Data protection notice for events (O_ES_IT)

October 2022

Version 1

 

Data protection is a matter of utmost importance to us. Therefore, we would like to inform you about how your personal data is processed and the rights you may exercise under the applicable data protection legislation, in particular Regulation (EU) 2016/679 (hereinafter also referred to as the “GDPR”), when you apply for a position with us.

 

1  Data Controller

The data controller is 

Technoform Glass Insulation Italia S.r.l.

Viale Europa n. 30, 20047, Cusago (MI)

E-mail: privacy [dot] oesit [at] technoform [dot] com (privacy[dot]oesit[at]technoform[dot]com)

For any questions regarding data protection, feel free to contact us at any time using the contact details mentioned above.

 

2  Categories of Personal Data Processed

The categories of personal data (as defined in Article 4(1) of the GDPR) processed by the Data Controller may include, by way of example and without limitation:

  • Identification data and other personal data relating to the data subject (e.g., first name, surname, etc.);
  • Images and audio-visual recordings of the data subject.

 

3  Purpose and legal basis

3.1 Purposes Related to Compliance with a Legal Obligation (Article 6(1)(c) GDPR)

The purposes for which consent is required are those related to:

  • The publication of the data subject’s image and any personal data (such as first name, surname and professional role) for the creation of commercial and/or promotional materials through any media, whether physical or digital, for both internal and external use, including, by way of example, publication on social media platforms, websites, digital documents, magazines, and at events such as conferences, corporate presentations and corporate events.

The retention period for personal data processed for the purposes set out in this section is four (4) years from the date the image or audiovisual recording is collected, without prejudice to the data subject’s right to request erasure and/or withdraw consent. The data subject acknowledges that the withdrawal of consent shall apply only to future processing activities and shall not affect any materials already published, particularly those in printed form or contained in magazines, as well as digital documents that have been distributed or downloaded online.

This retention period may be extended where necessary for the establishment, exercise or defence of legal claims, or where required by applicable law.

 

4  Recipients or Categories of Recipients of Personal Data

Within the scope of the above-mentioned purposes and pursuant to Article 13(1)(e) and (f) of the GDPR, the Data Controller may disclose your personal data to:

  • The Data Controller’s internal departments and functions; 
  • Companies and professional service providers delivering information technology services, including electronic data processing, software and cloud management services, website management, and IT consulting services; 
  • Advertising companies and agencies; 
  • Companies belonging to the Technoform Group; 
  • Photographers, graphic designers, printers, and companies managing websites, in connection with the creation and use of photographic services and related materials; 
  • Public administrations and public authorities, where disclosure is requested by such entities in the performance of their institutional functions.

It remains understood that, as a consequence of publication on the Internet, the above-mentioned images and audiovisual recordings may be viewed, copied, extracted, or downloaded by an indefinite number of individuals.

The Data Controller informs you that it does not intend to transfer your personal data to countries outside the European Union (EU) or the European Economic Area (EEA) for the purposes described above. However, due to their publication on the Internet, the aforementioned images and audiovisual recordings may be viewed, copied, extracted, or downloaded by an indefinite number of individuals

 

5  Your right

The Data Subject may exercise the following rights pursuant to Article 13(2)(b) of the GDPR:

  • Right of access [Article 15 GDPR] (the right to obtain confirmation as to whether personal data concerning the data subject are being processed and, where that is the case, to access such personal data and receive a copy thereof);
  • Right to rectification [Article 16 GDPR] (the right to obtain the rectification of inaccurate personal data concerning the data subject);
  • Right to erasure ("right to be forgotten") [Article 17 GDPR] (the right to obtain the erasure of personal data concerning the data subject without undue delay, where the conditions set out in the GDPR are met);
  • Right to restriction of processing [Article 18 GDPR] (the right to obtain restriction of processing in the cases provided for by the GDPR, including where the accuracy of the personal data is contested by the data subject or where the processing is unlawful);
  • Right to data portability [Article 20 GDPR] (the right to receive personal data concerning the data subject in a structured, commonly used and machine-readable format and to transmit those data to another controller, where applicable);
  • Right to object [Article 21 GDPR] (the right to object, on grounds relating to the data subject's particular situation, to the processing of personal data concerning them);
  • Right not to be subject to automated individual decision-making [Article 22 GDPR] (the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them).

Further information regarding the data subject’s rights may be obtained by requesting from the Data Controller the full text of the above-mentioned provisions.

With regard to the purposes for which consent is required, the data subject may withdraw their consent at any time. Such withdrawal shall take effect from the time it is made, without prejudice to any processing activities carried out prior to withdrawal and subject to any legal requirements. As a general rule, the withdrawal of consent shall only have effect for future processing activities.

The above rights may be exercised in accordance with the GDPR, including by sending an email to the following address: privacy [dot] oesit [at] technoform [dot] com (privacy[dot]oesit[at]technoform[dot]com).  

Pursuant to Article 19 GDPR, where applicable, the Data Controller shall communicate any rectification, erasure, or restriction of processing of personal data requested by the data subject to each recipient to whom the personal data have been disclosed.

If the data subject believes that their rights under applicable data protection legislation have been infringed, they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), pursuant to Article 13(2)(d) GDPR, in accordance with the procedures made available by the Authority at the following website: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524, or by submitting a written complaint to the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

 

6  Possible consequences of failure to provide data and nature of data provision

For the other purposes listed above for which consent is required, the Data Subject may withdraw their consent at any time. Such withdrawal shall take effect from the moment it is made, without prejudice to any retention periods required by law. As a general rule, the withdrawal of consent shall only affect future processing activities. Accordingly, any processing carried out prior to the withdrawal of consent shall remain lawful and unaffected by such withdrawal, including, as noted above, the use and publication of the Data Subject’s images.

Failure to provide consent, or the provision of only partial consent (pursuant to Article 13(2)(e) GDPR), may prevent the full provision of services or the performance of specific activities in relation to the particular purposes for which consent has been withheld.

When personal data are no longer necessary for the purposes for which they were collected or otherwise processed, they are regularly deleted. Where deletion is impossible or would require a disproportionate effort due to a particular method of storage, the data shall no longer be processed and shall be archived in areas with restricted access.

 

7  Existence of automated decision-making (Including profiling)

The use of solely automated decision-making processes, as referred to in Article 22 GDPR, is currently excluded. Should the Data Controller decide to introduce such processes in the future for specific cases, the Data Subject will be informed separately where required by law, or through an update to this Privacy Notice.

 

8  Methods of processing

Personal data shall be processed in paper, electronic and telematic form and entered into the relevant databases. Such data may be accessed, and therefore become known, by personnel expressly designated by the Data Controller as Data Processors and Authorized Persons for the processing of personal data. These individuals may perform consultation, use, processing, comparison, and any other appropriate operations, including automated processing, in compliance with the applicable legal provisions designed, inter alia, to ensure the confidentiality and security of the data, as well as their accuracy, updating, and relevance to the stated processing purposes.

 

9  Validity and modification of this data protection notice

This data protection notice is currently valid (see status in the heading). Due to the further development of our offers or due to changes in legal or official requirements, it may become necessary to change this data protection notice.