Source: http://berto.it/site/en/privacy_policy/
Timestamp: 2019-04-18 19:24:38+00:00

Document:
Is written pursuant to art. 13 of the Regulation for those who interact with the services of the Website.
The processing of your Personal Data shall be based on the principles of correctness, lawfulness, transparency, limitation of purpose and storage, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the Regulation. Your Personal Data will therefore be processed in accordance with the provisions of the Regulation and the confidentiality obligations set out therein.
Processing means any operation, or set of operations, which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The Data Controller is BERTO E.G. INDUSTRIA TESSILE S.R.L., as defined above.
During their normal operation, the computer systems and software procedures used to operate this Website acquire some Personal Data whose transmission is implicit in the use of internet communication protocols. These data is not gathered so it can be associated with identifiable interested parties, but by its very nature could, through processing and by associating it with data held by third parties, allow users to be identified. This category includes IP addresses, or domain names, of the computers used to connect to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, timestamp of the request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the server response status (successful, error etc.), and other parameters pertaining to the user's operating system, and IT environment. This data is used to obtain anonymous statistical information on the use of the Website and to check its correct functioning, to allow, given the architecture of the systems used, the correct provision of the various functionalities, for security reasons and to ascertain responsibility in case of hypothetical computer crimes against the Website or third parties, and are deleted immediately after processing.
In the section of the Website "JOB" you might provide us with Personal Data that falls within special categories as set forth in art. 9 of the Regulation, namely: “[…] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership. Any processing of such data shall be in accordance with current pro tempore permissions regarding the protection of Personal Data.
In using certain services of the Website, Personal Data of third parties, which you have provided, may be processed. In this event, you are the independent data controller, assuming all the legal obligations and responsibilities. In this sense, you confer on this point the widest indemnity with respect to any objection, claim, request for compensation for damages from processing etc. that should reach the Data Controller from third parties whose Personal Data has been processed through your use of the services on the Website in violation of the rules on the protection of relevant Personal Data.
In any case, if you provide or in other way process Personal Data of third parties in using the Website, you henceforth guarantee – assuming all related responsibilities – that this specific processing is grounded on an appropriate legal basis in accordance with art. 6 of the Regulation, which legitimizes the processing of the information in question.
For information about the cookies used by this Website, please refer to the specific notice contained in the banner visible when opening the Website.
e. to process statistics, without it being possible to trace your identity. Your Personal Data, also falling within special categories (such as, for example, information about your state of health), shall be processed with automated and manual means.
The legal basis for the processing of Personal Data for the purposes described in section 3.a. and 3.b. is art. 6.1 lett. b) of the Regulation (“[...] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”), since the processing is necessary for the provision of services or for requests of the data subject. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services.
The processing of your Personal Data referred to in section 3.c. represents a legitimate processing pursuant to art. 6.1 lett. c) of the Regulation (“[...] processing is necessary for compliance with a legal obligation to which the controller is subject”).
The processing of your Personal Data for the purposes described in section 3.d. is art. 6.1 lett. b) of the Regulation (“[...] the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract"). The provision of your Personal Data is optional, but failure to provide it may result in the impossibility for the Data Controller to evaluate your profile or plan interviews.
It is also specified that the processing referred to in section 3.e. is not performed on Personal Data and therefore can be freely carried out by the Data Controller.
d. Business partners only if you have granted your specific consent to do so.
Personal Data processed for the purposes referred to in section 3.a. and 3.b. will be kept for the time necessary to achieve the same objectives. In any case, since this processing is performed for the provision of Services, the Data Controller shall process Personal Data up to the time allowed by Italian law to protect its own interests (Art. 2946 and ff. of the Italian Civil Code). Personal Data processed for the purposes referred to in section 3.c. shall be kept until the time provided for by the specific obligation or applicable law. Regarding the processing referred to in section 3.d., CVs sent will be stored for 24 months from their delivery and may be used for contacts and future interviews. At the end of this period, you will receive a prompt to update your Personal Data: in the absence of a response, after 15 days of submitting the request, your Personal Data will be deleted; in case of feedback it shall be kept for another 12 months and then deleted.
Nevertheless, the possibility remains for the Data Controller to keep your Personal Data for the time provided for and admitted by the Italian law to protect its interests (article 2947 par. 1 and 3 of the Italian Civil Code).
8. Rights of the Data Subject In accordance with Articles 15 and the following of the Regulation, you have the right to ask the Data Controller, at any time, access to your Personal Data, to correct or delete it or to object to its processing in accordance with art. 21 of the Regulation; you have the right to request the restriction of processing in the cases provided for by art. 18 of the Regulation, as well as to obtain the data concerning you in a structured format of common use and readable by an automatic device in the cases contemplated in art. 20 of the Regulation.
Requests shall be sent in writing to the following address: info@berto.it.
In any case, You always have the right to lodge a complaint with a supervisory authority (Data Protection Supervisor), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to current law.

References: art. 13
 art. 5
 art. 9
 art. 6
 art. 6
 art. 6
 art. 6
 art. 21
 art. 18
 art. 20
 art. 77