Privacy Guidelines
Welcome to the website of AlliumTech S.r.l.
The following is some important general information about our personal data processing policies.
Identity of the Controller
The Data Controller of any processing of personal data necessary to pursue the purposes set out below is the company AlliumTech S.r.l. with registered office in Via Orvieto, 19 - 10149 Turin (TO), VAT IT10774760010, REA TO1161013, in the person of the managing director and legal representative pro tempore of the Company. The Data Controller guarantees the security, confidentiality and protection of the personal data they hold, at any stage of the process of processing them. Personal data collected is used in compliance with Legislative Decree 101/2018 of August 10, 2018 ("Disposizioni per l'adeguamento della normativa nazionale in materia di protezione dei dati personali al GDPR 679/2016") and GDPR 679/2016 of April 27, 2016 ("European General Data Protection Regulation").
Dati di contatto del Responsabile della Protezione dei Dati
Il Titolare del trattamento ha designato il Responsabile della Protezione dei Dati (RPD o DPO - Data Protection Officer), domiciliato per la carica presso la sede del Titolare del trattamento e raggiungibile all’indirizzo e-mail dpo@alliumtech.it
Data recipients
The personal data processed by the Controller are not disseminated, i.e., they are not made known to unspecified parties, in any possible form, including making them available or mere consultation. More specifically, the Data Controller does not disclose any personally identifiable data or information to third parties except, if necessary and to the extent strictly necessary, to those:
- for purposes of processing purchases, service delivery or other requests related to the transaction or contractual relationship with the Controller, need to provide goods and/or perform services or services, including the management of the website;
- per finalità di evasione degli acquisti, erogazione servizi o di altre richieste relative alla transazione o al rapporto contrattuale con il Titolare, debbano fornire beni e/o eseguire prestazioni o servizi, ivi compresa la gestione del sito internet;
- operate under the authority of the Controller, based on the roles and job duties performed, within the limits of their competence and in accordance with the instructions given to them by the Controller;
- are designated as Data Processors with reference to Art. 28 "Responsabile del trattamento" of GDPR 679/2016.
Data Transfer
The Data Controller does not transfer personal data to third countries or international organizations. However, it reserves the right to use cloud services; in which case, service providers will be selected from among those who provide adequate guarantees, as stipulated in Art. 46 "Trasferimento soggetto a garanzie adeguate" of GDPR 679/2016.
Rights of the data subject
With reference to Articles 15 "Diritto di accesso dell'interessato", 16 "Diritto di rettifica", 17 "Diritto alla cancellazione ('diritto all'oblio'), 18 "Diritto di limitazione di trattamento", 20 "Diritto alla portabilità dei dati", 21 "Diritto di opposizione" e 22 "Processo decisionale automatizzato relativo alle persone fisiche, compresa la profilazione" of GDPR 679/2016, data subjects have the opportunity to exercise their rights by writing to the Data Controller at the registered office of AlliumTech S. r.l. or also by email to the address of the Data Protection Officer (dpo@alliumtech.it), specifying the subject of the request, the right to be exercised and attaching a photocopy of an identity document attesting to the legitimacy of the request.
Proposition of complaint
The data subject has the right to file a complaint with the supervisory authority of the state of residence.
Automated decision-making processes
The Controller does not carry out processing that consists of automated decision-making.
Specific Informations by type of data subject
Before continuing to browse our website, it is advisable to read the personal data processing notices concerning the data subjects of the processing.
Cookie policy for browsing the site
This information is provided to individuals who access and consult the website of AlliumTech S.r.l., pursuant to Art. 13 "Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato"of GDPR 679/2016 as amended and supplemented by Italian and European legislation on Personal Data Protection.
Purpose of the processing
The computer systems and software procedures used to operate the Site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names from which visitors to the Site connect, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters related to the user's operating system and computer environment. This data is used for the sole purpose of
- obtain statistical and totally anonymous information about the use of the site;
- verify its proper functioning.
Captured data are deleted as below. It should be noted in any case that in full compliance with the regulations, the data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.
Legal basis for the processing
The use of technical cookies is a processing carried out in the legitimate interest of the Data Controller; the use of analytical cookies is carried out only against the consent of the data subject.
Revocation of consent
With reference to Articles 6 "Liceità del trattamento" and 7 "Condizioni per il consenso" of GDPR 679/2016, the data subject can withdraw consent at any time. Withdrawing consent will block the use of analytical cookies without affecting browsing. In any case, the person concerned may leave the site at any time.
Refusal to provide the data
The data subject may refuse to give the Data Controller his or her browsing data. To do so, you must disable cookies by following the instructions provided by your browser. Disabling cookies can worsen navigation and enjoyment of site features as further detailed below.
Types of Cookies
Cookies are information placed on a user's browser when they visit a website or use a social network with their pc, smartphone or tablet. Each cookie contains various data such as, for example, the name of the server it came from, a numeric identifier, etc. Cookies may remain in the system for the duration of a session (i.e., until you close the browser you are using to browse the web) or for long periods and may contain a unique identifier code.
Technical cookies
Some cookies are used to perform computer authentication, session tracking, and storage of specific information about users accessing a web page. These so-called technical cookies are often useful because they can make web browsing and enjoyment faster and quicker, as they intervene, for example, to facilitate certain procedures when shopping online, when authenticating to restricted areas, or when a website automatically recognizes the language you usually use. A particular type of cookie, called analytics, is then used by Web site operators to collect information, in aggregate form, about the number of users and how they visit the site itself, and then to develop general statistics about the service and its use.
Profile cookies
Other cookies, on the other hand, may be used to monitor and profile users during browsing, study their movements and web browsing or consumption habits (what they buy, what they read, etc.), including for the purpose of sending targeted and personalized service advertisements (so-called Behavioural Advertising). We are talking in this case about profiling cookies. It may happen that a web page contains cookies from other sites and contained in various elements hosted on the page itself, such as banner ads, images, videos, etc. These are so-called third-party cookies, which are usually used for profiling purposes. Considering the particular invasiveness that profiling cookies (especially third-party ones) can have within the private sphere of users, European and Italian regulations provide that the user must be adequately informed about their use and express his or her valid consent to the placement of cookies on his or her terminal.
Used cookies
The Site uses cookies to make site services easier and more efficient for the user who visits and consults its pages. Users accessing the Site will receive minimal amounts of information on their device in use, whether a computer or other mobile device, in the form of small text files, so-called "cookies", stored in directories used by the browser in use. Cookies used by the Site allow:
- storing browsing preferences;
- avoid re-entering the same information multiple times;
- analyze the use of services and content provided by the site to optimize the browsing experience.
The Site uses Google Analytics. Where applicable, information generated by the cookie about site usage is transmitted to Google Inc. and deposited on its servers, for the purpose of producing reports on the site's activities, intended for the Controller or parties appointed by the Controller. You can refuse the provision of browsing data by selecting the appropriate setting on your browser. In this regard, please refer to the Informations published on Google's website and the browser add-on for deactivating Google Analytics. Please note that refusal to provide data may prevent you from using the full functionality of the site.
On the contrary, by accepting the use of cookies as described above and continuing to browse, you freely and unconditionally consent to the processing of your personal data by the Data Controller and Google in the manner and for the purposes stated above.
If the visitor clicks on the icons of Facebook, Twitter, Youtube, Instagram, etc. that may be present on the Site, he or she is directed to the respective sites and receives cookies from them that are not under the control of the Controller.
Finally, if the user arrives at the Site after clicking on a banner posted on external pages, he or she should know that the ad network operator has assigned cookies necessary to detect the throughput and the amount of any purchases made. Responsibility for the management of these cookies lies with the advertising network operator whose information can usually be found on its institutional website.
Information for those who fill out contact forms on the site
This information is provided to individuals who fill out the Contact form on this website, pursuant to Art. 13 "Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato" of GDPR 679/2016 as amended and supplemented by Italian and European legislation on Personal Data Protection.
Data Source
The data are conferred spontaneously by the data subject through the completion of the form(s) (form) proposed by the website of the Data Controller.
Purposes of the processing
Personal data of individuals who fill out the Contact form are processed to fulfill their requests.
Legal basis for processing
Personal data of individuals who fill out the contact form are lawfully processed for the performance of a contract to which the data subject is a party or execution of pre-contractual measures taken at the request of the same (the submitted request).
Data Storage
The Data Controller stores and processes personal data for as long as necessary to fulfill the stated purposes. More specifically, the data entered in the form are deleted two years after they are entered.
Withdrawal of consent
With reference to Articles 6 "Lawfulness of Processing" and 7 "Conditions for Consent" of GDPR 679/2016, the data subject can withdraw consent at any time. However, it is pointed out that this processing ends with the response to the data subject.
Refusal to provide the data
The data subject may refuse to provide the Data Controller with his or her personal data since the provision of such data is optional. However, completion of the indicated fields is essential in order to process the requests received.
Information for email recipients and senders.
The content of e-mails sent by AlliumTech S.r.l. is to be considered confidential.
Therefore, the information in them or contained in any attachments is confidential to the recipients only. Persons or entities other than the recipients themselves, including pursuant to Art. 616 Codice Penale (Criminal Code), are not allowed to read, copy, modify, spread the message to third parties.
Anyone who receives a communication in error should not use it or bring it to anyone's attention, but should delete it from his or her box and notify the sender.
Authenticity of the sender and contents are not guaranteed, except for digitally signed documents. In addition, according to Article 13 “Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato” of GDPR 679/2016 and subsequent amendments and additions to the national and European legislation on the protection of personal data, we inform you that the AlliumTech archives include e-mail addresses related to individuals, companies, entities with whom previous communications have taken place by e-mail, or by other means of communication, or who have spontaneously provided their e-mail address during direct contacts.
These addresses are used by AlliumTech S.r.l. in accordance with the willingness and availability of the interested parties to receive communications via e-mail from our company. Please also note that all mailboxes in the "@alliumtech.it" domain are corporate mailboxes and, as such, are used for business-related communications. Therefore, due to needs related to operational activities, any message, whether outgoing or incoming, could be read by parties other than the sender and/or recipient.
In the event that data subjects wish to have their e-mail address removed from our records, or to exercise their rights under arts. 7 "Condizioni per il consenso", 15 "Diritto di accesso dell'interessato", 16 "Diritto di rettifica", 17 "Diritto alla cancellazione ('diritto all'oblio'), 18 "Diritto di limitazione di trattamento", 20 "Diritto alla portabilità dei dati", 21 "Diritto di opposizione", 22 "Processo decisionale automatizzato relativo alle persone fisiche, compresa la profilazione” of GDPR 679/2016, they can write to the Data Controller AlliumTech S.r.l., the data controller with headquarters at via Borgaro, 27 - 10149 Turin (TO) or to the email address dpo@alliumtech.it..
Information to those who submit their Curriculum Vitae
This information is provided to those who spontaneously, or as a result of a job search, send their resume to AlliumTech S.r.l., pursuant to Art. 13 “Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato” of GDPR 679/2016 as amended and supplemented by Italian and European legislation on Personal Data Protection.
Data Source
The personal data processed are those provided in connection with:
- resume submission;
- assessment interviews;
- direct contacts at exhibitions, fairs, expositions, etc;
- reporting by third parties appointed by the Controller.
Purpose of the processing
The personal data of those who spontaneously, or as a result of a personnel search or other referral, send their resumes are processed for purposes related to evaluation and selection, or to propose job offers consistent with the professional profile of the person concerned.
Legal basis of the processing
The legal basis is the response to a pre-contractual request from the data subject.
Data Storage
The Data Controller stores and processes personal data for as long as necessary to fulfill the stated purposes. Specifically, in the case of non-recruitment all data mentioned so far will be kept for a period not exceeding thirty months after their receipt. In the case of employment, data will be kept for the duration of the employment relationship and in accordance with relevant regulations.
Withdrawal of consent
With reference to Articles 6 "Liceità del trattamento" and 7 "Condizioni per il consenso" of GDPR 679/2016, the data subject may revoke any consent given at any time. However, the processing that is the subject of this notice is lawful and permitted, even in the absence of consent, insofar as it is aimed at the execution of pre-contractual measures (the evaluation of the application and the selection of candidates) taken at the implicit request of the data subject.
Refusal to provide the data
The data subject may refuse to give the Data Controller his or her personal data. The provision of data is indeed optional, but a refusal to provide it in whole or in part may result in the inability of the Controller to evaluate and select the application.
Information to Customer Contact Persons
This information is provided to individuals acting on behalf of legal entities Customers of AlliumTech S.r.l., pursuant to Art. 13 "Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato" of GDPR 679/2016 as amended and supplemented by Italian and European legislation on Personal Data Protection.
Data Source
The personal data processed are provided by the data subject in connection with:
- visits to the Controller's premises;
- interactions through the website;
- inquiries, including by e-mail;
- previous transactions.
Purpose of the processing
Personal data of data subjects are collected, recorded, stored and retained and used for the following purposes:
- organizational management and bureaucratic fulfillment of required services;
- execution of the agreed services;
- manifestation of opinions and advice;
- management of negotiations and pre-contractual relations;
- forwarding communications of various kinds concerning the products and services offered by the Data Controller.
Legal Basis
The legal basis is the performance of a contract to which the data subject is a party or the execution of pre-contractual measures taken at the request of the data subject. Some processing operations are carried out for the legitimate interest of the Controller (promotion of its business activities and pursuit of statutory purposes).
Data Storage
The Data Controller stores and processes personal data for as long as necessary to fulfill the stated purposes. Thereafter, personal data will be retained, and not further processed, for the time stipulated by current civil and tax laws: normally ten years, barring pending litigation or legal action.
Withdrawal of consent
With reference to Articles 6 "Liceità del trattamento" and 7 "Condizioni per il consenso" of GDPR 679/2016, the data subject may revoke any consent given at any time. However, the processing that is the subject of this notice is lawful and permitted, even in the absence of consent, insofar as it is necessary for the performance of a contract to which the data subject is a party (the supply relationship) or the fulfillment of his or her requests.
Refusal to provide the data
The provision of identifying and contact data of interested parties is not mandatory. However, the provision of personal data should be considered appropriate for the proper and efficient management of the contractual relationship. Therefore, failure to provide them may compromise all or part of the processing of other requests and the quality and efficiency of the transaction itself.
Information to Service Providers
This information is provided to individuals acting on behalf of suppliers of the company AlliumTech S.r.l., pursuant to Art. 13 "Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato" of GDPR 679/2016 as amended and supplemented by Italian and European legislation on Personal Data Protection.
Data Source
The personal data processed are those provided by the data subject in connection with:
- visits or phone calls;
- direct contacts for participation in exhibitions, expositions, etc;
- bidding proposition;
- post-order transmissions and transactions.
Purpose of processing
Personal data are processed for the performance of the necessary pre-contractual activities, the drafting and signing of the contract governing the supply and the proper performance of all activities under the contract. Specifically, they are processed for the following purposes:
- forward communications of various kinds and by various means of communication (telephone, cell phone, text message, email, fax, paper mail);
- make requests or process requests and proposals received;
- exchange information aimed at the execution of the contractual relationship, including pre- and post-contractual activities.
Legal basis of the processing
The data collected to achieve the stated purposes are lawfully processed for the performance of a contract to which the data subject is a party or to the performance of related pre-contractual measures.
Data Storage
The Data Controller stores and processes personal data for as long as necessary to fulfill the stated purposes. Thereafter, personal data will be retained, and not further processed, for the time stipulated by current civil and tax laws: normally ten years, barring pending litigation or legal action.
Withdrawal of consent
With reference to Articles 6 "Liceità del trattamento" and 7 "Condizioni per il consenso" of GDPR 679/2016, the data subject may revoke any consent given at any time. It should be noted, however, that the processing operations covered by this notice are lawful and permitted even in the absence of consent, as they are intended for the proper performance of a contract to which the Data Subject is a party.
Refusal to provide the data
The data subject may refuse to give the Data Controller his or her personal data. However, the provision of personal data is necessary for the proper and efficient management of the contractual relationship. Therefore, any refusal to provide it may jeopardize all or part of the contractual relationship itself.
Information to visitors
This information is provided to Visitors who wish to access the premises of the company AlliumTech S.r.l., pursuant to Art. 13 "Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato" of GDPR 679/2016 as amended and supplemented by Italian and European legislation on Personal Data Protection.
Data Source
The personal data processed are given by the Data Subject to the staff or collaborators authorized by the Data Controller.
Purpose of the processing
The above personal information is collected, recorded, stored, and maintained for the purpose of security of staff, guests, and company assets in general.
Legal basis of the processing
The data collected for the achievement of the stated purposes are processed in the legitimate interest of the Owner, who intends to ensure maximum security for employees, collaborators, guests and company assets in general.
Data Storage
The Data Controller retains and processes personal data for one year after they are provided.
Withdrawal of consent
With reference to Articles 6 "Liceità del trattamento" and 7 "Condizioni per il consenso" of GDPR 679/2016, the data subject may revoke any consent given at any time. It should be noted, however, that unless otherwise specified, the processing that is the subject of this notice is lawful and permitted even in the absence of consent, as it finds its legal basis in the legitimate interest of the Owner.
Refusal to provide the data
The provision of personal data is optional. However, it should be noted that any refusal to provide the data would make it impossible to proceed with the authorization to access AlliumTech S.r.l. offices.
Information on video surveillance
This information is provided to those who wish or need access to the premises of the company AlliumTech S.r.l., pursuant to Art. 13 “Informazioni da fornire qualora i dati personali siano raccolti presso l'interessato” of GDPR 679/2016 as amended and supplemented by Italian and European legislation on Personal Data Protection.
Data Source
The personal data processed (the images) are provided by the data subjects when crossing the access gates to the premises under video surveillance by AlliumTech S.r.l.
Purpose of the processing
The above personal data are collected, recorded, stored, kept for the time strictly necessary and used for the following purposes:
- ensure greater safety of those who frequent corporate spaces;
- implement control for the purpose of preventing and deterring damage, vandalism, unlawful conduct and possible forms of aggression, verbal or physical, as well as incidents of unauthorized access to company premises, processing tools and the data contained therein;
- protect the company's tangible and intangible assets.
Legal basis of the processing
The data collected for the achievement of the stated purposes are lawfully processed for the pursuit of the legitimate interest of the data controller, with particular reference to the security of the company's tangible and intangible assets with full respect for the fundamental rights and freedoms of the data subjects.
Data Storage
The Data Controller retains and processes personal data for a period of time not exceeding 72 hours after it is provided. Data are permanently erased by overwriting.
Withdrawal of consent
With reference to Articles 6 "Liceità del trattamento" and 7 "Condizioni per il consenso" of GDPR 679/2016, the data subject may revoke any consent given at any time. It should be noted, however, that unless otherwise specified, the processing that is the subject of this notice is lawful and permitted even in the absence of consent, as it finds its legal basis in the legitimate interest of the Owner.
Refusal to provide the data
The provision of personal data is optional. However, it should be noted that any refusal to provide the data would make it impossible to proceed with the authorization to access the premises under video surveillance by AlliumTech S.r.l.