Website data privacy notice updated according to Regulation (EU) 2016/679 (Regulation EU on the personal data protection)

This page describes the management methods of this website regarding the processing of personal data of the users who consult it. This notice is in accordance with article 13 of Legislative Decree no. 196/2003 “Personal data protection code” and with Regulation (EU) 2016/679 on the processing of personal data for those users who interact with the web service accessible via Internet at the address: www.depoda.it.
De Poda Spa undertakes to protect the right to privacy of users who consult the website, in particular when sending an application (in response to a job offer or spontaneous contact) or to request information concerning the services supplied by De Poda Spa. De Poda Spa can process personal data when the user visits the website and avails of its services and features. In the website sections in which user’s personal data are collected, a specific notice is usually published in accordance with articles 13 /15 of Regulation (EU) 2016/679. Where provided for in Regulation (EU) 2016/679, user’s consent will be required before processing his personal data. If the user provides the personal data of third parties, he must ensure that the communication of data to De Poda Spa and the subsequent processing for the purposes specified in the applicable privacy notice comply with Regulation (EU) 2016/679 and the applicable law. The website and the services offered are reserved to users over the age of 18. Therefore, the data controller does not collect personal data regarding people under the age of 18. If required by users, the data controller promptly deletes all personal data unintentionally collected concerning minors. The data controller stores users’ personal data safely and does not sell or transfer them to third parties.

Data controller

The data controller is De Poda Spa based in Cunevo/Contà (TN) Via Provinciale n. 5. Contact details: Massimo de Poda, Tel. +39 0461 652130. All data processing operations resulting from the website consultation take place at the headquarters of De Poda Spa.

Type of processed data

The website visit and consultation don’t usually involve the collection and the processing of users personal data except for navigation data and cookies as specified below. In addition to the so-called “navigation data” (see below), personal data provided voluntarily by users may be processed when they interact with the website features or ask to use the services offered on the website.

Cookies and navigation data

This website uses cookies. By browsing the website, the user consents to the use of cookies in compliance with this Privacy Policy. This website uses the following types of cookies: own cookies (session and permanent) and third-party cookies (session and permanent). For further and detailed information De Poda Spa recommends to consult the extended Cookies Policy.

Purposes and methods of processing

Personal data of website users will be acquired according to points a) and b) of article 6 and with regard to special categories of personal data according to article 9 paragraph 2 point a) (legal basis) of EU Regulation, in particular:
A. Section “Work with us”.
B. Spontaneous applications.
C. Information requests.
D. Quote requests.

Points A and B: “Work with us” and “Spontaneous applications”

De Poda Spa performs the data processing activity on people who contact the Company looking for employment, sending a spontaneous application or replying to a job offer in the section “Work with us”. Please note that in the case of spontaneous applications, the data controller is not required to provide any notice. In accordance with article 13 paragraph 5bis of the Personal Data Protection Code, if the data controller receives curriculum vitae sent spontaneously, he is not required to provide any information or to ask for applicants’ consent for the processing of their personal data (including sensitive data) contained in the received documents. However once the Company evaluates a CV and contacts the applicant, it must offer (even orally) information indicating the purpose and method of personal data processing, and the methods of data management. The protection measures adopted are generally described in this document.
Collected data are acquired and processed in paper form and/or on magnetic, electronic or computer support for the sole purpose of evaluating the possible interest in a future contract whose contents will be subsequently defined; the data will be stored for a maximum of 12 months, after which they will be deleted.
The data can be provided optionally and spontaneously by the person concerned or by the person who replies to a job offer via our Internet portal (in this case, for a successful application it is necessary to consent to data processing through the form offered on the website); the refusal to provide personal data and to allow their processing will make it impossible for the Company to place the data in the archives and consequently to establish any relationship.
Acquired data will be processed exclusively for the recruitment activity of the Company for its business needs.
The purpose of processing data contained in curriculum vitae will refer strictly to evaluation, recruitment or selection of personnel with a view to collaboration, employment with work contract or trainee experience, work placement or school/work experience collaboration.

Guidelines for applicants

Applicants are invited to observe the following rules by sending their curriculum vitae (CV) in electronic format: CV should be submitted in the European format; CV should preferably be transmitted in PDF format; CV should not include sensitive data (in particular concerning applicants’ health conditions and religious, philosophical or political beliefs) not pertinent to the job offer; Applicants must give their consent to data processing according to the following formula: “In compliance with Legislative Decree no. 196/2003 and with GDPR 679/2016, I authorize the processing of my personal data, including potential sensitive data voluntarily provided with my curriculum vitae”.

Points C and D: “Information requests” and “Quote requests”

De Poda Spa can process user’s general and sensitive personal data for the following purposes: use of services and features offered on the site, management of requests and reports from the users, sending of newsletters, etc. Moreover, with the user’s additional and specific optional consent, De Poda Spa may process personal data for marketing purposes, i.e. to send the user promotional material and/or commercial communications concerning the Company’s services to the addresses indicated or by automated methods and/or tools (such as Internet communications, fax, email, SMS, applications for mobile devices like smartphone and tablet -cd. APPS-, social network accounts – for example via Facebook or Twitter-). Personal data are processed electronically and entered into the business information system in full compliance with Regulation (EU) 2016/679, including security and confidentiality requirements and based on the principles of accuracy and legality of processing. In accordance with Regulation (EU) 2016/679, the data are kept and stored for 5 years.

Communication of collected data

Except as specified below, no personal data collected through the website of De Poda Spa is communicated or disclosed to third parties. In data management, only the following categories of internal employees who are identified in writing and who have received specific written instructions may gain knowledge of these data: employees in the administration and employees in the commercial area. Collected data are processed exclusively by certain designated employees at De Poda Spa. Employees in charge of processing who have been designated by the website technical manager may also gain knowledge of these data (now “Fabbrica”, designated as processor according to former article 28 Reg. (UE) 2016/679, limited to technical operations of website management). De Poda Spa may also process user’s personal data in accordance with applicable legislation in order to defend its legal interests, for example, in civil or criminal proceedings.

Measures to protect personal data

In order to protect the collected personal information, appropriate measures are taken to ensure online and material security and also to minimise the risk of data loss and other similar risks, considering the type of processing and the nature of data to be protected. Personal information is contained in secure networks accessible to a limited number of people who have a specific right of access to these systems and the obligation of confidentiality. The access to personal data is through a secure server.
Employees of De Poda Spa are trained to understand and comply with security protocols and are informed about procedures and guidelines on data privacy.

Rights of data subjects concerning personal data processing (Art. 12-23 Reg. EU)

De Poda Spa takes all reasonable measures to ensure the quality of data and to delete incorrect or unnecessary personal data. The user has the right to obtain from the data controller information about presence or absence of such data at any time, to know their content and origin, to check the accuracy or ask for integration, updating, correction or deletion where they correspond with the conditions of article 17 of Regulation (EU). They also have the right to restrict and to oppose the processing of their personal data, as well as the right to data portability. They have moreover the right to lodge a complaint with a supervisory authority.
All requests must be addressed to De Poda Spa based in Cunevo/Contà (TN) Via Provinciale n. 5. The contact details of the data controller are as follow: Massimo de Poda, Tel. +39 0461 652130. The deadline for replying to users regarding all rights (including the right of access) is one month, extendable up to 3 months in particularly complex cases; even in the case of refusal, the data controller must provide feedback to the user within one month of the request.