETTER, to submit a request for a QUOTE for the purchase of products sold on the site and for them to upload their curriculum in the section “WORK WITH US”. These operations involve DIERRE S.p.a. acquiring personal data, such as address, e-mail or telephone numbers, necessary to fulfil user requests; and personal data contained within the Curriculum vitae, belonging to particular data categories according to art. 9 para.1 of EU Regulation 679/2016.
These data will only be used for following up the user’s request; if necessary, they will be processed for purposes related to contractual, tax and accounting obligations; invoicing history; litigation and credit protection; fulfilment of obligations under current laws and may only be disclosed to third parties if it is necessary for this purpose.
Your CONSENT is required to process personal data relating to the request for a quote or to subscribe to the newsletter, because in both cases your contact details (e-mail and telephone number) may be used for direct marketing activities, such as sending – by e-mail of advertising material and communications with information and/or promotional content relating to products or services provided and/or promoted by the Data Controller or by his business partners. The lack of consent does not imply taking away the possibility of consulting the site, but just waiving the receipt of advertising and promotional material.
Regarding the personal data contained in the curriculum, which as anticipated may belong to “particular categories of data” (with reference to Article 9 paragraph 1 of EU Regulation 679/2016) it is necessary to provide CONSENT for their processing, pursuant to art. 9. Paragraph 2 letter a. The lack of consent denies the data controller the possibility to comply with the user’s request, with the consequent inability to evaluate the profile for possible employment.
The data will be processed by personnel appointed and trained by DIERRE S.p.a. with procedures, technical and IT tools suitable to protect the confidentiality and security of your data and consists in their collection, registration, organization, storage, consultation, processing, alteration, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, destruction including the combination of two or more of the aforementioned activities.
Communication, dissemination and duration.
Within the scope of its business and for its purposes as indicated above, DIERRE S.p.a. may make use of services by third parties acting on behalf of DIERRE S.p.a. and according to its instructions, as data processors. These are individuals that provide DIERRE S.p.a. instrumental services (e.g. computer services for website operation). You can request a complete and up-to-date list of the appointed data processors by using the contacts listed below.
Your data WILL NOT BE DISSEMINATED.
Through this website, DIERRE S.p.a. does not deliberately collect particular categories of data, defined in art. 9 of EU Regulation 679/16 as data revealing racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person.
We do not recommend providing this information through this site. In the event that the communication becomes necessary (for example: belonging to protected categories in case of sending a curriculum vitae for employment purposes, in reply to a job advertisement or in the case of an expression of interest to work for the Company), please send a special declaration by registered letter to the Company’s registered office, containing written consent to the processing of the related information.
Rights of the interested party
Rights of the interested party arts. 15-22-
Art. 15 Interested party’s right of access: the interested party has the right to obtain confirmation that personal data are being processed or not, and in this case to obtain access to personal data.
Art.16 Right to rectification: the interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning them without undue delay. Taking into account the aim of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17 Right to cancellation (“right to be forgotten”): the interested party has the right to obtain the deletion of personal data concerning him/her from the data controller without undue delay and the data controller is obliged to cancel personal data without undue delay, if there is one of the reasons set out in art. 17 para. 1 letter a, b, c, d, e, f, para. 2, para. 3 letter a,b,c,d,e.
Art.18. Right of limitation to processing: the interested party has the right to obtain the limitation to the processing from the data controller when one of the scenarios referred to in article 18 para. 1 letter a,b,c,d, para. 2, para.3 is recurrent.
Art. 19 Obligation to notify in case of rectification or cancellation of personal data or limitation to processing: the data controller communicates to each of the recipients to whom the personal data have been transmitted the eventual corrections or cancellations or limitations of the processing carried out in accordance with article 16, with art. 17, paragraph 1, and article 18, unless this proves impossible or involves a disproportionate effort. The data controller informs the interested person of these recipients if the interested party requests it.
Art.20 Right to data portability: the interested party has the right to receive from an automatic device, in a structured, commonly used and readable form, personal data concerning him/her provided to a data controller and has the right to transmit such data to another data controller without hindrance by the data controller to whom he/she provided them if the cases referred to in Article 20 paragraph 1 letter a, b, para. 2, 3, 4 arise.
Art.21 Right to object: the interested party has the right to object at any time, for reasons connected with their particular situation, to the processing of personal data concerning him/her pursuant to article 6, para. 1, letter e or f, including profiling based on these provisions. If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him/her for such purposes, including profiling insofar as it is related to such direct marketing. If the interested party objects to processing for direct marketing purposes, personal data are no longer processed for these purposes.
At any time, he/she will have the right to exercise the rights established by current legislation by sending a specific request to the privacy office, at the headquarters of DIERRE SpA. Via Circonvallazione S. Giovanni Evangelista 23, 41042 Spezzano di Fiorano (MO). e Vat no. IT03665190363, Telephone: +39 0536 922911, Email: email@example.com.