PRIVACY POLICY

PRIVACY POLICY FOR VISITORS AND POTENTIAL CANDIDATES

This privacy policy, addressed to all visitors of the website www.lorenzinet.com owned by Lorenzi s.r.l., contains information regarding the management methods of the processing of personal data released by the visitors themselves on the aforementioned corporate Website, pursuant to Legislative Decree June 30, 2003, 196 Privacy Code and the new EU Regulation 2016/679 of April 27, 2016. The policy is provided only for the Website in question and not for other websites that may be consulted by the visitor via links.

01. Place and Data Controller

The data controller is Lorenzi s.r.l. with registered office in via Atene 7, 35010 Vigonza (PD), tax code and VAT no. 01319110282, info@lorenzinet.com which may at its own discretion delegate totally or partially its functions to external technical consultants who will be bound to confidentiality of the acquired information.

02. Purposes of Processing

Your Data are processed, without your prior consent, for the following purposes:

a) The execution of the contract or the fulfillment of pre-contractual commitments, in particular:

Managing a technical, commercial, contractual and/or supply contact request;
Managing and maintaining the Website;
Sending reply communications following emails sent directly to the contacts of our services whose addresses are listed on the Website.

b) The pursuit of a legitimate interest of the Controller, in particular:

Analyzing cookies – as indicated in the Cookie Policy – deriving from your use of the Website;
Preventing or discovering fraudulent activities or abuses harmful to the Website;
Exercising the rights of the Controller, for example the right of defense in court.

03. Subject of processing

In the management of the site, the Controller processes non-sensitive identifying data deriving, respectively, from navigation within the website itself and from voluntary provision by the user, when sending an application through the appropriate form. Greater detail regarding the subject of the two types of processing is provided below.

Identifying data derived from navigation. The information systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment.

These data are collected by Google Analytics used in order to obtain anonymous statistical information on the use of the Website, to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: for this effect, data on web contacts could be kept in accordance with and limited to this purpose. Starting from the IP address and the domain name of the computers used, it will be possible, limited to the reported purpose of ascertaining responsibility, to trace further identifying data of the user (in particular, name, surname, e-mail address, telephone number, etc.).

For navigation and consultation of the site, the processing of sensitive data is not foreseen, i.e., those from which it is possible to deduce the user’s religious, political beliefs, and information on the state of health.

Data provided voluntarily by visitors. Any electronic communication received from the addresses indicated on the Website entails the acquisition of the sender’s address, necessary to respond to requests, and any other personal data contained therein. Visitors, moreover, by connecting to the Website can access the Jobs area and can send their spontaneous application by optionally attaching their curriculum vitae. Lorenzi s.r.l. will acquire the candidate’s personal data, both those defined as mandatory and those spontaneously attached by the visitor, and they will be processed exclusively for the purpose of personnel search or in any case to evaluate a hypothetical hiring. The personal data provided by visitors will be communicated to third parties only if this is necessary to comply with the requests of the visitors themselves.

04. Cookie policy

Cookies are data sent to the visitor’s internet browser and stored by it to then be re-transmitted to the Website upon the next visit (technical cookies) or to another Website that manages such data (third-party cookies). Cookies are aimed at the correct functioning of the Website as they allow the memorization of preferences, optimization activities, and statistics. Third-party cookies are managed for Lorenzi s.r.l. by Google Analytics solely for the purposes listed above. For the management of the visitor’s consent to their use, please refer to Google’s privacy policy: www.google.com/analytics/learn/privacy.html.

The settings to manage and disable cookies change depending on the type of browser used on the visitor’s computer. The latter can always request the general deactivation of cookies by changing their computer settings. To deactivate Google Analytics, instead consult: http://tools.google.com/dlpage/gaoptout.

05. Processing methods

The processing of your Data is carried out – by electronic means – by means of the operations of collection, recording, updating, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, erasure and destruction of the Data.

06. Duration of processing

The Controller processes the Data for the time necessary to respond to your request and fulfill the aforementioned purposes and in any case for no more than 1 year from collection for contact data and for no more than 6 months from collection for navigation data. Upon expiry of the term, the visitor may be asked to renew consent to the processing of their data, without prejudice to the latter’s right at any time to revoke the consent given. The subjects to whom the personal data refer have the right pursuant to art. 7 of Legislative Decree 196/2003 to obtain at any time confirmation of the existence or otherwise of the same data in our archives, verify their accuracy, request their modification and/or cancellation.

07. Access to Data

Your Data may be accessed for the purposes referred to above by:

Employees and/or collaborators of the Controller, in their capacity as persons in charge of processing and/or internal data processors and/or system administrators;
Third-party companies or other subjects (for example, Customer Care operators, IT service providers, suppliers, credit institutions, professional firms, etc.) that carry out outsourced activities on behalf of the Controller, in their capacity as external data processors.

08. Communication of Data

Your Data may be communicated, even without your consent, for the aforementioned purposes to control bodies, law enforcement agencies or the judiciary which will process them, upon their express request, as independent data controllers for institutional purposes and/or by law during investigations and controls. Your Data may also be communicated to third parties (for example, partners, freelancers, agents, etc.), as independent data controllers, to carry out activities instrumental to the aforementioned purposes.

09. Data Transfer

The Data are not subject to disclosure but may be transferred for the aforementioned purposes to non-EU countries. To ensure an adequate level of protection of Personal Data, the transfer will take place pursuant to the adequacy decisions approved by the European Commission or the adoption, by the Controller, of the Standard Contractual Clauses prepared by the European Commission.

10. Nature of the provision of Data and consequences of the refusal to reply

The provision of Data is mandatory to forward a contact request to the Controller. Should you decide not to provide the Data, we will not be able to follow up on your request.

11. Rights of the interested party

We inform you that, as an interested party, you have the right to:

Obtain confirmation of the existence or not of your Personal Data, even if not yet registered, and that such Data be made available to you in an intelligible form;
Obtain indication and, if applicable, copy: a) of the origin and category of Personal Data; b) of the logic applied in case of processing carried out with the aid of electronic instruments; c) of the purposes and methods of processing; d) of the identification details of the Controller and the processors; e) of the subjects or categories of subjects to whom the Personal Data may be communicated or who may become aware of it, in particular if recipients in third countries or international organizations; e) when possible, of the retention period of the Data or the criteria used to determine this period; f) of the existence of an automated decision-making process and in this case of the logic used, the importance and the expected consequences for the data subject; g) of the existence of adequate safeguards in case of transfer of Data to a non-EU country or an international organization;
Obtain, without undue delay, the updating and rectification of inaccurate Data or, when interested, the integration of incomplete Data;
Obtain the cancellation, transformation into anonymous form or blocking of Data in the cases provided for by law (e.g. processed unlawfully, no longer necessary, withdrawal of consent, etc.);
Obtain the limitation of processing in the event of a dispute over accuracy or unlawful processing;
Receive, if the processing is carried out by automatic means, without hindrance and in a structured, commonly used and readable format, the Personal Data concerning you to transmit them to another controller;
Object, in whole or in part, to the processing of Personal Data concerning you for legitimate reasons or for direct marketing and profiling purposes;
Lodge a complaint with the Guarantor Authority for the Protection of Personal Data.

In the above cases, where necessary, the Controller will bring to the attention of third parties to whom your personal Data are communicated of any exercise of rights by you, except in specific cases (e.g. when this fulfillment proves impossible or involves a manifestly disproportionate use of means compared to the protected right).

12. Methods of exercising rights

You may at any time exercise these rights by:

Sending a registered letter with return receipt to the address of the Controller;
Sending an email to privacy@lorenzinet.com