Privacy statement pursuant to article 13 of Legislative Decree No. 196 of June 30, 2003 as modified by Leg. Decree No. 101/2018 – “Code regarding the protection of personal data” and art. 13 of Regulation (EU) 679/2016 – "European Regulation on the protection of personal data" (GDPR)
The website www.toscotec.com (hereafter the "Site") is owned by Toscotec S.p.A., with registered office in Capannori (Lucca), town of Marlia, Viale Europa No. 317/F Italy. As Data Controller, Toscotec S.p.A. (hereinafter the "Company" or the "Data Controller") recognizes the importance of the protection and safeguarding of the personal data of the Users who consult the Site. As such, it is required to inform the Data Subject which data are being processed and about certain elements relating to the processing, which in any case must be done with correctness, lawfulness, transparency, limitation of the purposes of conservation, minimization of data, accuracy, integrity and protection of the privacy, rights and freedoms of the data subject.
1.Personal data object of the processing
“Personal data” shall mean any information relating to an identified or identifiable natural person («Data Subject»). An identifiable natural person is an individual who can be identified, directly or indirectly, in particular by reference to a name, an identification number, location data, an online identification number or one or more factors specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity;
2. Browsing data
The IT systems and software procedures of the Site collect some Personal Data whose transmission is implicit during normal operation and in the use of internet communication
protocols. This information is not associated with the User, but by its very nature could, through processing and association with third party data, allow identifying the Data Subject. This category of data includes, by way of example, the IP addresses or domain names of the computers used by Users connecting to the Site, URI addresses, access times, etc. This data is used only to obtain anonymous statistics without the possibility of identifying the Data Subject. This data could also be used to ascertain responsibility in the event of hypothetical IT violations to the detriment of the site.
3. Data provided voluntarily by the user
All personal data released freely by the User such as name, surname and e-mail address for registering to the newsletter service.
4. Purposes of processing
Data processing is carried out by the Company in the performance of its activities following explicit consent. In particular, the Data provided by the Data Subjects through the Site will be processed, using IT and other tools, for the following purposes:
- Conducting activities closely related and instrumental to managing relations with Users
- Commercial, accounting and tax obligations deriving from specific legal obligations;
- Communication of commercial information, announcements of new products, services and offers, also by sending e-mails containing informative material.
- Registering for the newsletter service
The legal basis is represented by the rules of the European Union (GDPR 679/16).
Toscotec S.p.A. collects cookies through this Site. Cookies are small text files that can be used by websites to make the User's experience more efficient. For details on the functionality of these cookies and how to block them, you can visit the sites http://www.allaboutcookies.org, http://www.youronlinechoices.com, http://cookiepedia.co.uk.
On the Toscotec S.p.A. sites, the following cookies may be present:
|__cookie_accept||Technical cookies||These cookies are used by the website’s production software and are necessary for the correct navigation of the site.|
|Third-party Cookies||These cookies are used to allow analyzing Users access data to the Site in an anonymous and aggregate form. These are cookies related to the Google Analytics web analytics platform. (Https://www.google.com/analytics/terms/it.html)|
|APISID, HSID, IDE, LOGIN_INFO, NID, PREF, SAPISID, SID, SIDCC, SSID, VISITOR_INFO1_LIVE, YSC||Third-party Cookies||Issued by YouTube for the correct use of the videos displayed on the site through the embed of the code issued by https://www.youtube.com/|
6. Data retention
The Data provided by the Data Subject will be processed and stored for the time necessary to pursue the purposes for which they were collected or until the right to oppose the processing is exercised, without prejudice to the storage obligations required by current legislation. The Company will process the Personal Data for the newsletter service until the User decides to unsubscribe from the service. Further information on the retention period of personal data and/or the criteria used to determine this period may be requested by writing to the Data Controller.
Specific security measures are followed to prevent data loss, unlawful or incorrect use of data, and unauthorized access.
7. Rights of the Data Subject
The Data Subject can at any time:
- ask the Controller to access his/her personal data and to correct or delete them or request the limitation of processing concerning him/her;
- oppose the processing of his/her personal data;
- exercise the right to data portability;
- withdraw consent;
- lodge a complaint with a supervisory authority
To exercise these rights, the Data Subject may contact the Data Controller by sending a communication to:
- certified e-mail: firstname.lastname@example.org
- ordinary email: email@example.com
- Address: VIALE EUROPA NO. 317/F, MARLIA, 55014, CAPANNORI (LUCCA) - Italy
- Telephone: +39 058340871
- Fax +39 05834087800
When contacting us, please ensure that you include your name, email/postal address and/or telephone number/s to make sure that your request can be handled properly.
For the treatment:
Information provided to natural persons pursuant to art. 13 of Legislative Decree June 30, 2003 No. 196 approved by Legislative Decree n.101 / 2018 - "Code regarding the protection of personal data" and of the art. 13 of Regulation (EU) 679/2016 - "European Regulation on the protection of personal data" (GDPR)
TOSCOTEC S.P.A. (hereinafter also referred to as the "Company" or the "Owner"), with registered office in Capannori (LU), fraz. Marlia, Viale Europa n. 317 / F Italy, tax code and VAT No. 02094670466, as data controller, informs you that your personal data acquired will be treated in compliance with the guarantees of confidentiality and security measures provided for by current legislation.
1. Type of treated data
The Company is the data controller of the personal data communicated by the User and includes:
Personal and contact details (surname and name, tax code and other identification numbers, bank details, address, e-mail address, telephone number), data suitable for verifying the User’s state of health, aptness for specific tasks, belonging to protected categories, curriculum data and direct work experience
2. Treatment target
The treatment of Data is carried out by the Company in the performance of its activities upon the grant of explicit consent. In particular, the Data provided by the Interested Parties will be processed, using IT tools and not, for the following purposes:
- a) selection of personnel and evaluation of applications in order to establish an employment relationship.
- b) social security and tax obligations deriving from specific legal obligations;
- The criterion of lawfulness for which treatment is possible is: the treatment is necessary to fulfill a legal obligation to which the data controller is subject.
- The legal basis of reference: Consent of the interested party.
3. Methods of treatment
The Data will be processed by the Company using electronic and / or manual systems, according to the principles of correctness, loyalty and transparency established by the applicable legislation on the protection of personal data and protecting the privacy of the Interested Party through technical and organizational security measures to guarantee an adequate level of security.
The consent to the treatment referred to in point a) is optional, but necessary in order to evaluate the application. In the absence of such consent, the company will not be able to evaluate your candidacy.
4. Data retention
The Data provided by the interested party will be processed and stored for the time necessary to pursue the purposes for which they were collected, no later than 1 year from collection or until the right to object to the processing is exercised, except for the faculties or obligations of retention required by the current legislation.
5. Communication, dissemination and transfer of data
The Data will be processed in Italy or in the EU territory, within the limits of what is necessary, by authorized personnel, adequately educated and trained, by the Data Controller, as well as by the personnel of third parties who provide services to the Owner and carry out the treatment of Data on behalf of and on instructions from the latter as data controllers. The transfer will take place in compliance with the applicable legal provisions and by adopting all the appropriate guarantees.
More generally, in the course of their ordinary business activities, your data may be communicated to subjects who carry out activities of control, revision and certification of the activities carried out by the Data Controller, consultants and freelancers in the context of fiscal and judicial assistance services, and in the case of corporate transactions for which it is necessary to evaluate the corporate assets, public bodies and administrations, as well as subjects legitimately entitled to receive such information, Italian and foreign judicial authorities and other public authorities, for purposes related to the fulfillment of legal obligations, or for the fulfillment of the obligations assumed and arising from the contractual relationship, including for reasons of defense in court.
6. Rights of the Interested Party
As an interested party, in relation to the processing of the data described therein, you can exercise the rights provided by the GDPR (articles 15-22), described below:
|Regulation (EU) 679/2016||Rights of the Interested Party|
|Art. 15 – Right of Access||Right to obtain from the Data Controller the confirmation that personal data concerning you is being processed and in which case, to obtain access to personal data and information regarding the purposes of the processing, the categories of personal data, the recipients, the retention period.|
|Art. 16 – Right of Correction||Right to obtain from the Data Controller the correction of inaccurate personal data that concern You without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, even providing a supplementary statement.|
|Art. 17 - Right to cancellation (right to oblivion)||Right to obtain from the Data Controller the deletion of your personal data without undue delay and the Data Controller has the obligation to delete personal data without unjustified delay|
|Art. 18 - Right to the limitation of the data treatment||Right to obtain from the Data Controller the limitation of the data treatment when one of the following hypotheses occurs:|
a) the interested party disputes the accuracy of the personal data, for the period necessary to the Data Controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the deletion of personal data and requests instead that its use be limited;
c) although the Data Controller no longer needs it for the purposes of the processing, personal data is necessary for the interested party to ascertain, exercise or defend a right in court;
d) the data subject has opposed the processing pursuant to Article 21, paragraph 1, pending verification regarding the possible prevalence of the legitimate reasons of the Data Controller with respect to those of the interested party.
|Art. 19 – obligation to notify in the event of rectification or cancellation||The data controller informs each of the recipients to whom the personal data is sent about any adjustments or cancellations or limitations of the processing.|
|Art. 20 - Right to data portability||The right to receive in a structured format, commonly used and readable by automatic device, the personal data concerning you provided to a data controller and has the right to transmit such data to another data controller without hindrance by the data controller which provided them. In exercising your rights with respect to data portability, you have the right to obtain the direct transmission of personal data from one Data Controller to the other, if technically feasible.|
|Art. 21 - Right of opposition||The right to object at any time, for reasons related to your particular situation, to the processing of your personal data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. If you have given your consent for one or more specific purposes, you have the right to revoke this consent at any time.|
|Art. 22 - Automated decision-making process, including profiling||The right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects that concern you or that significantly affects your person.|
To exercise these rights, the interested party may contact the Data Controller by sending a communication to:
- certified e-mail: firstname.lastname@example.org
- ordinary email: email@example.com
- Address: VIALE EUROPA N.317/F, FRAZ. MARLIA 55014 CAPANNORI ( LU ) – Italy
- Tel: +39 058340871
- Fax: +39 05834087800
In contacting the Company, the Interested party must ensure that they include one’s name, email / postal address and / or telephone number (s) to ensure that their request can be handled correctly.