Information regarding data processing is provided only for the Website and for the processing operations performed by the Company. It does not extend to the processing operations performed by third-parties that may be consulted by the User via a link. As regards said further processing, the Company does not assume any liability in that regard, thus the User must refer to the individual Privacy Policies of third-party websites.
The Data Controller is the company Giravolt. S.r.l. with registered office located at via della Spiga 1 – 20121 MILAN (MI) – VAT No. 03656300989.
Data is mainly processed at the Data Controller’s registered office and is handled by technical staff at the Company appointed as data processors within the European Union and, in relation to the services entrusted of offered by third parties, also outside of Italy and/or outside of the European Union. In the event of the transfer of data to countries that do not have protection standards equal to those of Italy, the Company undertakes to take the measures necessary for this transfer.
The Company processes User data by taking all appropriate security measures aimed at preventing unauthorised access, disclosure, modification or unauthorised destruction of data. Data processing is carried out using both manual and computerised and/or electronic tools, using organisational methods and logic that is strictly related and limited to the specified purposes.
The Company, via the Website, may process User data for the following purposes:
The Company receives and collects, via the Website, information relating to the Users who visit the Website pages and who use the web services available thereupon. The Company specifically obtains and processes the following information:
When the User visits the Website, the latter collects certain data, such as the pages displayed, the links or buttons clicked by the User, the date and time of access, the User’s IP address, the browser and operating system used (known as “browsing data”). Browsing data could, by its very nature, allow the User to be identified, including through processing and associations with data held by third parties. However, the Company uses this data for the sole purpose of obtaining statistical and anonymous information on the use of the Website for purposes strictly related to the operation of thereof. Browsing data could also be used to ascertain liability in the event of any computer crimes committed against the Website.
Secondly, in relation to the collection of User data through cookies and similar technologies, please see the Cookies Policy.
The Company limits the collection of information provided voluntarily by the User in relation to the pursuit of the purposes described in paragraph 3 above, as well as the services expressly requested.
The Company may also collect and process additional personal data, where said data are provided voluntarily by the User as part of the services offered by the Website, such as in the event that the User contacts the Company to report inadequate services or malfunctions or to exercise his/her rights regarding the processing of personal data, etc. This data shall be processed by the Company solely for the purposes strictly associated with the User’s request. Failure to provide personal data may result in the inability to obtain the requested service.
The data provided by the User, as well as that collected by the Website as part of the related services (e.g. IP address) shall not be disseminated and may be disclosed, within EU or non-EU countries for the purposes and procedures described above, to the categories of parties specified below:
The parties belonging to the categories specified above shall use the data as independent data controllers, in accordance with the law, or as data processors duly appointed by the Company.
Specifically, in the event that said parties are established in non-EU countries, the Company shall take the measures provided for by the Privacy Code and the Regulation to legitimise the transfer of personal data thereto. The list of parties to whom the data are or may be disclosed, as well as an indication of the privacy measures taken to legitimise non-EU transfers, may be specifically requested from the Company via the contact details specified in the section “User Rights and Contact Details”.
Data shall be processed for the time necessary to provide the services requested by the User and to conduct the activities associated with and instrumental to said services, as specified in paragraph 3 above and shall be deleted when the purposes for which they were collected and processed no longer apply. The Company shall specifically delete the personal data of Users who requested information promptly after having correctly processed the related request, in the event that said User do not consent to the receipt of marketing communications nor subscribes and/or signs up for the Company’s services. Secondly, the Company shall retain the personal data contained in the CVs of Users who sent their application for jobs within the Company for 12 months after receiving said application. After this period, the Company shall send a notification requesting the User’s consent to retain the personal data contained in their CV for an additional period and, should the User not consent thereto, the Company shall delete his/her personal data, in the event that the applicant has not established an employment/collaboration relationship with Company.
Lastly, data collected for the Company’s marketing purposes shall be retained until the User unsubscribes/objects and, in any case, until the purposes for which said data was collected and processed no longer apply. At the end of this period, the data shall be retained in anonymous form for analytical and statistical purposes.
The User is entitled to contact the Company, via the methods specified below, to obtain:
Furthermore, where applicable, the User may also exercise the rights pursuant to Articles 16 to 21 of the Regulation, specifically:
The User is also entitled to object, for legitimate reasons, to the processing of data and, even partially with respect to the various means of communication, to said data being used for the purposes of commercial information, advertising, marketing or market research by the Company or third parties.
These rights can be exercised directly by sending a notification to the following email address: firstname.lastname@example.org
If the changes are particularly significant and/or substantially affect the User’s rights, the Company may report them to the User, including via a different method (for example, by sending an email).