Engineering: leader della Digital Transformation

Legal

Information provided by WebResults on the protection of personal data

Privacy Policy provided pursuant to art. 13 of the GDPR

INDICE

1. Data Controller
2. Personal data subject to processing
2.1. Navigation data
2.2. Data provided voluntarily by the interested party
2.3. Cookies and related technologies
3. Purpose, legal basis and optionality of processing
4. Recipients of personal data
5. Transfers of personal data
6. Data retention
7. Rights of interested parties


1. Data Controller

WebResults S.r.l., with registered office in Treviolo (BG), Via Piave 41/43 is the Data Controller of the processing (the “Data Controller” or “WebResults”) carried out through this website https://www.webresults.it (hereinafter, the “Website”) in relation to personal data concerning you.

The Data Controller can be reached at the registered office located in Treviolo (BG), Via Piave 41/43.
The Data Protection Officer (hereinafter, “DPO”) can be reached at the following address: dpo.privacy@eng.it.

The processing carried out by WebResults are based on the principles of lawfulness, fairness and transparency, purpose limitation and storage limitation, data minimisation, accuracy, integrity and confidentiality in order to protect the online privacy of its users.

It should be noted that, as part of the "Work with us" section (for which you should refer to a specific privacy policy), the collection and subsequent processing of data that will be entered by users in the appropriate forms will be carried out jointly, as Joint Data Controllers of the processing, by the companies of the Engineering Group (hereinafter, the "Joint Controllers").

Based on the Joint Controllership agreement pursuant to art. 26 of the General Data Protection Regulation (GDPR), stipulated between the aforementioned companies, the respective roles and responsibilities regarding compliance with the obligations deriving from the GDPR have been determined. The essential content of the agreement is made available to the data subject by each Joint Controller, reachable at the addresses indicated above.


2. Personal data subject to processing

We inform you that, while navigating the Website, WebResults will process the following personal data:

2.1. Navigation data

These information’s are not collected in order to be associated with identified data subjects, but they could lead to the identification of users due to their nature and through processing and association them with data held by third parties. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Website, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

2.2. Data provided voluntarily by the interested party

When using some Website Services, it may occur the processing of personal data belonging to third parties, which were sent by you to WebResults. With respect to these hypotheses, you act as an independent data controller, assuming all the obligations and responsibilities of the law. In this sense, you confer the widest indemnity with respect to any dispute, claim, request for compensation or damage from processing, etc, that could be addressed to WebResults, coming from third parties whose personal data have been processed due to your usage of the Website functions, in violation of the applicable personal data protection rules. In any case, if you provide or otherwise process personal data of third parties while using the Website, you guarantee from now - assuming all related responsibility - that this processing is based on an appropriate legal basis pursuant to art. 6 of the Regulation which legitimises the processing of the information in question.

2.3. Cookies and related technologies

WebResults collect personal data through cookies. More information about the usage of cookies and tracking technologies is available here.


3. Purpose, legal basis and optionality of processing

The purposes for which WebResults uses your personal data are indicated below as well as the related legal bases:

Purpose

Legal basis

Obtain anonymous statistical information on the use of the Website and to check its correct functioning, to identify anomalies and/or abuses.

Necessary for the accomplishment of WebResults legitimate interest in order to check the correct functioning of the Website, to identify anomalies and/or abuses [art. 6(1)(f) GDPR].

Respond to requests for assistance or information.

Necessary for the execution of a contract to which you are a party [art. 6(1)(b) GDPR].

The provision of personal data for these purposes is optional but failure to provide it would make it impossible to activate the Services provided by the Website.

Collect and examine the CVs to allow the companies of the Engineering Group, as Joint Controllers, to contact the candidates who have submitted their application through the “Work with us” section.

Necessary for the execution of a contract to which you are a party [art. 6(1)(b) GDPR].

With specific reference to the purpose of analysing professional social profiles made freely available on the Internet, the legal basis of the processing is art. 6(1)(f) of the GDPR. In particular, it is the legitimate interest of Joint Controllers to verify any risks to the suitability of the candidate to fill in the specific open position.

Statistical research/analysis of anonymous or aggregated data that the Data Controller may receive from social providers (eg LinkedIn, Facebook, etc.), concerning, for example, the performance of advertisements relating to the Data Controller's products on the pages of the aforementioned social providers or the users who visualize such advertisements or, again, the general demographics. No information is transmitted to the Data Controller (for example name, surname or e-mail address) that allows, even indirectly, to trace the user's identity.

The legal basis of the processing is the legitimate interest of the Data Controller pursuant to art. 6(1)(f) of the GDPR, representing the economic interest of the Data Controller to increase or improve the advertising of its products through statistical analysis of aggregated data.

Fulfil any legal, accounting and fiscal obligations.

The processing is indeed necessary to fulfil a legal obligation to which WebResults is subject pursuant to art. 6(1)(c) of the GDPR.


4. Recipients of personal data

Your personal data may be shared, for the purposes specified above, with:

a. subjects who typically act as data processors, that is: I) people, companies or professional firms that provide assistance and consultancy to WebResults in accounting, administrative, legal, tax, financial and credit recovery matters relating to the provision of the Services; II) subjects with whom is necessary to interact for the provision of the Services (for example hosting providers); III) or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks); (collectively “Recipients”);

b. subjects, bodies or authorities to whom is mandatory to communicate your personal data by virtue of legal provisions or orders of the authorities;

c. persons authorized by WebResults to process personal data necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees of WebResults).


5. Transfers of personal data

Some of your personal data are shared with Recipients who may be located outside the European Economic Area. WebResults ensures that the processing of your personal data by these Recipients takes place in compliance with the GDPR. Indeed, transfers can be based on an adequacy decision, on the Standard Contractual Clauses approved by the European Commission or on another suitable legal basis. More information is available from WebResults by writing to the following address: dpo.privacy@eng.it.


6. Data retention

The personal data processed will be kept for the time strictly necessary to achieve the processing purposes.

The navigation data, except in the case of data ascertaining responsibility for computer crimes against the Website or third parties, will not persist for more than 30 days.

The personal data processed for the purposes related to legal, accounting, and fiscal obligations will be kept until the time required by the specific obligation or applicable law.


7. Rights of interested parties

Pursuant to articles 15 and the following articles of the GDPR, you have the right to ask WebResults, at any time, to access your personal data, to rectify or erase them or to oppose their processing, you have the right to request the restriction of processing in the cases foreseen by the art. 18 of the Regulation, as well as to obtain the data concerning you in a structured, commonly used and machine-readable format, in the cases provided for by art. 20 of the Regulation.

Requests should be sent in writing to WebResults at the following address: dpo.privacy@eng.it.

In any case, you always have the right to lodge a complaint with the competent Supervisory Authority (Garante per la Protezione dei Dati Personali), pursuant to art. 77 of the GDPR, if you believe that the processing of your personal data is contrary to the legislation in force.