Introduction
This information is intended to indicate how to manage the personal data of users/visitors of this website.
This information is provided in accordance with the European Regulation on the protection of personal data (EU Regulation No. 679/2016), the Italian regulations on the protection of the personal data currently in force and the provisions of the Garante Data Protection Authority personal. The simple access and display of the informative contents of this site involves the automatic acquisition of some information about the visitor related to navigation/usage data and cookies.
Furthermore, it may happen that the user/visitor voluntarily provides some personal data concerning him/her in order to use a service or to communicate with the data processing Controller.
CONTROLLER OF PROCESSING AND CONTACTS DATA
Innovery S.p.a., in the person of its legal representative pro tempore, with registered office in Strada 4, Pal. A6, snc c/o Centro Direzionale Milanofiori 20057 – Assago (MI), Codice Fiscale e Partita IVA 02556430987, PEC: amministrazione@cert.innovery.it, E-MAIL: privacy@innovery.net
INTERESTED PARTIES
Users/visitors of this website.
PURPOSES OF THE PROCESSING
Personal data are processed for the following purposes:
In relation to usage/navigation data, the purpose of processing is to ensure the correct operation of the web pages of this site and its contents. The acquired data could also be used to ascertain responsibility in case of hypothetical cyber crimes against the site.
In relation to cookies, the purpose of processing is to ensure the correct operation of the web pages of this site and its contents, to receive and provide additional services provided by third parties.
In relation to personal data contained in CVs sent spontaneously by users/visitors, they are processed for purposes related to the evaluation and selection of personnel.
LEGAL BASIS OF THE PROCESSING
The legal basis of the processing for the purposes set out in point 1 is based on a legitimate interest of the Data Controller to ensure the proper functioning of the site and the security of its IT system.
The legal basis of the processing for the purposes set out in point 2 is based on a legitimate interest of the Data Controller (for the so-called technical cookies) to ensure the proper functioning of the site and improve the user/visitor experience and consent of the Interested Party (for the so-called profiling cookies, including third-party cookies) which will be expressed through a specific banner on the first access to the website.
To receive further information on the use of cookies, please refer to the specific section of this information (see Cookie Policy).
The legal basis of the processing for the purposes set out in point 3, carried out solely for the purpose of managing the application, is based on a legitimate interest of the controller and the reasonable expectation of the candidate to have his data processed for the purpose of managing the application.
CATEGORIES OF DATA SUBJECT TO PROCESSING
The Controller processes personal data of COMMON nature, including usage/navigation data (e.g. IP, operating system, user’s browser), cookies, personal data spontaneously provided by users/visitors (such as personal data, e-mail, telephone number, CVs, etc.). In addition, CVs may possibly contain data of PARTICULAR nature.
Usage/navigation data. It is possible that the computer systems in charge of the functioning of this website acquire, during their normal operation, and for the time strictly necessary, some personal data whose transmission is implicit in the use of Internet communication protocols, such as IP addresses and the parameters concerning the user/visitor’s operating system and browser.
Cookies. Cookies are packets of information sent by a web server (eg. the website) to the user’s browser, which is automatically stored on the computer and automatically sent back to the server each time the site is accessed. This site uses technical cookies but can also use third-party cookies.
CVs spontaneously submitted by users/visitors in the ‘Work with us’ section. Within this site, there is a specific section dedicated to self-candidatures. The personal data collected during the evaluation of the application will be processed by the owner’s staff, appropriately trained on the methods of processing, for the time strictly necessary to achieve the purposes for which they were collected and in any case for a period not exceeding 1 year. Il Titolare invita i candidati ad inviare CV che non contengano categorie particolari di dati personali (dati personali che rivelino l’origine razziale o etnica, le opinioni politiche, le convinzioni religiose o filosofiche o l’appartenenza sindacale, dati relativi alla salute o alla vita sessuale o all’orientamento sessuale) nel caso in cui non fossero rilevanti ai fini della candidatura. The Controller invites candidates to send CVs that do not contain special categories of personal data (personal data revealing racial or ethnic origin, political opinions, religious or philosophical convictions or union membership, data concerning health or sexual life or sexual orientation) in the event that they are not relevant for the purposes of the application.
PROCESSING METHODS
The personal data of the visitor (usage data, cookies, personal data provided spontaneously such as personal data, e-mail, telephone number, curricula, etc.) are processed, in accordance with Article 5 of the GDPR, with automated tools for the time strictly necessary to achieve the purposes for which they were collected. In any case, personal data will be processed in accordance with the principles of lawfulness, correctness, transparency, purpose limitation, data minimization, accuracy, limitation of retention, integrity and confidentiality required by current legislation.
PERSONAL DATA RETENTION PERIOD
Personal data are processed for the time strictly necessary to fulfil the purposes set out in this privacy policy. In the case of data provided spontaneously by the user/visitor, these will be kept for the time necessary to provide the requested service and, in any case, until the latter has exercised his right to cancel. In the case of CVs sent spontaneously, these will be kept for 1 year, after this period, the data will be deleted or rendered anonymous.
RIGHTS OF THE INTERESTED PARTIES
L’utente/visitatore nella qualità di Interessato può, secondo le modalità e nei limiti previsti dalla vigente normativa, esercitare i diritti specificati agli artt. 15 – 20 del GDPR: request confirmation of the existence of personal data concerning him/her (right of access); know the origin of the data; receive intelligible communication; to have information about the logic, the methods and the purposes of the processing; request their updating, rectification, integration, deletion, transformation into anonymous form, and blocking of data processed in breach of the law, including data no longer necessary for the purposes for which they were collected; in cases of processing based on consent or contract, receive your data provided to the data controller, in a structured, processor-readable form and in a format commonly used by an electronic device (so-called right to portability); exercise the right to lodge a complaint with the Control Authority; exercise all other rights that are recognized by the current provisions of the law. To exercise the above rights and for any other information regarding the treatment policies, contact the owner at the following PEC address: amministrazione@innovery.it, e-mail: privacy@innovery.net.
Changes to the information. The Owner reserves the right to make changes to this policy by advertising the users/interested parties on this page.