CPM S.p.A - INFORMATION ON THE PROTECTION OF PERSONAL DATA

Pursuant to Art. 13 European Regulation 2016/679

In compliance with the provisions pursuant to and for the purposes of Article 13 of EU Regulation 2016/679 CPM SPA, in its capacity as Data Controller, in the person of its pro-tempore legal representative, informs you of the purposes and methods of processing of the personal data collected, their scope of communication and dissemination, as well as the nature of their provision.

  1. PURPOSE AND TYPE OF DATA PROCESSED

The IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), other parameters relating to the user's operating system and computer environment, information relating to the user's behaviour on the Site, the pages that have been visited or searched, in order to select and make specific announcements to the user.), other parameters relating to the user's operating system and computer environment, information relating to the user's behaviour on the Site, the pages that have been visited or searched, in order to select and make specific announcements to the user of the Site and data relating to the navigation behaviour on the Site using, for example, cookies. When processing personal data that can directly or indirectly identify you, we try to respect a principle of strict necessity. For this reason, we have configured the Site in such a way that the use of personal data is kept to a minimum and to limit the processing of personal data that can identify you only in cases of necessity or at the request of the authorities and the police (such as, for example, for data relating to traffic and your stay on the Site or your IP address) or to ascertain responsibility in case of hypothetical computer crimes against the Site.

In some sections of the Site, some personal data will be requested. The data collected and processed will be used to respond to any requests you may have received or to manage CVs received spontaneously during the staff assessment phase for any open positions.

  1. MODALITIES AND DATA SECURITY

Your personal data will be processed by automated means in accordance with the principle of necessity and proportionality, avoiding processing personal data where the operations can be carried out by the use of anonymous data or by other means. We have adopted specific security measures to prevent the loss of personal data, unlawful or incorrect use and unauthorised access, but please remember that it is essential for the security of your data that your device is equipped with tools such as constantly updated antivirus software and that the provider providing the Internet connection guarantees the secure transmission of data through firewalls, spam filters and similar measures.

  1. COMMUNICATION AND DISSEMINATION

The data may be communicated to third parties for the performance of activities functional to the structure, such as those of maintenance and management of the site and, more generally, by all employees, including those of third parties (suppliers of services, infrastructures, information technology and the like) who are involved in the management and supervision of the site and duly appointed as data processors. In this case, use by third parties will take place in full compliance with the principle of correctness and lawfulness.

The transfer of data to non-EU countries is not envisaged. Otherwise, it will be communicated to the data subjects pursuant to Article 13(1)(f) of European Regulation 2016/679, in accordance with the requirements of the Regulation itself.

The data will not be disseminated.

  1. RIGHTS OF THE DATA SUBJECT

Rights under Articles 15, 16, 17 18, 20, 21 and 22 of EU Regulation 2016/679

We would like to inform you that as a data subject, in addition to the right to lodge a complaint with a supervisory authority, you also have the rights listed below, which you may assert by making a specific written request to the Data Controller as indicated in point 1.

Article 15 - Right of access

Article 16 - Right of rectification

Article 17 - Right to erasure (right to be forgotten)

Article 18 - Right to restriction of processing

Article 19 - Obligation to notify in the event of rectification or erasure of personal data

or limitation of processing

Article 20 - Right to data portability

Article 21 - Right of opposition

Art. 22 - Right not to be subject to automated decision-making, including profiling

To exercise your rights under Articles 15 et seq. of European Regulation 2016/679, please write to andrea.giovetti@icloud.com.

 

  1. OWNER AND RESPONSIBLE PERSONS

The data controller is CPM SPA, with registered office at VIA BRODOLINI, 26 - 20834 Nova Milanese (MB).

The updated list of external data controllers can be consulted by submitting a written request to the Data Controller mentioned above.

 

  1. TERMS OF CONSERVATION

The data will be stored for the duration of the browsing session on the Site and for the time necessary to fulfil the purposes listed above in accordance with the terms of the law. Once these terms have expired, the personal data will be destroyed, cancelled or made anonymous (if not already collected in anonymous form).

 

  1. NATURE OF THE PROVISION OF INFORMATION AND CONSEQUENCES OF REFUSAL TO REPLY

The provision of your data for processing is optional. The legal basis for the processing of your personal data is legitimate interest.

For any processing of your personal data falling under the specifications set out in Article 6 of Regulation 2016/679, you will be asked for explicit consent for each individual type of processing of personal data, in accordance with the regulations in force.

  1. LEGAL BASIS

The legal basis for processing your personal data is legitimate interest.

For any processing of your personal data falling under the specifications set out in Article 7 of EU Regulation 2016/679, you will be asked for explicit consent for each individual type of processing of your personal data, in accordance with current legislation.

Download the document in pdf