Application Privacy Policy

Privacy Policy pursuant to Art. 13 GDPR

Alajmo S.p.A. (the "Company"), with registered office in via Liguria n. 1, Sarmeola di Rubano, (PD) (Tax Code/VAT number 04384890283) is the Data Controller of the personal data you will communicate by sending your application through the website "alajmo.it" (the "Site"). In this Privacy Policy, we will also refer to you as the "Data Subject", meaning the person to whom the collected personal data refers.

The Data Controller has appointed a DPO (or "Data Protection Officer"), whom you can contact at privacy@alajmo.it if you have any questions about the use of your data or wish to exercise your legal rights.

What data do we collect?

The following data are collected through the Site:

- Navigation data: the Site's IT systems collect some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with you, but which by its very nature could, through processing and association with data held by third parties, allow you to be identified. These include: 

• IP address;
• URI (Uniform Resource Identifier) of the requested resources;
• the time and date of interaction with the Site;
• the type of operating system, the browser used, screen resolution and other technical information about the device used.

- Common data (e.g., name and surname, e-mail, address, date of birth, mobile number, educational qualification, curriculum vitae): these are used, in compliance with applicable law, for the purposes indicated in the relevant form and in this Privacy Policy. 

- In relation to the collection of information concerning personnel selection, it may happen that the Data Controller has to access the processing of "special" data such as, for example: 

1. a) Suitability for duties for selected candidates pursuant to Law 68/99;
2. b) Religious beliefs, trade union membership;
3. c) Photos or images of the data subject produced by video surveillance systems for workplace safety purposes or for the protection of company assets acquired at the time of the candidate's access to the company premises for selection interviews, installed following agreement with trade union representatives or at the I.T.L., also subject to appropriate separate information notice.

The data you provide must refer to you or to third parties who have expressly authorized you to provide them, and in such cases, by communicating them, you assume the related obligations and responsibilities.

How do we use your data? On what legal basis?

The data entered in the "work with us" section of the Site will be collected through a software platform that adopts appropriate security measures for the protection of the entered data, saving them on servers within the European Union. The Data Controller and its appointed subjects, i.e., specifically appointed external data processors, can access it through specific authentication credentials.

For all occasions in which the Company processes your data, there is a legal basis that legitimizes its processing. 

Sometimes your consent is necessary to process personal data, for example, to allow the installation of profiling cookies, analytical cookies, or to send you newsletters. 

At other times, when allowed by law and without prejudice to your fundamental rights, the Company is not required to ask for your consent to data processing. This occurs when data is processed due to a legal obligation or following a request from you, which you have submitted by contacting Alajmo and/or requesting certain services. 

Failure to provide the data indicated as "mandatory" in each form may make it impossible to respond to your request or to fulfill a legal obligation to which Alajmo is subject.

At the end of the retention period, the personal data collected will be irreversibly deleted.


DATA PROCESSED, PURPOSES, LEGAL BASIS/RETENTION PERIOD

Data entered in the form for submitting an application (name, surname, date of birth, tax code, residence and/or domicile address (if different from residence), telephone number, email, residence permit):

1) to participate in the selection for which you apply;
2) to ensure the correct conduct of the personnel selection process (e.g. management and evaluation of applications);
3) to contact you to invite you to a job interview or to provide feedback regarding the outcome of the application evaluation processes;
4) to allow for the possible fulfillment of pre-contractual and contractual obligations necessary for the establishment of the employment relationship;
5) to store your CV in the appropriate database in order to evaluate it also for future positions of potential interest, related to your professional experience and qualifications;
6) to include your application in the statistical analyses we perform on the selection process;
7) to prevent or detect fraudulent activities or abuses detrimental to the Site;
8) to comply with obligations imposed by law, regulation, community legislation or an order from the Authority;
9) to exercise the rights of the Data Controller, for example the right of defense in court.

6.1.b GDPR – Pre-contractual measures (Purposes no. 1, 2, 3)
6.1.c – Legal obligation (Purposes no. 4, 7, 8)
6.1.f GDPR – Legitimate interest (Purposes no. 5, 6, 9)

Retention period: 2 years from the submission of the application

Navigation data: 

1) to obtain anonymous statistical information on the use of the site and to check its correct functioning;
2) for the ascertainment of responsibility in case of hypothetical cybercrimes against the site and the Data Controller only upon request of the competent supervisory authorities.

6.1.b – Contract (Purpose no. 1)
6.1.c – Legal obligation (Purpose no. 2)

Retention period: for the technical time necessary to fulfill the functions for which they were collected and in any case for a maximum period of 6 months. The Data Controller may be obliged to retain personal data for a longer period in compliance with a legal obligation or by order of an authority.

Data contained in email communications sent to the addresses indicated on the Site or data sent via chat:

1) to respond to your requests.

6.1.b – Contract or pre-contractual measures (Purpose no. 1)
6.1.c – Legal obligation (Purpose no. 1)

Retention period: For the time necessary to respond to your request and to allow you to exercise your rights. Where necessary, for the time required to fulfill legal obligations or for the establishment, exercise or defense of a right in court.

Data collected through cookies:

1) if they are technical cookies, to allow the correct functioning of some sections of the Site;
2) if they are analytical cookies, the data collected with your prior consent will be used to track your visits to the Site and how you used it, in order to improve our services;
3) if they are profiling cookies, the data collected with your prior consent will be used to show you advertisements of your interest on this Site and on the sites of other companies; if you do not accept them, it may happen that you still see advertisements, but not related to your interests.

For more information, please refer to the Cookie Policy.

6.1.a – Consent (Purposes no. 2, 3)
6.1.b – Contract or pre-contractual measures (Purpose no. 1)

Retention period:
Until the end of each session or until the end of the retention period provided for each type of cookie, unless consent is previously revoked.

For more information, please refer to the Cookie Policy.

Minor users

The services offered through the Site are intended for adults. If you are a minor, you must not communicate data to the Data Controller and you cannot use the services offered. Should we discover that you are a minor, we will immediately and irreversibly delete all your data, personal and non-personal, as well as any accounts created.

Are my data shared with other parties?

The personal data provided will not be disseminated, meaning they will not be disclosed to indeterminate parties.

However, the data may be communicated to parties defined by the Data Controller for the indicated purposes, appointed, if necessary, as Data Processors by the Data Controller. By way of example and not exhaustive, the following may have access to the data:

- parties authorized by us for processing, who have committed to confidentiality or have an adequate legal obligation of confidentiality;
- those who deal with the maintenance of the Site and our legal or tax advisors, as Data Processors or independent Data Controllers;
- public authorities, where required by law or at their request.

The updated list of Processors can always be requested from the Data Controller by writing to privacy@alajmo.it. 

The data may instead be communicated to clearly defined subjects only by the Data Controller for the indicated purposes, in particular:

a) to labor, legal, tax and corporate consultants, occupational physicians, administration and business management service companies for the better management of tax and billing profiles, who will in any case remain autonomous data controllers, as well as website providers, hardware and software assistance technicians, unless they are expressly appointed as external data processors;
b) to public bodies (INPS, INAIL, Provincial Labor Directorate, Tax Offices); brokerage companies, employment centers.
c) to software houses for the management of company software, appointed as data processor.

In particular, your data will be processed by Altamira S.r.l., which has been previously appointed as Data Processor.

If you accept third-party cookies, the data collected by these will be shared with the parties indicated in our Cookie Policy.

The Site incorporates links to its social media accounts to allow easy access to the content disseminated through them. These are simple links to social networking platforms, and no data is communicated to these platforms through the Site. Cookies may be activated, if provided by the social networks, only when you click on the relevant icons. Please note that if you browse while logged into a social network, you have already consented to the use of cookies conveyed through this Site. The collection and use of information obtained from social networks are governed by their respective privacy policies, which we ask you to refer to.

How do I delete my personal data?

If you have created an account on the Site, you can delete it at any time by sending an email to privacy@alajmo.it. To learn how to delete cookies, please read our
Cookie Policy. 

What are my rights as a Data Subject?

We will always guarantee you control over your personal data.

In particular, you have the right to:
- request information about your personal data processed by the Company and request a copy of it in a structured and readable format;
- not be subjected to automated decisions, unless you consent to them;
- ask the Data Controller to correct data relating to you that is incorrect, to delete it, or to use it only for certain purposes;
- change your mind and ask us not to use your data anymore, for example by deactivating third-party cookies or deleting your account;
- withdraw any consent given.

Please note, however, that in some limited cases we may not be able to fulfill your requests, such as when we are prohibited by law or by order of an Authority.

These requests must be addressed to the DPO who can be contacted at the following email address: privacy@alajmo.it.

You always have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali) if you believe that the processing of your personal data is contrary to current regulations.

Where are my data stored?

Your data may be transferred abroad by the Data Processors. Data collected through third-party cookies may be transferred to third countries in accordance with what is indicated in our Cookie Policy and the privacy policies of third parties. However, it is specified that the Data Processors declare that such third countries guarantee an adequate level of protection of the Data Subject's rights by virtue of compliance with one or more of the conditions provided for by articles 45-47 of the GDPR. It is however noted that, in the event that the service providers are US companies, US government authorities may access such data, if the conditions provided by law are met. 

How will I be informed of any changes to this Privacy Policy?

The Company will update this Privacy Policy when it deems it necessary. If there are substantial changes, particularly regarding the purposes for which we use your personal data, we will inform you via email, at the address indicated during account registration, if you have a registered account.

If you do not agree with the changes, you can always stop using our services by deleting your account and/or ceasing to communicate further personal data to us.