PRIVACY AND COOKIE POLICY UNDER ART. 13 - EU REGULATION 2016/679
The present policy is in accordance with the EU Regulation 2016/679 art. 13, on the protection of natural persons with regard to the processing of personal data. The purpose of this privacy statement is to provide maximum transparency regarding the information that the site collects and how such information is used.
A. DATA CONTROLLER
The data controller for all personal data, collected during the employee selection process is:
Zilmet S.p.A.
Head office in Limena (PD), Via del Santo 242, zip code35010
Website: www.zilmet.it
Email address of the data controller: privacy@zilmet.it
Telephone number: 0039 049 7664901
B. PERSONAL DATA AND PURPOSE OF THE PROCESSING
1. TYPE OF DATA
1.1 Personal Data
In case Users need user name and password to sign in in the reserved area of the website, an email to the Data Controller must be sent. The information required are: company name, address, VAT number, telephone number, email. These data will be processed by Zilmet S.p.A.
Users are allowed to apply for opening job positions or send an unsolicited application through Zilmet S.p.A. website, clicking on “Jobs” from the top menu. In this case, users must fill in the following information: name, surname, date of birth, address, e-mail address, telephone number, area of competence, spoken language, e-skills, annual gross salary; users must attached also the CV. These data will be processed by Zilmet S.p.A.
In case a CV is voluntary and expressly sent to the email address, mentioned in the website, Zilmet S.p.A. will obtain all the data related to the address of the sender, the CV and all personal data written in the email.
In case emails and requests are voluntary and expressly sent to the email address mentioned in the website, Zilmet S.p.A. will obtain all the data written in the email and that are necessary to reply.
1.2 Navigation Data
During their normal operation, the computer systems and software procedures, used to operate this website, acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers operated by users who connect to the site, URI (Uniform resource Identifier) addresses of the requested resources, time of request, method used in submitting the request to the server, size of the file obtained in response, numerical code indicating the status of the response given by the server (successful, error ....) and other parameters related to the operating system and user’s computer environment.
Categories of mentioned data are only used for purposes of information on the use of the site and to check its correct functioning. The data could potentially be used in order to establish liability where computer crimes are committed to the prejudice of the site and the Data Controller, only on request of the appointed control bodies.
2. PURPOSE OF THE PROCESSING
a) Personal data such as: company name, address, VAT number, telephone number, email address, sent by the User in order to receive username and password to sign in the reserved area of the website, are processed only in to order to give to the User the required username and password.
b) All personal data obtain through the specific form for job applications, are processed only in order to assess the candidates.
c) All personal data obtain through the application forms sent to the email address mentioned in the website, are processed only in order to assess the candidates.
d) All personal data obtain through emails and requests sent by the User to the email address mentioned in the website, are processed only in order to reply to those specific requests.
C. LEGAL BASIS
The legal basis for handling personal data is:
- point 1.2 paragraph B), type of data; data are collected in order to surf the website;
- point 2.a. paragraph B), purpose of the processing; data are collected in order to send username and password to the User for the reserved area of the website;
- point 2.b. paragraph B), purpose of the processing; data are collected since the User voluntarily fills the job application form;
- point 2.c. paragraph B), purpose of the processing; data are collected since the User voluntarily sends his CV in order to apply for a job position;
- point 2.d. paragraph B), purpose of the processing; data are collected in order to reply to the emails or requests sent by the Users.
If we don’t consider the technical cookies that are necessary to surf on the web, the User, after checking the short cookie policy in the banner of the website, can accept to surf the website and use its features.
The User can avoid the installation of the cookies keeping the banner visible (he has not to close the cookie consent banner clicking on “ok” ) or thanks to specific features of each browser for disable cookies. We remind that the majority of Internet browsers are initially set to automatically accept cookies. This means the User has the possibility, at all times, to set his browser to accept all cookies, only some, or to refuse them, disabling the use by websites. Furthermore, the User can normally set his browser preferences so that he is notified each time a cookie is saved in your computer. At the end of each browsing session, lastly, the User can delete the cookies from his hard disk. If he wants to delete the cookies installed in the cookies folder of the browser used it is important to remember that all browsers have different procedures to manage settings.
the User can find information on how to manage cookies in your browser at the following urls:
Mozilla Firefox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
Google Chrome: https://support.google.com/accounts/answer/61416?hl=it
Opera: http://help.opera.com/Windows/10.00/it/cookies.html
Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies
Apple Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT
For further information, the User can visit the English website www.aboutcookies.or or www.youronlinechoices.com. In order to delete cookies from his smartphone/tablet, please check the related instruction for the users of the device.
WARNING: In case the cookies are disabled, website may not work correctly.
D. PROCESSING METHODS
Personal data are processed using manual and IT tools, with logic strictly related to the purposes themselves. Special safety measures are observed so as to prevent any loss of data, illicit or incorrect uses and unauthorized access. The collected data can be used by people on behalf of the Data Controller and the people in charge to carry out data processing services for the correct functioning of the website. The activities for personal data processing, related to the website, may take place also at the premises of the supplier of web services. Personal data will be stored and checked with regard to the technological progress, nature of the data and specific characteristics of data processing; all personal data are processed using adequate safety measures in order to minimize the risk of destruction or loss, unauthorized access and incorrect uses. Personal data are kept on a cloud computing service, the server is located in France. Processing methods will be carry on by the Data Controller and authorized people designed by him.
E. DATE RETENTION AND PRESERVATION METHODS
- Data received in case of Users’ request for Username and Password: this type of data will be kept for the time strictly necessary to fulfill the request.
- Data received from the job application forms: 24 months starting from the date when the employee selection process is completed.
- Data received in case CVs are sent by email to the email address mentioned in the website: 24 months starting from the date when the employee selection process is completed.
- Data received in case Users sends requests or communications by email: this type of data will be kept for the time strictly necessary to fulfill the request.
- Navigation data: will be kept for the time strictly necessary to achieve the purposes for which the data have been collected, in any case for a maximum period of 6 months.
In case of legal obligations, fulfil regulatory requirements, settling disputes between Users, prevent fraud and abuse or implement this Policy, the Data Controller may keep the personal data of Users for a longer time than the one that is strictly necessary to achieve the purposes for which the data have been collected, for a period of 90 days.
The Data Controller will keep personal data for the period of time described here above or until when the User withdraws his consent. In any case personal data will be automatically erased or made anonymous on a permanent and irreversible basis.
F. COOKIE
We use cookies in order to improve the User’s experience with our website. Cookies are small bites of information that are stored by your browser on your computer’s hard drive. There are several type of cookies, but basically the main purpose is to make the browsing experience more enjoyable and more efficient in the future.
Cookies are used to optimize the browsing experience of the User with our website. In particular:
- Efficiently navigate from page to page in the website.
- Store user names and preferences included.
- Avoid entering the same information (such as user name and password) several times during the visit.
- Measure the use of services by Users, to optimize the browsing experience and services.
- Present targeted advertising information based on the interests and behavior expressed by the User while surfing.
There are several types of cookies. Below we report the cookies that may be used in this site with a description of the purposes linked to the use.
Here below we describe the categories of cookies that we use:
Technical Cookies
They are essential for the correct functioning of some are of the website. Cookies in this category include both persistent cookies that session cookies. Without these cookies, the Site or portions of it may not work properly. Therefore, they are always used, regardless of the user preferences. Cookies in this category are always sent from our domain.
Analytical cookies
This type of cookies are used to collect information on the use of the site. The Data Controller uses this information for statistical analysis, to improve the site and ease of use, as well as to monitor their operation. This type of cookie collects anonymous information about user activity on the site and the way in which they arrived at the site and the visited pages. Cookies in this category are sent from the Site or from third-party domains.
Third Party cookies
This type of cookies are installed only in the case the owner of the website enable the related functions provided by the platform. In particular:
Google Analytics: is a web analytics service provided by Google Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) that is used for browser history, visits count, navigation statistics. Information and privacy policies related to these services and the consent to the use of these cookies can be found at the following links:
Information on “How google uses information from sites or apps that use our services” : http://www.google.it/policies/privacy/partners/
Information on Google Analytics cookies: https://www.google.it/intl/it/policies/technologies/types/ e https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
How to reject Google Analytics cookies: download and install the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=it
Information and general notes on Google services: http://www.google.it/analytics/learn/privacy.html
We highlight that analytics cookies are considered technical cookies if they are used for optimization purposes and users IP are anonymous. We inform the User that this website uses the free Google Analytics service. We remind that data are used only to have information about the most visited pages, the number of visitors, the aggregate data of visits to the operating system, browser, etc. Google Analytics IP are anonymized.
G. RECIPIENTS OR CATEGORIES OF RECIPIENTS
The data gathered will not be divulged, that is, they will not be given to unspecified individuals. The data may be made available to subjects who are specifically designated by the Data Controller and only for the purposes mentioned above, in particular:
a) Software House;
b) Data controllers and the person in charge.
The list of the external data controllers is available at: Zilmet S.p.A., headquarter Limena (PD), via del Santo, postal code 35010, privacy@zilmet.it, telephone number 0039 049 7664901.
H. YOUR RIGHTS AS DATA SUBJECT
The User may exercise the rights listed in this section:
- the right of access, correction, erasure, restriction, objection of personal data;
- the right to receive his personal data, without any restriction from the Data Controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another Data Controller.
- the rights to withdraw his consent, without prejudice to the lawfulness of the processing which occurred prior to the withdrawal;
We inform that the time limit for the reply will be one month, starting from the date of reception of the request; in very complex cases, the time limit can be extended up to 3 months. For the exercise of the rights the interested party can write to: zilmetspa@postacert.it (certified email address) or to the email address privacy@zilmet.it; or he can send a registered letter w/ acknowledgement of receipt to Zilmet S.p.A., Limena (PD), Via del Santo 242, postal code 35010.
I. COMPLAINT WITH THE AUTHORITY
The interested party has the right to lodge a complaint with the Data Protection Authority. In accordance with article 77 GDPR, a complaint is the instrument that the interested part has in case of violation of the regulation governing the processing of personal data.
The interested party can lodge a complaint with a supervisory authority, in particular in the place of his habitual residence, place of work or place of the alleged infringement.
The interested party has also the right to institute judicial proceedings in front of the ordinary Court in the case he thinks that his rights have been infringed.
L. TRANSFER OF PERSONAL DATA ABROAD
Personal data will not be transferred outside the EU.