PERSONAL DATA SUBJECT TO PROCESSING
As part of your navigation of our site, the Data Controller may process the following categories of data;
- Navigation data. The computer systems and software procedures used for the operation of this website acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of the Internet. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow the identification of users. This Personal Data will be processed in the manner and for the purposes described below.
- Cookies. Cookies are text files that are automatically generated in the user's computer after visiting certain pages of the site and through which identification data of the user can be collected. For more information, please refer to our Cookie Policy, which can be found on our website.
- Data provided voluntarily by the User. The explicit and voluntary provision of Personal Data by the User is necessary for access to certain services offered by the Data Controller through the website (e.g. registration form for access to the reserved area through personal account). The Personal Data processed are essentially identification data and will be processed in the manner described below.
PURPOSE, LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
The processing to which your Personal Data will be subjected has the following purposes:
- To fulfil specific obligations or perform specific tasks provided for by national and European legislation, laws, regulations;
- To allow the Data Controller to provide its services in accordance with the general principles of lawfulness, correctness, transparency, limitation of purposes and storage, adequacy, minimization of data, accuracy, integrity and confidentiality;
- To allow the correct use of the website and/or access to the reserved area, ensuring the proper functioning of the site itself. For the purposes relating to the reserved area in particular, please refer to the dedicated information;
- allowing the Data Controller to evaluate possible applications in the context of personnel selection and recruitment. For this purpose, please refer to the information provided in the "work with us" section of the site.
For the purposes set forth in point 1, the processing of data is based on the principle expressed in Art. 6 of the GDPR, according to which the processing of personal data is lawful because it is necessary to fulfil a legal obligation to which the Data Controller is subject. For the purposes set forth in points 2 and 3, in compliance with Article 6 of the GDPR, the processing is lawful because it is necessary for the pre-contractual or contractual execution between the parties.
The provision of data is necessary to pursue the purposes indicated. Your refusal to provide such data could make it impossible for Riva Forni Elettrici S.p.A. to evaluate the application submitted or respond to the requests of the Data Subject, guarantee the correct use of the website, as well as the services offered therein.
TREATMENT METHODS
The processing may be carried out manually or with the aid of electronic or automated systems, will take place at the aforementioned headquarters of the Data Controller, at the operating offices or at third parties identified and will include, in compliance with the limits and conditions set forth in art. 5 and 25 of the GDPR, all the operations provided for in art. 4, paragraph 1, no. 2) of the GDPR necessary for the processing in question, including the communication to the parties referred to in the next point.
SCOPE OF COMMUNICATION AND DISSEMINATION AND TARGET AUDIENCES
The Personal Data you provide may be shared, for the purposes specified above, with:
a) Service providers used by the Data Controller for the management and/or maintenance of the information system and telecommunications networks (including e-mails and/or internet platforms) operating as authorised subjects or processors;
The subjects belonging to the above-mentioned categories act as Data Processors or operate in total autonomy as separate Data Controllers. The list of Data processors is constantly updated and available on request at the headquarters of the Data Controller.
b) persons authorised by Riva Forni Elettrici S.p.A. to process Personal Data who are committed to confidentiality or have an adequate legal obligation of confidentiality; (e.g. employees and collaborators of Riva Forni Elettrici S.p.A.);
We also inform you that the processing of Personal Data is carried out in a system of joint control between Riva Forni Elettrici S.p.A. and Riva Acciaio S.p.A. The parties have determined in a transparent way their respective responsibilities regarding the observance of the obligations deriving from the GDPR, through an internal agreement stipulated according to art. 26 of the GDPR. In particular, the parties agree that the respective areas of joint control concern the processing of data of employees in compliance with the purposes set out below, such as:
- Management of ICT systems;
PERSONAL DATA TRANSFER OUTSIDE THE EU
The Data Controller does not directly carry out any data transfer outside the European Union. However, by using cloud services, chosen since it guarantees adequate and appropriate security measures to protect personal data, a transfer of data outside the EEA is possible due to technical and maintenance reasons, by means of the following guarantees, ensured by the supplier:
- Transfer of data to countries deemed to be adequate by the EU Commission.
- Subscription of Standard Contractual Clauses for the transfer of data outside the EU, as defined by the EU Commission, in order to guarantee a safe and legitimate transfer and subsequent processing of data outside the EU.
DATA RETENTION
The processing of the Personal Data in question and their storage will have a duration coinciding with the time necessary for the exhaustion of the purposes indicated in this statement and in any case up to 12 (twelve) months from reception of the above-mentioned data.
RIGHTS OF SUBJECT DATA
Within the limits of Applicable Law, as a Data subject, you have the right to request from Riva Forni Elettrici S.p.A. the access your Personal Data, the rectification or erasure thereof and to limit or object to the processing of your Personal Data at any time.
Requests must be sent via e-mail to the following address: privacyitalia.rfe@rivagroup.com.
As a Data subject, you have the right to lodge a complaint with the competent supervisory authority (Personal Data Protection Authority), if you believe that the processing of your Personal Data is contrary to current legislation.
DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller is the company Riva Forni Elettrici S.p.A. with registered office in Milan Viale Certosa 249, tel. 02307001, e-mail address privacyitalia.rfe@rivagroup.com. In turn, Riva Forni Elettrici S.p.A. has appointed GetSolution di Paola Generali, with registered office in Via Ippolito Rosellini, 12 20124 Milan, tel. 0239661701 e-mail address dpo-grupporiva@getsolution.it, as Data Protection Officer (DPO), available for any information regarding the processing of Personal Data carried out by the Data Controller.
