Source: https://www.eng.it/en/legal/privacy-cookie
Timestamp: 2019-04-22 02:52:43+00:00

Document:
According to the rules of the Regulations, the processing carried out by Engineering will be based on the principles of lawfulness, correctness, transparency, purpose and retention limits, data minimization, accuracy, integrity and confidentiality.
The Data Controller processed through the Website is Engineering as defined above. For any information regarding the processing of personal data by Engineering, including the list of data processors, you can write to the following address: dpo.privacy@eng.it.
Following the navigation of this website, we inform you that Engineering will process personal data that may be made up of an identifier such as the name, an identification number, an online ID or one or more characteristic elements of your physical, physiological, psychic, economic identity, cultural or social suit to make the data subject identified or identifiable (hereinafter only "Personal Data").
The computer systems and software procedures used to operate the Site, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This informations are not collected to be associated with identified subjects, but by their very nature could allow to identify users, through processing and association with data held by third parties. This category of data includes IP addresses or domain names of the computers used by users who connect to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user's computer environment. These data are used for the only purpose to obtaining anonymous statistical information on the use of the website and to check its correct functioning, to identify anomalies andor abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site or third parties: except for this possibility, the data on web contacts do not persist for more than thirty days.
In the section of website "Work with us" your personal data may be provided which falls within the category of the personal data referred to in art. 9 of the Regulations, the "data [...] suitable to reveal the racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as to process genetic data, biometric data intended to uniquely identify, a natural person, data relating to the health or sexual life or sexual orientation of the person". We invite you not to publish this data unless strictly necessary. Indeed, we remind you that in the event of the transmission of special categories of personal data, but in the absence of a specific indication of consent to process such data (eventuality which obviously allows you to send a curriculum vitae), Engineering cannot be held responsible, or it can’t receive any kind of complaints, because in this case the processing will be allowed to having data object made manifestly public by data subjects, in accordance with the art. 9 (1) (e) of the Regulation. However, we specify the importance, as already indicated above - to express the explicit consent to the processing of the special categories of personal data, where it decides to share such information.
Using some website services, personal Data may be processed by third parties sent by you to Engineering. With respect to these assumptions, you are the independent data controller, assuming all the legal obligations and responsibilities. In this sense, it confers on the point the widest indemnity with respect to any dispute, claim, request for compensation for damage from treatment, etc. that it should reach Engineering from third parties whose Personal Data have been processed through its use of the functions of the website in violation of the rules on the protection of applicable personal data. In any case, if it provides or otherwise processes Personal Data of third parties in the use of the website, it guarantees from now - assuming all related liability - that this particular hypothesis of treatment is based on an appropriate legal basis pursuant to art. . 6 of the Regulation that legitimizes the processing of the informations.
There are various types of cookies, depending on their characteristics and functions, and these can remain on the user's computer for different periods of time: c.d. session cookies, which are automatically deleted when the browser is closed; CD. persistent cookies, which remain on the user's equipment until a pre-established expiry date.
"Profiling cookies", instead, ie that create profiles related to the user and used to send advertising messages in line with the preferences expressed by the same in the context of web browsing, it’s required a prior consent by the user.
Third-party cookies, ie cookies of sites or web servers other than that of Engineering, used for the purposes of these third parties. It should be noted that these third parties, listed below with the related links to privacy policies, are typically independent data controllers collected through the cookies they serve; therefore, it must refer to their policies regarding the processing of personal data, information and consent forms (selection and de-selection of the respective cookies), as specified in the aforementioned provision. For the sake of completeness, we also specify that Engineering will do the maximum to track cookies on our website. These are updated regularly in the table below, where we give transparency on the cookies directly sent by Engineering and about their purposes. Regarding the third parties that send cookies through our site, we provide below the links to the respective privacy policies: to these third parties we demand, as already specified, the responsibility to provide the information and collect your consent, as provided by the Determination. This responsibility is referred not only to cookies that third parties send directly, but also to any additional cookies that they send via our website using services that the third parties themselves enjoy. In fact Engineering doesn’t control and does not know characteristics or purposes of these cookies, sent by service providers of the aforementioned third parties.
Third-party cookies, ie cookies of sites or web servers other than Engineering, used for the purposes of these third parties. It should be noted that such third parties are typically independent data controllers collected through the cookies they serve; therefore, it must refer to their policies regarding the processing of personal data, information and consent forms (selection and de-selection of their respective cookies), as specified in the aforementioned Determination. For completeness it is also specified that Engineering does its utmost to be able to track cookies on its Site.
- Google Analytics: used to analyze the use of the site by users, compile reports on site activity and user behavior, check how often users visit the site, how the site is tracked and which pages are visited most frequently. The information is combined with information collected from other sites in order to create a comparative picture of the use of the site compared to other sites of the same category.
Data collected: browser identification, date and time of interaction with the site, page of origin, IP address.
Place of data processing: European Union being active the anonymization of the service.
The data collected do not allow personal identification of users, and are not intersected with other information relating to the same person. They are treated in an aggregate and anonymised form (truncated to the last octet).
The legal basis of the Personal Data processing for the purposes set out in Section 3 (a-b-c) is art. 6 (1) (b) of the Regulations as the processing is necessary for the provision of the Services or for the response of requests by the interested party. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the Services provided by the website, find requests or evaluate CVs. With specific reference to the objective 3.c and to the connected analysis of the professional social profiles freely available on the Internet as per section 2.b, the legal basis of the processing is art. 6 (1) (f) of the Regulations, ie the legitimate interest of Engineering to verify any risks on the suitability of the candidate to hold the specific position.
The purpose set out in section 3.d represents a legitimate processing of Personal Data pursuant to art. 6 (1) (c) of the Regulation. Once the Personal Data have been provided, the processing is indeed necessary to fulfill a legal obligation to which Engineering is subject.
c. persons authorized by Engineering to the processing of Personal Data necessary to carry out activities strictly related to the provision of the Services, which are committed to confidentiality or have an appropriate legal obligation of confidentiality (eg employees of Engineering).
Personal Data processed for the purposes set out in section 3 (a-b) will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments performed for the provision of Services,Engineering will process Personal Data up to the time allowed by Italian law to protect its own interests (Art. 2946 c.c. and ss.). With regard to the CVs transmitted through the "Work with us" form referred to in section 3.c, Personal Data will be kept as long as the position for which the CV was sent is available or, in the case of a spontaneous application, up to a 1 year. The possibility for Engineering to recontact the candidate shortly before the indicated deadline to request an extension of this retention period is reserved.Personal Data processed for the purposes set out in section 3.d will be kept until the time required by the specific obligation or applicable law.
Pursuant to articles 15 and following of the Regulation, you have the right to ask Engineering, at any time, access to your Personal Data, to rectify or cancel them or to oppose their treatment, you have the right to request the limitation of the processing in the cases foreseen by the art. 18 of the Regulations, as well as obtaining, in a structured format, in common use and readable by automatic device, the data concerning it, in the cases provided by art. 20 of the Regulation.
Requests must be sent in writing to Engineering at the following address: dpo.privacy@eng.it.

References: art. 9
 art. 9
 art. 6
 art. 6
 art. 6
 art. 18
 art. 20