Privacy Policy
Privacy Policy - Website Information document pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR)
WHY THIS INFORMATION?
In accordance with Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes the methods of processing personal data. This is an informative notice provided in accordance with Art. 13 of the GDPR. The information should not be considered valid for other third-party websites, which may be accessible through links on this website, for which no responsibility is assumed.
Personal data processed
- Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Articles 26, 27, 30 of the GDPR).
- Contractor/user data.
- Navigation data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
- Voluntarily provided data: the optional, explicit, and voluntary sending of messages to the contact addresses indicated on this website and/or the completion of data collection forms involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data entered.
Specific information
Specific information may be present on the Site’s pages regarding particular services or data processing provided.
COOKIES AND OTHER TRACKING SYSTEMS. WHAT ARE THEY? WHAT ARE THEY USED FOR?
For cookies and other tracking systems, please see the cookies policy reported in the website footer and at the following link.
1. WHO IS THE DATA CONTROLLER? HOW CAN THEY BE CONTACTED?
The data controller is Agrifarma SPA, with registered office at Via Roncaglia, 12 – 20146 Milano (MI), represented by the subject with the necessary powers, who can be contacted for any information via email: privacy@arcaplanet.net.
HAS A DATA PROTECTION OFFICER BEEN APPOINTED? WHAT ARE HIS CONTACT DETAILS?
Agrifarma SPA has appointed its own Data Protection Officer (DPO) in accordance with Articles 37, 38, and 39 of the GDPR. The DPO can be contacted at the registered office of the Controller indicated above and via email at: privacy@arcaplanet.net.
PROCESSING PURPOSES | LEGAL BASIS | DATA RETENTION PERIOD | NATURE OF PROVIDING |
Browsing on this website.
The data necessary for the use of obtaining statistical information checking the correct The data will be used for |
Legitimate interest: Processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require protection of personal data do not prevail, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the functioning of the site and navigation itself. (Art. 6, para. 1 lett. f and C47 of the GDPR) Data subjects are guaranteed the possibility of obtaining, upon request, information on the balancing test carried out. |
The retention of navigation data will occur for the duration of the browsing session. In any case, they do not persist for more than seven days (except for any necessity of investigation of crimes by the Judicial Authority). |
The provision of data is necessary for browsing the website. |
Use of cookies and similar technologies. See the cookies policy in the website footer. | For non-technical necessary cookies and similar technologies, processing is based on consent to the processing of personal data (Art. 6 para. 1 lett. a and C42, C43 of the GDPR). Consent is given through the banner and the website’s cookie policy. | See the cookies policy in the website footer. | See the cookies policy in the website footer. |
A) CONTACTS: management of contact requests and information received through the appropriate contact form. |
Contract/pre-contractual measures: Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures adopted at the request of the data subject (C44). Art. 6 para. 1 lett. b) of the GDPR. |
Maximum 12 months. | Providing the data is necessary.
Failure to provide the necessary data |
B) HANDLING OF YOUR REQUESTS and requests from other data subjects, pursuant to Articles 15 et seq. of the GDPR (rights of the data subject). |
Legal obligation: Processing is necessary to comply with a legal obligation to which the data controller is subject (C45). Art. 6 para. 1 lett. c) of the GDPR. |
5 years from the closure of the request, except for disputes. |
Providing personal data is mandatory, as it is necessary to fulfill legal obligations. |
C) WORK WITH US carrying out personnel research and selection activities for the possible establishment of an employment relationship, also for any positions different from those for which the data subject has spontaneously applied; retention of personal data also for future selections; management of applications in response to job offers published on the organization’s website; interviews and any video interviews (data processing also of image/audio). |
Data processing is necessary for the performance of pre-contractual measures also adopted at the request of the data subject. Art. 6 para. 1 lett. b) of the GDPR. For the processing of special categories of data, General Authorization no. 1/2016 of the Italian Data Protection Authority and applicable legislation on mandatory hirings. |
In principle, data collected during the recruitment process will be deleted as soon as it becomes apparent that no job offer will be made or that the offer will not be accepted by the candidate. In any case, the maximum retention period is 24 months. |
Providing personal data is necessary to process data for selections. Failure to provide the necessary personal data will result in the inability to apply. |
3. TO WHOM WILL PERSONAL DATA BE COMMUNICATED? DATA RECIPIENTS
Personal data will be communicated to subjects who will process the data as independent data controllers or data processors
(Art. 28 GDPR) and processed by natural persons (Art. 29 GDPR) acting under the authority of the Controller and Processors based on specific
instructions provided regarding the purposes and methods of processing. The data will be communicated to recipients belonging to the following categories:
Entities providing processing services or performing instrumental activities to services offered through the website;
Entities managing/supporting/assisting, even occasionally, the controller in the administration and management of the information system and
telecommunication networks (including maintenance and/or updating of the website and all that is instrumental to it);
Competent authorities for the fulfillment of legal obligations and/or provisions of public authorities, upon request.
4. WILL DATA BE TRANSFERRED TO NON-EEA COUNTRIES?
The management and storage of data are in Europe. It is specified that in case of transfer of personal data to countries located outside the European Economic Area, this will be done in compliance with the measures established by the applicable legislation ensuring an adequate level of protection to data subjects. For information about the guarantees concerning the transfer of data outside the EEA, write to privacy_controller@arcaplanet.net.
5. IS THERE AN AUTOMATED PROCESS?
Personal data will be subject to traditional manual, electronic, and automated processing. It is specified that no fully automated decision-making processes are carried out.
6. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?
Data subjects may assert their rights as expressed in Articles 15 et seq. GDPR by contacting the DPO/RPD at the email address: privacy@arcaplanet.net or by contacting the Data Controller at the contacts indicated above.
The controller guarantees data subjects the possibility to request, at any time, access to their personal data (Art.15), rectification (Art.16),
erasure of the same (Art.17), restriction of processing (Art.18). The data controller communicates (Art.19) to each of the recipients
to whom the personal data have been transmitted any rectifications or erasures or restrictions on processing made.
The data controller
communicates to data subjects who request it such recipients.
In case data subjects believe that the processing of personal data carried out by the Controller violates the provisions of
Regulation (EU) 2016/679, they are free to lodge a complaint with the national supervisory authority, in particular in the Member State where they habitually reside or work, or where the alleged violation of the Regulation occurred (Data Protection Authority https://www.garanteprivacy.it/), or to bring the matter to the appropriate judicial authorities.
If there is marketing activity, the rights of the data subject would need to be implemented.
7. CHANGES TO THE PRIVACY POLICY
The controller may change, modify, add, or remove any part of this Privacy Policy. To facilitate verification of any changes, the policy will contain the indication of the date of update of the policy itself.
Date of update: APRIL 24, 2024