PRIVACY POLICY
This page describes how the website manages the processing of personal data from users who visit it. This information is also provided pursuant to art. 13 of EU Regulation 2016/679 (General Data Protection Regulation, or GDPR) for those who interact with the web services of Holding Terra Moretti S.r.l., accessible electronically from the address https://www.terramoretti.it/en . This disclosure applies only to this website and not to other websites that may be accessed by users via links, for which the Data Controller is not responsible.
1. DATA CONTROLLER
Pursuant to Article 4, paragraph 1, no. 7 of the GDPR, the Data Controller is Holding Terra Moretti S.r.l., VAT registration number: 02151230980, represented by the legal representative pro tempore, with a registered office at Via Vittorio Emanuele, 21 – 25030 Erbusco (BS).
2. DATA PROTECTION OFFICER
In compliance with Article 37 of GDPR 2016/679, the company Holding Terra Moretti S.r.l. has appointed a Data Protection Officer (DPO). The DPO is the company’s primary point of contact for all matters relating to privacy law, including the protection of personal data and the exercise of data subjects’ rights. You can contact the DPO at the following address: Email: dpo@terramoretti.it
3. Data controllers:
The processing of your personal data may involve external parties formally designated as data processors pursuant to Article 28 of EU Reg. 2016/679, including web agencies that manage the website and data centres that host it. The full list of designated data processors can be requested from the Data Protection Officer.
4. PLACE OF DATA PROCESSING
Processing operations connected to the website’s web services take place at the company’s registered office, as well as at the managers’ locations pursuant to Article 28 of the GDPR. In any case, data processing will only be carried out by qualified technical personnel in charge of said processing. No data deriving from the web services is communicated or disseminated to unauthorised third parties.
5. TYPES OF DATA PROCESSED
- Navigation data
The computer systems and software procedures used to operate this website acquire some personal data during their normal operation. This data is transmitted implicitly when using Internet communication protocols. This information is not collected with the intention of associating it with identified interested parties; however, due to the nature of this data, it could potentially allow users to be identified when processed and associated with data held by third parties. This category of data includes IP addresses or domain names of computers used to connect to the site; URI (Uniform Resource Identifier) addresses of requested resources; time of request; method used to submit request to server; size of file obtained in response; numerical code indicating response status given by server (e.g. successful, error); and other parameters relating to operating system and IT environment of user. This data is used solely to obtain anonymous statistical information on how the site is used and to check that it is operating correctly, and is deleted immediately after processing. This data could be used to ascertain responsibility in the event of hypothetical cybercrime against the site. Apart from this eventuality, the data on web contacts does not persist for more than thirty days.
- Managing Cookies
Please refer to the site’s Cookie Policy.
6. PURPOSE, LEGAL BASIS AND NATURE OF CONFERMENT
The website in question does not have data acquisition forms, so no personal data is acquired from users browsing the site. The processing operations connected with the management of the website relate to the following purposes:
(a) research and statistical analysis on anonymous aggregate data, aimed at measuring how the site is functioning, measuring traffic, and assessing usability and interest, so as to improve its performance and functionality. Consent is not necessary, as no personal data is processed;
(b) purposes relating to compliance with laws and regulations. The legal basis for this is Article 6(1)(c) of the GDPR (2016/679), i.e. the processing is necessary for compliance with a legal obligation to which the data controller is subject. Consent is not required.
(c) purposes necessary for establishing, exercising or defending a right in judicial proceedings, or whenever judicial authorities exercise their judicial functions. The legal basis is Article 6(1)(f) of the GDPR (2016/679), i.e. the processing is necessary for the pursuit of the legitimate interests of the data controller. Consent is not required.
7. TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS
The Data Controller undertakes to restrict the areas of circulation and processing of personal data (e.g. storage, archiving, conservation of data on its servers) to countries within the European Union, with an express prohibition to transfer them to non-EU countries that do not guarantee (or in the absence of) an adequate level of protection, or, in the absence of the protection tools provided by EU Regulation 2016/679 - CHAPTER V (adequacy decision, Standard Contractual Clauses, EU-US Data Privacy Framework or explicit consent from the data subject).
8. DATA RETENTION
The data controller will process the personal data of the data subject for the time strictly necessary to achieve the purposes set out in this privacy policy.
Notwithstanding the foregoing, the Controller shall process the personal data of the person concerned for the period of time allowed by the legislation in force to protect its interests (Art. 2947(1)(3) Civil Code).
9. CURRICULUM MANAGEMENT
This privacy policy, drawn up in accordance with Article 13 of GDPR 2016/679, may also be used by Holding Terra Moretti S.r.l. for any personnel advertisements published on sites and/or portals not directly managed by the same.
The Company will process curricula, received by e-mail or through third party companies operating in the personnel selection sector (publications on portals, etc.), so as to evaluate potential applications within the Company or that may arise in the near future.
The processing is conducted electronically with the exclusion of curricula received by ordinary mail. Curricula that are deemed to be in line with the Company’s requirements will be kept at the Company’s premises for a maximum period of 24 months and will be processed in full compliance with the security measures set out in Article 32 of GDPR 2016/679.
Curricula vitae that are deemed irrelevant, or that have been retained for 24 months, will be destroyed. Curricula will be stored in the human resources department of the relevant company and may be shared with other group companies, which can be viewed by accessing the holding company’s website.
Staff duly authorised to process them may also access the curricula (art. 29 and 32, paragraph 4, of the GDPR (2016/679), and article 2-quaterdecies of Legislative Decree 196/2003) of the operational unit in which the candidate will perform their duties.
When compiling your CV, please adhere to the following guidelines:
- Fill in your CV in European format;
- submit the CV in PDF format;
- avoid including special categories of personal data, as defined in Article 9 of the GDPR (2016/679), in your CV. This includes data relating to health status, religious, philosophical or political beliefs, which are not relevant in relation to the job offer;
The company reserves the right to eliminate CVs that do not meet these requirements.
The purpose of processing curricula is to carry out activities strictly related to the evaluation, recruitment or selection of personnel for collaboration, fixed-term or open-ended recruitment, internships or enabling the chosen candidate to prepare their degree dissertation at our premises.
In accordance with Article 111-b of Legislative Decree 196/2003, the information referred to in Article 13 of the GDPR is provided at the time of the first useful contact following the transmission of the CV, in cases where it is sent spontaneously by interested parties for the purpose of establishing an employment relationship.
In compliance with the specified purposes, pursuant to Article 6(1)(b) of the GDPR, consent from the data subject for processing personal data in CVs is not required.
10. AUTOMATED PROCESSING AND PROFILING
The Dara Controller does not carry out any automated processing of personal data, including profiling.
For information on any profiling activities carried out using cookies, please refer to the relevant Cookie Policy.
11. RIGHTS OF THE PERSONS CONCERNED
The persons to whom the personal data refers has the right, at any time, to obtain confirmation as to whether or not such data exists, to access it and verify its accuracy, and to request its supplementation, updating or rectification (Chapter III of the GDPR 2016/679). Pursuant to the same article, you have the right to request the deletion, anonymisation or blocking of data processed in violation of the law, and to object to its processing for legitimate reasons. All requests should be addressed to the Data Controller using the contact details provided above.
You may freely exercise your rights under Articles 15 et seq. of the GDPR (2016/679), which we quote in full below:
- withdraw consent at any time. The user may revoke their previously expressed consent to the processing of their personal data;
- object to the processing of their data. The user may object to the processing of their data when it is done on a legal basis other than consent;
- access their data. The user has the right to obtain information on the data processed by the Controller, certain aspects of the processing, and to receive a copy of the data processed;
- verify and request rectification of their data. Users may verify the correctness of their data and request that it be updated or corrected.
- request the restriction of processing. When certain conditions are met, the user may request that processing of their data be restricted. In this case, the Dara Controller will not process the data for any purpose other than its storage.
- obtain the deletion or removal of their personal data. When certain conditions are met, the user may request that the Data Controller delete their data;
- receive their Data or have it transferred to another data controller. Users have the right to receive their Data in a structured, commonly used, machine-readable format, and to have it transferred without hindrance to another controller where technically feasible. This provision applies when the data is processed by automated means and the processing is based on the user’s consent, a contract to which the user is a party, or related contractual measures.
- object to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
Requests should be addressed to the DPO via the company’s email: dpo@terramoretti.it.
12. RIGHT OF COMPLAINT
Interested parties who consider that the processing of personal data relating to them carried out through this site breaches the Regulation have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation).
13. UPDATING AND REVISION
The privacy policy was last updated on 28 May 2024 and may be subject to future revisions.