Security and processing of personal data (privacy notice in accordance to Article 13 of EU Regulation 2016/679 of the European Parliament and Council concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter "GDPR").
Thank you for visiting our Group websites. The websites are owned by IRCA S.p.A. (hereinafter the "Company", whose references are indicated in the "Contacts" section of the website www.irca.eu) and are managed by the Company itself. This page describes how to manage the website with reference to the processing of personal data of users who consult it and complete the contact form or access the website section "Work with us". This privacy notice is provided only for these websites.
IRCA S.p.A. with registered office in Gallarate (VA), Via Degli Orsini 5, 21013 - VAT and Tax Code nr. 09684290969 (hereinafter the "Data Controller"), as data controller, informs you in accordance to Article 13 of EU Regulation 2016/679 (hereinafter "GDPR") that your data will be processed in the manner and for the purposes specified below.
1. Navigation data
Computer systems and programs, used for website functioning, collect some personal data whose transmission is implicit in the use of Internet communication protocols (i.e. IP addresses or domain names of computers used by users who connect to the website, URI - Uniform Resource Identifier - addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, numerical code about the status of the response made by the server - good order, error, etc. - and other parameters relating to the operating system and the user's IT environment). Although these information are not collected to be associated with identified individuals, by their nature they could, through processing and association with data held by third parties, allow to identify users.
These data are used for the sole purpose of obtaining statistical information not associated with any user identification data on the use of the website and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Group websites.
2. Data voluntarily provided by the user
It is not required any transfer of personal data by the user to consult the websites.
However, any contact with IRCA S.p.A., through the form in the Contacts section, or the optional, explicit and spontaneous sending of messages, e-mail or traditional mail to the addresses of IRCA S.p.A. indicated on the site, entail the subsequent acquisition of the sender's physical and e-mail address, or of his telephone number, necessary to respond to requests, as well as any other personal data included in the relative communications.
These data will be used for the sole purpose of following up the user's request and may be disclosed to third parties only if this is necessary for this purpose.
Your consent is not required to process data for these purposes, as the processing is necessary to execute a contract of which you are a part or to execute pre-contractual measures adopted upon your request (Article 6, paragraph 1, letter b) of GDPR), as well as, where applicable, to fulfill a legal obligation (Article 6, paragraph 1, letter a) of GDPR).
Data will be processed by personnel appointed by IRCA SpA. with procedures, technical and IT tools suitable to protect the confidentiality and security of your data and consists in their collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation, destruction, including the combination of two or more of the aforementioned activities.
These data are kept for the time strictly necessary to provide the requested service to the user and are eliminated immediately thereafter, without prejudice to further legal conservation obligations. Your information will not be spread.
3. Special categories of Personal Data
In the website section "Work with us", you will be allowed to upload documents to the Website to be received by IRCA as your CV. These documents may contain Personal Data - in particular, they may disclose (inadvertently or not) special categories of Personal Data - i.e. "[...] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation", as defined by Article 9 of the GDPR.
IRCA asks that you do not disclose any Personal Data belonging to said categories in these documents, or in any other section of the Website, unless you consider this to be strictly necessary. If you do, then this Personal Data may be processed by irca based on your explicit consent - Article 9(1)(a) GDPR.
CV and Personal Data will be stored by IRCA for a period of 12 month from the time they are entered onto the Website or from the most recent modification you make. After this period, your Personal Data will be destroyed or anonymized for statistical purposes.
Additionally, whenever it becomes clear that an offer of employment will not be made to a candidate, or that an offer of employment made to a candidate is not accepted, your Personal Data will be destroyed.
4. Rights of the interested party
As an interested party, you have the rights set forth in Article 7 of Privacy Code and Article 15 of GDPR and precisely the rights of:
You have the right to revoke any consent given regarding the processing of your sensitive data at any time and to lodge a complaint with the Supervisory Authority (Guarantor).
If applicable, You also have the rights referred to in Articles 16-22 GDPR (Right of rectification, right to be forgotten, right to limitation of processing, right to data portability, right of opposition, right not to be subjected to a decision based solely on automated processing, including profiling), as well the right to lodge a complaint with the Supervisory Authority (Guarantor).
5. How to exercise rights
You may exercise the rights guaranteed by the GDPR at any time by contacting the Data Controller in the following ways:
6. Data Controller, Data Processors
The Data Controller is IRCA S.p.A.
The updated list of Data Processors is kept at the registered office of the Data Controller.