Policy pursuant to the European Regulation for the Protection of Personal Data no. 679/2016 (GDPR) and subsequent amendments, this website respects and protects the confidentiality of visitors and users, making every possible and proportionate effort not to infringe the rights of users.
Type of data processed
The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users connecting to the website, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the operating system and computer environment.
These data are used only to obtain anonymous statistical information on the use of the website and to check its proper functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the website: except in this case, web contact data are currently maintained for the time necessary to collect the statistical data.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
We therefore ask the sender to indicate in his or her email expressly consent to the processing of personal data contained therein, failing which we may not be able to respond to requests.
In any case, should you provide or otherwise process personal data of third parties in the use of our website, you guarantee now – assuming all related liability – that this particular case of processing is based on an appropriate legal basis under Article 6 of the Regulation that legitimizes the processing of information in question.
Specific summary policies will be progressively reported or displayed on the pages of the website set up for particular services on request or for sending applications for job openings.
The data controller of processing is ANDREA GUIDI.
Place and purpose of data processing
Processing connected to the web services of this website take place at the aforementioned headquarters of Canove di Govone and are handled by personnel in charge of processing. No data from the web service is disseminated. Personal data provided by users who request the dispatch of informative material (request for information, sending curricula, etc.) are used only to perform the service requested, fulfil any legal, accounting and tax obligations and are disclosed to third parties only if this is necessary for that purpose or if you have given your consent.
Legal basis and mandatory or optional nature of processing
The legal basis for the processing of Personal Data for the purposes referred to in the previous section is article 6 (1 b – f) of the Regulation as the processing is necessary for the provision of services or for responding to requests from the data subject. Apart from that specified for navigation data, the user is free to provide personal data contained in the application forms or otherwise indicated for sending information material, applications for job openings or other communications. Failure to provide them may make it impossible to obtain what has been requested.
Recipients of personal data
Your personal data may be shared, for the purposes set out in the section above, with:
- subjects who typically act as data processors, that is: (i) persons, companies or professional firms that provide assistance and consultancy to NUTKAO in accounting, administrative, legal, tax, financial and debt collection matters relating to the provision of Services; (ii) subjects with whom it is necessary to interact for the provision of the Services (e.g., hosting providers) (iii) or subjects delegated to carry out technical maintenance activities (including the maintenance of network equipment and electronic communication networks);
- subjects, bodies or authorities to whom it is mandatory to communicate your personal data under the provisions of law or orders of the authorities;
- persons authorised by NUTKAO to process personal data necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g., employees).
Methods of data processing, transfer and storage
Personal data are processed with automated and non-automated tools, and are kept for the time strictly necessary to achieve the purposes for which they were collected and/or stored until the time required by the specific obligation or applicable provision of the law and in any case until the time allowed by Italian law to protect their interests (Article 2946 et seq. of the Civil Code).
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.
Some personal data may be transferred to Recipients who may be outside the European Economic Area. NUTKAO ensures that in this case the treatment will be in full compliance with the Regulation. Indeed, on the basis of the adequacy decision, on the Standard Contractual Clauses approved by the European Commission or on another appropriate legal basis.
Rights of data subjects
Pursuant to articles 15 et seq. of the Regulations, you have the right to ask NUTKAO, at any time, for access to your personal data, for their rectification or cancellation or to oppose their processing; you have the right to request the restriction of processing in the cases provided for in article 18 of the Regulation, and to obtain the data concerning you in a structured, commonly used and readable format by an automatic device, if possible and in the cases provided for in article 20 of the Regulation.
In any case, you always have the right to lodge a complaint with the competent Control Authority (Personal Data Protection Authority), pursuant to article 77 of the Regulation, if you believe that the processing of your Personal Data is in violation of the legislation in force.
Requests should be sent in writing to email@example.com.
Updated 23 May 2018.