1. Data Controllers
Under the Co-Controller regime pursuant to Article 26 of EU Regulation 2016/679, the Data Controllers are: Profilati Spa single-member company (Parent Company), in the person of the legal representative pro tempore, with registered office in Medicina (BO) at Via P. Galliani 135, having VAT no. 00642201206; Trafilerie Emiliane Sud Spa single-member company, in the person of the legal representative pro tempore, with registered office in Basciano (TE) at Piazzale Pietro Galliani, having VAT no. 00749360673; Eku Sistemi Srl, in the person of the legal representative pro tempore, with registered office in Segrate (MI) at Via E. Fermi 20, having VAT no. 04803010968; Eku Sistemi Roma Srl in the person of the legal representative pro tempore, with registered office in Guidonia Montecelio (RM) at Via Monte Nero 85, having VAT no. 11295261009; Eku Sistemi Puglia Srl, in the person of the legal representative pro tempore, with registered office in Massafra (TA) at Strada Statale 7 Appia Km. 632+250, having VAT no. 02161690736.
2. Types of Data Processed by Companies Within the Profilati Group
Navigation dataDuring normal operation, the IT systems and software procedures for operation of the Website acquire some personal data, the transmission of which is implicit in the use of Internet communication protocols (Internet domain and IP protocol, type of browser and operating system of the computer used, date, time and time spent on the site, pages viewed, any search engine from which the site is entered). Such information is not collected to be associated with identified parties concerned, however, by its very nature could allow Users to be identified through processing and association with data held by third parties.
This category of data includes IP addresses, domain names of the computers utilised by Users to connect to the Website, the addresses in URI (Uniform Resource Identifier) format of the resources requested, the time when the request is made, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server (successful, error, etcetera) and other parameters concerning the User’s operating system and computer environment. This data is only used to obtain anonymous statistical information about the use of the Website and will be deleted immediately after processing, without prejudice to the need of the Judicial Authority to ascertain crimes.
Work With Us
Through the “Work With Us” section, Users can submit applications to work with the Profilati Spa single-member company.
Processing of Customer and Supplier Data
Each Data Controller guarantees that the data of its own and potential customers and suppliers is processed in full compliance with the regulations in force regarding the protection of personal data.
3. Purpose of the Processing, Legal Basis and Retention Period
The personal data acquired by the Profilati Group companies will be processed by personnel expressly authorised and appointed by each Data Controller, in compliance with the principles of fairness, lawfulness, transparency, protection of confidentiality and the rights of the Data Subject. The companies belonging to the Profilati Group will process the data of the Data Subject for the duration strictly necessary for the pursuit of the purposes of the processing, in full compliance with the retention obligations established by law.
If the User sends a spontaneous application, the personal data will be processed, pursuant to Article 111-bis of Legislative Decree 196/03, for the purpose of managing the personnel selection process. If no employment relationship is established, the candidate’s personal data shall be erased after 24 months from receipt of the application.
If, following the request for information or quotes, a contractual relationship is established with one of the companies belonging to the Profilati Group, the data of the customer/supplier (whereby falling into the category of “Data Subject”), along with the essentially identifying data of their contractors, employees and contacts, shall be collected and processed pursuant to Article 6(1)(b) of EU Regulation 2016/679 for the purposes of the execution of pre-contractual measures, for execution of the contract and for the purposes of managing the contractual relationship. The conferment of data by customers and suppliers is obligatory. As such, the omission, inaccuracy or partial communication of data could render it impossible to conclude the negotiating agreement. Customer and supplier data will be retained for 10 years from the conclusion of the business relationship and subsequently deleted from the Data Controller’s IT systems.
The personal data shall be processed using IT/telematic or paper tools, ensuring the use of adequate technical and organisational security measures, pursuant to and for the effects of Article 32 of Regulation 2016/679, able to reduce the risk of destruction, loss, unauthorised access or processing of personal data that is not permitted or otherwise does not comply with the purposes of its collection.
4. Data Communication Environment
The personal data provided by Data Subjects may be disclosed to public, institutional or professional entities authorised by law to request the acquisition of such data, as well as – exclusively for the purposes set out under Article 3 – to third party companies or experts, of which the companies belonging to the Profilati Group avail in carrying out their business activities such as, by way of non-exhaustive example, accounting and tax consultants, legal and sector consultants, third-party supply and IT assistance companies and the Supervisory Board. It should be noted that such “third parties”, if not acting as Data Controllers, in compliance with the provisions of Article 28 of Regulation 2016/679, take on the role of Data Processors and consequently, by virtue of a specific contractual agreement, observe the security standards regarding the processing of the data communicated to them. The list of third parties is available upon express request sent to each company of the Profilati Group. In any case, it should be noted that the personal data of the Data Subjects is not disseminated or transmitted to third countries (outside the EU).
5. Cookies
Cookies are short strings of text (usually in .txt or .xml format) sent by a web server to the User’s browser, to then be stored on the navigation device and automatically sent back to the server during the same visit to the Website (session cookies) or upon subsequent access (persistent cookies). Cookies store information on visitors’ preferences in order to improve the Website’s functionalities and simplify browsing, automating procedures (such as Login and site language).
For further information on the cookies used by this Website and to manage preferences, Users are invited to consult the cookie policy.
6. Data Subject Rights
At any time, in accordance with the provisions of Articles 15 et seq. of Regulation 2016/679, Users may exercise before each of the companies belonging to the Profilati Group, the following rights: “Right of Access” that allows the Data Subject to access their personal data and obtain a copy thereof; “Right of Rectification” that allows the Data Subject to obtain the correction of their data if inaccurate or the integration of their data if incomplete; “Right to Erasure” that allows the Data Subject to obtain the erasure of their data in the cases provided for by Article 17 of EU Regulation 2016/679; “Right to Limitation of Processing” that allows the Data Subject to obtain the limitation of processing in the cases set out in Article 18 of EU Regulation 2016/679; “Right to Data Portability” which allows the Data Subject to receive their personal data in a format that is structured, commonly used and readable by an automatic device, as well as to request its transmission, by each of the companies of the Profilati Group, to another Data Controller; “Right to Object” which allows the Data Subject, at any time and for reasons related to their personal situation, to object to the processing of personal data concerning them carried out pursuant to Article 6(1)(e) or (f) of EU Regulation 2016/679, as well as to object to the processing of data carried out for direct marketing purposes; “Right to Lodge a Complaint” which allows the Data Subject to file a complaint with the Data Protection Authority pursuant to and for the purposes of Article 77 of EU Regulation 2016/679.
To exercise the rights referred to in Articles 15 et seq. of EU Regulation 2016/679 or to obtain more information on the Privacy Policy, the Data Subject may contact each of the companies of the Profilati Group by registered letter with return receipt or send an email to the address
It should be noted that, with immediate effect, it may be necessary to verify the identity of the Data Subject before being able to provide or modify any information.
INFORMATION REGARDING THE PRIVACY POLICY
This Privacy Policy was updated on 15.12.2023. The Data Processors reserve the right to modify or update this document. As such, Users are invited to periodically consult this web page. It is expressly stated that the Profilati Group companies are in no way responsible for the content and services provided by websites managed by third parties and accessible through links on the Website.