Cookies policy

When the user visits the site, their presence on the SITE is anonymous. The IT systems and software processes dedicated to the functioning of this site gather, in the course of their normal tasks, certain personal data, the transmission of which is implicit in the use of internet communication protocols. This corresponds to information that is not gathered to be used for association with specific interested parties, but due to the nature of the information itself, allows for identification of the user through preparations and associations with data held by third parties.

This category includes IP addresses and the domain names of the computers used by the users to connect to the site, the URI (Uniform Resource Identifier) addresses for the resources requested, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numeric code indicated in the status of the response provided by the server (completed, error, etc.), and other parameters related to the operating system and the user’s IT environment.

This data is used solely for the purpose of obtaining anonymous statistical information about the use of the SITE and to verify it is functioning properly, and it is deleted after the process. Cookies are not used to transmit personal information and no type of “permanent cookies” are used, namely, user tracking systems.

“Session cookies” are used, which are not saved permanently on the user’s computer memory, but rather disappear when the browser is closed.

EXTRACT FROM THE PERSONAL DATA CONSERVATION POLICY OF SOCIETA DI PROGETTO BREBEMI S.P.A.

1. Premises and objectives

This extract from the Personal Data Conservation Policy of Società di Progetto Brebemi S.p.A. (hereinafter, also just “Brebemi” or “the Company”) is issued:

In accordance with EU Regulation No. 679/2016 on the protection of individuals with respect to the treatment of personal data, as well as the free circulation of data (General Data Protection Regulations); hereinafter, for brevity’s sake, referred to as the “EU Privacy Regulations” or “the Regulations” or “GDPR”, which compiles the applicable standards with respect to privacy. It is hereby understood that the standards for privacy protection (hereinafter referred to, also for brevity purposes, as the “Privacy standard”), in conjunction with all of the applicable provisions of the Personal Data Protection Law, as stipulated in the GDPR and D.Lgs. No. 101/2018, which compile the provisions for updating of the national standard (D.Lgs. No. 196/2003) to EU Regulation No. 679/2016, in order to provide general indications on the personal data retention procedures.

2.Definitions

  • «Personal data»: any information related to an individual who is identified or identifiable (“the interested party”). An individual is considered identifiable when they can be recognized, directly or indirectly, as specifically being related to a certain identity, such as a name, identity document number, location information, an online identity or one or several characteristics of their physical, physiological, genetic, psychic, economic, cultural or social identity.
  • «Treatment»: any operation or set of operations carried out with or without the assistance of automated processes, applied to personal data or sets of personal data, such as collection, registration, organization, structuring, retention, adaptation or modification, extraction, consultation, use, communication through transmission, diffusion or any other form used to make the information available, comparison or interconnection, limitation, elimination or destruction.
  • «Treatment owner»: the individual or legal entity, the public authority, the service or organization that, on its own behalf or together with others, determines the purposes and methods for treatment of the personal data. In the case that the purposes and methods are determined by the Rights of the Union or the Member States, the treatment owner or the specific criteria applicable to its designation may be determined by the Rights of the Union or its Member States.
  • «Party responsible»:  the individual or legal entity, the public authority, the service or other organization that treats the personal data on behalf of the treatment owner.

 

3. Principles related to the term of treatment of personal data

3.1. General principles

With respect to the Privacy Standard, the treatment of the personal data for which Brebemi is the owner or party responsible is carried out respecting the principles summarized below.

Personal data shall be:

  • Treated legally, correctly and transparently for purposes of the interested party.
  • Gathered for specific, explicit and legal purposes, and then treated in a manner compatible with such purposes.
  • Appropriate, pertinent and limited to what is necessary for the purposes for which it is treated.

 

In general terms, the data is retained in a matter that makes it possible to recognize the interested parties for a period not exceeding the time it takes to achieve the purposes for which the data is treated. In compliance with the legal obligations, application of the standards in effect of a civil, tax, business, social security or labor law nature, etc., or in cases where treatment is necessary to verify, exercise or defend a right in a legal environment, or when the jurisdictional authorities exercise their jurisdictional functions, certain personal data must be retained for longer to respect the time periods established in the referred obligations or standards. In addition, the legislator and the controlling authority may determine specific terms for retaining information subject to certain types of treatment, respecting the limitations established in the Privacy standard.

3.2. Specific considerations depending on the type of interested party

Subject to the application condition established in the general principles established above in paragraph 3.1, in which the term of retention of the data is established based on achievement of the purposes for which it is treated (such purposes are specified in the communications or tied to the legal treatment grounds), below is a description, for the main categories of ownership of interested party data, of the aspects that regulate the duration of the main treatments of the personal data of interested parties, as well as the cases in which it is possible to apply conservation relationships of a regulatory nature.

*For example, legal obligations or relationships arising from civil, tax, social security or labor rights standards (usually 10 years after termination of the contractual relationship), cases of exercise of rights in the legal environment, etc.; namely, other specific relationships establishing a duration of treatment defined by the legislator or the control authorities for certain purposes.

Should it be necessary to apply aspects that establish a different term of treatment than established above, they shall be clearly established in the communications made to the recipients.

Category of data corresponding to the interested party Aspects that regulate the term of treatment Potential application of conservation relationships of a regulatory nature*
Personnel (dependents and workers)
Duration of the labor relationship or collaboration
Candidates
Period of interest of the professional profile of the candidate, as well as follow-up on the position vacancy
Users/Customers
Duration of the contractual relationship and terms necessary for provision of the service
Third parties
Duration of the contractual relationship

4. Right to elimination

The interested party has the right to obtain elimination of the personal data related to them without unjustifiable delay, and the Owner shall proceed to execute such elimination in the following cases:

  • The personal data is no longer necessary for the purposes for which it was collected or treated in another manner.
  • The interested party revokes the consent on which the treatment is based (in the cases where the consent constitutes the legal grounds for treatment), and when there are no other remaining legal grounds for such treatment.
  • The interested party opposes the treatment, based on the provisions of the standards in effect and when there is no remaining legal reason for such treatment.
  • The personal data has been treated illegally.
  • The personal data must be eliminated to comply with a legal obligation established in the Law of the Union or the State to which the owner of the treatment is subject, as well as the other cases established in the Privacy standard.

 

The provisions set forth in the above paragraph shall not apply when the treatment is necessary:

  • To exercise the right of freedom of expression and information.
  • To comply with a legal obligation that requires the treatment established by the EU or the Member State to which the Owner of the treatment is subject, or for execution of a task of public interest, as well as for the exercise of public powers attributed to the owner of the treatment.
  • For archiving purposes, when in the public interest, scientific or historical research, or for statistical purposes to the extent that the law referred to in the preceding paragraph may preclude or hinder the achievement of the purposes of the treatment.
  • For verification, execution or defense of a right in the legal sphere.
  • Or in the other cases indicated in the Privacy standard.

5. Contact us

For more information on the term of treatment or for execution of elimination rights, please contact privacy@brebemi.it

No content found

Numero verde: 800 186083

Il nuovo servizio di Customer Experience e Costumer Satisfaction per gli utenti di A35 Brebemi.

Accedere via smartphone alla piattaforma Qualtrics