Informativa art. 13 Regolamento UE 679/16 (GDPR)

Lo scopo di questa pagina è descrivere le modalità di gestione dei suoi dati perso

Information on art. 13 EU Regulation 679/16 (GDPR)

The purpose of this page is to describe the management methods of your personal data collected through forms on the website https://www.vidiemme.it/ which will be treated according to rules of lawfulness, correctness, relevance and not excess.

1) Why you received this communication

VIDIEMME CONSULTING S.R.L., VAT No. 04363010960 – Via Natale Battaglia, 8 20127 Milan (MI), as Data Controller, wants to inform you about what data it collects and in what way, in order to guarantee respect for its rights and your fundamental freedoms, with particular reference to the confidentiality and security with which the data is processed.

2) Data processed

VIDIEMME CONSULTING S.R.L. collects and stores your personal and identification data (such as, for example, but not limited to, name, surname, date of birth, residence, e-mail address and WORK WITH US telephone, educational qualifications, work experience and any additional data entered in the curriculum vitae and / or provided at the interview at one of the branches), specific data pursuant to art. 9 Reg. EU 679/2016 such as belonging to protected categories.

The data is collected in the following ways:

• after registering in the reserved area available at the following web address: https://www.vidiemme.it/ in the ‘WORK WITH US’ section;
• in response to an announcement published on the Website of the Data Controller;
• by post to the address of the Data Controller.

3) Purposes for the use of your personal data and the legal basis that legitimizes its processing

VIDIEMME CONSULTING S.R.L. uses your data without the need for its specific consent: for research and selection of personnel following a candidacy in response to a specific announcement published on the Site and in the case of a voluntary application through the ‘WORK WITH US’ section of the Site and/or by mail delivery to the address of the Controller and/or email.

The legal basis applicable to the processing of your personal data for the aforementioned purpose is for:

• the execution of a contract or of pre-contractual measures pursuant to art. 6 paragraph 1 letter. b) of the GDPR;
• the legitimate interest pursuant to art. 6 paragraph 1 letter. f) of the GDPR;
• the fulfillment of an obligation of law, regulation or community legislation pursuant to art. 6 paragraph 1 letter. c) of the GDPR.

4) Data retention time

Both in the case of registration in the reserved area in relation to a voluntary application and in the case of sending the CV by post and/or email, the data is entered in the company database and stored for 2 years from their inclusion.

At the end of the storage period the Personal Data will be deleted. Therefore, upon expiration of this term the right of access, cancellation, rectification and the right to the portability of the Data can no longer be exercised.

5) The security of personal data

Your data will be processed using instruments that guarantee confidentiality, integrity and availability. The treatment is carried out on paper and by means of information and/or automated systems and will include all the operations or series of operations envisaged in art. 4 of the GDPR and necessary for the treatment in question, including the communication to the data processing parties. The data in question will not be disclosed; instead, they will or may be communicated to individuals, public or private, who operate within the scope of the purposes described above.

6) Who can access personal data

Your data can only be accessed by authorized persons within the scope of the tasks assigned by the Data Controller, possibly also to employees and/or collaborators of Companies appropriately appointed as External Data Processors.
For the purposes indicated, the data – or some of them – may also be accessible or may be communicated to subjects whose right to access your personal data is recognized by provisions of law or secondary or community legislation.

7) Where personal data is stored

The management and storage of personal data will take place:

• in paper form within the company headquarters in archives accessible only to authorized personnel;
• in electronic format on servers owned by the Owner, located in Italy, within its own headquarters, in a closed air-conditioned room accessible only by authorized personnel after manual registration of accesses and/or third-party companies duly appointed and appointed as Responsible of the treatment.

Your data will not be transferred outside the European Union.

8) Is it obligatory to consent to the provision of data?

Registration by filling in the form on the site and sending the curriculum vitae, also by mail/post, is optional.

9) What are the rights in relation to the GDPR?

According to the provisions of the GDPR, VIDIEMME CONSULTING S.R.L. guarantees the following rights:

• obtain confirmation that your personal data is being processed and whether or not it is being processed, in this case, obtain access to personal data (Access right art. 15);
• to obtain the rectification of inaccurate personal data concerning him without unjustified delay (Right to Correct Article 16);
• obtain the limitation of the processing in certain hypotheses (Right to limitation of processing art. 18);
• receive in a structured format, commonly used and readable by automatic device, the personal data that you have provided to us and possibly transmit them to another Data Controller (Right to data portability art. 20);
• oppose at any time, for reasons related to his particular situation, to the processing of personal data concerning him (Opposition right art. 21);
• receive, without unjustified delay, communication of the violation of personal data undergone by the Data Controller (Article 34);
• revoke the express consent at any time (Conditions for consent art. 7).

10) For any request, please contact the Data Controller

If you believe that we have not respected your rights regarding the protection of personal data, you can contact the Data Protection Authority. Alternatively, if you reside in another country, you can contact the local Data Protection Authority.

11) Data Controller and exercise of rights

The Data Controller is VIDIEMME CONSULTING S.R.L.
Via Natale Battaglia, 8 20127 Milan (MI)
e-mail: privacy@vidiemme.it

The rights referred to in point 9) may be exercised by sending the registered letter with return receipt and/or email to the addresses indicated above.

The list of data processors and authorized parties is available at the registered office of the aforementioned holder.

12) Update to this information

This information may be subject to change. Any substantial changes will be communicated via email or through our website.

nali raccolti mediante form sul sito https://www.vidiemme.it/ i quali saranno trattati secondo regole di liceità, correttezza, pertinenza e non eccedenza.

1) Perché ricevi questa comunicazione

VIDIEMME CONSULTING S.R.L., P. Iva 04363010960 – Via Natale Battaglia, 8 20127 Milano (MI), in qualità di Titolare del Trattamento, vuole informarvi su quali dati raccoglie e con quali modalità, in modo da garantire il rispetto dei suoi diritti e delle tue libertà fondamentali, con particolare riferimento alla riservatezza e alla sicurezza con cui i dati vengono trattati.

2) Oggetto del trattamento

VIDIEMME CONSULTING S.R.L. raccoglie e conserva i suoi dati anagrafici e identificativi (quali ad esempio a titolo esemplificativo e non esaustivo, nome, cognome, data di nascita, residenza, indirizzo di posta elettronica e LAVORA CON NOI telefonici, titolo di studio, esperienze lavorative ed eventuali ulteriori dati inseriti nel curriculum vitae e/o forniti in sede di colloquio presso una delle filiali), dati particolari ex art. 9 Reg. UE 679/2016 quali l’appartenenza a categorie protette.

I dati sono raccolti attraverso le seguenti modalità :

• previa tua registrazione all’area riservata disponibile al seguente indirizzo web: https://www.vidiemme.it/ nella sezione ‘LAVORA CON NOI’;
• in risposta ad annuncio pubblicato sul Sito del Titolare;
• a mezzo posta all’indirizzo del Titolare.

3) Per quali finalità usiamo i dati personali e quale base giuridica legittima il trattamento

VIDIEMME CONSULTING S.R.L. utilizza i suoi dati senza necessità di un suo specifico consenso:
per ricerca e selezione del personale a seguito di candidatura in risposta ad uno specifico annuncio pubblicato sul Sito sia in caso di candidatura volontaria tramite la sezione ‘LAVORA CON NOI’ del Sito e/o mediante spedizione via posta all’indirizzo del Titolare e/o mail.

La base giuridica applicabile al trattamento dei suoi dati personali per la finalità di cui sopra sono:

• l’esecuzione di un contratto o di misure prcontrattuale ex art. 6 paragrafo 1 lett. b) del GDPR;
• il legittimo interesse ex art. 6 paragrafo 1 lett. f) del GDPR;
• l’adempimento di un obbligo di Legge, Regolamento o normativa comunitaria ex art. 6 paragrafo 1 lett. c) del GDPR.

4) Per quanto tempo conserviamo i dati personali

Sia nel caso di registrazione all’area riservata in relazione ad una candidatura volontaria sia nel caso di invio del cv mediante posta e/o mail, i dati sono inseriti nel database aziendale e conservati per 2 anni dal loro inserimento.

Al termine del periodo di conservazioni i Dati Personali saranno cancellati. Pertanto, allo spirare di tale termine il diritto di accesso, cancellazione, rettificazione ed il diritto alla portabilità dei Dati non potranno più essere esercitati.

5) La sicurezza dei dati personali

Il trattamento dei suoi dati avverrà mediante strumenti idonei a garantirne la riservatezza, l’integrità e la disponibilità. Il trattamento è effettuato su supporto cartaceo e mediante sistemi informativi e/o automatizzati e comprenderà tutte le operazioni o complesso di operazioni previste all’art. 4 del GDPR e necessarie al trattamento in questione, ivi inclusa la comunicazione nei confronti dei soggetti incaricati al trattamento stesso. I dati in questione non saranno oggetto di diffusione; invece, saranno o potranno essere comunicati a soggetti, pubblici o privati, che operano nell’ambito delle finalità sopra descritte.

6) Chi può accedere ai dati personali

Possono accedere ai suoi dati esclusivamente persone autorizzate nell’ambito delle mansioni assegnate dal Titolare eventualmente anche a dipendenti e/o collaboratori di Società idoneamente nominati Responsabili esterni del Trattamento.
Per le finalità indicate, i dati – o alcuni di essi – potranno inoltre essere accessibili o potranno essere comunicati a soggetti cui la facoltà di accedere ai suoi dati personali sia riconosciuta da disposizioni di legge o di normativa secondaria o comunitaria.

7) Dove risiedono i dati personali

La gestione e la conservazione dei dati personali avverrà:

• in cartaceo all’interno della sede della società in archivi solo a personale autorizzato;
• in formato elettronico su server di proprietà del Titolare, ubicati in Italia, all’interno della propria sede, in sala chiusa climatizzata accessibile solo da parte di personale autorizzato previa registrazione manuale degli accessi e/o di società terze incaricate e debitamente nominate quali Responsabili del trattamento.

I suoi dati non saranno oggetto di trasferimento al di fuori dell’Unione Europea.

8) È obbligatorio acconsentire al conferimento dei dati?

La registrazione mediante compilazione del form sul sito ed il relativo invio del curriculum vitae, anche a mezzo mail/posta è facoltativa.

9) Quali sono i diritti in relazione al GDPR?

Secondo le disposizioni del GDPR, VIDIEMME CONSULTING S.R.L. garantisce i seguenti diritti:

• ottenere la conferma che sia o meno in corso un trattamento di dati personali che la riguardano e in tal caso, ottenere l’accesso ai dati personali (Diritto di accesso art. 15);
• ottenere la rettifica dei dati personali inesatti che la riguardano senza ingiustificato ritardo (Diritto di Rettifica art. 16);
• ottenere la limitazione del trattamento in determinate ipotesi (Diritto alla limitazione del trattamento art. 18);
• ricevere in un formato strutturato, di uso comune e leggibile da dispositivo automatico i dati personali che ci ha fornito e poterli eventualmente trasmettere ad un altro Titolare del trattamento (Diritto alla portabilità dei dati art. 20);
• opporsi in qualsiasi momento, per motivi connessi alla sua situazione particolare, al trattamento dei dati personali che la riguardano (Diritto di opposizione art 21);
• ricevere senza ingiustificato ritardo comunicazione della violazione dei dati personali subita dal Titolare (Art. 34);
• revocare il consenso espresso in qualsiasi momento (Condizioni per il consenso art. 7).

10) Per ogni richiesta può rivolgersi al Titolare del Trattamento

Se ritiene che non abbiamo rispettato i suoi diritti in materia di protezione dei dati personali, può rivolgersi all’Autorità Garante per la protezione dei dati personali. In alternativa, se risiede in un altro Paese, può contattare il Garante per la protezione dei dati personali locale.

11) Titolare del Trattamento ed esercizio dei diritti

Il Titolare del Trattamento è VIDIEMME CONSULTING S.R.L.
Via Natale Battaglia, 8 20127 Milano (MI)
mail: privacy@vidiemme.it

I diritti di cui al punto 9) potranno essere esercitati inoltrando al Titolare lettera Raccomandata A/R e/o mail agli indirizzi sopra indicati.

L’elenco dei responsabili e degli autorizzati al trattamento è consultabile presso la sede del titolare sopra citata.

12) Aggiornamento della presente informativa

La presente Informativa può subire variazioni. Eventuali modifiche sostanziali le saranno comunicate via mail o attraverso il nostro sito internet.

Dear Interested,

Pursuant to art. 13 EU Regulation n. 2016/679 (hereinafter, “GDPR”), we inform you that the processing of your data will be carried out with methods and procedures aimed at ensuring that the processing of personal data is carried out in compliance with fundamental rights and freedoms, as well as the dignity of the concerned, with particular reference to confidentiality and security, personal identity and the right to protection of personal data.

We remind you that by “processing” we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction (art. 4 GDPR)

1) Data controller

The Data Controller is VIDIEMME CONSULTING S.R.L. – VAT number 04363010960 – Via Natale Battaglia, 8 20127 Milan (MI) – mail: privacy@vidiemme.it.
The list of data processors and authorized parties is available at the owner’s office.

2) Subject of processing, purpose, necessity of consent and nature of data provision

We wish to inform you that the object of the processing is the administrative and legal-economic management of the customers. To this end we inform you that we may process the following types of data:

• Personal and identification data (such as name / surname and/or company name, VAT number, addresses, contacts);
• Data necessary for invoicing and payment (such as IBAN code, credit card number);
• Contact details also, of the contact persons of the Company (telephone number, e-mail, etc.);
• Insurance, commercial, equity and/or financial data.

We may ask you for your personal data because these are necessary for us to fulfill obligations arising from the existing contract or from pre-contractual measures, or they are necessary to fulfill legal obligations or because processing is necessary. to fulfill the obligations and exercise the specific rights of the data controller or data subject in matters of labor law and social security and social protection.
In these cases, the refusal to provide us with some of these data could make it impossible to proceed with the conclusion or continuation of the contract.

Your personal data will be processed for the purposes indicated below.

• Legal/economic management of the contractual relationship: This purpose includes all the obligations deriving from the contract and from the law that arise for the data controller. For this purpose, you do not need to give us your consent.
• Fulfillment of legal obligation: This purpose includes all the obligations deriving from the law that arise for the data controller. For this purpose, you do not need to give us your consent.
• Owner’s legitimate interest: This purpose encompasses all – the obligations aimed at protecting the data controller even in the jurisdictional context – sending, also by e-mail and other means of communication, promotional material to promote services and offers and/or newsletters to customers already acquired (so-called SOFT SPAM). For this purpose, you do not need to give us your consent.
• User consent: This purpose includes the direct marketing activity aimed at prospects (potential customers). For this purpose, you must give us your consent.

3) Legal bases

• Legal / economic management of the contractual relationship. The processing of data is lawful pursuant to art. 6 GDPR letters b) and c), as well as, ex. art. 9 GDPR, pursuant to letter b) of the same article.
• Fulfillment of obligations established by law: pursuant to art. 6.1, lett. c) of the GDPR.
• Legitimate interest of the employer: pursuant to art. 6.1, lett. f) of the GDPR.
  SOFT SPAM: direct marketing for existing customers: pursuant to art. 130 Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 – pursuant to art. 6.1, lett. f) and recital n. 47 of the GDPR.
• Consent of the interested party: pursuant to art. 6.1, lett. a) of the GDPR.

4) Data origin

Your data is collected from the interested party by filling in paper forms, specific forms and/or company applications.

5) Processing method

The treatment is carried out by means of the operations indicated by the art. 4 GDPR:

• Collection of data from the interested party;
• Registration and processing on computer and paper support;
• Preservation in paper form in files allocated within the head office and accessible only to suitably appointed and / or electronic personnel through company applications and computerized records, stored on the owner’s proprietary server located in the closed, air-conditioned room, accessible only by personnel with explicit authorization and/or on cloud servers of third-party companies, suitably appointed as external Data Processors, pursuant to art. 28 Reg. EU 679/16.

The data will be processed using instruments that guarantee confidentiality, integrity and availability. The treatment is carried out on paper and by means of information and/or automated systems and will include all the operations or series of operations envisaged in art. 4 of the GDPR and necessary for the treatment in question, including the communication to the data processing parties.

6) Data Retention

We will treat your personal data for the time strictly necessary to fulfill the above purposes and in any case for no more than 10 years from the termination of the contract, unless the law requires it. Once the terms of storage described above have expired, the data will be destroyed or made anonymous.
The data processed for purposes of SOFT SPAM will be stored and processed for a period of 1 year from the last purchase of services and / or products offered by the owner.
Data processed for marketing purposes will be kept for 2 years.
At the end of the storage period the Personal Data will be deleted and/or made anonymous. Therefore, upon expiration of this term the right of access, cancellation, rectification and the right to the portability of the Data can no longer be exercised.

7) Access to processing

The data will be made accessible for the purposes listed above:

• Employees/collaborators in their capacity as persons authorized to process, subject to appropriate appointment;
• To third parties who carry out outsourcing activities on behalf of the owner (by way of example: Banking and/or financial institutions, companies that provide electronic payment services);
• Companies or Entities that, on behalf of the Owner, provide specific instrumental or support services: IT service providers, companies operating in the logistics sector;
• Subjects whose right to access your personal data is recognized by law or secondary or community legislation.

8) Data communication

In any case the data will not be communicated to unauthorized third parties or disseminated in any way. To this end, processing is carried out using appropriate security measures to prevent unauthorized access to data by third parties and to guarantee confidentiality.
Without the need for an express consent the Data Controller may communicate his data for the purposes listed to the following subjects:

• Supervisory bodies, judicial authorities, control bodies, public administration;
• Other subjects whose right to access your personal data is recognized by law or secondary or community legislation.

These subjects will treat the data in their capacity as independent data controllers.

9) Data storage and transfer

The management and storage of personal data will take place:

• in paper form inside the company headquarters in archives located inside locked rooms accessible only to authorized personnel;
• in electronic format on servers owned by the Owner, located in Italy, within its own headquarters, in a closed air-conditioned room accessible only with a badge from authorized personnel and/or third-party companies duly appointed and appointed as Data Processors.

Your data will not be transferred outside the European Union

10) Rights of the interested party 

We also want to inform you that according to the provisions of the GDPR, where applicable, you can exercise the following rights against the Data Controller:

• obtain confirmation that your personal data is being processed and in this case, to obtain access to personal data (Right of access Article 15);
• obtain the rectification of inaccurate personal data concerning him without unjustified delay (Right to Correct Article 16);
• obtain the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to cancel personal data without unjustified delay, if certain conditions exist (Right to be forgotten, article 17);
• obtain the limitation of the processing in certain hypotheses (Right to limitation of processing art. 18);
• receive in a structured format, commonly used and readable by automatic device, the personal data concerning him / her and has the right to transmit such data to another Data Controller, without hindrance by the data controller to whom he/she supplied them, in certain cases (Right to data portability Article 20);
• oppose at any time, for reasons related to his particular situation, to the processing of personal data concerning him (Opposition right art. 21);
• receive without unjustified delay communication of the violation of personal data suffered by the Data Controller (Article 34);
• revoke the express consent at any time (Conditions for consent art. 7).

We may update this Privacy Policy in the future. We will let you know the substantial changes to this Information by sending a communication to the email address you provided or by posting an announcement on our website.

11) Procedures for exercising the right

Registered letter with return receipt: VIDIEMME CONSULTING S.R.L.
Via Natale Battaglia, 8 20127 Milan (MI)
e-mail: privacy@vidiemme.it.