PRIVACY POLICY

PRIVACY POLICY - Informative Document pursuant to and for the purposes of Article 13 regulation (EU) 2016/679 (GDPR)

WHY DO YOU NEED THIS INFORMATION?

In accordance with the EU regulation 2016/679 (hereinafter "GDPR"), this page describes the methods of processing the personal data of users who visit this website. This policy is provided pursuant to art. 13 GDPR. The informative document is not to be considered valid for other third party websites, possibly accessible through links on this website, for which no responsibility is assumed.

Personal data that can be processed
Personal data: any information concerning an identified or identifiable natural person ("data subject"). A natural person is considered identifiable, directly or indirectly, with particular reference to an identification such as the name, identification number, data relating to location, to an online identification, to one or more features of its physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30 GDPR).
Customers' data and potential customers' data
In particular, we collect and process the personal data (hereinafter also just "data") of the Customers or of those who could potentially use the many Services offered by the Group, becoming our Customers:
- Identification Data: name and surname of the user, province of residence;
- contact details: e-mail address, telephone;
Apply
We collect and process the personal data provided by the User who sends his application attaching his curriculum vitae to cover a possible work position:
- the identification and personal data of the natural person applying (for example name, surname, date and place of birth);
- contact details (e.g. location, province, landline and mobile phone number, e-mail address);
- any "special categories of personal data" concerning the health status protected category law 104)
- any other data or information included in the curriculum vitae

Navigation data
The computer systems and software for the operation of this website acquire, during their normal functioning, some personal data which transmission is implicit in the internet communication protocols. This information is not collected to be associated to identified data subjects, but due to their same nature they may allow to identify users through elaborations and associations of data retained by third parties. This data category included the IP addresses or the domain names of computers by users that connect to the website, the addresses in URI numbering (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the server's reply (successful, error, etc..) and other parameters related to the user's operating system and computing environment.

Data communicated voluntarily by the data subject
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this website and/or the filling in of the form to collect data involves the subsequent acquisition to answer the requests as well as other possible personal data entered.

Cookies. What are Cookies? What are cookies for?

Cookies are small text files that the websites visited by users send to their terminals, where they are memorized to be retransmitted to the same websites on the next visit. Instead, the so called third party cookies are set by a different website from that the user is visiting. This is because there are elements on each website (images, maps, sounds, specific links to webpages of other domains etc) that reside on servers other than the website visited. The cookies are used for different purposes: execution of computer authentication, session monitoring, memorization of information on specific configurations regarding users that access the server, memorization of preferences etc. For further information on the cookies used on this website see the cookie policy reported in the footer and at the following link.

1. WHO IS THE DATA CONTROLLER? HOW CAN YOU CONTACT HIM?

The data controller is GTS SPA - Via G. d’Annunzio, 2/75 - 16121 Genova (GE) Italia, VAT 03223210109, in the person of its pro tempore legal representative. The Data controller's contact data and telephone number are indicated in the “Contacts" section of the website www.gtsspa.com - e-mail privacy@gtsspa.com

2. PURPOSE OF THE PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD AND NATURE OF THE PROVISION

PURPOSE OF PROCESSING	LEGAL BASIS	RETENTION PERIOD	NATURE OF THE PROVISION
Browsing on this website. The data necessary for the use of web services are also processed for the purpose of: obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.); checking the correct functioning of the services offered; ascertaining responsibilities in case of hypothetical computer crimes against the website. For use of cookies and similar technologies see the cookies policy in the footer	The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedom of the data subject who require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the functioning of the website and browsing (Art. 6, par. 1 Lett. f and recital 47 of the GDPR). Upon request, the data subject has the possibility to obtain information on the balancing of interests test. For non-technical cookies, the processing is based on consent to the processing of personal data (art. 6 par. 1 Lett. A and C42, C43 of the GDPR). Consent is given through the banner and the cookie policy of the website	The retention of the navigation data will be up to the duration of the navigation session and in any case for more than seven days (except for any need to ascertain crimes by the judicial authority). For cookies see the cookies policy in the footer of the site	The provision is necessary for the navigation of the website. For cookies see the cookies policy in the footer of the site

PURPOSE OF PROCESSING

LEGAL BASIS

RETENTION PERIOD

NATURE OF THE PROVISION

Browsing on this website. The data necessary for the use of web services are also processed for the purpose of:

obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.);
checking the correct functioning of the services offered;
ascertaining responsibilities in case of hypothetical computer crimes against the website.

For use of cookies and similar technologies see the cookies policy in the footer

The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedom of the data subject who require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the functioning of the website and browsing (Art. 6, par. 1 Lett. f and recital 47 of the GDPR). Upon request, the data subject has the possibility to obtain information on the balancing of interests test.

For non-technical cookies, the processing is based on consent to the processing of personal data (art. 6 par. 1 Lett. A and C42, C43 of the GDPR).

Consent is given through the banner and the cookie policy of the website

The retention of the navigation data will be up to the duration of the navigation session and in any case for more than seven days (except for any need to ascertain crimes by the judicial authority).

For cookies see the cookies policy in the footer of the site

The provision is necessary for the navigation of the website.

For cookies see the cookies policy in the footer of the site

In addition to Browsing, personal data will be processed after filling out forms in the reference area, for:

PURPOSE OF PROCESSING	LEGAL BASIS	RETENTION PERIOD	NATURE OF THE PROVISION
A) CONTACT AREA, sending contact requests, information, assistance.	the processing is necessary for the execution of a contract in which the data subject is a party or for the execution of pre-contractual measures adopted upon request of the same; (C44) art. 6 par. 1 letter b) of the GDPR	Maximum 12 months	The provision is necessary. Failure to provide the necessary data will make it impossible to be contacted and receive information
B) NEWSLETTER SUBSCRIPTION AREA FOR DIRECT MARKETING PURPOSES for sending advertising or direct sales material or for carrying out market research, approval or commercial communication and newsletters via automated means (e-mail, SMS). The communications may contain promotional activities and / or logos of third-party partners and companies belonging to the group. For a complete list of Group companies and partners, you can ask privacy@gtsspa.com. For the list of companies of the group you can also look at the contact section There will be no transfer of personal data. To compare and possibly improve the results of Communications, the Controller uses systems for sending newsletters and promotional communications with reports. Thanks to the reports, the data controller will be able to know, for example: the number of readers, openings, unique "clickers" and clicks; the devices and operating systems used to read the communication; details on the activity of individual users; the details of the emails sent, emails delivered and those not delivered among those forwarded; All these data are used for the purpose of comparing, and possibly improving, the results of communication.	the processing is based on consent to the processing of personal data (C42, C43) art. 6 par. 1 letter b) of the GDPR	Until withdrawal of consent (opt-out)	Optional provision. Failure to provide the necessary data will make it impossible to receive promotional communications and newsletters

PURPOSE OF PROCESSING

LEGAL BASIS

RETENTION PERIOD

NATURE OF THE PROVISION

A) CONTACT AREA, sending contact requests, information, assistance.

the processing is necessary for the execution of a contract in which the data subject is a party or for the execution of pre-contractual measures adopted upon request of the same; (C44) art. 6 par. 1 letter b) of the GDPR

Maximum 12 months

The provision is necessary.
Failure to provide the necessary data will make it impossible to be contacted and receive information

B) NEWSLETTER SUBSCRIPTION AREA FOR DIRECT MARKETING PURPOSES for sending advertising or direct sales material or for carrying out market research, approval or commercial communication and newsletters via automated means (e-mail, SMS).
The communications may contain promotional activities and / or logos of third-party partners and companies belonging to the group.
For a complete list of Group companies and partners, you can ask privacy@gtsspa.com.
For the list of companies of the group you can also look at the contact section
There will be no transfer of personal data.

To compare and possibly improve the results of Communications, the Controller uses systems for sending newsletters and promotional communications with reports. Thanks to the reports, the data controller will be able to know, for example: the number of readers, openings, unique "clickers" and clicks; the devices and operating systems used to read the communication; details on the activity of individual users; the details of the emails sent, emails delivered and those not delivered among those forwarded; All these data are used for the purpose of comparing, and possibly improving, the results of communication.

the processing is based on consent to the processing of personal data (C42, C43)

art. 6 par. 1 letter b) of the GDPR

Until withdrawal of consent
(opt-out)

Optional provision.
Failure to provide the necessary data will make it impossible to receive promotional communications and newsletters

3. TO WHOM WILL PERSONAL DATA BE COMMUNICATED?

Personal data will be communicated, also based on the purposes provided in specific areas, to subjects who will process the data as independent data controllers, or data processors (art. 28 GDPR) and processed by natural persons (art. 29 GDPR) acting under the authority of the data controller and managers on the basis of specific instructions provided regarding the purposes and methods of processing, for specific purposes according to the area of reference. The data will be communicated to recipients based in Italy, belonging to the following categories:

Subjects based in Italy who provide services for the management of the site and communication networks, including e-mail and SMS;
Subjects based in Italy who provide website hosts;
Related Group companies, subsidiaries with headquarters in Italy;
Call centres based in Italy for phone call management and contacts;
Competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, on request.

According to the purposes:

Subject to consent to subjects based in Italy who provide services for the management of the information system, platforms for sending newsletters, SMS and commercial and promotional communications in general, communication agencies;
Freelancers, studios or companies based in Italy, in the context of assistance and consulting relationships, including, with regard to the “work with us” section any third parties and labour consultants and companies for the purposes of staff Selection.

The list of data processors is constantly updated and available by writing to privacy@gtsspa.com or to the other addresses indicated above.

4. WILL THE DATA BE TRANSFERRED TO NON-EEA COUNTRIES?

Personal data will not be transferred to non-EEA countries. For cookies see the cookies policy in the footer of the site

5. IS THERE AN AUTOMATED PROCESS?

Personal data will be subjected to traditional manual, electronic and automated processing. It should be noted that the Data Controller does not carry out fully automated decision-making processes.

6. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?

You can assert your rights as expressed by art. 15 e s. s. GDPR, by contacting the data controller at privacy@gtsspa.com or to the contacts indicated above. You have the right, at any time, to request access to your personal data (art.15), rectification (art.16), erasure (art.17), restriction of processing (art.18). The data controller communicates (art. 19) any corrections, cancellations or limitations of the processing carried out to each of the recipients to whom the personal data have been transmitted. The data controller shall inform the data subject on the recipients if the data subject requests it. You have the right to data portability in the cases provided for (art.20) and in this case they will be provided to you in a structured format, commonly used and readable, by automatic device. You the right to oppose, to the processing of data based on the legitimate interest, as well as in specific cases, to withdraw the consent given, without prejudice to the lawfulness of the processing based on consent before its withdrawal .at any time in the cases provided for (art.21).
To no longer receive automated direct marketing communications (e-mails and SMS) it will be sufficient to write an e-mail to the address privacy@gtsspa.com subject "cancellation by automated” or use our automatic cancellation systems provided for e-mail only (unsubscribe) at any time.
In case you think that the processing of personal data carried out by the Holder takes place in violation of the provisions of the Regulation (EU) 2016/679, you have the right to submit a complaint to the supervisory authority, in particular in the member State of habitual residence or work or in the place where you have verified the alleged violation of the regulation (https://www.garanteprivacy.it/), you also have the right to bring the case to the appropriate court.

7. Changes to the policy

The data controller reserves the right to modify, update, add or remove parts of this policy. In order to facilitate the verification and modification of the text, the information will contain the date of update.
Update date: April 1, 2022
***