WHY SUCH INFORMATION

Pursuant to Regulation (EU) 2016/679 regarding data protection (the “Regulation” or “GDPR”), this page provides information related to the processing of personal data of those users that consult or interact with the website of Fiocchi Munizioni S.p.A. (the “Website”), accessible at the following address: www.fiocchi.com

 

DATA CONTROLLER 

The data controller is Fiocchi Munizioni S.p.A. with legal offices in Lecco, Via Santa Barbara n. 4, 23900 (LC) (the “Data Controller” or the “Company”) which can be contacted at the following e-mail address: info@fiocchi.com.

 

CATEGORIES OF PERSONAL DATA PROCESSED

Web server data

The server and the IT systems used to operate the Website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

Such information are not processed in order to be associated to identified data subjects, however, because of their nature, such data could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or the domain names of the devices used by users who connect to the Website, as well as the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

 

DATA VOLUNTARILY PROVIDED BY THE USER

The optional, explicit and voluntary sending of messages to the contact addresses indicated on the Website, as well as the filling in and forwarding of the forms present on the same, entail the acquisition of the sender's personal and contact data, necessary to reply, as well as all the personal data included in the communications, forms and curricula transmitted.

In particular, the Website collects and processes all the information provided by users through the use of the "Contact us" and "Work with us" sections of the Website and, in particular, personal data, contact data, as well as any additional personal data contained in the request sent as well as information relating to work experience or training. 

In case the user provides personal data (such as, for example, personal identifying data and contact details) for the subscription to the newsletter, the relevant personal data will be processed for the provision of the relevant service.  

Should the user contact the Company, the Company will keep such correspondence for the period of time indicated in the privacy notice hereof.

 

PURPOSE AND LEGAL BASIS OF PROCESSING

With reference to browsing data, such data are used for the sole purpose of checking the proper functioning of the Website. The data could also be used by public security authorities to ascertain responsibility in the event of any computer crimes against the Website. Without prejudice to the foregoing, the data will be stored for the period of time provided for by the relevant legal regulations and, in any case, for the time strictly necessary to provide the user with the requested service and to ensure the transmission of the communication. For this purpose, the data are processed on the basis of Article 6.1 letter f) of the GDPR, i.e. for the pursuit of the legitimate interest of the Data Controller. 

The Data Controller shall process the data voluntarily provided by the user for the purposes set out below:

1. management of personnel search and selection procedures and inclusion of the CV in the Company's archive in order to be able to contact the user for possible future interviews, as part of personnel selection searches. For this purpose, the data is processed on the basis of Article 6.1 letter b) GDPR, as it is necessary for the execution of pre-contractual measures taken at the request of the user;
2. to follow up on user requests received through the "Contact Us" section of the Website. For this purpose, the data are processed on the basis of art. 6.1 letter b) GDPR, as necessary for the performance of a contract to which the user is a party or for the execution of pre-contractual measures taken at the request of the same;
3. sending information material, advertising material or commercial communications related to the Company's activities. For this purpose, the data are processed on the basis of art. 6.1 letter a) GDPR, where the user has given his/her consent by ticking the appropriate box in the [please indicate in which section of the Website the consent will be collected]. It should be noted that the Company may use the user's email address in order to send information on its services and initiatives, including under the conditions provided for in Article 130 paragraph 4 of Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 ("Privacy Code");
4. to comply with legal obligations, including the obligation to cooperate with public security authorities, where required. For this purpose, the data is processed on the basis of Article 6.1 letter c) GDPR, as it is necessary for the fulfilment of a legal obligation to which the Data Controller is subject. 

Specific information is published in the "Work with us" and "Newsletter" sections of the Website, which are designed, respectively, to manage the sending of applications and the management of the newsletter service [links to the privacy policies of the two sections to be inserted].

The provision of data by the user for the "Work with us" and "Contact us" sections is necessary to provide the requested service. On the other hand, the provision of data for marketing, commercial and advertising purposes and subscription to the newsletter is optional. 

 

COOKIES

Cookies are small text files that are placed on the devices you use to browse the internet and thus when you visit websites. Cookies, in particular, allow a website to (i) recognize the device with which the user accessed the website; (ii) track the user's navigation through the different pages of a website; (iii) identify returning users. 

Cookies are used for a variety of purposes including, but not limited to, to ensure the efficient operation of websites and to provide information to website owners. 

The setting of third party analytics and targeting cookies, whose purpose is to improve user experience on the Site and collect useful information, is optional. We will not set these cookies unless you enable them through the Cookie Banner that appears when you log in to the Website. For more detailed information on the cookies we use, please see and read our cookie policy at the following link [link to the cookie policy to be inserted].

 

RECIPIENTS OF THE DATA

The processing will be carried out by the employees and collaborators of the Data Controller, expressly and duly authorized to process data for the pursuit of the purposes indicated above. 

In addition, in certain cases, personal data may also be communicated to suppliers, contractors, consultants and appointees who carry out maintenance operations on the contents of the website or activities for the provision of certain functions or services related to it. Recipients will only have access to personal information to the extent required to perform their functions, subject to certain contractual confidentiality obligations. In any case, the recipients of the data may only process the same following their appointment as external data processors by the Data Controller, pursuant to Article 28 of the Regulation.

 

INTERNATIONAL TRANSFERS

In consideration of the existence of computer links and/or correspondence with the aforementioned recipients, personal data may also be transferred outside the European Economic Area (EEA) and precisely to the territory of the United States. In this case, the Company ensures that the transfer of data will be carried out on the basis of adequate guarantees, pursuant to Articles 45-47 of GDPR as well as according to the indications of the European Data Protection Board.

In particular, in the event of transfers to the United States, standard contractual clauses will be adopted, as indicated by the European Committee for the Protection of Personal Data. For further information, please contact the Company at the e-mail address indicated below.

 

DATA RETENTION

The period of data retention depends on the purposes for which the data is processed and therefore this period of retention may vary. In any case, personal data will be kept for the time necessary (i) to search for professional positions in line with the candidates' profiles as resulting from the curricula sent as well as from the information sent through the form; (ii) to manage specific requests made by the user through the "Contact us" section; (iii) until the user's consent is revoked for the purposes referred to in letter c) of the paragraph entitled "Purposes and legal basis of the processing" of this policy, or, until the right to opt-out is exercised. In the absence of revocation, the data will be processed for a maximum period of 24 months; (iv) for the purpose of asserting rights in court; as well as (v) as required by applicable laws.

 

DATA SUBJECTS RIGHTS

Users, as data subjects, have the right to exercise the rights set out in Articles from 15 to 21 of the GDPR. In particular, these rights consist in:

receiving confirmation of the existence of the user's personal data and access to their content (access rights);

updating, modifying and/or correcting personal data (right of rectification);

requesting the deletion or limitation of data processed in violation of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to erasure and right to limitation of data processing);

objecting to the processing (right to object);

withdrawing consent, where given, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal (right to withdraw consent);

requesting the Data Controller to transfer the data directly to another controller (right of portability).

These rights may be exercised by sending a request to the Data Controller at the following e-mail address: info@fiocchi.com . 

 

RIGHT TO LODGE A COMPLAINT

Interested parties who believe that the processing of personal data relating to them carried out through this Website is in breach of the provisions of the Regulation, have the right to lodge a complaint with the National Supervisory Authority, as provided for by Articles 13 and 77 of the Regulation itself, as well as in Article 140 bis of the Privacy Code, or to take legal action pursuant to Article 79 of the Regulation.