Privacy and cookie policy
PRIVACY & COOKIE POLICY
PRIVACY NOTICE FOR WEB USERS
Pursuant to Regulation (EU) 2016/679 (GDPR) (GDPR)
This notice, provided in compliance with provisions in Articles 13 and 14 of Regulation (EU) 2016/679 ,GDPR) and Italian Legislative Decree no. 196/2003 as amended, describes the operations performed on the personal data of users collected when they use the services of the following Internet sites (i) https://www.operosa.it/ e (ii) https://parcheggioperosa.it/ (referred to, collectively, as the Site) and also of any other websites visited by the user through the links present on the Site.
SUMMARY
CONTROLLER, PURPOSE AND LEGAL BASIS FOR PROCESSING
PRINCIPLES APPLICABLE TO DATA PROCESSING PERFORMED BY L’OPEROSA
RECEIVING APPLICATIONS FOR OPEN JOB POSITIONS AND/OR SPONTANEOUS APPLICATIONS
REGISTRATION, ACCESS AND MANAGEMENT OF THE RESERVED AREA
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
CATEGORIES OF PARTIES TO WHOM DATA MAY BE COMMUNICATED (RECIPIENTS)
CONTROLLER, PURPOSE AND LEGAL BASIS FOR PROCESSING
L’Operosa S.c.r.l. (hereinafter L’Operosa), via Don Minzoni n. 2, Cadriano di Granarolo dell’Emilia (BO), privacy@operosa.it, is the Controller dof the personal data of users collected when they use the services of this Site.
L’Operosa will process the personal data it comes into contact with, in compliance with principles of lawfulness, fairness and transparency and for the following purposes:
- Access to the Internet site and browsing;
- RReceiving spontaneous applications or applications for open job positions – Work with us;
- Registration, access and management of the Partners and Suppliers reserved area;
- Management of requests for information.
Specifically the use of personal data to access the site and browsing involve the processing of data to execute the measures adopted on request of the data subject, which is the legal basis for the processing. The use of personal data to manage additional processing, and the specific legal bases for such processing, are described in the section of this notice on principles applicable to the processing of data by L’Operosa.
DATA PROTECTION OFFICER (DPO)
The Data Protection Officer (DPO) may be contacted at:
Gruppo L’Operosa – Data Protection Officer, via Don Minzoni n. 2, Cadriano di Granarolo dell’Emilia (BO),
dpo@operosa.it.
PLACE OF DATA PROCESSING
The processing related to the web services of this Site takes place at the aforementioned registered office of the Controller and at the Supplier hosting the service, with servers located in the EU.
CATEGORIES OF PERSONAL DATA
Browsing data
The IT systems and software procedures for this website to function acquire some personal data during their normal operation, the transmission of which are implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but because of its nature, it could enable users to be identified, through processing and associations with the data held by third parties.
This category of data includes IP addresses or domain names of computers used by users that connect to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used in transmitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.
These data are used only to obtain anonymous statistical information on the use of the website and to check its correct operation and are immediately deleted after the processing. The data could be used to establish liability in the event of cyber crime to the detriment of the site or Controller. Apart from this possibility, currently the data on web contacts are not retained for longer than the terms indicated by law.
Data voluntarily provided by the user
The optional, specific and voluntary transmission of email to the addresses indicated in this site means that L’Operosa will subsequently acquire the sender’s email address, which is necessary to reply to requests, as well as any other personal data indicated in the email.
Specific, summary notices will be presented or displayed on the site’s pages for particular on-request services.
COOKIES
Introduction
This part is an integral and substantial part of the Privacy Policy and the information it contains, which is provided pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data. The Cookies Policy is provided to data subjects that use the Site, in compliance with the provisions and recommendations of the Italian Data Protection Authority (https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9677876)
What is a cookie?
Cookies are brief text files that are downloaded and put on the user’s device when they visit a website. On each subsequent visit, the cookies are sent back to the website generating them (first-party cookies) or to another website that recognises them (third-party cookies).
Cookies are useful because they enable a website to recognise the user’s device.
They have different purposes, such as making it possible to browse web pages efficiently, remembering favourite sites and, in general, improving browsing experience.
They also help ensure that advertising content displayed online is targeted to the user’s personal needs and interests.
Types of cookies
Cookies can be first-party cookies or third-party cookies. “First-party” cookies refers to cookies that indicate the site as the domain, while “third-party cookies” are cookies that refer to external domains.
Third-party cookies are installed by an external party, always defined as a “third-party”, not managed by the site.
The nature of cookies
Technical cookies
These are cookies used for browsing or to provide a service requested by the user. They are not used for additional purposes and are normally installed directly by the website Owner.
These cookies can, in turn, be classified as:
- Browsing or session cookies, that guarantee normal website browsing and use (enabling the user to access reserved areas based on their credentials); these cookies are necessary for a website to work properly;
- Third-party analytics cookies, which are similar to technical cookies, where they are used directly by the website owner to collect aggregate information anonymously on the number of users and how they visit the site, to improve its performance;
- Functional cookies, which enable the user to browse based on a number of selected criteria (for example language, selected products to purchase), in order to improve the service given to the user. The user’s prior consent is not required to install these cookies;
- Profiling cookies, which are used to profile the user’s browsing behaviour on the web and are designed to create qualitative “user” profiles. They are also used to send advertising messages aligned with the user’s browsing preferences;
- Third-party cookies, which are installed on the device by a different (third-party) site from the one visited by the user.
These cookies may be:
- Temporary, when they are automatically deleted when the user logs out;
- Permanent, when they are stored on the user’s device, unless the user voluntarily deletes them.
COOKIES USED BY THIS SITE
For more information, you can display the complete Cookie Policy on the Site’s homepage, or click on the button on the bottom right of each web page.
PRINCIPLES APPLICABLE TO DATA PROCESSING PERFORMED BY L’OPEROSA
L’Operosa will process the personal data of users in a lawful, fair and transparent manner.
The Controller will collect the personal data of users and process such data only for the purposes indicated in this Privacy Policy and in such a way that is compatible with these purposes.
The data processed by L’Operosa are adequate, relevant and limited to what is necessary for the purposes for which they are processed, including the following:
RECEIVING APPLICATIONS FOR OPEN JOB POSITIONS AND/OR SPONTANEOUS APPLICATIONS
L’Operosa will process the personal data of users that have compiled the online form or the contents in CVs sent spontaneously by the data subject, also after a recruiting campaign promoted by the Controller, to manage the recruitment of new staff and evaluate the candidate.
The data will be processed for the time strictly necessary to achieve the purposes indicated and will be retained for a period of 36 months from when the CV is received. The Controller may extend this time after a specific request has been made to the data subject.
The legal basis for this processing is the execution of precontractual measures, pursuant to Article 111-bis of Italian Legislative Decree no. 196/2003, as updated by Italian Legislative Decree 101/2018, for which, within the limits of Regulation (EU) 2016/679, Article 6(b), consent from the data subject is not necessary.
Giving data for this processing purpose is optional. However, not giving data or only giving partial or inaccurate data may mean that the Controller cannot receive applications and cannot evaluate applications against the job profile it is recruiting for, and cannot proceed with the recruitment process.
REGISTRATION, ACCESS AND MANAGEMENT OF THE RESERVED AREA
L’Operosa will process the personal data of the user, Partners and/or Suppliers, to enable registered users to use reserved services. To access the site’s reserved areas, the user must enter their username and a personal, secret password, individually identifying each user.
The legal basis for this processing is the fulfilment of the contract or, depending on cases, the execution of precontractual measures adopted on request of the data subject. For these purposes, the data will be processed for the time strictly necessary to carry out the single processing activity. However, L’Operosa may retain the data for a longer period of time, to fulfil specific obligations established by Regulations and/or laws in force that apply to the Controller.
For these purposes, L’Operosa will process the personal data of users to:
- Enable the user to access the Site and browse it;
- Enable the user to register with the Site, create an account (registered) and use the services reserved for registered users;
- Enable the user to access the Site and browse as a logged-in user, recognising the user regardless of the device used;
- Maintain and manage the user account;
- Store account data and information.
The processing of the data subject’s access credentials and personal data is necessary to enable access to the Site and/or browsing as a logged-in user and/or provide account management and maintenance services. By not providing data, the user will not be able to register, access the Site’s reserved area, or use the services reserved for registered users.
REQUESTS FOR INFORMATION
The Controller will process the personal data of users that compile online forms requesting information on initiatives, projects, products or services offered by L’Operosa, in order to manage, follow up and respond to the user’s request. The data will be registered, stored and used to respond to data subjects’ requests, for the time necessary to achieve this purpose. The legal basis for this processing is the execution of precontractual measures adopted on request of the data subject (GDPR, Article 6(1)(b)).
Giving data for this processing purpose is optional. However, not giving data or only giving partial or inaccurate data may mean that L’Operosa cannot manage and follow up users’ requests.
SOCIAL PLUG-INS
This site uses social plug-ins.
Social plug-ins are specific tools that enable Social Network functionalities to be directly incorporated in websites.
All social plug-ins on the site are indicated by the respective social network platform logo.
When you visit a page on our site and interact with a plug-in, or decide to leave a comment via a Social platform, corresponding information is sent by the browser directly to the relevant social platform and is stored there.
For information on a Social Network Platform’s purposes and procedures for collecting, processing, using and retaining personal data, the type of data, and procedures for data subjects to exercise their rights, see the Social Network’s specific Privacy Policy.
METHOD OF PROCESSING
Personal data are and will be processed, on paper and/or digitally, for the time strictly necessary to achieve the purposes and aims for which the data were collected.
L’Operosa does not use the automated processing of collected data, including user profiling.
Specific security measures are in place, to prevent the loss of data, the unlawful or unfair use and unauthorised access.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
The personal data collected by the Controller are processed and kept in the territory of the European Union and will not be transferred to third countries outside the European Economic Area.
CATEGORIES OF PARTIES TO WHOM DATA MAY BE COMMUNICATED (RECIPIENTS)
The parties to whom L’Operosa may communicate data act as Processors appointed through specific agreements, or as persons authorised by the Controller to process personal data. The data might be notified to Companies and/or external Professionals to fulfil specific obligations of the Controller of regulations and laws in force. The data subject, by requesting access to their personal data, may obtain the list of recipients of their personal data, sending an email to privacy@operosa.it
RIGHTS OF DATA SUBJECTS
Pursuant to Articles 15-22 of the GDPR, data subjects that use the Site have the following rights:
Right of access by the data subject: the user has the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data. The purpose of access may be to obtain the following information:
The purposes of the processing;
The categories of personal data concerned;
The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
The envisaged period for which the personal data will be stored, or the criteria used to determine that period;
The existence of the right to request from the Controller the rectification or erasure of personal data or restriction of its processing or to object to such processing;
The existence of automated decision-making.
Right to rectification: the data subject has the right to obtain the rectification of inaccurate personal data concerning him or her, and to have incomplete personal data completed.
Right to erasure: for the reasons indicated in Article 17 of the GDPR, the data subject has the right to obtain from the Controller the erasure of data without undue delay and the Controller has the obligation to erase the personal data of the data subject, provided there is no legal obligation to retain the data.
Right to restriction of processing: if one of the cases in Article 18 of the GDPR applies, the data subject has the right to request the restriction of the processing of data concerning him or her.
Right to data portability: the data subject has the right to receive the personal data concerning him or her, which he or she has provided to a Controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another Controller if the processing is based on consent, a contract or carried out by automated means.
Right to object: the data subject has the right to object to the processing of his or her particular situation, at any time, for reasons connected with his or her particular situation.
Right to withdraw consent: the data subject has the right, at any time and with the same means, to withdraw consent to the processing of his or her data.
The data subject may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Requests to exercise rights may be sent to privacy@operosa.it