This information is provided in observation of art. 13 of Regulation 2016/679
(GDPR),
pursuant to art. 13 of the legislative decree n. 196/2003 (Code regarding the
protection of personal data)
to users who access the website www.idispa.com and relates to all personal data
processed
in the modality indicated below.
HOLDER OF THE TREATMENT
The Data Controller of the personal data collected is idi, Via E. Brizi, 10, 20139 (MI) –
Owner contact email: idimain@idispa.com
COLLECTED DATA
The personal data processed are collected as provided directly by the interested parties
or, in the case of usage data, collected automatically when using this website
www.idispa.com
What kind of personal data do we collect?
- APPLICANT DATA: In order to assess whether you are in line with employment
opportunities
at our company, we need to process some information about you.
We only ask for the data that we actually need to assess your suitability, such
as name,
age, contact details, education, career, emergency contacts, residence permit.
- CUSTOMER DATA: If you are an idi customer,
we need to collect and use information about you or the individuals operating in
your organization
in order to provide you with our services.
- SUPPLIER DATA: We request some information from suppliers that are necessary
to ensure the smooth running of the employment relationship.
We need the contact details of the relevant individuals operating in your
organization
so that we can communicate with you.
We also need other information such as bank details so that we can pay you for
the services
you provide to us (if this is part of our contractual arrangements).
-
WEBSITE USERS: we do not collect data from visitors to our website.
How do we collect your personal data?
- APPLICANT DATA: We collect your personal data directly from you by sending your
CVs
- CUSTOMER DATA: The ways in which we collect your personal data are mainly two:
- directly from you and
- from third parties and other limited sources (e.g. online and offline
media).
- SUPPLIER DATA: We collect your personal data in the course of our business with
you.
- WEBSITE USERS: We do not collect your data via cookies when you visit our
website
LEGAL BASIS AND PURPOSE OF THE TREATMENT
The data are processed exclusively for the purposes for which they are collected,
as described below.
We use the data provided by the interested parties to:
- APPLICANT DATA: The main reason for using your personal information is to assess
whether you are in line with the job positions open at our company at a given
time.
- CUSTOMER DATA: The main reason for using customer information is to ensure the
proper
implementation of the contractual agreements between the parties to ensure the
smooth
running of our relationship.
- SUPPLIER DATA: The main reasons for using your personal data is to ensure the
proper
implementation of the contractual agreements between the parties in order to
ensure
the smooth running of our relationship, and the satisfaction of legal
requirements.
- WEBSITE USERS: We do not use your data unless you send your CV.
The provision of the data listed in the "Collected Data" section for the purposes
set out above is mandatory to allow the user to access the service.
For this reason, consent is mandatory and any refusal to process or the failure,
inaccurate or partial provision of data could result in the impossibility
of a correct provision of the service.
idi does not provide third parties with any user
information
without their consent, except where required by law.
In any case, the dissemination and transfer of data outside the EU area is excluded.
DATA PROTECTION
We care about the protection of your information, so we have taken appropriate
security measures to prevent unauthorized access, disclosure, modification or
unauthorized destruction of your data.
METHOD OF TREATMENT
Personal data are processed with automated and analog tools (paper) for the time
strictly
necessary to achieve the purposes for which they were collected, in any case
providing for
the annual verification of the data stored in order to delete those deemed obsolete,
unless the law does not provide for archiving obligations.
Data processing usually takes place at the idi
headquarters (Via E. Brizi, 10,
20139, Milano) by personnel or external collaborators duly designated as data
processors.
The complete list of data processors and persons in charge of processing personal
data
can be requested by sending a specific request to the address
idimain@idispa.com
Specific security measures are observed to prevent data loss, illicit or incorrect
use
and unauthorized access.
DATA STORAGE
We keep the data provided by the interested parties in the following ways:
- APPLICANT DATA: they are kept for a period of 5 years,
unless requested by the interested party for cancellation or modification.
For employees and external collaborators, the data are kept at least for the
entire duration
of the employment relationship.
- CUSTOMER DATA: they are kept for the entire period in which there are
contractual agreements between the parties to ensure the smooth running of our
relationship
and subsequently until the owner requests its modification or cancellation
unless the law provides for archiving obligations.
- SUPPLIER DATA: they are kept for the entire period in which there are
contractual
agreements between the parties to ensure the smooth running of our relationship
and subsequently until the owner requests their modification or cancellation
unless the law provides for archiving obligations.
-
WEBSITE USERS: nwe do not keep your data unless you send your CV.
We are authorized to keep personal data for a longer period if you have given us
your
consent to such processing, provided that such consent is not withdrawn.
Furthermore, we may be obliged to retain personal data for a longer period when
required
for the performance of a legal obligation or on the order of an authority.
REVOCATION OF CONSENT
The interested party can revoke his consent to the retention of data immediately,
by sending a request to the email address idimain@idispa.com.
RIGHTS OF THE INTERESTED PARTY
Pursuant to art. 7 of the Privacy Code and art. 13 GDPR, each user has the right
to obtain confirmation of the existence or not of his personal data,
even if not yet registered, and their communication in an intelligible form.
In particular, the interested party has the right to obtain from idi the indication:
- the origin of personal data;
- the purpose and methods of treatment;
- the logic applied in the event of processing carried out with the aid of
electronic / IT tools;
- the identification details of the owner, of the managers and of the designated
representative;
- of the subjects and categories of subjects to whom the data may be communicated
or who can learn about them as appointed representative in the State,
managers or agents.
Furthermore, the interested party has the right to obtain from idi:
- updating, rectification or integration of their data;
- the cancellation, transformation into anonymous form or blocking of data
processed in violation of the law;
- access to their data, i.e. confirmation that personal data concerning them is
being processed or not
- the limitation of the processing, the portability of the data, that is the right
to receive the personal data concerning him in a structured format;
- right of complaint to the supervisory authority.
Finally, the interested party has the right to object, in whole or in part,
for legitimate reasons, to the processing of personal data concerning him, even if
pertinent to the purpose of the collection.
In particular, the interested party has the right to object to the processing of
personal data concerning him for the purpose of sending commercial advertising
material
or direct sales or for carrying out market research or commercial communication.
The requests referred to in the previous points must be sent by email to
idimain@idispa.com
UPDATES AND CHANGES
idi reserves the right to modify, supplement or
periodically
update this information in compliance with the applicable legislation or the
measures
adopted by the Guarantor for the protection of personal data.
The aforementioned changes or additions will be brought to the attention
of the interested parties via a link to the Privacy Policy page on the website
and / or will be communicated directly to the interested parties by email.
We invite users to review the Privacy Policy regularly, to check the updated
information
and decide whether or not to continue using the services offered.
