Privacy policy | Meccanica Baldissara

Information on the processing of personal data

Pursuant to Articles 13 and 14 of Regulation 2016/679/EU

⦁ Customer Information
⦁ Supplier Information
⦁ Website visitors information
⦁ Information Candidates

Information on the processing of personal data of customers
Pursuant to Articles 13 and 14 of Regulation 2016/679/EU (hereinafter “GDPR”) MECCANICA BALDISSARA S.R.L. (hereinafter the “Data Controller”) Via Gramsci 53 – 21045 Gazzada Schianno (VA), in its capacity as “Data Controller”, informs you that your personal data collected for the purposes of the conclusion of the contract with the customer and / or in the execution and / or the stipulation of the same will be treated in compliance with the legislation cited, in order to ensure the rights, fundamental freedoms and dignity of individuals, with particular reference to confidentiality and personal identity. We inform you that if the activities provided to you involve the processing of personal data of third parties in your possession, it will be your responsibility to ensure that you have complied with the provisions of the legislation with regard to the persons concerned in order to make their treatment by us legitimate.

Origin, purpose, legal basis and nature of data processed
The processing of your personal data, supplied directly by you, is carried out by MECCANICA BALDISSARA S.R.L. for the purposes of concluding the contract with the Customer and/or within the scope of the execution and/or stipulation of the same.
It is also possible that personal data of third parties communicated by the Customer to the Company may be processed. With respect to this hypothesis, the Customer is the autonomous owner of the treatment and assumes the consequent legal obligations and responsibilities, holding the Company harmless with respect to any dispute, claim and / or request for compensation for damages from treatment that may be received by the Company from third parties.
In compliance with current legislation on the protection of personal data and without the need for specific consent from the interested party, the Data will be stored, collected and processed by the Company for the following purposes:
⦁ fulfilment of contractual obligations, execution and/or stipulation of the contract with the Client and/or management of any pre-contractual measures;

⦁ Fulfilment of any regulatory obligations, fiscal and tax provisions deriving from the performance of the business activity and obligations connected with administrative-accounting activities;

⦁ sending, directly or through third party providers of marketing and communication services, newsletters and communications with direct marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator;

⦁ communication of the Data to third party companies for sending newsletters and communications for marketing purposes by email, sms, mms, push notifications, fax, paper mail, telephone with operator.

The legal bases of the processing for the purposes a) and b) above are Articles 6.1.b) and 6.1.c) of the Regulation.
The provision of data for the above purposes is optional, but failure to provide such data and refusal to do so would make it impossible for the Company to perform and/or enter into the contract and provide the services requested by the same.
The legal basis for the processing of personal data for the purposes c) and d) is Article 6.1.a) of the GDPR as the treatments are based on consent; it should be noted that the Data Controller may collect a single consent for the marketing purposes described herein, pursuant to the General Measure of the Guarantor for the protection of personal data “Guidelines on promotional activities and contrast to spam” of July 4, 2013. The provision of consent to the use of data for marketing purposes is optional and should the data subject wish to object to the processing of Data for marketing purposes carried out by the means indicated herein, as well as withdraw the consent given; he/she may do so at any time without any consequences (except for the fact that he/she will no longer receive marketing communications) by following the instructions in the “Rights of the Data Subject” section of this Information Notice.
Finally, it is recalled that for the processing carried out for the purpose of direct mailing of its own advertising material or direct sales or for carrying out its own market research or commercial communications in relation to products or services similar to those used by the Customer, the Company may use the e-mail addresses or personal data pursuant to and within the limits allowed by Article 130, paragraph 4 of the Privacy Code (Legislative Decree no. 196/2003) and the provision of the Guarantor Authority for the protection of personal data of 19 June 2008 even in the absence of explicit consent. The legal basis for the processing of data for this purpose is Article 6, paragraph 1, letter f) of the GDPR, without prejudice to the possibility of opposing such processing at any time, following the instructions in the “Rights of the Data Subject” section of this Information Notice.

Communication
The data may be communicated to third parties appointed as data processors pursuant to Article 28 of the GDPR and in particular to banking institutions, companies active in the insurance field, suppliers of services strictly necessary for the performance of business activities, or consultants of the company, where this proves necessary for fiscal, administrative, contractual reasons or for requirements protected by current regulations.
Your personal data, or the personal data of third parties in your possession, may also be communicated to external companies, identified from time to time, to which MECCANICA BALDISSARA S.R.L. entrusts the performance of obligations deriving from the task received, to which only the data necessary for the activities requested of them will be transmitted. All employees, consultants, temporary workers and/or any other “natural person” who carry out their activities on the basis of instructions received from MECCANICA BALDISSARA S. R.L., pursuant to article 29 of the GDPR, are appointed “Data Processors” (hereinafter also referred to as “Data Processors”). MECCANICA BALDISSARA S.R.L. will provide the Data Processors or Persons in charge with adequate operating instructions, with particular reference to the adoption of and compliance with security measures, in order to guarantee the confidentiality and security of the data. Precisely with reference to the aspects of personal data protection, the Customer is invited, pursuant to article 33 of the GDPR, to notify MECCANICA BALDISSARA S.R.L. of any circumstances or events that may give rise to a potential “personal data breach” in order to allow for an immediate assessment and the adoption of any actions aimed at countering such an event by sending a communication to MECCANICA BALDISSARA S.R.L. at the addresses indicated below.
The Data will not be disseminated.
This is without prejudice to MECCANICA BALDISSARA S.R.L.’s obligation to communicate the data to Public Authorities on specific request.
Transfer abroad
Your personal data may be transferred abroad if necessary for the management of the assignment received. For the processing of information and data that may be communicated to these subjects will be required the equivalent levels of protection adopted for the processing of personal data of its employees. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided by Chapter V of the GDPR will be applied.
Modalities, processing logics and storage times
Your data is collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles and requirements of Article 5 c 1 of the GDPR.
The processing of personal data is carried out by means of manual, computerized and telematic instruments with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality.
Personal data will be processed by MECCANICA BALDISSARA S.R.L. for the entire duration of the assignment and also subsequently for the purpose of asserting or protecting its rights or for administrative purposes and/or to implement obligations deriving from the applicable pro tempore regulatory and legislative framework and in compliance with the specific legal obligations on data retention.
Nature of contribution
In relation to the aforementioned purposes a) and b) indicated above, the provision of your data is indispensable for the purposes of performing the assignment between you and MECCANICA BALDISSARA S.R.L. and in order to allow MECCANICA BALDISSARA S.R.L. to carry out the fulfilments envisaged by the applicable regulations: failure to provide such data and refusal to supply them would make it impossible for the Company to perform and/or stipulate the contract and provide the services requested by the same. We inform you, therefore, that the processing of personal data is based on the provisions of art. 6 c. 1 b) of the GDPR.
On the other hand, it is optional to provide your personal data for the purposes c) and d) for which you can freely decide whether to give your specific consent, which you can always revoke.

Rights of the interested party
In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data concerning the exercise of the rights of the interested parties with regard 1to the processing operations covered by this Information Notice, as the interested party, you have the right to request confirmation of whether or not personal data concerning you are being processed, to access the personal data concerning you and in relation to these data you have the right to request their correction, cancellation, the notification of corrections and cancellations to those to whom the data may have been transmitted by our Organization, the limitation of processing in the cases provided for by the rule, the portability of personal data – provided by you – in the cases indicated by the rule, to oppose the processing of your data and, specifically, you have the right to oppose decisions concerning you if they are based solely on automated processing of your data, including profiling. In the event that you believe that the processing of your data violates the rules of the GDPR, you have the right to lodge a complaint with the Guarantor pursuant to art. 77 of the GDPR.
If you wish to request further information on the processing of your personal data or to exercise your rights, you may contact MECCANICA BALDISSARA S.R.L. in writing.
Data Controller
The Data Controller, pursuant to art. 4 of the Code and the GDPR, is MECCANICA BALDISSARA S.R.L. Via Gramsci 53 – 21045 Gazzada Schianno (VA)

Best regards

The Data Controller MECCANICA BALDISSARA S.R.L.

1 ex Art.12 and Art. 15-22 of Regulation 2016/679/EU

Information on the processing of personal data of Suppliers
Pursuant to Articles 13 and 14 of Regulation 2016/679/EU (hereinafter “GDPR”) MECCANICA BALDISSARA S.R.L. (hereinafter the “Data Controller”) with Via Gramsci 53 – 21045 Gazzada Schianno (VA), in its capacity as “Data Controller”, informs you that your personal data collected for the purposes of the conclusion of the contract with the Supplier and / or within the execution and / or the stipulation of the same will be treated in compliance with the legislation cited, in order to ensure the rights, fundamental freedoms and dignity of individuals, with particular reference to confidentiality and personal identity. We inform you that if the activities provided to you involve the processing of personal data of third parties in your possession, it will be your responsibility to ensure that you have complied with the provisions of the legislation with regard to the persons concerned in order to make their treatment by us legitimate.

Origin, purpose, legal basis and nature of data processed
The processing of your personal data, directly provided by you, is carried out by MECCANICA BALDISSARA S.R.L. for the purposes of concluding the contract with the Supplier and/or within the scope of the execution and/or stipulation of the same.
It is also possible that the Supplier may process personal data of third parties communicated by the Supplier to the Company. With respect to this hypothesis, the Supplier acts as autonomous owner of the treatment and assumes the consequent legal obligations and responsibilities, holding the Company harmless with respect to any dispute, claim and / or request for compensation for damages from treatment that may be received by the Company from interested third parties.
In compliance with current legislation on the protection of personal data and without the need for specific consent from the interested party, the Data will be stored, collected and processed by the Company for the following purposes:
⦁ fulfilment of contractual obligations, execution and/or stipulation of the contract with the Supplier and/or management of any pre-contractual measures;

⦁ Fulfilment of any regulatory obligations, fiscal and tax provisions deriving from the performance of the business activity and obligations connected with administrative-accounting activities;

The legal bases of the processing for the purposes a) and b) above are Articles 6.1.b) and 6.1.c) of the Regulation.
The provision of data for the aforementioned purposes is optional, but failure to provide such data or refusal to do so would make it impossible for the Company to perform and/or enter into the contract and provide the services requested by the same.
Communication
The data may be communicated to third parties appointed as data processors pursuant to Article 28 of the GDPR and in particular to banking institutions, companies active in the insurance field, suppliers of services strictly necessary for the performance of business activities, or consultants of the company, where this proves necessary for fiscal, administrative, contractual reasons or for requirements protected by current regulations.
Your personal data, or the personal data of third parties in your possession, may also be communicated to external companies, identified from time to time, to which MECCANICA BALDISSARA S.R.L. entrusts the execution of obligations deriving from the task received, to which only the data necessary for the activities requested of them will be transmitted. All employees, consultants, temporary staff and/or any other “natural person” who carry out their activities on the basis of instructions received from MECCANICA BALDISSARA S. R.L. pursuant to art. 29 of the GDPR, are appointed “Data Processors” (hereinafter also referred to as “Data Processors”). MECCANICA BALDISSARA S.R.L. will give the Data Processors or Persons in charge, if appointed, adequate operating instructions, with particular reference to the adoption of and compliance with security measures, in order to guarantee the confidentiality and security of the data. Precisely with reference to the aspects of personal data protection, the Supplier is invited, pursuant to article 33 of the GDPR, to notify MECCANICA BALDISSARA S.R.L. of any circumstances or events that may give rise to a potential “personal data breach” in order to allow for an immediate assessment and the adoption of any actions aimed at countering such an event by sending a communication to MECCANICA BALDISSARA S.R.L. at the contact details indicated below.
The Data will not be disseminated.
This is without prejudice to MECCANICA BALDISSARA S.R.L.’s obligation to communicate the data to Public Authorities on specific request.

Transfer abroad
Your personal data may be transferred abroad if necessary for the management of the assignment received. For the processing of information and data that may be communicated to these subjects will be required the equivalent levels of protection adopted for the processing of personal data of its employees. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided by Chapter V of the GDPR will be applied.
Modalities, processing logics and storage times
Your data is collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles and requirements of Article 5 c 1 of the GDPR.
The processing of personal data is carried out by means of manual, computerized and telematic instruments with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality.
Personal data will be processed by MECCANICA BALDISSARA S.R.L. for the entire duration of the assignment and also subsequently for the purpose of asserting or protecting its rights or for administrative purposes and/or to implement obligations deriving from the applicable pro tempore regulatory and legislative framework and in compliance with the specific legal obligations on data retention.
Nature of contribution
In relation to the aforementioned purposes a) and b) indicated above, the provision of your data is indispensable for the purposes of performing the assignment between you and MECCANICA BALDISSARA S.R.L. and in order to allow MECCANICA BALDISSARA S.R.L. to carry out the fulfilments envisaged by the applicable regulations: failure to provide such data and refusal to supply them would make it impossible for the Company to perform and/or stipulate the contract and provide the services requested by the same. We inform you, therefore, that the processing of personal data is based on the provisions of art. 6 c. 1 b) of the GDPR.
Rights of the interested party
In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data concerning the exercise of the rights of the interested parties with regard 2to the processing operations covered by this Information Notice, as the interested party, you have the right to request confirmation of whether or not personal data concerning you are being processed, to access the personal data concerning you and in relation to these data you have the right to request their correction, cancellation, the notification of corrections and cancellations to those to whom the data may have been transmitted by our Organization, the limitation of processing in the cases provided for by the rule, the portability of personal data – provided by you – in the cases indicated by the rule, to oppose the processing of your data and, specifically, you have the right to oppose decisions concerning you if they are based solely on automated processing of your data, including profiling. In the event that you believe that the processing of your data violates the rules of the GDPR, you have the right to lodge a complaint with the Guarantor pursuant to art. 77 of the GDPR.
If you wish to request further information on the processing of your personal data or to exercise your rights, you may contact MECCANICA BALDISSARA S.R.L. in writing.
Data Controller
The Data Controller, pursuant to art. 4 of the Code and the GDPR, is MECCANICA BALDISSARA S.R.L. Via Gramsci 53 – 21045 Gazzada Schianno (VA)

Best regards

The Data Controller MECCANICA BALDISSARA S.R.L.

2 ex Art.12 and Art. 15-22 of Regulation 2016/679/EU

Information on the processing of personal data of website users

Articles 13 and 14 of Regulation 2016/679/EU (hereinafter also “GDPR”)

Why this notice
MECCANICA BALDISSARA S.R.L. (hereinafter also referred to as the “Company” or “Owner”) is committed to respecting and protecting your privacy and wants you to feel safe both when simply browsing the website and when you decide to register by providing us with your personal details in order to take advantage of the services made available to its Users and/or Customers. On this page the Company intends to provide some information on the processing of personal data relating to users who visit or consult the web site accessible by electronic means from the address www.meccanicabaldissara.it.
This information is provided only for the Azienda website and not for any other websites that the user may consult through links (for which please refer to their respective privacy policies). Reproduction or use of the pages, materials and information contained in the Site, by any means and on any medium, is not permitted without the prior written consent of Azienda. Copying and/or printing for exclusively personal and non-commercial use is permitted (for requests and clarifications, please contact Azienda at the addresses indicated below). Other uses of the content, services and information on this site are not permitted.
In relation to the content offered and the information provided, the Company will endeavour to keep the content of the Site reasonably up to date and reviewed, without offering any guarantee as to the adequacy, accuracy or completeness of the information provided and expressly disclaims any liability for any errors of omission in the information provided on the Site.

Origin – Navigation data

The Company informs you that the personal data provided by you and acquired at the time of requesting information and/or contact, registering on the website and using the services via smartphone or any other tool used to access the Internet, as well as the data necessary for the provision of such services, including navigation data and data used for the possible purchase of products and services offered by the Company but also only the so-called “navigation” data of the website by Users, will be processed in compliance with applicable regulations. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of the Internet. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified as navigators. This category of data includes the “IP addresses” or the domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response given by the web server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check the correct functioning of the Company’s website. It should be noted that the aforementioned data could be used to ascertain responsibility in the event of computer crimes to the detriment of the Azienda website or other websites connected or linked to it: except for this possibility, at present the data on web contacts does not persist for more than a few days.
Origin – Data provided by the user
Company collects, stores and processes your personal data in order to provide the products and services offered on the Site, or for legal obligations. With regard to some specific Services, Products, Promotions, etc.. Company may process your data also for commercial purposes. In these cases, a specific, separate, optional and always revocable consent will be required in the manner and at the addresses indicated below.
The optional, explicit and voluntary sending of electronic mail to the addresses indicated in the specific section of the Website, as well as the filling in of questionnaires (e.g. forms), communication via chat, push notification via APP, social networks, call centres, etc., entails the subsequent acquisition of some of your personal data, including those collected through the use of the Apps and related services, necessary to respond to your requests. Please also note that when you use your mobile connection to access content and digital services offered directly by

We or our Partners may need to transfer your personal information to such third parties. Please note that you may access the Site or connect to areas where you may be able to post information using blogs or bulletin boards, communicate with others, for example from the Company page on Facebook®, LinkedIn®, Youtube®, and other social networking sites, review products and offers and post comments or content. Before interacting with these areas, we invite you to carefully read the General Terms and Conditions of Use, bearing in mind that, in certain circumstances, the information you publish may be viewed by anyone who has access to the Internet and that any information you include in your publications may be read, collected and used by third parties.
Purpose of processing and legal basis
The data are processed for the purposes:

⦁ Strictly connected to and necessary for registering with the ⦁ www.Azienda.it website⦁ , the services and/or Apps developed or made available by the Company, for using the relative information services, for managing requests for contact or information, for making purchases of products and services offered through the Company website;
⦁ for ancillary activities related to the management of User/Customer requests and the sending of feedback that may include the transmission of promotional material; for the completion of the purchase order of products and services offered, including aspects relating to payment by credit card, the management of shipments, the possible exercise of the right of withdrawal provided for distance purchases, updating on the availability of products and services temporarily unavailable;
⦁ related to the fulfilment of obligations provided for by EU and national regulations, to the protection of public order, to the detection and repression of crimes;
⦁ direct marketing, i.e. the sending of advertising material, direct sales, the carrying out of market research or the commercial communication of products and/or services offered by the Company; This activity may also concern the products and services of companies in the Company Group and be carried out by sending advertising/information/promotional material and/or invitations to take part in initiatives, events and offers aimed at rewarding users/customers, carried out using “traditional” methods (e.g. paper mail and/or operator calls), or using “automated” contact systems (e.g. SMS and/or MMS, telephone calls without operator intervention, e-mail, fax, interactive applications), pursuant to art. 130 c. 1 and 2 of Legislative Decree 196/03 and subsequent amendments and additions;

The provision of data for the purposes referred to in points 1), 2) and 3), related to a pre-contractual and / or contractual or functional to a request from the user or provided by a specific provision of law, is required and, failing that, you can not receive the information and access to services may be required, with regard to the point
⦁ The consent to the processing of data by the user/customer is instead free and optional and always revocable without consequences on the usability of products and services except for the impossibility for the Company to keep users/customers updated on new initiatives or special promotions or benefits that may be available.
The Company may send commercial communications relating to products and/or services similar to those already provided, in accordance with Directive 2002/58/EU, using the e-mail or paper addresses you indicate on these occasions, to which you may object in the manner and at the addresses given below.

Modalities, processing logic, storage times and security measures
The data processing is also carried out with the aid of electronic or automated means and is performed by the Company and/or by third parties that the Company may use to store, manage and transmit the data. The data processing will be carried out with the logic of organization and elaboration of your personal data, also related to the logs originated from the access and use of the services made available via web, of the products and services used related to the above mentioned purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data. The personal data processed will be kept for the time provided for by the legislation applicable at the time.
Again with regard to data security, in the sections of the website that are set up for particular services, where personal data is requested from the navigating user, the data is encrypted using a security technology called Secure Sockets Layer, abbreviated to SSL. SSL technology encrypts the information before it is exchanged via the Internet between the user’s computer and the Company’s central systems, making it incomprehensible to unauthorised parties and thus guaranteeing the confidentiality of the information transmitted; furthermore, transactions carried out using electronic payment instruments are carried out directly using the platform of the Supplier of the payment services.

(PSP) and Azienda retains only the minimum set of information necessary to handle any disputes. With regard to the protection of personal data, the user/customer is invited, pursuant to article 33 of the GDPR, to notify Azienda of any circumstances or events that could lead to a potential “personal data breach” in order to allow for an immediate evaluation and the adoption of possible actions to counter such an event by sending a communication to privacy@Azienda.it or contacting Customer Service. The measures adopted by the Company do not exempt the Customer from paying the necessary attention to the use, where required, of passwords/PINs of adequate complexity, which he/she must update periodically, especially if he/she believes that they have been hacked/known by third parties, as well as keep them carefully and make them inaccessible to third parties, in order to avoid improper and unauthorised use.

Cookies
A cookie is a short string of text that is sent to your browser and possibly saved on your computer (alternatively, on your smartphone/tablet or whatever other device you use to access the Internet); this generally occurs whenever you visit a website. We use cookies for various purposes in order to provide you with a quick and secure digital experience, for example, by allowing you to maintain a connection to the secure area while browsing through the pages of the website.
Cookies stored on your terminal device cannot be used to retrieve any data from your hard drive, transmit computer viruses or identify and use your email address. Each cookie is unique in relation to the browser and device you use to access the Website or use the Company App. Generally, the purpose of cookies is to improve the operation of the Website and your experience when using it, although cookies may be used to deliver advertisements (as detailed below). For more information on what cookies are and how they work, you can visit the “All about cookies” website http://www.allaboutcookies.org .

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site (including your IP address). This information is transmitted to Google who processes it in order to compile reports about your activities on the website. This website does not use (and does not allow third parties to use) Google’s analysis tool to monitor or collect your personal identification information. Google does not associate your IP address with any other data held by Google nor does it attempt to link an IP address with the identity of a computer user. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

For more information you can consult the information provided by Google at the following address: Google Analytics information. You can also prevent Google Analytics from using your data by installing the appropriate add-on on your browser, which you can download at the following address: Browser add-on for deactivating Google Analytics.

Scope of communication and data transfer.
For the pursuit of the above purposes, Azienda may communicate and process, in Italy and abroad, the personal data of users/customers to third parties with whom we have relationships, where these third parties provide services at our request. We will only provide these third parties with the information necessary to perform the services requested, taking all measures to protect your personal data. Data may be transferred outside the European Economic Area where this is necessary for the management of your contractual relationship. In this case, the recipients of the data will be subject to protection and security obligations equivalent to those guaranteed by the Data Controller. In case of use of services offered directly by Partners, we will provide only the data strictly necessary for their implementation. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the guarantees applicable to data transfers to third countries will be applied, where required. We may also disclose the

personal data to our suppliers of commercial services, for marketing reasons, appointed for this purpose as external data processors. In addition, personal data may be communicated to competent public bodies and authorities in order to comply with regulatory obligations or to ascertain responsibility in the event of computer crimes against the website, as well as communicated to, or allocated by, third parties (in their capacity as data processors or, in the case of providers of electronic communication services, independent data controllers), who provide computer and telecommunications services (e.g. hosting services, website management and development) and which the Company uses to perform tasks and activities of a technical and organisational nature that are instrumental to the operation of the website. The subjects belonging to the above categories operate as separate Data Controllers or as Managers appointed for this purpose by Azienda.
Personal data may also be known by employees/consultants of the Company who are specially trained and appointed as Data Processors.
The categories of recipients to whom the data may be communicated are available by contacting the Company at the addresses indicated below.

Rights of the interested parties
You may at any time exercise the rights granted to you by the law, including that:

⦁ to access your personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom the data may be communicated, the applicable storage period, the existence of automated decision-making processes;
⦁ to obtain without delay the rectification of any inaccurate personal data concerning you;
⦁ to obtain, in the cases provided for, the cancellation of your data;
⦁ to obtain the limitation of the treatment or to oppose it, when possible;
⦁ to request the portability of the data that you have provided to Azienda, i.e. to receive it in a structured, commonly used and machine-readable format, also for the purpose of transmitting such data to another data controller, within the limits and constraints set forth in Article 20 of the GDPR;
You may also lodge a complaint with the Italian Data Protection Authority pursuant to Article 77 of the GDPR.

For the treatments referred to in point 4) of the purposes, the customer may always revoke consent and exercise the right to oppose direct marketing (in “traditional” and “automated”). The opposition, in the absence of any indication to the contrary, will refer to both traditional and automated communications.

Data Controller
The data controller, pursuant to art. 4 of the Code and the GDPR, is MECCANICA BALDISSARA S.R.L. Via Gramsci 53 – 21045 Gazzada Schianno (VA),
The above-mentioned rights may be exercised upon request by the interested party in the manner made known by the Customer Service or on the Company’s website or by using the following references: MECCANICA BALDISSARA S.R.L.
The use of the Website, including those intended for tablets and/or smartphones, by the Client and/or the User implies full knowledge and acceptance of the content and any indications included in this version of the policy published by Azienda at the time the site is accessed. Azienda informs that this information notice may be modified without prior notice and therefore we recommend periodic reading.

The Data Controller MECCANICA BALDISSARA S.R.L.

Information on the processing of personal data of candidates
Pursuant to articles 13 of Legislative Decree 196/03 (hereinafter referred to as the “Code”) and articles 13 and 14 of Regulation 2016/679/EU (hereinafter referred to as the “GDPR”) MECCANICA BALDISSARA S.R.L. (hereinafter referred to as the “Data Controller”) with registered office in Via Gramsci 53 – 21045 Gazzada Schianno (VA), in its capacity as “Data Controller”, informs you that your personal data collected for the purposes of personnel selection for MECCANICA BALDISSARA S.R.L. (as employee, collaborator, stageur, apprentice, etc.) will be processed in full compliance with applicable regulations, guaranteeing your fundamental rights and freedoms.

Origin and type of data processed

The processing of your personal data, which in principle is provided directly by you (by e-mail, on paper, by filling in the appropriate form on the company website, etc.), but which may also come from third parties to whom selection activities have been entrusted (head-hunting companies, websites specialising in personnel selection, etc.), is carried out by MECCANICA BALDISSARA S.R.L. for the purpose of selecting potential candidates with whom to establish a relationship of collaboration in the forms and methods identified from time to time, in the context of the selection process.) is carried out by MECCANICA BALDISSARA S.R.L. for the selection of potential candidates with whom to establish a relationship of collaboration in the form and manner identified from time to time, in compliance with the obligations arising from any applicable legislation. This treatment has as its object:

⦁ personal data, contact details, data relating to training courses carried out (qualifications, training courses, etc.);
⦁ data relating to previous professional experience, knowledge of foreign languages, as well as any other information useful for the evaluation of your CV including salary levels, etc.;
⦁ data from public sources such as websites, social networks (data contained in your public profile of Facebook / Linkedin, etc..), newspapers and magazines, including specialist journals, scientific publications or other documents or writings of a popular nature published or otherwise freely available for consultation, sites specializing in facilitating the encounter between supply and demand for work.
⦁ Data in audio/video format recorded during the management of the candidate’s interview(s) either live or via collective connection platforms.
Among the aforementioned data, there may also be data that current legislation considers as “special” (sensitive data), or data relating to criminal convictions and offences (judicial data).
The particular/sensitive data are (ex art. 4. C. 1 lett. d) of the Code and art. 9 c. 1 of the Regulation), for example, those suitable to reveal the state of health, maternity, accidents, disability, the adhesion to a political party or a trade union, the religious conviction, a state of disability. In the case of spontaneous candidacy, any special/sensitive data will be processed pursuant to art. 24 c1 lett. i) bis without the need for specific consent.

Legal basis and purpose of processing

Your personal data, requested or acquired both in advance and during the selection activities, will be processed by the Controller for the following purposes:
⦁ manage the evaluation of your CV;
⦁ plan and manage the selection interview(s) also in interactive or group mode;
⦁ propose his candidacy to other companies belonging to MECCANICA BALDISSARA S.R.L.

Such data are processed in accordance with art. 24 c. 1 lett. b) of the Code and art. 6 c.1 b) of the Regulations, even when sensitive, in order to carry out the assessment of your application, to evaluate your skills and abilities in relation to the needs of MECCANICA BALDISSARA S.R.L.
All the criteria provided for by Legislative Decree 125/91 will also be adopted to guarantee non-discrimination between the sexes during the selection process.
Communication and dissemination

Your data may be communicated to third parties such as trusted external companies operating, by way of example, in the personnel selection sector, in competence assessment activities and, should the need arise, to structures operating in the health sector which MECCANICA BALDISSARA S.R.L. uses, for reasons of a technical and organisational nature, to

the management of your application; external professionals and companies associated with and/or controlled by MECCANICA BALDISSARA S.R.L.
as well as companies, consortia and/or other legal entities in which MECCANICA BALDISSARA S.R.L. participates as a partner; companies of MECCANICA BALDISSARA S.R.L. interested in establishing a working relationship with you. These subjects, companies and professionals will process your data in their capacity as independent data controllers or, when necessary, as data processors duly appointed by MECCANICA BALDISSARA S.R.L.
In addition, due to the role of coordination and management performed by MECCANICA BALDISSARA S.R.L. your data may be processed, as part of the normal activity of personnel selection management, or by individual employees of the same, for the necessary organizational, administrative, financial and accounting activities that may be carried out by each of these companies in favour of the others.
The Holder is obliged to communicate the data to the competent Authorities, upon specific request of the same.

Transfer abroad

Your data is not, as a rule, transferred outside the European Economic Area; should this be necessary for the management of the selection activities, protection and security obligations equivalent to those guaranteed by the Data Controller will be imposed on the recipients of the data. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the guarantees applicable to data transfers to third countries will be applied, where required.

Processing methods and storage times

Your data is collected and recorded in a lawful and correct manner, for the pursuit of the purposes indicated above and in compliance with the fundamental principles established by the applicable legislation.
The processing of personal data may take place using manual, computerised or telematic tools, but always under the supervision of technical and organisational measures suitable to guarantee security and confidentiality, especially in order to reduce the risks of destruction or loss, even accidental, of the data, unauthorised access, or processing that is not permitted or does not conform to the purposes of collection.
Personal data will be processed by MECCANICA BALDISSARA S.R.L. for the entire duration of the selection process: in the case of spontaneous applications, data will be kept for 12 months, after which they will be deleted; in the case of responses to a selection process initiated by MECCANICA BALDISSARA S.R.L., the retention period is that indicated in the prospectus and in any case will not exceed 24 months from the closing date of the selection process; in any case, you may request that your CV be kept for any subsequent requirements that may arise.R.L. the retention periods are those indicated in the prospectus and in any case will not exceed 24 months from the closing date of the selection; in any case you may request that your CV be retained for any subsequent needs that may arise in MECCANICA BALDISSARA S.R.L.
Nature of the conferment and consent to treatment

As indicated above, the conferment of your data is compulsory, as it is necessary for the pursuit of the purposes referred to in point 1. letter a) and b) related to the selection of personnel. The provision of your personal data for the purposes referred to in point 1. letter. c) is instead optional, for which you may freely decide whether to give your specific consent, which you may always revoke. If your Cv contains particular/sensitive data, their processing is subject to consent that must be given in writing.

Your Rights

You may at any time exercise the rights granted to you by the law, including that:
⦁ to access your personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom the data may be communicated, the applicable storage period, the existence of automated decision-making processes;
⦁ to obtain without delay the rectification of any inaccurate personal data concerning you;
⦁ to obtain, in the cases provided for, the cancellation of your data;
⦁ to obtain the limitation of the treatment or to oppose it, when possible;
⦁ to request the portability of the data that you have provided to MECCANICA BALDISSARA S.R.L. i.e. to receive them in a structured, commonly used and machine-readable format, also for the purpose of transmitting said data to another data controller, without any impediment on the part of MECCANICA BALDISSARA S.R.L. itself;
⦁ to lodge a complaint with the Guarantor Authority for the Protection of Personal Data.

If you wish to request further information on the processing of your personal data or to exercise your rights, you may contact MECCANICA BALDISSARA S.R.L. in writing.

Data Controller

The Data Controller, pursuant to art. 4 of the Code and the GDPR, is MECCANICA BALDISSARA S.R.L. Via Gramsci 53 – 21045 Gazzada Schianno (VA)

Best regards

The Data Controller MECCANICA BALDISSARA S.R.L.