Legal
Privacy
Policy
Information Document Article 13 Regulation (EU) 2016/679 – GDPR – Information regarding the processing of personal data collected from the data subject in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR). We provide you with the necessary information regarding the processing of your personal data. This information is provided pursuant to Article 13 of the GDPR and Article 130 of the Privacy Code. This notice is not applicable to other websites that may be accessible via links found on the websites under the domain of the data controller, who is in no way responsible for the websites of third parties. This notice also takes inspiration from what is provided by Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies, the Guidelines on cookies and other tracking tools of the Italian Data Protection Authority, and the EDPB Guidelines 05/2020 on consent under the GDPR, adopted on 04.05.2020.
Manageable personal data
Personal data
Any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person; (C26, C27, C30).
Navigation data
The computer systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects. Anyway, by its very nature, it could allow users to be identified, through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and computing environment.
Information provided by the interested party
The optional, explicit, and voluntary sending of messages to the contact addresses indicated on this site and/or the completion of data collection forms entail the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included.
Specific information
Specific information notices may be provided on the pages of the site in relation to particular services or data processing activities.
Data controller
Pursuant to Articles 4 and 24 of Regulation (EU) 2016/679, the data controller is Vibo S.p.A, with registered office at Via Arzignano, 46, 36070 Trissino (VI), Italy, VAT number 01265720241, e-mail address gdpr@viboitaly.com, represented by the legal representative pro tempore.
Processing purposes
Legal basis, Data retention period, Nature of the provision
Website browsing
- Legal basis: Legitimate interest (Art. 6(f) and Recital 47): the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, considering the reasonable expectations of the data subject based on their relationship with the data controller. Activities strictly necessary for the operation of the site and to provide the browsing service on the platform.
- Data retention period: Until the end of the browsing session. For more information on browsing, see the cookie policy.
- Nature of the provision: Except as specified for browsing data (which are necessary to enable browsing the website), the user is free to provide personal data.
Possible completion of contact form
- Legal basis: Based on the execution of pre-contractual measures adopted at the request of the data subject (C44), Art. par. 1 lett. b) of the GDPR.
- Data retention period: 1 year
- Nature of the provision: The provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with the symbol * or the wording (required) will make it impossible to obtain what is requested or to use the services of the data controller.
Download Area
- Legal basis: Based on the execution of contractual measures adopted at the request of the data subject (Recital 44), Art. 6(1)(b) of the GDPR.
- Data retention period: 1 year
- Nature of the provision: The provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with the symbol * or the wording (required) will make it impossible to obtain what is requested or to use the services of the data controller.
Personnel selection - Work with us
To apply for personnel selection, conduct recruitment and selection activities for the possible establishment of an employment relationship, including for positions different from those for which the data subject has spontaneously applied; to retain personal data for future selections; for interviews and possible video interviews (including image/audio data processing). For other purposes related to selection, please refer to the specific information notice in the dedicated area on the site, if present.
- Legal basis: The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the data subject's request; (Recital 44) Art. 6(1)(b) of the GDPR. For other purposes related to selection, please refer to the specific information notice in the dedicated area on the site, if present.
- Data retention period: The retention period is a maximum of 12 months. In principle, data collected during the hiring process will be deleted as soon as it becomes evident that no job offer will be made or that the offer will not be accepted by the candidate. For other purposes related to selection, please refer to the specific information notice in the dedicated area on the site, if present.
- Nature of the provision: The provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with the symbol * or the wording (required) will make it impossible to obtain what is requested or to use the services of the data controller. For other purposes related to selection, please refer to the specific information notice in the dedicated area on the site, if present.
Spontaneous e-mail sending
Sending specific information requests via email to the addresses provided on the website.
Management of requests for exercise of data subject rights
In accordance with Articles 15 and onwards of the GDPR (rights of the data subject):
- Legal basis: Processing is necessary to comply with a legal obligation to which the data controller is subject (Recital 45), Art. 6(1)(c) of the GDPR.
- Data retention period: The data will be kept for 5 years from the closure of the request, unless there are legal disputes.
- Nature of the provision: The provision of personal data is mandatory, as it is necessary to fulfill legal obligations.
Newsletter — Direct Marketing
In case the data subject fills out dedicated forms for data collection in specific areas with direct marketing purposes: prior consent and until their opposition to direct marketing activities by the Controller, including market research, direct selling, satisfaction surveys, sending newsletters and promotional, commercial and advertising materials, or related to events and initiatives, by the Controller via automated electronic mail, as well as through operator-assisted calls, postal mail, and other informational materials.
The Controller, to compare and potentially improve communication results, uses systems for sending newsletters and promotional communications with reports. Through these reports, the Controller can ascertain, for example: the number of readers, openings, unique "clickers," and clicks; the devices and operating systems used to read the communication; details about individual user activity; details of emails sent, delivered, undelivered, and forwarded. All these data are used to compare and, if necessary, improve communication results.
The Controller, to compare and potentially improve communication results, uses systems for sending newsletters and promotional communications with reports. Through these reports, the Controller can ascertain, for example: the number of readers, openings, unique "clickers," and clicks; the devices and operating systems used to read the communication; details about individual user activity; details of emails sent, delivered, undelivered, and forwarded. All these data are used to compare and, if necessary, improve communication results.
- Legal Basis: Consent pursuant to Article 6(1)(a) of the GDPR: the data subject has given consent to the processing of their personal data.
- Data Retention Period: Until their opposition (opt-out/withdrawal of consent).
- Nature of Provision: The provision of data for direct marketing purposes is optional. Without it, their data will not be processed for this purpose. Refusal to provide data does not affect the usability of the purposes described under the "Web Navigation" section.
Destinatari o categorie di destinatari dei dati
I dati di natura personale forniti saranno comunicati a destinatari, che tratteranno i dati in qualità di responsabili (art. 28 del Reg. UE 2016/679) e/o in qualità di persone fisiche che agiscono sotto l’autorità del Titolare e del Responsabile (art. 29 del Reg. UE 2016/679), per le finalità sopra elencate al punto 2. Precisamente, i dati saranno comunicati a:
- Soggetti che forniscono servizi per il sito web e delle reti di comunicazione, ivi comprese posta elettronica, host, gestione sito internet, piattaforme e CLOUD, gestionali;
- Per area lavora con noi, oltre al personale interno addetto a tale mansione, anche a soggetti per la gestione di attività di selezione e piattaforme dedicate;
- Autorità competenti per adempimenti di obblighi di leggi e/o di disposizioni di organi pubblici, su richiesta.
Transfer of data outside the European Union
Personal data will not be transferred to countries outside the European Economic Area (EEA).
Automated processing
No automated decision-making processes, including profiling, are used.
Rights of data subjects
You may exercise your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21 of the GDPR by contacting gdpr@viboitaly.com. You have the right to access your personal data, rectify, erase, restrict processing, and portability of your data, where applicable. Furthermore, you have the right to object, at any time, to the processing of your data based on consent and/or legitimate interest. Subject to any other administrative and judicial remedy, if you believe that the processing of your data violates the provisions of Regulation (EU) 2016/679, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).