PERSONAL DATA PROCESSING POLICY

(Article 13 EU Regulation 2016/679)

Pursuant to EU Regulation no. 2016/679 (hereinafter GDPR) and the relevant national legislation, this information has been prepared to allow you to know the policy on the processing of your personal data in the context of the relationship you have with the Data Controller.

In order to ensure the best consultation of the important information contained in the document, below you will find a general part, and to follow the specific sections dedicated to individual relationships with data subjects.

DATA CONTROLLER

The owner of each treatment is Faeda S.p.A. (VAT and Tax Code 03209700248), with registered office in Via Giacomo Pellizzari 3, 36050 Montorso Vicentino (VI)

 

RIGHTS OF THE DATA SUBJECT

You, as interested party, by sending a request by email to PEC faedaspa@pec.telemar.it or by registered letter with return receipt to the common postal address, have the right to obtain from the Data Controller:

  • (art.15) access to your personal data, information relating to them, a possible copy of the personal data being processed;
  • (art. 16) the correction of inaccurate data or the integration of incomplete data;
  • (art. 17) the deletion of personal data concerning you;
  • the limitation of the processing of their Personal Data;
  • (art. 20) your personal data in a structured and machine-readable format, also in order to communicate such data to another data controller.

You also have the right to:

  • (art. 21) to oppose the processing at any time for reasons related to a particular situation;
  • (Article 7, paragraph 3) to withdraw, at any time, your consent, if the processing has the legal basis in it; this right can also be exercised with the specific instruments indicated in the individual sections.

Finally, you may, without prejudice to any other administrative or judicial appeal, lodge a complaint with the Guarantor Authority for the protection of personal data – www.garanteprivacy.it if you believe that the processing violates EU Regulation 2016/679.

DATA PROCESSING METHOD

The processing can be carried out both with paper and computer and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated, in full compliance with the principles of protection provided for by the GDPR.

CATEGORY OF DATA AND PURPOSE OF THE PROCESSING

The processing concerns your common personal data (identification and personal data including name, surname, telephone number, mobile phone number, ordinary e-mail address, tax code and residence).

The purpose of the processing is to:

  1. Propose or enter into a commercial sales contract;
  2. Fulfill the obligations arising from the sales commercial relationship, as well as carry out all the activities connected and necessary for the execution of the same;
  3. Manage legal and tax aspects, tax aspects of the sales business relationship;
  4. Manage the storage and preservation of data, information, including electronic communications and documents relating to the sales commercial.

 

LEGAL BASIS FOR DATA PROCESSING

The legal basis of the processing, as indicated in points a) b) c) d), is:

  • the fulfillment of the sales contract stipulated by the Data Controller with the interested party, pursuant to art. 6, paragraph 1, letter b) of the GDPR;
  • the fulfilment of the legal obligation to which the Data Controller is subject, pursuant to art. 6, paragraph 1, letter c) of the GDPR.

 

  1. PROVISION OF DATA AND REFUSAL:

The provision of common personal data referred to in purposes a)-b)-c)-d) is a legal obligation and a necessary requirement for the conclusion and execution of the contract. Failing this, it will not be possible to manage the sales commercial relationship with the Data Controller.

 

Communication of data.

Your personal data may be communicated to:

  1. tax consultants, tax consultants or other professionals who provide the Data Controller with functional services for the purposes indicated above;
  2. banking, insurance or other service companies that provide functional services for the purposes indicated above;

The following persons may also become aware of your data stored in our systems:

  1. Network providers, electronic communications services and IT and telematic services for archiving, storing and IT handling of the data
  2. IT system maintenance providers,

 

DATA RETENTION PERIOD

The common personal data are kept for the duration of the sales commercial relationship and, subsequently, for the time in which the Data Controller is subject to retention obligations for tax purposes or for other purposes, provided for by law or regulation, and in any case for the time necessary for the legal protection of the same.

CATEGORY OF DATA AND PURPOSE OF THE PROCESSING

The processing concerns your common personal data – personal and contact data – and is aimed at:

  1. Fulfill the obligations arising from the contractual supply relationship;
  2. Manage legal and tax aspects, tax aspects of the contractual supply relationship;
  3. Managing the archiving and storage of data, information, communications even electronic and documents relating to the relationship with the Company.

 

LEGAL BASIS FOR DATA PROCESSING

The legal basis of the processing, as indicated in points e) f) g), is governed by art. 6 paragraph 1 letter B, C:

  • the fulfilment of a contract, pursuant to art. 6, paragraph 1, letter b) of the GDPR;
  • the fulfilment of the legal obligation to which the Data Controller is subject, pursuant to art. 6, paragraph 1, letter c) of the GDPR.

 

Communication of data.

Your personal data may be communicated to:

  1. tax consultants, tax consultants or other professionals who provide the Data Controller with functional services for the purposes indicated above;
  2. banking, insurance or other service companies that provide functional services for the purposes indicated above;

The following persons may also become aware of your data stored in our systems:

  1. Network providers, electronic communications services and IT and telematic services for archiving, storing and IT handling of the data
  2. IT system maintenance providers,

 

  1. PROVISION OF DATA AND REFUSAL:

The provision of common personal data referred to in purposes a)-b)-c)-d) is a legal obligation and a necessary requirement for the conclusion and execution of the contract. Failing this, it will not be possible to manage the contractual supply relationship stipulated with the Data Controller.

 

DATA RETENTION PERIOD

The common personal data are kept for the duration of the sales commercial relationship and, subsequently, for the time in which the Data Controller is subject to retention obligations for tax purposes or for other purposes, provided for by law or regulation, and in any case for the time necessary for the legal protection of the same.

CATEGORY OF DATA AND PURPOSE OF THE PROCESSING

The processing concerns your common personal data (identification and personal data including name, surname, telephone number, mobile phone number, ordinary e-mail address, tax code and residence).

The purpose of the processing is to:

  1. Schedule and carry out the recruitment and selection of personnel;
  2. To ascertain the aptitude to the work activity;
  3. Manage the storage and storage of data, information, including electronic communications and documents relating to your application.

LEGAL BASIS FOR DATA PROCESSING

The legal basis of the Processing is your consent to the Processing of Personal Data, pursuant to art. 6 paragraph 1 letter a of the GDPR EU Regulation no. 2016/679 regarding your common personal data, pursuant to art. 9 paragraph 2 letter a of the GDPR regarding your personal data of particular categories.

Once consent has been given to the processing of common personal data, for the purposes identified above, the processing of your data will be legitimized until your consent is revoked.

 

  1. PROVISION OF DATA AND REFUSAL:

The provision of common personal data and those of particular categories for purposes h)-i) -j) is optional, but failure to provide it will not make it possible for the Controller to carry out the relevant activities

 

EXPRESSION OF CONSENT TO PROCESSING

The consent is expressed by providing the requested data and expressly authorizing its processing, by selecting the appropriate box inserted at the bottom of the specific contact form for the selection of personnel, present at the address https://www.faeda.com/careers/, the interested party.

By doing so, the interested party declares to be aware that the Data Controller will proceed with the processing in the manner and for all the purposes mentioned above, including the transfer and communication according to the specified scope.

 

WITHDRAWAL OF CONSENT

The consent given can be revoked at any time, pursuant to art. 7, paragraph 3, through the general instrument for the exercise of the Rights of the interested party, or by sending an e-mail to the address _____

In any case, this does not affect the lawfulness of the processing carried out already based on prior consent;

 

Communication of data.

Your personal data may be communicated to:

  1. professionals or other service companies that provide functional services to the Data Controller for the purposes indicated above.

The following persons may also become aware of your data stored in our systems:

  1. Network providers, electronic communications services and IT and telematic services for archiving, storing and IT handling of the data
  2. IT system maintenance providers,

Your data will not be communicated, disseminated or transferred to third countries or international organizations.

 

DATA RETENTION PERIOD

The data will be kept as long as the Data Controller has an interest in evaluating your application and, subsequently, for the time in which the Data Controller is subject to retention obligations for tax purposes or for other purposes, provided for by law or regulation, and in any case, for the time necessary for the legal protection of the same, without prejudice in any case to your possible revocation of consent.

CATEGORIES OF DATA AND PURPOSES OF PROCESSING

Subject to your express and informed consent, your common personal data (name, surname, e-mail address, postal address, mobile phone number if given) will be processed for the following purposes:

  1. your subscription to the newsletter, concerning the promotion of the services of the Data Controller, by sending information, with the use of e-mail

LEGAL BASIS FOR DATA PROCESSING

The legal basis of the Processing referred to in letter k) is art. 6 paragraph 1 letter a of the GDPR EU Regulation no. 2016/679, or your consent to the Processing of Personal Data.

Once consent has been given to the processing of common personal data, for the purposes identified above, the processing of your data will be legitimized until your consent is revoked.

 

  1. PROVISION OF DATA AND REFUSAL:

The provision of data, and therefore the Consent to the collection and processing of the same, is optional. Denying consent will, however, make it impossible to give you information about the services of the Data Controller which you could use.

WITHDRAWAL OF CONSENT

At any time you may revoke pursuant to art. 7, paragraph 3 the consent previously given, through the general instrument for the exercise of the Rights of the interested party, or through the appropriate LINK at the bottom of each communication.

COMMUNICATION OF DATA

Your personal data may be communicated to subjects with whom it is necessary to interact for the purposes indicated above, such as providers of the web/mail service, the update and maintenance service of the site, communication and marketing services.

All external subjects who will have access to your data are prohibited from using them for purposes other than those referred to in this policy.

DATA RETENTION PERIOD

Your data are kept until you revoke the consent given to the processing of your data for the individual purposes indicated.

CATEGORY OF DATA AND PURPOSE OF THE PROCESSING

The processing concerns your common personal data – personal and contact data – and is aimed at:

  1. Comply with legal obligations relating to the provision of the reporting management service – whistleblowing;
  2. Manage the storage and storage of data, information, including electronic communications and documents relating to your application.

The processing may also concern your data of particular categories, if provided by you as part of the report.

 

LEGAL BASIS FOR DATA PROCESSING

The legal basis of the processing, as indicated in points e) f) g), is governed by art. 6 paragraph 1 letter B, C:

  • the fulfilment of the legal obligation to which the Data Controller is subject, pursuant to art. 6, paragraph 1, letter c) of the GDPR.

The processing of any data of particular categories, provided by you, is authorized pursuant to art. 9 paragraph 2 letter g):

  • necessary for reasons of relevant public interest on the basis of Union or Member State law.

 

  1. PROVISION OF DATA AND REFUSAL:

The provision of common personal data referred to in purposes a)-b)-c)-d) is a legal obligation and a necessary requirement for the conclusion and execution of the contract. Failing that, it will not be possible to manage the report.

COMMUNICATION OF DATA

Your personal data may be communicated to subjects with whom it is necessary to interact for the purposes indicated above.

All external subjects who will have access to your data are prohibited from using them for purposes other than those referred to in this policy.

DATA RETENTION PERIOD

To ensure the management and traceability of reports and related activities, the storage of all data and related supporting documentation is ensured for a period of 5 years from receipt of the report.