INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users who consult this website pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
This page describes, pursuant to Regulation (EU) 2016/679, the methods of processing of Personal Data of users collected during navigation of this Site www.birth.it or provided directly by the interested party through the compilation of forms and contact addresses.
This information does not concern other sites, pages or online services accessible via hypertext links published on the site but referring to resources external to this site.
Data Controller
The Data Controller is Original Birth S.p.A., with registered office in Pignataro Maggiore (Caserta), at the Appia state road Km 192.500 Zona ASI – VAT number 01539491215 – Email birth@birth.it.
Types of Data collected – Purpose – Legal basis
“CONTACTS” FORM – Data provided directly by the interested party by filling out and sending the contact forms. The explicit and voluntary sending of messages to the contact addresses, as well as the filling out and sending of the forms on the site, entail the acquisition of the sender’s contact details, as well as all personal data included in the communications.
Such data is processed for the following purposes and in compliance with the relevant legal bases of the processing, for a retention period not exceeding that necessary for the purposes for which they were collected and processed.
Purpose: to respond to requests sent by the interested party.
Legal basis: legitimate interest, the processing is necessary to respond to requests; for the execution of pre-contractual measures adopted at the request of the interested party.
Purpose: to send promotional information aimed at carrying out marketing activities. Such communications may be made via email (such as sending newsletters) or via other channels such as telephone calls, regular mail, fax, text messages and social media.
Legal basis: consent of the interested party.
“NEWSLETTER” FORM – Data provided directly by the interested party by filling out and sending the form to subscribe to the newsletter. The optional, explicit and voluntary subscription to the newsletter on this site involves the acquisition of the sender’s contact details.
Such data is processed for the following purpose and in compliance with the relevant legal basis of the processing, for a retention period not exceeding that necessary for the purposes for which they were collected and processed.
Purpose: to send promotional information aimed at carrying out marketing activities.
Legal basis: consent of the interested party – Opt out: Possibility to revoke your consent in each newsletter communication.
The MailUp platform is used to manage the newsletter, the data is transferred to the service manager for the provision of the service itself, the processing takes place in the ways specified by the privacy policy of the service:
https://www.mailup.it/informativa-privacy/
“E-COMMERCE” FORM – Data provided directly by the interested party by completing and sending the registration forms or authentication for the purchase of goods and/or services offered by the website. The explicit and voluntary completion of the registration form or sending the authentication form for the purchase of goods and/or services involves the acquisition of the sender’s contact details and identification of the same, to allow the desired purchases, as well as the data for the selected payment, information on orders placed, to pre-fill the checkout information, for shipping and invoicing.
Such data are processed for the following purposes and in compliance with the relevant legal bases of the processing, for a retention period not exceeding that necessary for the purposes for which they were collected and processed.
Purpose: to provide the service of purchasing the goods and/or services offered on the website.
Legal basis: the execution of a contract.
“WORK WITH US” FORM – Data provided directly by the interested party by filling out the self-application form and sending the CV. Filling out and sending the form on the site involves the acquisition of the sender’s contact details, as well as all personal data included in the attached CV.
Although the spontaneous sending of a curriculum vitae does not require consent to the processing of “common data”, consent to the processing of data belonging to the special categories referred to in art. 9 of EU Regulation 2016/679 (i.e. personal data capable of revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data capable of revealing the state of health and sexual life) is still required, which may be contained in the Curriculum Vitae. The candidate is informed that such collection will only concern “special data” that are relevant for the purposes of evaluating the professional aptitude of the interested party, to the extent that the acquisition of such information is strictly indispensable for the establishment of the employment or collaboration relationship and does not conflict with the provisions of Law no. 300/1970 (so-called Workers’ Statute), Law no. 135/1990 and with the provisions on equal opportunities or aimed at preventing discrimination. These data are processed for the following purposes and in compliance with the relevant legal bases of the processing, for a period of conservation not exceeding that necessary for the purposes for which they were collected and processed. The interested party is informed that by spontaneously sending the form and his/her Curriculum Vitae attached to it, he/she gives his/her consent for the Data Controller to process the data and communicate the common and particular personal data to the subjects and for the purposes indicated in this information.
Purpose: respond to requests sent by the interested party via the self-application form, evaluation of the profile, aptitudes and professional skills, recruitment and selection of personnel aimed at establishing an employment or collaboration relationship with the Data Controller.
Legal basis: legitimate interest, the processing is necessary to evaluate and respond to the application; for the execution of pre-contractual measures adopted at the request of the interested party.
Website navigation data
This site, for its correct functioning, acquires during normal navigation some personal data, including IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. The navigation data are acquired not for the purpose of identifying users, but for the sole purpose of collecting, anonymously, statistical information on the use of the site and its services.
Cookie
I cookie sono stringhe di testo di piccole dimensioni che i siti visitati dall’utente inviano al suo terminale (solitamente al browser), dove vengono memorizzati per essere poi ritrasmessi agli stessi siti alla successiva visita del medesimo utente. Nel corso della navigazione su un sito, l’utente può ricevere sul suo terminale anche cookie che vengono inviati da siti o da web server diversi (c.d. “terze parti”), sui quali possono risiedere alcuni elementi (quali, ad esempio, immagini, mappe, suoni, specifici link a pagine di altri domini) presenti sul sito che lo stesso sta visitando. I cookie, solitamente presenti nei browser degli utenti in numero molto elevato e a volte anche con caratteristiche di ampia persistenza temporale, sono usati per differenti finalità: esecuzione di autenticazioni informatiche, monitoraggio di sessioni, memorizzazione di informazioni su specifiche configurazioni riguardanti gli utenti che accedono al server, ecc. Al riguardo, e ai fini del presente provvedimento, si individuano pertanto due macro-categorie: cookie “tecnici” e cookie “di profilazione”. For further information, please refer to the Cookie Policy
Categories of recipients of personal data
The following categories of subjects may become aware of your data: Owner and subjects authorised to process data, appointed in writing by the undersigned company as partners, accounting and invoicing staff, sales staff as well as consultants, in the capacity of external managers, to the extent necessary to carry out their duties within our organisation, following a letter of appointment and/or stipulation of a contract which imposes the duty of confidentiality and security, as well as subjects who need to access the data for legal advice, with purposes ancillary to the relationship between the parties, such as the execution of current contracts, to the extent strictly necessary to carry out the ancillary tasks entrusted to them.
In addition to the Owner, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Owner. The updated list of Data Processors may always be requested from the Data Controller.
Methods of processing
Data processing is carried out using tools and procedures suitable for guaranteeing security and confidentiality and may be carried out either using paper media or with the aid of automated IT tools, suitable for storing, managing and transmitting the data.
The Data will be processed by the Data Controller, at its operating offices or within the territory of the European Union and the European Economic Area. If for technical, organizational and/or operational reasons it is necessary to use subjects (among those indicated in the previous list) located outside the European Union or the European Economic Area, we inform you that the Company will ensure that the data processing by these subjects takes place in compliance with the applicable legislation. Therefore, transfers will be carried out using adequate guarantees, such as adequacy decisions, Standard Contractual Clauses models approved by the European Commission or other guarantees considered adequate. The interested party may request further information by writing to the following email address: birth@birth.it.
Communication and dissemination
The data will not be disseminated to unspecified subjects by making them available or consulting them.
The data may be communicated, as far as their respective and specific competence is concerned, to Entities and in general to any public or private entity with respect to which there is an obligation for us (or faculty recognized by laws or secondary or community legislation) or need for communication.
Rights of interested parties
Articles 15 to 22 of the EU GDPR 2016/679 grant interested parties specific rights. In particular, the right to obtain confirmation of the existence or otherwise of personal data, access to personal data and the rectification or erasure of the same or the limitation of the processing concerning them or to object to their processing, in addition to the right to data portability, communication of such data and the purposes on which the processing is based. Furthermore, interested parties have the right to obtain the withdrawal of consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal, the transformation into anonymous form or the blocking of data processed in violation of the law, as well as the updating or, if there is an interest in this regard, the integration of the data. Interested parties have the right to object, for legitimate reasons, to the processing itself.
Reports for any changes in personal data must be sent promptly to the Data Controller in order to comply with art. 16 of the aforementioned legislation, which requires that the data collected be accurate and, therefore, updated.
Interested parties who believe that the processing of their personal data carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with a supervisory authority (for Italy: Garante per la protezione dei dati personali www.garanteprivacy.it), as provided for by art. 77 of the Regulation itself, or to take legal action (art. 79 of the Regulation).
