INFORMATION ON THE PROCESSING OF PERSONAL DATA OF CANDIDATES FOR CURRICULA SENT VIA WEBSITE

INFORMATION ON THE TREATMENT OF PERSONAL DATA ACCORDING TO THE ART. 13 OF THE EU REGULATION 2016/679

FEDERIGHI 1926 S.p.A. (hereinafter "FEDERIGHI"), this Disclosure intends to make visitors to the website "www.blancmariclo.com (hereinafter the" Site ") aware of the policy adopted regarding the protection of personal data, emphasizing its commitment and attention with regard to the protection of the privacy of the visitors themselves.This information is provided only for the Site and not for other websites that may be consulted by the user through links in relation to which FEDERIGHI cannot be held responsible with regard to the processing of personal data made there.In accordance with the EU Regulation 2016/679 FEDERIGHI provides the following information.

1. The Data Controller

The Data Controller for personal data is FEDERIGHI 1926 S.p.A., with headquarters in Via Tosco Romagnola Ovest, 17, 56012 Fornacette (PISA) email address for privacy issues: [email protected]

2. Types of personal data processed through the Site

Connection and navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's IT environment are collected for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing.

Data communicated by the user

The optional, explicit and voluntary sending of messages to the contact addresses of FEDERIGHI, involves the acquisition of the contact details of the sender, necessary to respond, as well as all the personal data included in the communications.

Cookies and other tracking systems

For more information on the use of cookies by FEDERIGHI, we invite you to read our Cookie Policyon our site.

Registration data / for use of the Website services

To access the Site, no registration is necessary, however, in some dedicated areas of the same it is possible to register to access the services offered therein (newsletters, franchise affiliation requests, B2B online shop portal, sending CVs for offers of work). In these areas, common and identifying personal data may be requested, such as name, surname, address or other contact details, date of birth, order and purchase process data, tax data and other data for billing and delivery of products, CV data and motivational letters via the appropriate section of the Site.

3. Data processing methods

The processing of personal data relating to you will mainly be carried out with the aid of electronic means, including automated means, in accordance with the methods and with the appropriate tools to guarantee the security and confidentiality of the data. In particular, all technical, IT, organizational, logistic and procedural security measures will be adopted, so that an adequate level of data protection is guaranteed, as required by law, allowing access only to persons authorized to process data. of the owner or managers designated by the owner. The information acquired and the methods of processing will be relevant and not excessive in relation to the type of services rendered. The data will also be managed and protected in environments whose access is under constant control. FEDERIGHI retains personal data through servers mainly located within the European Economic Area, however, it reserves the right to make use of services located in countries outside the EU, in which case the service providers are selected from those who provide adequate guarantees for of the articles 45 and following of the GDPR. With specific reference to the USA, the transfer of data is authorized based on specific decisions of the European Union and the Guarantor of the protection of personal data, in particular the decision 1250/2016 (Privacy Shield).

4. Purposes and legal bases of the treatments

The treatments carried out through the Site are carried out for the following purposes and according to the conditions of lawfulness (or legal basis) indicated below with reference to each of the same purposes:

a) to allow you to browse our site and use the services offered therein through the dedicated areas;

b) to provide you with assistance if requested by you through our Sales Department and to respond to your request sent by phone or email (see section "Contacts");

c) for personnel search and selection purposes if you forward, on request or spontaneously, your CV available through the "send a CV" link in the "Work with us" section.

d) for the purposes of franchising with FEDERIGHI (ie for the opening of commercial businesses with the "Blanc Mariclò" trademark) by registering on the "Become an Affiliate" link;

e) for the use of the site area dedicated to the online shop by customers and potential B2B customers for the purpose of consulting our catalogs and sending product purchase orders;

in all the above cases (points a) - e)) the legal basis of the processing is the execution of a contract and pre-contractual measures (art. 6.1b GDPR);

f) to send, by registering in the "Sign up to the newsletter" section of the Website, for commercial, promotional and information communications in relation to the company and the products and services offered by the same, the legal basis of the processing in question is your explicit consent (art. 6.1a GDPR) revocable at any time, for more information, please consult the specific privacy notice in the aforementioned section;

g) for the geo-location of the user for the search of the dealers closest to him through the "Store locator" section of the Site, the legal basis for such processing is your explicit consent (art. 6.1a GDPR) exercisable through the page pop-up;

h) to comply with obligations imposed by laws or regulations or orders from competent authorities and police. The legal basis for such processing is the need to fulfill a legal obligation (art. 6.1 c GDPR).

5. Nature of the provision and consequences in the event of failure to provide data

The provision of data for the purposes referred to in points a) to e) of art. 4 above is optional. However, since these treatments are necessary to allow registration on the Site and / or use of the services offered through the same, including the evasion of your specific requests, the online shop-service, the affiliation, the possibility to evaluate your candidacy for job offers and to receive newsletters on FEDERIGHI products and services, the failure, partial or incorrect conferment of the data in question will make it impossible to use the aforementioned services and, in general, to give progress to the contractual relationship establishing or establishing and / or fulfilling the obligations connected to it.

Failure to provide data for marketing purposes (point f, article 4) and geo-location (point g, article 4) and will not entail any consequence on the possibility of registering on the Site and using the services provided therein ( including the ability to submit product purchases, affiliation, search for resellers, etc.) but will only imply the impossibility for you respectively of receiving commercial material relating to FEDERIGHI products and services and being geo-localized to identify dealers closest to you. For the purpose referred to in point h) of the art. 4 the provision of data is required by law.

6. Data recipients

Users' personal data may be communicated to the following categories of recipients:

(a) external service providers to whom FEDERIGHI may turn for professional, technical services (eg hosting and technological maintenance of the Site) and functional organizational services for the management of the Site and the activities carried out in it, such as, for example, the management of functionalities offered by the Site;

(b) subjects (Judicial Authorities, police forces) who have access to personal data by virtue of legislative or administrative measures;

(c) banking institutions and companies that manage national or international payment circuits through which payments are made for products once ordered through the Site;

(d) agencies / platforms for the automated marketing communications service;

(e) couriers or forwarding agents in charge of delivering the products ordered through the Site;

(f) for CV data, external personnel selection companies.

A list of Data Processors is available upon request by writing to [email protected]. Data Processors are bound by appropriate contractual obligations pursuant to art. 28 GDPR to implement adequate security measures in order to protect the security and confidentiality of personal data.

7. Period and place of storage of personal data

FEDERIGHI keeps your personal data for the time strictly necessary to achieve the purposes indicated above in compliance with civil and fiscal conservation obligations and with the limits established by law. In particular, FEDERIGHI adopts the following terms of conservation.

Contact requests / complaints. Your personal data will be kept for the time necessary to process the request.

Account. In the event of cancellation, exclusion or disabling of non-use of your account on the Site, your data will be stored for administrative purposes for a period not exceeding one quarter, subject to any specific legal obligations regarding the conservation of accounting documentation or for purposes of public security. In such cases, the deletion of the data will also be guaranteed by the persons in charge appointed to whom they may have been communicated.

Sales and affiliation services. Except as indicated above, the user's data will be processed and stored for the entire duration of the contractual relationship and, subsequently, for the maximum time provided for by the applicable legal provisions on tax, accounting and limitation of rights and / or forfeiture of the action and, in general, for the exercise / defense of the rights of FEDERIGHI in disputes promoted by public authorities, public bodies / entities and private subjects.

Marketing. With specific reference to your personal data processed for the purpose of sending marketing communications, they will be kept for the period of time permitted by law and by the provisions of the Guarantor for the Protection of Personal Data and, therefore, for a period not exceeding 24 months from from the registration of data on the occasion of the original provision of consent and / or from the relative renewal.

Curriculum vitae. The personal data collected will be kept for the entire period necessary to achieve the purpose of personnel selection and in any case no later than one year from the date of delivery of the curriculum vitae to FEDERIGHI or from the date of the last update communicated to us by the candidate.

Geo-location. The personal data collected for the geo-location of the user's position for the search for resellers will be kept until the end of the session.

8. Rights of interested parties

Pursuant to the articles 15-22 of the EU Regulation 2016/679 to you, as an interested party, the following rights are recognized:

Right of Access: the interested party, pursuant to art. 15, has the right to obtain confirmation that a processing of personal data concerning him is being carried out and, if necessary, to obtain a copy. He also has the right to obtain access to personal data concerning him and to further information such as the purpose of processing, categories of recipients, data retention period and exercisable rights.

Right of rectification: the interested party, pursuant to art. 16, has the right to obtain the rectification of inaccurate personal data concerning him or the integration of the same.

Right to cancellation: the interested party has the right to obtain the cancellation of personal data concerning him, without unjustified delay, if there is one of the reasons provided for by art. 17.

Right to limitation of treatment: the interested party has the right, in the cases provided for by art. 18 of Regulation 2016/679, to obtain the treatment limitation.

Right to data portability: the data subject has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him and has the right to transmit such data to another owner without impediment, according to what required by art. 20 of Regulation 2016/679;

Right to object to processing: the data subject has the right to object to the processing of personal data concerning him / her as provided by the art. 21 of Regulation 2016/679.

Complaint: the interested party also has the right pursuant to art. 77 of the Regulation to submit a complaint to the Guarantor Authority for the processing of personal data (www.garanteprivacy.it)

The above rights may be exercised by sending a request to the Data Controller without formalities by mail to the following address: Via Tosco Romagnola Ovest, 17, 56012 Fornacette (PISA) (Italy), or via email to: [email protected].

9. Review clause

FEDERIGHI reserves the right to review this Privacy Policy at any time. The most recent version of the Privacy Policy is always available on the Website. The full text of the Regulations can be consulted on the website of the Guarantor for the Protection of Personal Data www.garanteprivacy.it

This Privacy Statement is updated to 02.08.2019.