This information note is provided in compliance to art. 13 of the EU Regulation 679/2016 (GDPR) to those who visit the Internet website www.ncmonline.it.
The information is provided only for the aforementioned website and does not to other websites outside the present one and which may be consulted by the user via links.
By browsing the abovementioned website, users’ personal data can be processed.
1) Title Holder
Title holder of the personal data processing carried out in the website www.ncmonline.it is N.C.M. S.p.A., with legal headquarters in Foligno, via A. Vici, 34, e-mail: email@example.com.
2) Nature of the data processed and purposes of processing
- a) Usage Data
Following the use of this website, data related to identified or identifiable subjects may be processed.
The computer systems and software procedures used to operate this domain acquire, in the course of normal operations, some personal data the transmission of which is implicit when using internet communication protocols.
This information is collected in an aggregate and anonymous form: in itself, it is not specifically collected to be associated with identified concerned parties but, by its very nature, could allow to identify users through the processing and association with other data held by third parties.
This category of data includes IP addresses or domain names of the computers used by those connecting to the website, the Uniform Resource Identifier (URI) addresses of the requested resources, the time of request, the method used to submit the request to the server, the size of the file obtained in response by the server (successful, error, etc.), and other parameters related to the operating system and the user’s IT environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning, and are deleted immediately after processing.
Such data could, however, be used to ascertain responsibility in case of hypothetical IT crimes to the detriment of the website.
- b) Data provided by the user
Personal data that the user spontaneously provides to request information or to provide his/her CV (to be then contacted) is also subject to processing.
In the latter case, specific categories of data may be processed should the user state he/she belongs to protected categories.
Furthermore, and in any case, N.C.M. will process data to fulfil the obligations in compliance with European laws, regulations and standards and, if needed, to exercise rights in court.
Users’ personal data is not shared.
In the event users provide data that is inappropriate or irrelevant to the purposes of the collection, N.C.M. will delete it immediately.
- c) Cookies
Please refer to the specific “Cookies Policy” published on the website to find out all necessary information on the type and mode of operation of cookies and other services and features activated on the website.
3) Legal Basis
Apart from session data that is necessary to allow use of this website, the user is free to provide his/her personal data if he/she wants to contact N.C.M. and ask questions.
The legal basis of the processing therefore consists in the need to provide a response to the user.
Data provided in the user’s résumé is also processed to exercise rights and fulfil the obligations on the part of the title holder or of the user in matters of work or social protection.
4) Data Recipients
Pursuant to GDPR art. 28, only those entrusted by N.C.M. with data processing and under direct authority of the company have access to users’ personal data, as well as external managers and sub-controllers who provide N.C.M. with specific services and with whom N.C.M. has stipulated specific contracts.
The complete list of managers and sub-controllers is available upon request at: firstname.lastname@example.org.
The processing of data collected through this website is carried out only by specifically-authorized personnel, which has been provided with operating instructions to ensure processing is carried out in compliance with the law.
Personal data collected through N.C.M.’s website may be shared with companies that act as independent owners and which N.C.M. uses for the supply of services of a professional and technical nature related to website management and the pursuit of its purposes. All the aforementioned parties are committed to using the information received only for the purposes of the aforementioned processing, to keep it confidential, intact, and unavailable to unauthorized third parties.
Moreover, personal data may be disclosed pursuant to a provision of law or regulation, or to obey an order on the part of an administrative or judicial authority.
5) Data Transfer
The data object of the processing is stored in servers located in the Country. In the event of its transfer outside the European Union should some service provider servers be located there, N.C.M. will adopt all necessary measures prescribed by the GDPR in order to protect the users’ personal data.
6) Mode of Processing and Storage Period
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it was collected and to provide the services required of this website.
Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access. All information collected on the website is stored in secure facilities that restrict access to authorized personnel only. The website is monitored regularly to check for any security breach, and to ensure that all information collected is inaccessible, accurate, and unavailable to unauthorized parties.
The data provided by the user will be deleted when it will no longer be necessary to respond to the user’s specific requests, except in case of provisions regarding storage established by current law or regulations.
Data on CVs is deleted after three years from registration.
7) Rights of Access.
GDPR Articles no. 15 to 22 confer the user, as a concerned party, the exercise of specific rights.
Article no. 15 recognizes the right of individuals to access their personal data and to obtain a copy thereof. The right to obtain a copy of the data in possession of the website must not affect the rights and liberties of others.
Once the user has applied for access, he/she has the right to obtain from N.C.M. the confirmation regarding whether or not his/her data is being processed as well as the purposes of processing, the type of data being processed, the third parties the data was shared with, and whether or not the data has been transferred to an extra-European country with adequate guarantees. Users also have the right to know the retention time of their personal data, with respect to the aforementioned purposes.
8) Other Rights
With respect to personal data, users have the right to request rectification of inaccurate data and integration of incomplete data as well as cancellation (right to be forgotten) under the conditions indicated in GDPR art. 17, treatment limitation, and data portability.
To exercise their rights, users can contact N.C.M. by writing an e-mail to: email@example.com, or writing to title holder’s headquarters.
Before providing an answer, the title holder may need to identify the user by requesting a copy of his/her identification document.
A written answer will be provided to the user without undue delay and, in any case, no later than one month after receipt of the request.
In the event that the user believes that the processing of his/her personal data is in violation with the provisions of the GDPR, he/she has the right to lodge a complaint with the Personal Data Protection Authority based in Rome, pursuant to GDPR art. 77, as well as to appeal in front of the judicial authorities.
The Title Holder
User Declaration when submitting a CV