Information on the processing of personal data art. 13 of GDPR 2016/679

The protection of your privacy and personal data is an important issue to which Assing SpA pays special attention in all our business dealings. We respect the confidentiality of your personal data and always act in accordance with the provisions of the Data Protection Act and this Privacy Policy. This Privacy Policy aims to describe in a simple and transparent way to users what personal data is processed, for what purpose, by whom and in what manner and to inform them about the measures that are applied to protect their rights and freedoms. This privacy policy applies only to the online activities of this site and is valid for visitors/users of the site. It does not apply to information collected through channels other than this website. The purpose of the privacy policy is to provide maximum transparency regarding what information the site collects and how it uses it.

1. General information

Users (hereinafter "data subjects" as defined in the GDPR and the Privacy Code) are informed of the following general profiles, which apply to all areas of processing:

  • all data are processed lawfully, fairly and transparently towards the data subject, in accordance with the general principles set forth in the GDPR ;
  • We collect and process your data only for the purposes outlined in this Policy or for the specific purposes already shared with you and/or about which you have given consent;
  • we aim to collect, process and use as little personal data as possible;
  • when we need to collect your personal information, we make sure it is as accurate and up-to-date as possible;
  • if the personal information we collect is no longer needed for any purpose and we are not required by law to retain it, we will make every effort to delete, destroy, or anonymize it;
  • specific security measures are observed to prevent data loss, illegal, or incorrect use, and unauthorized access;
  • your personal information will not be shared, sold, made available, or disclosed to parties other than those listed in the Notice.

2. Legal Basis

We inform you that, in accordance with Articles 4, No. 7) and 24 of the EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data, the personal data you provide, will be processed in accordance with the rules laid down in the aforementioned Regulation in respect of the rights and obligations arising therefrom. This site processes data on the basis of consent. By using or consulting this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in the manner and for the purposes described below, including the possible disclosure to third parties, if necessary, for the provision of a service.

The provision of data and therefore Consent to the collection and processing of data is optional, the User can deny consent, and can revoke at any time a consent already provided. However, denying consent may result in the inability to provide certain services and the site browsing experience may be impaired. As of May 25, 2018 (the effective date of the GDPR), this site will process some of the data based on the legitimate interests of the data controller.

3. Personal data

As a rule, disclosure of personal data is not required for the use of our online services. If personal data (name and e-mail address) are collected as part of our online services, this is done, as far as possible, on a voluntary basis. If you use the contact form for paper requests or inquiries from the user, these will be used to process the request and stored for later use in case of follow-up questions. If necessary, in order to process your request in accordance with the principle of data minimization, we may also transmit your personal data to other companies related to Assing SpA or to third parties involved (Technical or Commercial Consultants). Your personal data will be stored for the duration of processing your request and for a maximum period of 1 year after completion of processing, unless longer storage is legally permitted for other reasons.

Job applications contain personal data (e.g., resume, contact information, etc.). Unless we operate explicitly, we will keep the data recorded for up to three years after the last contact (unless longer retention is legally permitted for other reasons) for possible consideration at a later date. For data security reasons and in order to optimize ease of use, we also collect non-personal data in connection with the use of our online services.

3.1. Navigation data

Like all Web sites, this site also makes use of log files in which information collected in an automated manner during user visits is stored. The information collected may be as follows:

  • internet protocol (IP) address;
  • Browser type and parameters of the device used to connect to the site;
  • Internet service provider (ISP) name;
  • Date and time of visit;
  • Visitor's source (referral) and exit web pages;
  • possibly the number of clicks.

The above information is processed automatically and collected in aggregate form only in order to verify the proper functioning of the site, and for security reasons.

For security purposes (spam filters, firewalls, virus detection), automatically recorded data may possibly also include personal data such as the Ip address, which could be used, in accordance with the relevant laws, in order to block attempts to damage the site itself or to harm other users, or otherwise harmful or criminal activities. Such data is never used for user identification or profiling, but only for the purpose of protecting the site and its users (as of May 25, 2018, such information will be processed according to the legitimate interests of the owner). The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the specified activities. In any case, the data collected by the site will never be provided to third parties, for any reason whatsoever, unless it is a legitimate request by the judicial authority and only in the cases provided for by law. Data used for security purposes (blocking attempts to damage the site) are kept for 7 days.

4. Cookies

Cookies are information stored by the browser when a website is visited with any suitable device (such as a pc, tablet or smartphone). Each cookie contains several pieces of data (e.g., the name of the server it came from, a numeric identifier, etc.), may remain in the system for the duration of a session (until the browser is closed) or for long periods, and may contain a unique identifier code. Cookies are used for different purposes depending on their type: some are strictly necessary for the proper functionality of a website (technical cookies), while others optimize its performance to provide a better user experience or allow the acquisition of statistics on the use of the site, such as analytics cookies, or allow personalized advertising to be displayed, such as profiling cookies. By using the site, the visitor expressly consents to the use of cookies.

4.1. Disabling cookies

Cookies are linked to the browser being used and MAY BE DISABLED DIRECTLY FROM THE BROWSER, thus rejecting/revoking consent to the use of cookies. It should be kept in mind that disabling cookies may prevent the proper use of some functions of the site itself.

4.2. Third-party cookies

This site also acts as an intermediary for third-party cookies, which are used to be able to provide additional services and features to visitors and to enhance the use of the site itself, such as buttons for social, or video. This site has no control over third-party cookies, which are entirely managed by the third parties. As a result of this, information about the use of these cookies and their purposes, as well as how to disable them, is provided directly by the third parties on the pages indicated below.

4.3. Social Network Plugin

This site also incorporates social media plugins and/or buttons to enable easy sharing of content on your favorite social networks. Such plugins are programmed not to set any cookies when accessing the page, to safeguard the privacy of users. Eventually cookies are set, if so provided by the social networks, only when the user makes actual and voluntary use of the plugin. Keep in mind that if the user browses while being logged into the social network then he/she has already consented to the use of cookies conveyed through this site at the time of registration with the social network.

The collection and use of information obtained by means of the plugin is governed by the respective privacy policies of the social networks, to which please refer.

5. Transfers

This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorized according to specific decisions of the European Union and the Garante per la tutela dei dati personali, in particular decision 1250/2016 ( Privacy Shield - here the information page of the Italian Garante), so no further consent is needed. The companies mentioned above guarantee their adherence to the Privacy Shield.

6. Security Measures.

This site processes user data lawfully and correctly, taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data. The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.

7. User Rights.

Pursuant to the European Regulation 2016/679 (GDPR) and national legislation, the User may, in the manner and within the limits provided by the current legislation, exercise the following rights:

  • request confirmation of the existence of personal data concerning him/her (right of access Art. 15 EU Regulation No. 2016/679);
  • Know its origin;
  • Receive intelligible communication;
  • Have information about the logic, methods and purposes of processing;
  • Corrigendum (Art. 16 EU Regulation No. 2016/679);
  • Cancellation (Art. 17 EU Regulation No. 2016/679);
  • Limitation (Art. 18 EU Regulation No. 2016/679);
  • Portability, understood as the right to obtain data from the data controller in a commonly used, machine-readable structured format for transmission to another data controller without hindrance. (Art. 20 EU Regulation No. 2016/679);
  • Objection to processing (Art. 21 EU Regulation No. 2016/679);
  • Withdrawal of consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the withdrawal (Art. 7 par. EU Regulation No. 2016/679);
  • in cases of consent-based processing, its data provided to the owner, in a structured, machine-readable form and in a format commonly used by an electronic device;
  • the right to file a complaint with the Privacy Guarantor Supervisory Authority - link to the page of the Guarantor (Art. 51 EU Regulation No. 2016/679);
  • as well as, more generally, to exercise all the rights granted to him by the current legal provisions.

Requests should be addressed to the Data Controller by writing to the appointed DPO: dpo@assing.it. In cases where data are processed on the basis of legitimate interests, the rights of the data subjects to the processing are still guaranteed (except for the right to portability which is not provided for in the regulations), in particular the right to object to the processing which can be exercised by sending a request to the data controller.

8. Owner and Data Protection Officer

The Data Controller is Assing SpA with registered office in Monterotondo (RM) via Edoardo Amaldi 14, in the person of the legal representative p.t. Data Protection Officer (DPO) The Data Protection Officer (DPO) is Avv. Alessandro Bonavita mail: dpo@assing.it

9. Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this privacy policy, you must cease using this Application and may request the Data Controller to remove your Personal Data. Unless otherwise specified

10. The privacy of minors

Our website is directed to a general audience and does not offer services directed to children. If we become aware that a minor has provided us with personal information without parental or guardian permission, we will immediately delete that information. If pages on this website or sections of our applications contain links to other sites, they are not bound by this Privacy Policy. We recommend that you carefully read the privacy policy available on such external sites and review the procedures for the collection, use, and disclosure of personal information used by them.