Information on the processing of personal data ex art. 13-14 EU Reg. 2016/679 for the website www.luximpianti.it
Data subjects: Users/visitors.
LUX Impianti S.r.l., in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Reg. 2016/679 hereinafter ‘GDPR’, hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to the processing of their personal data and that such processing will be based on the principles of fairness, lawfulness, transparency and protection of your confidentiality and your rights.
The Data Protection Officer (DPO) designated by the data controller pursuant to Article 37 of the GDPR is:
Data Protection Officer, who can be contacted at the following addresses: e-mail: privacy@luximpianti.it.
Your personal data will be processed in accordance with the legal provisions of the above-mentioned legislation and the confidentiality obligations therein.
Types of data processed:
The processing activities carried out are aimed at acquiring the following personal data:
Cookies: Technical Cookies and Profiling Cookies.
Behavioural data: Navigation logs.
Common data: Master Data, Contact Data, Pseudo-anonymized data.
Purpose and legal basis of processing:
In particular, your data will be used for the following purposes:
Legitimate Interest – Art. 6, c.1, let. f. GDPR:
Navigation on the website luximpianti.it (Data analysis to perform the evolution and maintenance of the website, Investigation of liability in case of potential computer crimes to the detriment of the website and/or the Data Subjects and Statistical analysis, anonymous, on the use of the website).
Nature of data provision: mandatory. Failure to provide data will make it impossible for the company to provide the web service provided.
Personal data storage period:
Data are retained for 7 days.
Execution of measures related to contractual or pre-contractual obligations (Art. 6, c.1, let. b. GDPR):
Site registration and access to restricted area;
Handling of user requests received via contact forms;
Receipt of curriculum
Attention: you are requested to send a CV ‘deprived of the sensitive data identified in the EU Regulation 2016/679 (General Data Protection Regulation – GDPR)’ pursuant to art. 9 GDPR. Please note that, should the candidate nevertheless provide them, they will do so through their own spontaneous action not required by the Tdt and, therefore, on the basis of free consent (art. 9, par. 2, lett a).
Nature of the provision of data: compulsory. Failure to provide the data will make it impossible for the company to respond to your requests.
Personal data retention period
Your personal data will be actively processed for the time necessary for the management of the existing relationship and/or the execution of the contract or the selection of personnel. In the case of registration, the data will be deleted as soon as a request is made and in any case for a period of not more than 10 years after termination of the relationship.
Execution of measures related to optional obligations (Art. 6, c.1, let. a. GDPR):
Sending of commercial information by e-mail.
Nature of provision of data: optional. With regard to the aforementioned purposes, and any refusal to process data does not jeopardise the continuation of the relationship or the appropriateness of the processing itself.
Personal data storage period:
Your personal data will be actively processed for the time necessary for the management of the aforementioned purpose, in compliance with the maximum terms indicated by the legislation, i.e. 24 months for processing and 12 months for profiling, unless you request deletion.
Integration with Social Media Legitimate Interest (Art. 6, c.1, let. f. GDPR):
When a user uses the two Social media administered by the Owner, Facebook (Instagram) and Linkedin, including through links placed on the website, they collect information such as the types of content viewed or interactions, actions performed as well as information about the devices used (IP addresses, operating system, browser type, language settings, cookie data).
Facebook:
Purpose of processing:
Page Insights are aggregated statistics created from certain events recorded by Facebook’s servers when users interact with Pages and content on them. As explained in Facebook’s Privacy Policy, Social Media also collects and uses information to provide statistical data collection services called Page Insights to Page administrators to enable them to understand how people interact with content on Pages.
More details at the following links:
https://www.facebook.com/privacy/explanation
https://www.facebook.com/legal/terms/information_about_page_insights_data
Details on the cookies used by Facebook can be found at the following link: https://www.facebook.com/policies/cookies/
The Data Controller as administrator of the Page is Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) are joint data controllers in accordance with Article 26 of the GDPR for the processing of such personal data recorded for events delivered via Insights of the Page (‘Insights Data’).
Linkedin:
Purpose of processing:
Will lead to the impossible for the company to follow up on your requests.
We use this online platform for professionals to find and be found in order to promote business opportunities, connect with others, find information and offer job opportunities. Registered users share their professional identities, interact with their network, exchange knowledge and professional insights, publish and view relevant content, learn and develop skills, and find business and career opportunities. Content and data on some Services can be viewed by non-members (‘Visitors’). We will process the data that you provide to the platform and that you authorise us to receive through it for the purposes stated above. In addition, we will use the statistics on our page to evaluate the company’s interactions with connected users.
More details at the following links:
https://it.linkedin.com/legal/privacy-policy#share
https://www.linkedin.com/legal/california-privacy-disclosure
Details on the cookies used by Linkedin can be found at the following link:
https://www.linkedin.com/legal/cookie-policy
The Data Controller as administrator of the Page and LinkedIn Ireland Unlimited Company (‘LinkedIn Ireland’) are joint data controllers in accordance with Article 26 of the GDPR for the processing of such registered personal data.
Nature of provision:
Mandatory – Failure to provide the requested data will result in the Owner being unable to provide services via the Page published on Facebook and Likedin.
Personal data retention period:
The data collected will be processed for the time strictly for the fulfilment of the purposes described above as specified in the Facebook and Linkedin policies described above.
Method of processing:
Your personal data may be processed in the following ways:
computer processing by electronic means.
All processing is carried out in compliance with the modalities set out in Articles 6, 32 of the GDPR and through the adoption of appropriate security measures.
Your data will be processed only by personnel expressly authorised by the Data Controller and in particular by the following categories of authorised personnel.
internal operators for the management of the web portal;
administration office.
Communication:
your data may be communicated to external parties for the proper management of the relationship and in particular to the following categories of Recipients including all duly appointed Data Processors
consultants and freelance professionals, also in associated form
web service providers for the management and maintenance of the platform.
Dissemination: Transfer of Data Outside the EU
Personal data are also processed outside the European Union, limited to data acquired through Social Networks, at: USA. The guarantee conditions for the transfer are: Model Clauses and Ad Hoc Contractual Clauses (Art. 46 GDPR).
Retention Period.
We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 of the GDPR, the retention period of your personal data, except for the special cases mentioned above is:
Time necessary to handle your requests.
You have the right to obtain from the data controller the erasure (right to be forgotten), restriction, updating, rectification, portability, objection to the processing of personal data concerning you, as well as in general you may exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
to EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject
The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, their communication in an intelligible form and the possibility to lodge a complaint with the Supervisory Authority.
The data subject has the right to obtain information on
the origin of the personal data;
the purposes and methods of the processing
the logic applied in the event of processing carried out with the aid of electronic instruments;
the identity of the data controller, data processors and the representative designated pursuant to Article 5(2)
of the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
The data subject also has the right to obtain
updating, rectification or, where interested therein, integration of the data
the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data was collected or subsequently processed
certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
the portability of the data.
Finally, the data subject has the right to object, in whole or in part
on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of collection
to the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communications.
These rights may be exercised by writing to the DPO at the email address privacy@luximpianti.it.
Without prejudice to any other administrative or jurisdictional recourse, the user also has the right to lodge a complaint with the Garante per la protezione dei Dati Personali (www.garanteprivacy.it) if he considers that there has been a violation of his rights regarding the protection of Personal Data.
Version 1_2 of 20.08.2024