PROCESSING OF YOUR DATA AND YOUR RIGHTS

Dear customer,

the protection of personal data is important to us. In accordance with Article 13 of the European Data Protection Regulation (GDPR), we are obliged to inform you about the purpose of data collection, storage and forwarding by our company. In addition, this information sheet provides you with information about your data protection rights.

Owner of the data processing:  

Tetris Project Srl

Via Mainardo, 22
I-39012 Merano (BZ)

+39 0473 861 720

E. info@tetris.bz.it

UID-Nr.: IT03054830215

In accordance with Legislative Decree 196/2003 and Articles 13, 14 and 21 of European Regulation 2016/679 (GDPR), we process the following data:

Personal data are of the type:

 

– personal data (name, address, date of birth, tax code)

– operational data (data on the organisation, projects, master data of employees)

This data is stored and processed to provide our services and, if necessary, passed on to third parties only within the scope of our business relationship. Your data will not be transmitted to countries outside the EU and will not be subject to profiling and/or automated decisions.

 

The legal bases for data processing are:

 

– the fulfilment of our pre-contractual and contractual obligations towards you – Art. 6b) GDPR

– legal, contractual or other legal obligations on our part (e.g. rights and documentation obligations in the field of accounting, tax law, contracts, reports, etc.) – Art. 6c) GDPR

– legitimate interest – Art. 6f) GDPR

Who receives my data?

Your data will not be disclosed but will be treated confidentially as part of the business relationship in order to provide the services you have requested.

– the tax consultant

– the public administration and authorities, if regulatory obligations so require

– the legal representative for the administration of claims

– any natural or legal person, public or private, if the disclosure of the data is necessary or lawful

Service providers are contractually bound and in particular obliged to treat your data confidentially.

Purpose:

For the fulfilment of the business relationship, failure to provide data will prevent us from offering you the service.

How long will the data be stored?

The retention period is measured according to the duration of our business relationship and according to our regulatory obligations in terms of retention.

Your rights

The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning him or her exists; in this case, he or she has the right to access the personal data (Art. 15 GDPR).

The data subject has the right to demand that the person responsible immediately correct inaccurate personal data concerning him or her and, if necessary, complete incomplete personal data (Art. 16 GDPR).

The data subject has the right to demand the immediate deletion of personal data concerning him or her if one of the grounds set out in Article 17 GDPR applies, e.g. if the data are no longer necessary for the purposes pursued (right to erasure).

The data subject has the right to request the controller to restrict processing if one of the conditions set out in Article 18 GDPR is met, e.g. if the data subject has objected to the processing for the duration of the controller’s investigation.

The data subject has the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her that has been provided to a controller and has the right to transmit such data to another controller without hindrance from the controller to whom he or she has provided it, for example if the processing is based on the consent of the data subject and the processing is carried out by automated means (right to data portability Article 20 GDPR).

The data subject has the right to object at any time to the processing of personal data concerning him or her on grounds relating to his or her particular situation. The controller shall no longer process the personal data, unless the controller can demonstrate compelling grounds for a processing operation worthy of protection which override the interests, rights and freedoms of the data subject, or that the processing serves to assert, exercise or defend a legal claim (Art. 21 GDPR).

Without prejudice to any other administrative or judicial remedy, a data subject who considers that processing relating to him or her is in breach of this Regulation shall have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State in which he or she normally resides, works or in the place where the alleged breach has occurred. In Italy, the competent supervisory authority is the Garante for the protection of personal data.

You can exercise your rights at the above addresses.

Tetris Project Srl

INFORMATION ON THE PROCESSING

OF PERSONAL DATA

Information pursuant to Articles 12, 13 and 14 of EU Regulation 679/2016

The EU Regulation 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data requires the Controller to provide the data subjects with the information indicated in the epigraph.

 

Purpose of data processing

Personal data are collected and processed in the normal course of office activities for the fulfilment of both institutional, administrative and accounting functions or for purposes strictly related to the exercise of powers and faculties granted to citizens and administrators, not institutional ones.

 

Period of data retention (Applications):

Your application may be considered for any selection called by the Company within 24 months of uploading your CV. This data will be deleted after this period.

 

Processing methods

The data are processed by computer, telematic and/or manual systems using appropriate procedures to guarantee their security and confidentiality.

 

The provision of data

is optional.

 

Failure to provide data implies

that the company will not be able to respond to requests made by interested parties.

 

The data may be communicated

to all subjects (Offices, Bodies and Organs of the Public Administration, Companies or Institutions) which, according to the regulations, are required to know or can know them. In the case of special data and/or data relating to criminal convictions and offences, the data shall be communicated to the subjects and in the forms indicated in the regulations for the processing of sensitive and judicial data, as per the Provision of the Garante for the protection of personal data of 30/05/2005.

 

The data may be known to

the data controller, the data supervisors, the personal data protection officer, the persons in charge of the processing of personal data and the system administrator of this Administration.

 

The data may be disclosed

in the terms allowed by the regulations.

 

Temporal duration of processing and storage of personal data

The processing operations referred to in this information notice will have the duration strictly necessary to fulfil the obligations imposed on the Data Controller by national and/or supranational laws, as well as by the laws of the countries to which the data may be transferred.

 

Rights of the interested parties

Finally, we would like to inform you that Articles 15 to 22 of the Regulation give data subjects the right to exercise specific rights. In particular, with regard to their personal data, data subjects may obtain from the Controller: the right to lodge a complaint with a supervisory authority (art. 13, paragraph 2, letter d); access (art. 15); rectification (art. 16); erasure – oblivion – (art. 17); restriction of processing (Art. 18); notification in the event of rectification, cancellation or restriction (Art. 19); portability (Art. 20); right to object (Art. 21) and non-submission to automated decision-making processes and profiling (Art. 22).

 

Data Processing Section

The data controller of any personal data collected through this website is Tetris Project Srl, with registered office in 39032 Merano (BZ), Via Mainardo,22

Personal data may be processed within the limits and in the manner set out in this statement by employees and collaborators of the Company designated as data processors or persons in charge of the processing, who will receive appropriate operating instructions and will operate under the direct authority of the data controller.

Further information on privacy – Website

Tetris Project Srl, hereinafter referred to as the Company, has developed this “Privacy Policy” in order to describe the management of the website in relation to the processing of personal data of users/visitors consulting it.

This information is provided pursuant to art. 13 of the European Regulation 2016/679 on the protection of personal data – to those who connect to the Company’s website and use the related web services of this site. Your personal data will be processed in accordance with Legislative Decree 196/2003, in the sense of EU Regulation 679/2016 (General Data Protection Regulation) and in accordance with Legislative Decree 101/2018. The information is provided for the above-mentioned website and not also for other websites that may be consulted by the user via specific links.

The processing of your data is part of the service provided by us on the basis of your request and for the fulfilment of our pre-contractual and contractual obligations towards you. Only in the context of our business relationship may your data be passed on to third parties where necessary. Your data will not be sent to other countries of the European Union. No automated decisions or profiling will be applied. The legislator has issued a series of obligations and retention periods regarding the data collected. After the expiry of these periods, the corresponding data will be deleted.

We check the links on our website very carefully. However, we accept no responsibility for the content of pages linked to this website or other websites.

This privacy policy forms an integral part of our website and the services we offer. Access to and use of the site are based on the assumption that this Privacy Policy has been read and understood. If you do not agree with this Privacy Policy, please do not use our site.

We may modify or simply update all or part of this Privacy Policy. Any changes or updates to the “Privacy Policy” will be available to all users in the Privacy section of the site as soon as the updates are active and will be binding as soon as they are published on the site in this section. If you do not wish to accept these changes, you may discontinue use of our site. Your continued use of our website and our products and services following the posting of such changes and/or updates will constitute acceptance of the changes and acknowledgement of the binding nature of the new terms and conditions.

The website is owned and managed entirely by the Company.

Type of data processed and purpose of processing 

Navigation data

The computer systems and software procedures used to operate this site acquire, during normal operation, some personal data which are then implicitly transmitted during the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or the domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site; except in this case, the data on web contacts do not persist for more than 24 months.

 

Data provided voluntarily by users/visitors

If users/visitors connecting to this website send their personal data in order to access certain services (e.g. newsletters, “work with us” service, etc.), or to make requests by e-mail, this entails the acquisition by the Company of the sender’s address and/or any other personal data that will be processed exclusively for the purposes indicated in this statement. Your data will be processed for purposes related to the fulfilment of your specific requests, contractual, fiscal and accounting obligations; invoicing history; litigation and credit protection; fulfilment of obligations under the laws in force.

 

Cookie

As part of this site, some personal information relating to web access is collected through the use of cookies.

There are three categories of cookies:

# essential cookies to ensure the basic functionality of the website

# functional cookies to ensure the performance of the website

# cookies oriented towards the goal of improving the user experience.

Internet pages partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called ‘session cookies’. They will be deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser the next time you visit.

You can set your browser in such a way that you are informed about the setting of cookies and cookies only in individual cases, allow the acceptance of cookies for certain cases or

generally exclude and activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

If you generally do not allow us to use cookies, some features and pages will not function as intended.

Apart from what is specified for navigation data, users/visitors are free to provide their personal data. Failure to provide such data may only result in the impossibility of obtaining what has been requested. Therefore, visitors are able to browse the site even without revealing any personal information and data.

Once registered, the personal data collected will only be used for the services indicated in the information available.

 

Visitors to the site may provide their data in order to

be contacted for requests for information on the services provided

participate in initiatives promoted on this website

express their interest in a working relationship with the Company and/or respond to a job advertisement

 

“Work with us” section

This section gives you the opportunity to express your interest in working for the Company or to reply to a job advertisement for vacancies or new hirings. If you decide to submit your personal data, they will be processed exclusively for such purposes by specially appointed personnel and in accordance with the Company’s normal internal personnel management procedures. The data required for this purpose, under penalty of exclusion from the service, are as follows:

Acceptance of the Company’s “Privacy Policy” constitutes an essential requirement for the use of the service in question.

 

Communication to third parties

Personal data will be communicated to the Company in order to respond to requests for information, or they may be communicated to Bodies and Institutions for the fulfilment of legal obligations or to the judicial authorities, if requested.

In addition, the Company uses other companies and individuals to carry out certain activities such as sending e-mails, delivering packages and making payments. These individuals have access only to the personal data that are strictly necessary to carry out their tasks. The Company underlines the prohibition of their use for different purposes as well as the obligation of processing in compliance with this “Privacy Policy” and the regulations in force.

Through this website, the Company does not deliberately collect sensitive or judicial personal data. Sensitive data, pursuant to art.9 of the European Regulation 2016/679, include personal data revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade unionist nature, as well as personal data disclosing health and sex life. Judicial data within the meaning of Article 10 of European Regulation 2016/679, includes data relating to criminal convictions and offences.

We recommend that you do not provide such information through this website. In the event that disclosure is necessary (for example: membership of protected categories in the case of sending a curriculum vitae for recruitment purposes, in response to a job advertisement or in the case of an expression of interest in working at the Company, you are invited to send to the registered office of the Company by registered letter a declaration containing consent in writing to the processing of this sensitive information.

 

Data retention

The information and personal data of visitors/users collected by this site, including data freely provided in order to obtain the dispatch of informative material or other communications by filling in the curriculum on the site, will be stored for the sole purpose of providing the requested service and for the duration necessary for that purpose. Once the service has been completed, all personal data will be destroyed in accordance with this “Privacy-Policy”, unless otherwise requested by the authority, storage requirements established by law, or unless otherwise indicated in particular sections of the website.

 

Data security

The Company protects personal data through the application of internationally recognised security levels, as well as through security procedures that protect personal data

from unauthorised access improper use or disclosure of the same unauthorised modification accidental or unlawful loss or destruction

 

Web analysis

The website glashaus.euroform.eu uses the service “Google Analytics”, a service of the company Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about your use of the website (including your IP address) is transferred to a Google server in the USA and stored there.

To prevent this from happening, you must set your browser in such a way that no cookies are stored. We have concluded a corresponding contract with the provider for the processing of order data. The IP address is recorded, but pseudonymised immediately by deleting the last 8 bits. This means that only an approximate localisation is possible. The relationship with the web analysis service provider is based on standard Privacy Shield contractual clauses. Data processing is carried out according to the legal provisions of the GDPR. User data will be stored for a period of 14 months.

 

Google-Maps

Our website uses Google Maps to display our location and provide directions. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google). Through the certification according to the EU-US Privacy Shield, Google guarantees that it will follow the EU data protection regulations when processing data in the USA.

If you access the Google Maps components integrated into our website, Google will store a cookie on your device via your browser. Your settings and data are processed to display our location and create a route description. We cannot prevent Google from using servers in the USA. The legal basis is Art. 6 Par. 1 lit. f) GDPR. Our legitimate interest lies in optimising the functionality of our website.

By connecting to Google in this way, Google can determine from which website the request was sent and to which IP address the information is transmitted. If you do not agree to this, you can prevent the installation of cookies by making the appropriate settings in your browser software.

Furthermore, the use of Google Maps and the information obtained through Google Maps is governed by the Google Terms of Use, policies.google.com/terms and Terms and Conditions for Google Maps. Google also offers additional information at adssettings.google.com/authenticated and

 policies.google.com/privacy

 

Google Fonts

Our website uses Google Fonts to display external fonts. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google). Through the certification according to the EU-US Privacy Shield, Google guarantees that it will follow the EU data protection regulations when processing data in the USA. To enable the display of certain characters on our website, a connection to the Google server in the USA is required. established each time you access our website. The legal basis is Art. 6 Par. 1 lit. f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.

When you access our website, a connection to Google is established from which Google can identify the site from which the request was sent and to which IP address the fonts are transmitted for display. Google offers detailed information on adssettings.google.com/authenticated and policies.google.com/privacy, in particular on options to prevent the use of data.

 

Minors

This website is not intended for use by minors. Minors are not allowed to make purchases from the sites listed. We understand the importance of protecting children’s information, especially in an online environment, and therefore we do not knowingly collect or maintain personal information about children.

 

Responsible for the content

Tetris Project Srl

Company headquarters/address

Via Mainardo, 22
I-39012 Merano (BZ)

+39 0473 861 720

E. info@tetris.bz.it