Privacy Policy
Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
Data controller, pursuant to Articles 4 and 24 of EU Reg. 2016/679, is the company CEAR SRL, with registered office in Gessate (MI) Via Monza n. 102, in the person of the pro-tempore legal representative. Contact details: Tel. +39 02 929290.1 – Mail info@cearsistemi.it – Fax +39 02 92151670.
In compliance with the provisions of EU Reg. 2016/679 (General Data Protection Regulation) we provide you the necessary information regarding the processing of personal data.
PROCESSED PERSONAL DATA
Personal data: means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data of contracting parties / users.
Browsing data: The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. Such data include IP addresses or user computer and terminal domain names, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the answering file, the numerical code showing the status of the server answer (successful, error, etc.) and other parameters concerning the user’s operating system and IT environment.
Data submitted on a voluntary basis: The discretionary, explicit and voluntary sending of messages to the contact addresses on this website, as well as the completion of data collection forms involves the collection of the sender’s address, which is necessary to reply to requests, as well as the collection of any other personal data entered.
Specific Privacy Policies
Specific Privacy Policies may be available on the pages of this website in relation to particular services or processing of the data provided.
COOKIES AND OTHER TRACKING TECHNOLOGIES. WHAT ARE THEY? WHAT ARE THEY USED FOR?
For Cookies and other tracking technologies please see the Cookie Policy available in the footer of the website and at the following link: cookie policy
PURPOSE OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD, NATURE OF DATA PROVISION
| PURPOSE OF PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD | NATURE OF DATA PROVISION |
| NAVIGATION ON THIS WEBSITE. Data necessary for the enjoyment of the web services shall be processed, also with the purpose of: obtaining statistical information on the use of said services (most popular pages, number of visitors per time slot or day, geographical areas of origin, etc.);monitoring the correct operation of the services offered. | Data processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, having considered the reasonable expectations of the data subject and the activities strictly necessary for the website functionality and navigation [Art. 6 (1) (f) and recital 47 GDPR] Data subjects are guaranteed the right to obtain, upon request, information about the balancing test that has been carried out. | Browsing data will be stored for the duration of the browsing session. | Provision of personal data is necessary for browsing the website. |
| USE OF COOKIES AND SIMILAR TECNOLOGIES. Please refer to the Cookie Policy available in the footer of the website. | For cookies and similar technologies that are not technical or necessary, the processing is based on consent to the processing of personal data [Art. 6 (1) (a) and recitals 42 and 43 GDPR]. Consent is given through the consent banner and the Cookie Policy on the website. | Please refer to the Cookie Policy available in the footer of the website. | Please refer to the Cookie Policy available in the footer of the website. |
In addition to navigation, personal data will be processed for:
| PURPOSE OF PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD | NATURE OF DATA PROVISION |
| A) CONTACTS, sending contact requests and requests for information. | Processing is necessary for the management of a contract to which the data subject is party or for the management of pre-contractual measures taken at the data subject’s request [Art. 6 (1) (b) and recital 44 GDPR]. | Maximum 12 months. | The provision of personal data is necessary. Failure to provide the necessary personal data will result in the impossibility of being contacted and of receiving information. |
| B) HANDLING OF YOUR REQUESTS and of requests from other data subjects, pursuant to Articles 15 et seq. of the GDPR (data subject’s rights). | Data processing is necessary for compliance with a legal obligation to which the Data Controller is subject [Art. 6 (1) (c) and recital 45 GDPR]. | 5 years after closing of the request, except in the event of litigation. | Provision of personal data is mandatory as it is required for the fulfilment of all legal obligations. |
| C) PERSONNEL SELECTION IN THE WORK WITH US AREA to apply for a position, to carry out recruitment and selection of personnel in order to establish an employment relationship, including for positions other than those for which the person concerned spontaneously applied; storing personal data, also for future selections; managing applications in response to job offers published on our website; job interviews and video interviews (including image / audio data processing). Please refer to the specific privacy notice available in the dedicated section. | Processing is necessary for the management of a contract to which the data subject is party or for the management of pre-contractual measures taken at the data subject’s request [Art. 6 (1) (b) and recital 44 GDPR]. | Maximum 24 months. In principle, the data collected during the recruitment process will be deleted as soon as it becomes clear that no job offer will be made or that the offer will not be accepted by the candidate. | The provision of personal data is necessary. Failure to provide the relevant personal data shall entail the impossibility of applying for the position. |
TO WHICH RECIPIENTS OR CATEGORIES OF RECIPIENTS WILL PERSONAL DATA BE DISCLOSED? DATA RECIPIENTS
The personal data provided may be disclosed to recipients, who shall process them in their capacity as Autonomous Data Controllers or Data Processors (Art. 28 GDPR) and/or as individuals (natural persons) operating under the authority of the Data Controller and Data Processors (Art. 29 GDPR) on the basis of specific instructions given on the purposes and methods of processing. More specifically, data may be transferred to recipients in the following categories:
- Entities/parties, established in Italy, that provide services for the management of the website and of the communication networks, including e-mail, host and website management
- Competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request.
The list of the appointed Data Processors pursuant to Art. 28 GDPR is available upon request to be sent to the email address info@cearsistemi.it or by writing to the other contact details specified above.
WILL THE DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EEA?
Personal data will not be transferred to countries outside the EEA. It is specified that the data will be stored in Italy for the purposes of hosting, management, development, and maintenance of the website. All third parties to whom the data may be disclosed are based in Italy.
IS THERE ANY AUTOMATED DATA PROCESSING?
Personal data will be subject to traditional manual, electronic and automated processing. Please note that no fully automated decision-making processes are carried out.
WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?
Data subjects will be able to exercise their rights under Articles 15 et seq. GDPR by contacting the Data Controller at the e-mail address: info@cearsistemi.it or at the above-mentioned contact details.
The Data Controller guarantees data subjects the right to request, at any time, access to their personal data (Art. 15), their rectification (Art. 16) or erasure (Art. 17), as well as the restriction of their processing (Art 18). The Data Controller communicates (Art. 19) to each recipient to whom the personal data have been disclosed any rectifications, erasures, or restrictions of processing carried out. The Data Controller also informs the data subjects of these recipients if the data subjects so request.
Data subjects shall have the right to object at any time (Art. 21) to the processing of their personal data based on the legitimate interest by writing to the contacts listed above with the ‘objection to processing’ subject line.
In the event that data subjects consider that the processing of their personal data carried out by the Data Controller is in breach of the provisions of Regulation (EU) 2016/679, they shall have the right to lodge a complaint with the National Data Protection Authority (*) of the Member State in which they are habitually resident or work or of the place where the alleged violation took place (* the Italian Data Protection Authority is called Garante Privacy and it can be contacted at https://www.garanteprivacy.it/). Moreover, they shall have the right to take appropriate legal action.
AMENDMENTS TO THE PRIVACY POLICY
The Data Controller reserves the right to amend, update, add or remove parts of this Privacy Policy. In order to make it easier for you to check for any changes, this Privacy Policy will contain an indication of the date when it was updated.
