Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Dear User,

this information is provided pursuant to Articles 13 and 14 of the European Regulation 2016/679 on the protection of personal data. This information page is provided to allow you to understand how and for what purpose your personal data are collected and processed in the context of the use of the site: the information we provide is therefore related to the site www.stafer.com (hereinafter, "Site") and does not concern other websites and / or applications that may be consulted through links to external pages of third parties.


1. Owner of the treatment

The Data Controller of personal data processed through the Site, for the purposes described below, is the company Stafer S.p.A., with registered office in Via Malpighi, 9 - 48018 Faenza (Ra) Italy, Tel. +39 0546 624811, Fax +39 0546 623141 EU VAT No. IT00068620392, stafer@stafer.com (hereinafter referred to as "Stafer" or "Controller").


2. Personal data processed

While you are browsing the Site and as part of the Services offered, the Controller will process information about you which may be collected automatically while you are browsing the Site or may be provided by you directly (for example, by using the form on the Contacts page).

In particular, the personal data processed through the Site are:


(a) Name and contact details and other personal data.

In some sections of the Site, for example in the page Contacts, you may be asked to enter some personal data such as name, surname, home address, telephone number and email address, as well as additional information that you want to communicate using the space provided for entering your message. In the sections that provide free input fields, we invite you not to send us personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, data concerning health, natural person’s sex life or sexual orientation. If you intend to communicate personal data of other people, you act as an autonomous data controller and consequently assume every burden and obligation under current legislation, including verification of the suitability of the legal basis for treatment. In such cases, you grant Stafer the widest possible indemnity and guarantee with respect to possible disputes or claims by third parties to whom the personal data you have communicated or transmitted refer.


b) Job Applications

If you decide to send your application for a job opportunity at Stafer, including spontaneous applications, please refer to the Privacy Policy on the "Work with us" page. The personal data you provide will in fact be processed for the purposes and in the manner described in that document, to which you are referred.


c) Navigation data and cookies

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment.

These data are also processed in order to obtain statistical information on the use of the Site and to check its correct functioning.

Information on the use of cookies on the Site is available in the Cookie Policy, which we invite you to read carefully.


d) Access to the reserved area

If you decide to use the credentials (username and password) provided by Stafer to access the private area of the Site, please refer to the Privacy Policy in the private area. The personal data you provide will in fact be processed for the purposes and in the manner described in that document, to which you are referred.


3. Purposes of the treatment and legal basis

The Controller will process your personal data for the purposes described below.

a) Provision of Services: your data will be processed in order to carry out all the activities necessary to use the Site and the services you may have requested. The optional, explicit and voluntary sending of messages to the contact addresses on the Site, for example through the Contacts page, entails the acquisition of the data necessary to respond to your requests, as well as any personal data included in your communications. The legal basis for the processing is the performance of a contract to which you are a party or the execution of pre-contractual measures taken at your request or in order to take steps at your request prior to entering into a contract. This processing is necessary to properly provide you with the services you have requested;

b) Legal obligations: your data may be processed in order to allow Stafer to fulfil its obligations under national, EU or international laws, regulations and standards, or under mandatory provisions issued by the competent authorities. The legal basis for the processing is the compliance with a legal obligation to which the Controller is subject. The conferment of personal data for this purpose is therefore necessary to allow the Owner to fulfill the regulatory obligations to which it is subject;

c) Marketing: only in the event that you have given your specific consent, by means of the specific checkbox or by signing up for the newsletter using the specific form, your data will be processed in order to carry out information activities regarding Stafer's products and services, as well as promotional, commercial, market research and marketing activities or, again, activities aimed at detecting the degree of customer satisfaction. This activity may be carried out both through automated systems without the intervention of an operator such as email, and through traditional methods of contact such as postal service and telephone. This treatment is based on your explicit and free consent: you are not obliged to provide such consent and, should you do so, you are always free to revoke it at any time without suffering any consequences other than that of no longer receiving marketing communications. You can also revoke your consent by clicking on the unsubscribe or unsubscribe link that you will find at the bottom of every email you receive;

d) Security: your data may be processed to prevent and/or identify any anomalies, fraudulent activities and/or abuse in the use of the Site or services. The legal basis of the treatment is the legitimate interest of the Owner aimed at preventing or detecting activities or abuse.


4. Recipients

Your personal data may be shared with the subjects indicated below:

(a) Any person acting under the authority of the Controller who has access to personal data, duly designated and who have committed to confidentiality or otherwise received adequate legal obligation of confidentiality (e.g. Stafer employees);

b) Third parties designated as Data Processors, with the task of processing the data on behalf of the Data Controller, for example subjects with whom it is necessary to interact in order to provide services such as hosting providers, suppliers of platforms for sending emails, subjects delegated to carry out maintenance activities on network equipment and electronic communication networks;

c) Subjects, entities or authorities to whom it is mandatory to communicate your data for purposes of compliance with legal obligations or for security purposes.

Your personal data is not intended for publication or dissemination.

Some of your personal data may be shared with recipients in countries outside the European Union or the European Economic Area. The Data Controller ensures that in such cases the processing will be carried out in compliance with the applicable legislation and, therefore, the transfers will be made with adequate safeguards, such as adequacy decisions, Standard Contractual Clause models approved by the European Commission or other safeguards considered adequate.


5. Storage times and criteria

Your personal data will be kept for the time strictly necessary for the correct execution of your requests and of the pre-contractual or contractual relationship with you in progress, except in cases of necessity or legal obligations that impose a specific storage time.

Personal data processed for security purposes will be kept for the time strictly necessary for the said purpose.

Personal data processed for marketing purposes will be kept until you revoke your consent or until you object to the processing, which you can also exercise by referring to the instructions contained in the paragraph on your rights.


6. Rights of the interested party

As data subject, you have the right to obtain from Stafer, in the cases provided for, access to your personal data and the rectification or erasure thereof. You also have the right to obtain the restriction of processing of data concerning you and to object to the processing (art. 15 et seq. of the Regulation).

You can also revoke at any time your consent for the purposes of "Marketing": you can revoke your consent to the treatment also in a disjointed way, for example asking to receive promotional communications only by email.

The appropriate request can be submitted preferably by email to privacy@stafer.com, or to the contact details of the Controller indicated in the first paragraph of this Information Notice.

Data subjects who believe that the processing of personal data relating to them carried out through this Site is in breach of the provisions of the Regulation, have the right to lodge a complaint with the competent Guarantor, as provided for by art. 77 of the Regulation itself, or to take legal action (art. 79 of the Regulation).


7. Updates and modifications

The Controller reserves the right to modify, integrate or periodically update this Privacy Policy in accordance with applicable legislation or measures adopted by the Guarantor for the Protection of Personal Data.