Privacy Policy | Cottoref

Notice provided pursuant to Articles 13–14 of the GDPR (General Data Protection Regulation) 2016/679

GENERAL INFORMATION

This website respects the privacy of its visitors in accordance with European directives on privacy and the use of cookies.

This notice has been drawn up to help you understand the Data Controller’s policies regarding your privacy and the ways in which personal information is processed on these websites. This notice is intended to provide you with information so that you may give your explicit and informed consent to the processing of your personal data, where appropriate.

Any data you may provide, or which may otherwise be collected in connection with your use of the Data Controller’s services, will be used by the Data Controller in accordance with internationally recognised principles of privacy protection. This means, in particular, that any processing of Personal Data by the Data Controller will comply with the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimisation, accuracy, integrity and confidentiality.

1. DATA CONTROLLER AND CONTACT DETAILS

The Data Controller is Lust S.r.l., with its registered office at VIA MONTICELLO 37 – 59016 – POGGIO A CAIANO (PO), VAT number 03700910486, email address: info@lustsrl.it, hereinafter referred to as ‘the Data Controller’

2. PURPOSES OF THE PROCESSING

The data

1) responding to enquiries, comments and reports submitted, including via the ‘mail-to’ links on the website;

2) collecting CVs voluntarily submitted by data subjects;

3) use of the website;

3. TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

3.1 BROWSING DATA

The operation of the Website, like any other website on the internet, requires the use of IT systems and software procedures that collect information about users of the Website. This information may, through processing alongside data held by third parties, enable users to be identified (e.g. IP address, domain names of the computers used by visitors connecting to the site, etc.).

This data is used solely for the purpose of deriving statistical information (and is therefore anonymous) and to monitor the correct functioning of the website – see the Cookie Policy section.

3.2 DATA PROVIDED VOLUNTARILY BY THE DATA SUBJECT

When using the Services offered by the Website, such as the ‘mail-to’ form, you may provide Personal Data. Such data will be processed exclusively to respond to your request or to provide the service in accordance with this Policy.

Should you submit a CV, we may also process special categories of personal data, pursuant to Article 9 of EU Regulation 2016/679, namely data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, and data relating to a person’s health, sex life or sexual orientation. Specific consent is required for the aforementioned processing, and any refusal to provide such consent may make it impossible for the Company to proceed with the assessment of your application.

4. METHODS OF PROCESSING AND DATA RETENTION PERIOD

Data processing is carried out using electronic means and/or manually for the time strictly necessary to achieve the purposes for which the data were collected and, in any event, in accordance with the relevant regulations in force.

Personal data will be retained for the time strictly necessary to fulfil the specific purposes of the processing and, in particular:

4.1 for general or special categories of data provided: for the time necessary to carry out the specified activities, except in the event of investigations into cybercrimes committed against the website.

4.3 for browsing data: please refer to the cookie policy for details on how cookies are processed and their retention period.

5. RECIPIENTS OF THE DATA

Your data may be made available to the Data Processors appointed by the Data Controller pursuant to Article 28 of the GDPR.

Certain processing operations may also be carried out by other third parties to whom the Data Controller entrusts certain activities, or parts thereof, necessary for the provision of the services. The Data Controller imposes appropriate obligations regarding the protection of personal data on these additional parties, designated as Data Processors, by means of a contract or other legal instrument in accordance with EU or Member State law, through operational instructions, with particular reference to the adoption of appropriate technical and organisational measures, in order to guarantee the confidentiality and security of the data in accordance with Article 32 of the GDPR.

Apart from these cases, the data will not be disclosed to third parties or made public, except in the cases specifically provided for by national or EU law.

6. TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION.

The data collected and processed is not transferred to companies or other entities outside the European Union.

7. LINKS TO EXTERNAL WEBSITES

This website contains hyperlinks (i.e. tools that allow access to a web page on another site): the external websites accessible via these links are managed by parties over which the Data Controller has no ownership or control, and the Data Controller is in no way responsible for their content, quality, accuracy or the services offered. Visiting and using the websites accessed by the user from this website via links is therefore entirely at the user’s own discretion and responsibility. This privacy policy, therefore, applies only to the Data Controller’s websites and not to any other websites that the user may access via links.

8. RIGHTS OF DATA SUBJECTS AND RIGHT TO LODGE A COMPLAINT

Data subjects may exercise the rights set out in Articles 15 et seq. of the GDPR at any time, where applicable.

Data subjects may exercise their rights by emailing: info@lustsrl.it

Data subjects who consider that the processing of their personal data carried out via this website is in breach of the provisions of the GDPR have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the GDPR, by following the procedures and guidelines published on the Authority’s official website at www.garanteprivacy.it.