PRIVACY POLICY STATEMENT

PRIVACY POLICY STATEMENT

In accordance with the obligations arising from the current legislation and in particular the General Data Protection Regulation (EU) 679/2016 (hereinafter GDPR) including subsequent amendments, this website respects and protects the privacy of visitors and users, putting in place every possible and proportionate effort in order not to breach the rights of the same.

This privacy policy only applies to the online activities of this website and is valid for visitors/users. It does not apply to information collected through channels other than the website. The purpose of this privacy policy is to provide maximum transparency with regard to the information collected and how it is used.

Legal basis of data processing
This website processes personal data in the legitimate interest of the Data controller – art. 6.1 (f) of GDPR and therefore on the basis of the Data subject's consent. By using or consulting this website, visitors and users explicitly approve of this privacy policy and agree to the processing of their personal data according to the methods and purposes described below, including the possible disclosure of data to third parties if necessary for the provision of a service.

Collected data

a) Navigation data

Like all websites, this site also makes use of log files in which information is stored that is collected in an automated manner from visitors and users. The information obtained may be the following:

  • internet protocol address (IP);
  • type of browser and the parameters of the device used to connect to the website;
  • date and time of visits;
  • website pages visited;
  • visitors referral and exit page;

b) “Common” personal data

This website collects data voluntarily provided by the visitor, such as personal information and contact details. The site also allows the visitors to send their CVs for e-mail address selection in order to send an automatic message to the website administrator for requesting information or processing requests.

The website also allow visitors to submit their CVs for personnel selection purposes. The relevant data will be processed by the Data controller exclusively for the search and selection of personnel.

In addition, common personal data (first name, last name, address, telephone number, date of birth, e-mail address...) are collected through this site in order to process the applications for participation in the events and promotional initiatives organized by the Data controller.

Data processing purposes
The navigation data is processed in an automated manner and collected in an exclusively aggregated format in order to check the performance of the site, to undertake anonymous statistical surveys on its use as well as for security reasons in order to prevent any damage attempt or any illegal conduct.

The personal data collected by the Data controller – or by third parties designated by the Data controller for personnel selection procedures – is processed and used to answer to the requests of Data subjects and, more precisely, to verify the conditions for recruitment and/or the start of a working relationship.

The data collection will only involve the so-called "common" personal data.

We inform you that “personal data” means “any information relating to an identified or identifiable natural person (‘Data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."

The applicant, therefore, will not be required to indicate data belonging to "special categories", as qualified by art. 9 GDPR, or "sensitive data" that is data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation . This data, if any, contained in the CV or in the additional documents sent to us (including, but not limited to, data revealing the state of health, such as protected categories) will be immediately deleted.

Those belonging to protected categories are therefore advised to send their CV only by regular mail to the address of the Data controller, together with the following signed declaration of consent: "In conformity with art. 9 GDPR , I authorize Lati Industria Termoplastici S.p.A. to process my sensitive data for the purposes specified in this privacy policy statement".

The personal data collected in relation to applications for participation in events and promotional initiatives organized by the Data controller is treated and used exclusively to meet the request of the Data subject.

The data collected in order to answer questions or to have access to documents will be used for the provision of the requested service or to contact the applicant in order to gain further insight into the related issues.

All collected data will be never used for user profiling purposes. The data provided for sending e-mails is intended voluntarily provided by the user at the time of the request for the delivery of the service and will be used exclusively for the provision of the service requested.

Data processing method
The processing is undertaken using IT and /or telematic means, the organizational methods and logic being strictly related to the indicated purposes.

Data processing location

The navigation data collected from the website is processed at the company hosting the website, in Italy.

The personal data provided voluntarily by the visitor is processed at the Data controller's head office. CV data is hosted on the Amazon Web Server infrastructure in the European Union.

Data disclosure
The data collected through the website will not be disclosed to third parties for any reason, unless it is requested by a judicial authority and only in the cases required by law.

In addition to the Data controller, certain categories of persons involved in the organization of the site may have access to personal data (administrative, commercial and marketing staff, legal advisors, system administrators) or external entities (such as technical service providers, hosting service providers, IT companies, communication agencies).

Data storage period
The log files will be stored for 2 weeks.

The data collected in order to assess the conditions for recruitment and/or the start of a working relationship will be stored by the Data controller for a maximum of two years after their collection unless a working or employment relationship is established.

The personal data collected in relation to applications for participation in events and promotional initiatives organized by the Data controller will be retained for one month after the conclusion of the event or initiative.

The data provided for the purposes of sending e-mails is considered provided voluntarily by the user at the time of the request for service and will only be used for the time necessary to deliver the service itself.

Cookie policy
Like most websites, this site also uses cookies, which are small text files which are used to store information on the user’s preferences, improve the user experience, simplify site browsing using automated procedures (i.e. login, language preferences) and evaluate website usage.

The session cookies are essential in order to distinguish between the connected users and are useful in order to prevent the risk that the required function is provided to the wrong user, as well as for security reasons to prevent the risk of cyber-attacks to the site. The session cookies do not capture any personal information and expire on exiting the browser. Therefore no consent is required.

The functionality cookies used are strictly necessary for the use of the site to remember the visitor’s preferences (such as language) and no consent is necessary.

By using the site the visitor specifically accepts the use of cookies.

Cookie disabling
The cookies are linked to the browser used and can be directly disabled via the browser itself, thereby refusing /revoking the use of cookies. It must be pointed out that cookie disabling may impede the correct use of certain functions of the website.
The instructions for cookie disabling are to be found on the following web pages:

Mozilla Firefox – Microsoft Internet Explorer – Microsoft Edge – Google Chrome – Opera – Apple Safari

Third-party cookies
This website also acts as an intermediary for third-party cookies in order to provide visitors with additional services and functions, and to improve the use of the site itself, such as the link buttons to social media. This site does not have any control over third-party cookies. Therefore the information on the use of such cookies and their purpose, and how to disable them is directly provided by the third-parties on the pages indicated below.

This website uses cookies of the following third-parties in particular:

  • Google Analytics: this is a Google analysis tool that, by using cookies (performance cookies), collects anonymous surfing details (IP cut to the last octet) and solely aggregated for the purposes of evaluating and tracking website usage, to compile statistics on website activity, and other information, including the number of visitors and pages visited. Google may also transfer this information to third parties, should it be legally imposed or in cases in which these third-parties process the data on behalf of Google. Google will not associate the IP address to any other data owned by Google. The data transmitted to Google is stored in the Google servers in the United States.
    On the basis of a specific agreement with Google, which is designated as the Data processor, Google is obliged to process the data in accordance with the requests of the Data controller, which is made via the software settings. On the basis of these settings the advertising and data sharing options have been disabled.

Further information on the Google Analytics cookies can be found on Google Analytics Cookie Usage on Websites.

The user can choose to selectively disable data collection by Google Analytics, by installing  the specific opt-out component provided by Google on their browser.

For further information on data usage and processing by Google we recommend you to carefully read the information provided on the specific Google page, and on the page that describes the methods applied by Google when using partner sites or apps.

Social network plugins
This website also incorporates social network plugins and/or buttons, in order to make it easy to share content on your favourite social networks. These plugins are programmed so that it is not necessary to set any cookies on accessing the page; in order to safeguard the user’s privacy. The cookies may be set, should this be envisaged by the social networks, only when the user makes actual and voluntary use of the plugins. It must be pointed out that if the user is browsing the site after having connected to the social network this means that the user already consented to the use of the cookies used by the site at the time of joining the social network.

The collection and use of the information obtained by means of these plugins is regulated by the respective social network policies, to which you should refer .

Transfer of personal data to non-EU countries
This website may share some of the data collected with services located outside the European Union, and in particular with Google, Facebook and Microsoft (LinkedIn) through program plugins, as well as with Google Analytics. The transfer of data is authorized in compliance with the specific decisions of the European Commission and the Data Protection Supervisor, in particular the 2016/1250 decision (Privacy Shield – see also the  web page of the Italian Data Protection Supervisor), according to which no further consent is necessary. The aforementioned companies adhere to the Privacy Shield.

Safety measures
The data controller and the processor establish appropriate technical and organizational measures to guarantee a level of security adequate to the risk, taking into account the state of the art and the costs of implementation, as well as the nature, object, context and purposes of the processing, as well as the risk of variability and gravity for the rights and freedoms of individuals.

Rights of the user
In relation to his or her personal data, the user may exercise the rights guaranteed under art. 15 GDPR on the processing of personal data.

Article 15
Right of access by the Data subject:

  • The Data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
  1. the purposes of the processing;
  2. the categories of personal data concerned;
  3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
  4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  5. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the Data subject or to object to such processing;
  6. the right to lodge a complaint with a supervisory authority;
  7. where the personal data are not collected from the Data subject, any available information as to their source;
  8. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data subject
  • Where personal data are transferred to a third country or to an international organization, the Data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
  • The Data controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the Data subject, the controller may charge a reasonable fee based on administrative costs. Where the Data subject makes the request by electronic means, and unless otherwise requested by the Data subject, the information shall be provided in a commonly used electronic form.
  • The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

Data controller and Data protection officer
The Data controller, in accordance with the terms of the current law, is Lati Industria Termoplastici S.p.A., Via Baracca, 7 – 21040 Vedano Olona (VA) – Italy.

The Data protection officer can be contacted via privacy@it.lati.com.

Data processor
Google is designated as Data processor, processing data on the behalf of the Data controller (Google Analytics).

Intervieweb S.r.l. is designated as Data processor, processing data on the behalf of the Data controller (Curricula vitae).

Updates
This privacy policy statement has been last updated on 9th June 2020.