logo

PRIVACY POLICY


EX REG NEWS: 2016/979

Pursuant to Articles. 13 of Regulation (EU) 2016/679 ("the Regulation" or "GDPR"), we wish to inform users about the methods and purposes of the processing of personal data of those who interact with our website: www.hevolus.it

 

The information is not to be considered valid for other websites that may be consulted through links on the websites of the owner's domain, which is not to be considered in any way responsible for the websites of third parties.

Data Controller

The Data Controller of the personal data collected through this site is Hevolus s.r.l., with registered office in Via G. Agnelli,31-31A – Zona ASI – 70056 Molfetta (Bari), Fiscal Code e VAT Number 05612750728 in the person of pro tempore legal representative., Tel.  +39 080.96.48.300, e-mail: privacy@hevolus.it, (hereinafter "the Owner" or "Hevolus").

Purpose of the processing, legal basis, nature of the provision

For the purposes expressed in this information, non-particular personal data will normally be processed. The data will be processed in compliance with the conditions of lawfulness pursuant to art. 6 of the Regulation, for following reasons:

The computer systems used to operate the websites acquire, during their normal operation and only for the duration of the connection, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example: the IP addresses or the names of the computers used by users who connect to websites, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the characteristics of the browser used for navigation, the resolution of the screen in which the browser is run on the device used,  and other parameters relating to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the sites and to check their correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the sites.

Legal basis of the processing: the legitimate interest of the Data Controller (Article 6 paragraph 1 letter f of the GDPR).

The data required for the purposes indicated are necessary to allow navigation on the site.

The voluntary sending of e-mails to the e-mail addresses indicated on the website mentioned above, the compilation of the contact form on the site involves the subsequent acquisition of the User's Name and Surname, his e-mail address and any data entered in the communication.

These data are necessary to respond to requests,

Legal basis of the processing: execution of pre-contractual measures adopted at the request of the same (Article 6 paragraph 1 letter .b of the GDPR) and legitimate interest of the Data Controller (Article 6 paragraph 1 letter f of the GDPR).

The data requested for the purposes indicated are necessary to be able to follow up on the requests of the interested party. Failure to provide data has the sole effect of being unable to send and/or receive and/or respond to the request of the interested party.

The user is also free to provide their personal and particular data (exclusively for the purposes mentioned above), through online forms and contact forms, to send the CV or submit specific applications.

Legal basis of the processing: the execution of pre-contractual or contractual obligations (Article 6 paragraph 1 letter .b of the GDPR) and consent for particular data (Article 9 letter a GDPR).

The data required for the purposes indicated are necessary to be able to start the personnel selection procedure. Failure to provide data has the effect of making it impossible to include the candidate in the selection and consequently to evaluate his recruitment.

Personal data will not be processed using the automated decision-making processes referred to in art. 22 of the GDPR.

The information pursuant to art. 13 GDPR will be provided at the time of the "first useful contact", following the sending of the curriculum pursuant to Legislative Decree. 101/2018.

Within the limits of the purposes established by Article 6, paragraph 1) letter b) of the GDPR, the consent of the candidate to the processing of personal data contained in the curriculum is not required.

Methods of data processing

The processing will be carried out with manual, computerized and telematic tools in compliance with the rules in force and the principles of correctness, lawfulness, transparency, relevance, completeness and non-excess, accuracy and with organizational and processing logics strictly related to the purposes pursued and in any case in order to guarantee the security, integrity and confidentiality of the data processed,  in compliance with the organizational, physical and logical measures provided for by the provisions in force.

Data retention period

In compliance with the provisions of art. 5 paragraph 1 letter e) of EU Reg. 2016/679 the personal data collected will be kept in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The storage of personal data provided depends on the purpose of the processing:

After these terms, the data will be deleted or transformed into anonymous form, unless their further storage is necessary to fulfill contractual obligations, legal obligations or to fulfill orders given by Public Authorities and / or Supervisory Bodies.

Nature of the provision of data

The user is free to provide their personal data. Failure to provide data may make it impossible to obtain what has been requested or to use the web services of the Data Controller.

Recipients of the data or categories of recipients

For the pursuit of the purposes described, or in the event that this is indispensable or required by law or by authorities with the power to impose it, the Data Controller reserves the right to communicate the data to recipients belonging to the following categories:

Transfer of data abroad

The user's data will not be transferred to non-EU countries.

Dissemination of data

The user's data will not be disclosed.

 

Use of Social Networks

From the website it is possible to connect to the company pages on the Social Networks, through the respective icons (Facebook).

As known, Social Networks independently manage their privacy for those who browse, publish posts and communicate through them, being in this case the main data controllers.

The user is therefore invited to visit, for more information, the following links:

 

TWITTER: https://twitter.com/en/privacy

YOUTUBE: https://policies.google.com/privacy?hl=it

LINKEDIN: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

FACEBOOK: https://it-it.facebook.com/policy.php

 

However, when the user is on the social pages managed by the Data Controller and communicates, in various ways, his personal data (e.g. through a private message or commenting on a post or leaving a review), or when the Social Networks provide some statistics on the use of the pages in a non-anonymous way (and therefore linked to the activity carried out on the page by the specific person),  It is Hevolus that becomes the Data Controller.

The processing of data that is carried out takes place exclusively for the ordinary management of the pages and for the verification of the contents entered by users (p.es., if a comment is posted insulting other users, the Data Controller may decide to remove it from the page as illicit) and to answer the user's questions (both public and private) about the characteristics of the goods or services provided.

In this case, the legal basis of the processing is the legitimate interest of the Data Controller to propose to the user and illustrate its services and their characteristics, as well as the need to answer any possible user question.

The processing of the user's personal data will take place by means of the tools made available by the Social Networks themselves.

In this phase of simple contact, the Data Controller will not transfer or communicate the user's personal data to other subjects.

The user is always free to decide when to remove the like, delete a comment, a review, etc., simply by returning to the page of the relevant Social Network and directly deleting it.

As for private messages, these are kept for up to 6 months from the last contact, after which they are deleted.

The user is always free to provide their personal data. Failure to provide data may make it impossible to obtain what has been requested or to use the services of the Data Controller.

Rights of the interested party

Articles. 15, 16, 17, 18, 20, 21 of the GDPR confer on the interested party the exercise of specific rights that may be exercised against the Data Controller.

In particular, the user, under the conditions provided for by the GDPR, may exercise the following rights:

Pursuant to art. 77 of the Regulation, the interested party is granted the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he habitually resides, works or in the place where the alleged violation occurred, which in Italy corresponds to the Guarantor Authority for the Protection of Personal Data, whose references can be found on www.garanteprivacy.it.

In addition, the GDPR gives the data subject the right to revoke the consent given at any time and with the same ease with which it was granted.

The exercise of the rights of the interested party is free of charge pursuant to Article 12 GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller may charge a reasonable expense contribution, in light of the administrative costs incurred to manage the request, or deny the satisfaction of the same.

The rights of the interested party can be exercised using the attached form that must be sent in paper form to the address of the Data Controller, or by e-mail or fax to the addresses in this statement.

This Information was updated on 18/02/2022.

Any updates will always be published on this page.

The Data Controller

 

Hevolus s.r.l