Privacy Policy
PRIVACY NOTICE
In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“the Regulation” or “GDPR”), we would like to inform users about the methods and purposes of the processing of personal data of those who interact with our website.
This notice does not apply to other websites that may be accessed through links on our website, and the owner is not responsible for third-party websites.
Data Controller
The Data Controller for the personal data collected through this site is “Rivivi i tuoi attimi”, located in San Marzano di San Giuseppe (TA), Via Neviera 119, and can be contacted at: Email: info@rivivituoiattimi.it.
Purpose of Processing, Legal Basis, and Nature of Data Provision
For the purposes outlined in this privacy notice, only personal and sensitive data related to the potential belonging to protected categories (if relevant for recruitment purposes) will be processed. Therefore, please do not provide any special categories of personal data (e.g., sensitive data) that are not strictly necessary for the application. Personal data will be processed in compliance with the conditions of lawfulness as per Article 6 of the Regulation, for the following purposes:
Allowing navigation on the website and managing technical connections
The computer systems responsible for the operation of the website acquire, during normal operation and for the duration of the connection, some personal data whose transmission is implicit in the use of Internet communication protocols. These include data such as IP addresses, computer names, URI (Uniform Resource Identifier) addresses of requested resources, browser features, screen size, operating system parameters, etc. These data are used solely for statistical purposes and to ensure the correct functioning of the website, and are deleted immediately after processing. Data may be used to detect responsibility in the event of hypothetical cybercrimes involving the website.- Legal basis for processing: legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR).
Responding to requests for information or contact, downloading product materials, and other types of requests
Voluntary sending of emails to the addresses provided on the website or through data collection forms will result in the acquisition of the sender’s email address and any other personal data provided in the message. This also applies to the handling of complaints and responses to them.- Legal basis for processing: execution of a contract (Article 6(1)(b) of the GDPR) and legitimate interest (Article 6(1)(f) of the GDPR).
Direct marketing activities
By voluntarily entering your data in the newsletter subscription form, you consent to receiving newsletters regarding the services offered by Rivivi i tuoi attimi.- Legal basis for processing: consent of the user (Article 6(1)(a) of the GDPR).
Publishing images
Images published on this website concern individuals who, during events organized by Rivivi i tuoi attimi, have expressed specific consent for the publication of their images as per the notice provided under Article 13 of the GDPR.- Legal basis for processing: explicit consent of the data subject (Article 6(1)(a) of the GDPR).
Managing the recruitment process in case of application or spontaneous submission of a CV
The user may also freely provide personal and special data (only for the purposes stated above) through online forms to submit a CV or application.- Legal basis for processing: execution of pre-contractual or contractual obligations (Article 6(1)(b) of the GDPR) and consent for special data (Article 9(a) of the GDPR).
Personal data will not be processed using automated decision-making processes as per Article 22 of the GDPR.
Methods of Data Processing
Processing will be carried out using manual, computer-based, and electronic tools, in compliance with applicable laws and principles of fairness, lawfulness, transparency, adequacy, completeness, and non-excessiveness. Processing will ensure data security, integrity, and confidentiality, in accordance with organizational, physical, and logical measures required by current legislation.
Data Retention Period
In compliance with Article 5(1)(e) of EU Regulation 2016/679, personal data will be stored in a form that allows identification of data subjects for no longer than necessary to achieve the purposes for which the data was processed. The retention of personal data depends on the purpose of the processing:
- For browsing the website, refer to the cookies policy.
- For contact requests and information: up to 1 year.
- For personnel selection: up to 1 year.
- For receiving newsletters or promotional communications: up to 4 years.
- For publishing images: until consent is withdrawn or the website is closed, and in any case, no longer than 4 years from the publication on the platform.
After these periods, data will be deleted or anonymized unless further retention is required for legal obligations or compliance with orders from Public Authorities.
Nature of Data Provision
The user is free to provide their personal data. Failure to provide data may result in the inability to obtain what is requested or use the services of the Data Controller.
Recipients or Categories of Recipients of Data
To pursue the purposes described or when required by law, the Data Controller may share data with recipients from the following categories:
- Entities providing IT maintenance services.
- Entities offering services for managing the IT system used by the Data Controller and telecommunications networks, including email and website management.
- Authorities and regulatory bodies and, in general, public or private entities with public duties (e.g., Prefectures, Police, Judicial Authorities).
- Professional firms or companies providing assistance and consultancy.
- Personnel of the Data Controller, including interns, temporary workers, consultants, and external employees, who are authorized to process the data.
Transfer of Data Abroad
The user’s data will not be transferred to non-EU countries.
Data Disclosure
The user’s data will not be disclosed.
Use of Social Networks
From the website, it is possible to connect to the company pages on Social Networks via respective icons (Facebook, Instagram, Twitter, Pinterest). It is also possible to chat with us via Facebook Messenger.
Social Networks autonomously regulate their privacy for users who browse, post, or communicate through them. Therefore, the user is encouraged to visit the following links for further information:
However, when the user is on the social pages managed by Rivivi i tuoi attimi and communicates through various means (e.g., private messages, comments, or reviews), or when the Social Networks provide statistics on page use that are not anonymous (and thus linked to specific users), Rivivi i tuoi attimi becomes the Data Controller.
The processing of data will occur exclusively for managing the pages (e.g., removing a comment if it insults other users) and responding to user inquiries about Rivivi i tuoi attimi’s products.
User Rights
Articles 15, 16, 17, 18, 20, and 21 of the GDPR grant specific rights to the data subject, which may be exercised toward the Data Controller. Specifically, the data subject has the right to:
- Right of access: to obtain confirmation whether or not personal data concerning them is being processed and, if so, access to their personal data.
- Right of rectification: to obtain the correction of inaccurate personal data.
- Right to erasure (right to be forgotten): to obtain the deletion of personal data when no longer needed for the purposes for which they were processed.
- Right to restriction of processing: to limit processing when personal data is contested or the processing is unlawful.
- Right to data portability: to receive personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
- Right to object: to object to processing based on legitimate interests, in any situation.
The data subject also has the right to lodge a complaint with a supervisory authority, especially in the Member State of residence or work or the location where the alleged breach occurred.
Additionally, the GDPR grants the right to withdraw consent at any time.
Exercising these rights is free of charge unless the request is manifestly unfounded or excessive.
This Privacy Notice was created on February 15, 2023.
Data Controller
Rivivi i tuoi attimi.