Gilmar Divisione Industria S.p.A. (hereinafter referred to as “Gilmar”) respects your privacy and is committed to treating your personal data with the utmost care and in full compliance with the relevant provisions governing the protection of personal data, including Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”) and Legislative Decree no. 196/2003, also updated pursuant to Legislative Decree no. 101/2018.
THE DATA CONTROLLER
The Data Controller for the processing of personal data that you may eventually provide to us is Gilmar Divisione Industria S.p.A., with registered office in San Giovanni in Marignano (RN), Italy, in Via Malpasso no. 723-725, reachable by phone or email at:
Tel: +39 0541 959111
Email address: firstname.lastname@example.org
TYPES OF PERSONAL DATA PROCESSED
When browsing our Website or interacting with the features offered therein, Gilmar processes the following types of personal data:
- navigation data which, although constituting information that is not collected in order to be associated with identified users, such data could, by its very nature, make it possible to identify the site users if processed and associated with data held by third parties.
This category of data includes data collected automatically while browsing the Website and necessary for the functioning of the same, such as IP addresses, domain names of computers used to connect to the site, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time the request is made, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the response status from the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment;
- data that you provide to Gilmar when you fill out the “Contact Us” form available on the Website, such as your first and last name, email address, the country where you are located, the information you wish to provide by filling out the “Comments” field found on the same form and eventually your telephone number.
- data that your provide to Gilmar when you fill out the form “Work with us” form available on the Website, such as your first and last name, date of birth, gender, address, email address, the data contained in your CV, your professional training and, if you decide to also fill out the additional fields included on the form, your phone number, your current job, your level of experience, the information contained in your LinkedIn profile, in your cover letter and the information that you provide by filling out the “Comments” field found on the same form.
PURPOSE AND COMPULSORY OR OPTIONAL NATURE OF THE DATA PROCESSING
Gilmar collects and processes your personal data for the following purposes:
- to allow you to browse the Website and for computer security purposes;
- to provide a reply to your requests for information, assistance and/or to be contacted, made using the “Contact Us” form available on the Website;
- for recruitment purposes;
- to conduct business activities and to protect its rights.
The provision of your data is not mandatory. However, should you refuse to provide the data to be entered in the fields marked with an asterisk, it shall not be possible to complete your request, with consequent impossibility on the part of Gilmar to provide a reply.
The failure to provide data to be entered in the fields not marked with an asterisk shall not in any way affect the completion of the procedure for sending the request.
LEGAL BASIS OF THE DATA PROCESSING
Gilmar processes your personal data based on the following conditions of legitimacy:
- to fulfil your requests for information or to be contacted, to establish a possible contractual relationship with you, including of a business or commercial nature (and therefore as relating to the implementation of pre- contractual measures), pursuant to Article 6, letter b) of the GDPR;
- to allow Gilmar to pursue its legitimate interests, consisting of carrying out and promoting the company’s business through the Website, the protection of its rights and the adoption of computer security systems, pursuant to Article 6, letter f) of the GDPR;
- on the basis of the legitimate interest of Gilmar, to recruit personnel and to eventually establish a working relationship in case an individual is hired, pursuant to Article 6, letter f) of the GDPR.
Personal data is also processed to ensure compliance with Gilmar’s legal obligations, as well as for the possible protection of the company’s rights in court and/or before the competent authorities, pursuant to Article 6, letter c) of the GDPR.
SUBJECTS WHO HAVE ACCESS TO YOUR PERSONAL DATA
Gilmar limits access to personal data as much as possible, making such data available to its staff, duly authorised to access and/or process the data in order to carry out their professional duties.
Gilmar’s staff shall process the personal data within the limits and in compliance with the provisions entrusted to it by the same.
Your personal data may also be shared with companies affiliated with Gilmar and disclosed to independent subjects on which the latter relies to carry out its normal business activities.
These subjects shall process your personal data in a capacity of Data Processors, according to the instructions provided by Gilmar, as well as in a capacity of Data Controllers.Gilmar provides to said subjects only the data strictly necessary to perform the agreed-upon services.
The suppliers of such services fall into the following categories:
- companies, consultants and IT service providers;
- consultants and legal representatives which provide assistance to Gilmar as regards to the necessary initiatives to protect its rights, to fulfil the requests of judicial and administrative authorities, as well as for other reasons related to the protection of the rights and freedoms of others.
DATA PROCESSING METHOD AND SCOPE OF CIRCULATION OF PERSONAL DATA
Gilmar pays great attention to the protection and privacy of personal data and consequently does not engage in the dissemination and/or marketing of personal data.
In some cases, your personal data may be transferred outside the European Union. This transfer shall take place ensuring adequate protection levels for your data, including in accordance with the requirements set out in Articles 45 and 46 of the GDPR.
In particular, personal data shall be transferred outside the European Union to countries that provide an adequate level of data protection, as determined by the specific decisions of the European Commission.
In other cases, transfers of personal data outside the European Union, may take place where adequate assurances and safeguards for the protection of your personal data are issued by Gilmar’s suppliers and received by the latter. Such parties, in fact, are required to sign appropriate agreements that include the standard contractual clauses for the protection of personal data adopted by the European Commission.
Moreover, the legitimacy of the transfer of personal data in the United States is guaranteed by the adherence of Gilmar’s providers located in that territory to the “Privacy Shield” principles.
Additional information on the Privacy Shield (the agreement governing the transfer of data between the EU and the United States) is available by consulting the following links:
- Privacy Shield;
- Information page on the Privacy Shield published by the Italian Authority for the Protection of Personal Data / Garante.
DATA RETENTION PERIOD
Your personal data shall be retained by Gilmar for a limited period of time, necessary to achieve the purposes of each data processing activity identified above. At the end of this period, your data shall be deleted or made anonymous.
Personal data used to reply to your requests for information, assistance and/or to be contacted, made using the “Contact Us” form available on the Website, shall be retained by Gilmar for the time strictly necessary to respond to your requests and then deleted.
The personal data and information communicated by you, by submitting the “Work with us” form, shall be retained by Gilmar for a period of 24 months from the receipt of said data.
You may, at any time contact Gilmar, by sending an email to email@example.com, requesting to receive the list of Data Processors (i.e. Gilmar’s service providers entrusted to process your personal data on the basis of the instructions and guidelines provided by Gilmar).
Also by sending an email to firstname.lastname@example.org, you can request to exercise the rights provided for by the applicable legislation on the protection of confidentiality of personal data (pursuant to the provisions set out in Articles 15 to 22 of the GDPR), and in particular:
- the right to obtain confirmation of whether your personal data is being processed or otherwise, to have access to your personal data processed by Gilmar, to know the purpose of such processing, the categories of data processed and the recipients or categories of recipients to whom your data have been or will be communicated or disclosed. You are also entitled to know the retention period of your personal data or, where this is not possible, the criteria used to determine this period;
- the right to verify the accuracy and correctness of your personal data and its origin, to request the integration, updating, correction, deletion or anonymisation of your personal data, as well as the limitation of the processing of your data (pursuant to the cases provided for in Articles 17 and 18 of the GDPR);
- submit a complaint to the Supervisory Authority (the Italian Authority for the Protection of Personal Data or Garante).
- in case of transfer of your data to a third country, the right to be informed of the existence of adequate safeguards relating to such transfers, pursuant to Article 46 of the GDPR.
- the right to oppose the processing of personal data, carried out by Gilmar on the basis of its legitimate interest, for reasons related to a particular situation, provided that no prevailing motives exist to allow Gilmar to continue with the data processing (e.g. the need to protect its rights in court);
- the right to be informed of the existence of an automated decision-making process, including profiling, as referred to in Article 22, paragraphs 1 and 4 of the GDPR and, in such cases, to obtain meaningful information about the logic involved, as well as the significance and the expected consequences of such processing for the Data Subject.
- the ability to exercise the right to portability of your personal data.
Once your request has been received, Gilmar shall process it as quickly as possible and with utmost seriousness, in order to allow you to exercise your rights, providing a reply without delay and, in any case, within one month from receiving the request. In cases of particular complexity, the timeframe for replying to your request may be extended to up to 2 months. In this case, Gilmar shall keep you informed on the status of the fulfilment of your request.
(Last updated on September 10, 2019)
NOTICE ON THE PROCESSING OF PERSONAL DATA FOR VIDEO SURVEILLANCE
This notice thus aims at informing you with utmost transparency about the processing of personal data carried out by Gilmar through the video surveillance system installed at its premises, boutiques and outlets.
For further information about the processing of your personal data as well as to exercise your rights as better explained below, you can send an e-mail to email@example.com.
The data controller of personal data is Gilmar Divisione Industria S.p.A., with registered office in Italy, in San Giovanni in Marignano (RN), Via Malpasso no. 723-725.
PURPOSES OF THE PROCESSING
The personal data acquired through the video surveillance system shall be processed:
- to ensure the safety and protection of people (Gilmar’s employees, collaborators and customers, and third parties in general) and Gilmar’s assets against possible attacks, thefts, robberies, damage, acts of vandalism and other illegal activities;
- to help organize Gilmar’s production processes, in compliance with the principle of proportionality between means of processing being used and aims pursued;
- indirectly, also for purposes connected with the employment relationship, as also specified in the relevant agreements with the bargaining units.
The personal data acquired through the video surveillance system shall be processed on the basis of the legitimate interest of Gilmar:
- to protect the safety of people and its assets at its premises, boutiques and outlets;
- to ensure the adequate exploitation of its resources, also with the aim of helping its personnel carry out their tasks.
DATA PROCESSING METHODS AND STORAGE PERIOD
In relation to the above purposes, personal data shall be processed using computer systems, taking adequate precautions and safety measures at the technical and organizational level according to the provisions of applicable regulations.
The images acquired shall be saved on a digital support and stored for no longer than it is necessary for the achievement of the above purposes and in any case for no longer than 5 days from the moment they are taken.
DISCLOSURE AND DISSEMINATION
Gilmar shall limit access to the images acquired by the video surveillance system, making them available only to its duly authorized personnel within the limits of their specific task.
The images acquired by the video surveillance system may be made available to judicial authorities in order to identify any offences and relevant details (also to identify the relevant perpetrators).
For the achievement of the above purposes, the images may be made accessible to external subjects responsible for the management and maintenance of the video surveillance system.
Gilmar shall be also allowed to make the images available to its lawyers in order to protect its rights and interests and to fulfil any requests by the judicial authorities.
Any subjects external to Gilmar that shall have access to the images acquired by the video surveillance system may process personal data both as data processors according to the instructions received from Gilmar and as independent data controllers.
RIGHTS OF THE DATA SUBJECT
To exercise your rights provided for by the regulations on the protection of personal data, including the ones listed below, you can contact Gilmar at any time, by sending an e-mail to firstname.lastname@example.org:
- the right to obtain access to your personal data and confirmation as to whether or not your personal data are being processed as well as the right to know the purposes of the processing, the categories of personal data being processed, and the recipients and storage period of your personal data;
- the right to request the erasure of your personal data within the limits provided for by applicable regulations;
- the right to lodge a complaint with a supervisory authority (the competent authority in Italy is the Garante per la protezione dei dati personali (Italian Data Protection Supervisor));
- the right to object to the processing of your personal data within the limits provided for by applicable regulations.
(last update: 9 October 2019)