Mandatory data protection information
(Article 13 et seq of EU Reg. 679/2016 - GDPR)
Dear Madam(s)
Pursuant to Article 13 of the “European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data” (hereinafter “GDPR”), Aboca S.p.A. Società Agricola (hereinafter "ABOCA"), with registered office in Loc. Aboca 20, 52037, Sansepolcro (AR), in its capacity as Data Controller of your personal data, provided in the context of your use of the “Work with Us” section (hereinafter the “APP”), without prejudice to the definitions set out in the GDPR, is required to inform you of the following.
(I). – Warnings.
The proper functioning of certain specific functions of the portal requires the availability of Internet connectivity on the part of the user. ABOCA makes the portal available in the state in which it is found and cannot, in any way, be held responsible for malfunctions, delays in the execution of the options configured by the user or uses of the portal functions other than those for which they were created.
(II). - Data Controller.
The Data Controller is Aboca S.p.A. Società Agricola with registered office in Loc. Aboca 20, 52037, Sansepolcro (AR).
(III) - Data Protection Officer (DPO).
The ABOCA DPO can be reached at the following e-mail address: dpo@aboca.it
(IV). - Purpose.
ABOCA, in addition to the processing required by law, regulation or by order of the Authority, will process your personal data in order to allow you to benefit from the functionalities of the “Lavora con Noi” (“Work with Us”) service, namely: (a). - to apply for a position with ABOCA; (b). - to send us your CV; (c). - to give us your consent for us to assess your application.
(V). - Legal basis.
Processing operations have their legal basis in Article 6(b) and 9(a) of EU General Regulation 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
(VI). - Nature of the data.
Exclusively with your consent where required, the following categories of personal data concerning you will or may be processed for the purposes indicated.
Authentication data. Once you have completed the registration process, during which you will be able to choose your access credentials, including your password, which only you will know, you will be able to access the “Lavora con Noi” system from a mobile device or desktop, by entering your personal authentication credentials in the fields provided, which you must store with the utmost care. We recommend that you choose a password that has at least the following characteristics: not less than eight characters in length, including at least one special character in addition to those explicitly detailed in the portal.
If you forget your password, the recovery procedure provides a link to reset it yourself. The authentication data will be encrypted from the moment they are first used and ABOCA will not be able to know them in any way.
Common personal data, such as: your e-mail address, your full name, your professional skills, your telephone number, your contact details, including telephone numbers, the composition of your household, your level of education, etc;
Special categories of personal data, such as: your belonging to a protected category, your state of health, etc;
Browsing data and use of the portal and the web app. The computer systems and software used to operate the portal acquire, during their normal operation, certain types of personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified persons but which, by its very nature, could allow users to be identified, through processing and association with data held by third parties.
This category of data includes the IP addresses or other device identifiers used by users connecting to the portal, the addresses of the requested resources in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment.
This data is only used to obtain anonymous statistical information on the use of the website and to check that it is functioning correctly, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the website: except in this case, at present, data on web contacts are not kept for more than seven days. Some anonymous data may be used by Google Analytics, to get full information for this type of cookies you can directly refer to this link
Cookies. ABOCA uses technical cookies. You always have the option to disable cookies by setting your browser to reject them. If you reject cookies, some features of the ABOCA website or app may not be available to you. Specific information on this can be found in our Cookies Policy.
(VII). - Nature of provision, data sources.
The provision of your personal data is not compulsory as a rule, but in some cases it is necessary, and therefore compulsory, in order to enable you to benefit from the services and functions of the portal. The provision of personal identification data is necessary in order to be able to activate all the functions of the portal. You may choose not to provide any or all of the above-mentioned types of data, but if you do so, you will not be able to use the functions of the portal in their entirety. We will collect your data directly from you through your interactions with the portal.
(VIII). - Processing methods.
In relation to all the purposes indicated in the preceding paragraphs, your personal data will be subject to computer and paper processing and will be processed by special computer procedures. The data will be processed in such a way as to guarantee their logical and physical security and confidentiality, and may be carried out using manual, computerised and telematic tools for storing, transmitting and sharing the data. The logic of the processing will be strictly related to the purposes pursued.
Your personal data will be stored in Italy, its security policies are audited by accredited certifiers, in accordance with best practice in information security management systems. No profiling operations will be carried out beyond what is strictly necessary to achieve the purposes pursued. We may carry out personnel selection operations, in accordance with the relevant legal provisions, on the basis of special categories of personal data such as disability status or membership of protected categories. You are free not to provide such data and to freely express your consent.
(IX). - Retention Periods
The data will only be kept by ABOCA for as long as the persons concerned maintain their registration on the portal, or their personal account on the website, or for a maximum of 36 months from the last action carried out on the portal. After these retention periods have elapsed, or you have deleted your data, all such data will be deleted except for data for which retention is permitted under Article 6 f) of the GDPR.
(X). - Recipients and transfer abroad.
The following may become aware of the personal data referred to in this information notice in their capacity as Data Processors or Persons in Charge of Processing:- within ABOCA, qualified personnel, each within the limits of his or her competence and duties and on the basis of the tasks assigned and instructions given; - outside ABOCA, third parties, also specifically designated as Data Processors or persons in charge of the processing - which ABOCA uses for various services and exclusively to carry out these services - each within the limits of their own competences and duties and on the basis of the tasks assigned and the instructions given.
ABOCA, for ordinary management, accounting and administrative activities, may communicate your personal data, after obtaining your consent in the manner required by law, where applicable, in compliance with security measures, to third party service providers for the sole purpose of performing the service you have requested, such as: - postal service companies, - legal and notary firms, - consultants, also in associated form, - other service companies, as well as other subjects in compliance with possible legal obligations (such as insurance institutes, police forces, judicial authorities, etc.).
The list of these subjects to whom the data may be communicated is available at the headquarters of the Data Controller.
ABOCA does not transfer personal data abroad on its own initiative. However, some third-party service providers may have their servers physically located abroad (such as e-mail providers). In such cases, the transfer of data abroad will take place exclusively within the scope of and in compliance with the provisions of Articles 44 et seq. of the GDPR. Under no circumstances may personal data be disseminated.
The full list of Data Processors is available at the headquarters of the Data Controller.
(XI). - Rights of the data subject
Articles 15 to 22, GDPR grant data subjects the exercise of specific rights. Article 15 GDPR grants data subjects the right to access their personal data and to obtain a copy thereof. The right to obtain a copy of the data must not infringe the rights and freedoms of others.
By requesting access, the data subject has the right to obtain confirmation from ABOCA as to whether or not personal data relating to him or her are being processed and to be informed of the purposes and categories of data processed, the third parties to whom the data are communicated and whether the data are transferred to a non-EU country with appropriate safeguards.
The data subject also has the right to know the retention period of his/her personal data and has the right to request the rectification of any inaccurate data and the amendment of incomplete data, the erasure (right to be forgotten) under the conditions indicated in Article 17, GDPR, the restriction of processing, the revocation of consent, the portability of data and the right to object, at any time and without having to provide justification, to their processing for direct marketing purposes. The rights may be exercised by e-mail to the address of the ABOCA Data Protection Officer, or by regular mail to the address indicated below. The Data Protection Officer may need to identify the data subject by requesting them to provide a copy of their identity document.
If you believe that the processing of your personal data violates the provisions of the GDPR or internal data protection regulations, you have the right to lodge a complaint with the Italian Data Protection Authority based in Rome, pursuant to Article 77 GDPR and/or to take legal action.
In order to exercise these rights, or to obtain any other information about them and, more generally, about the processing of their personal data, requests may be addressed to:
With reference to the treatments carried out by ABOCA - by e-mail at the following address: privacy@aboca.it; - by ordinary mail to Aboca S.p.A., Società Agricola with registered office in Loc. Aboca n. 20, - 52037 - Sansepolcro (AR), Italy.
This mandatory information is subject to updating, depending on any changes in the applicable legal provisions.
[ ] By using the portal, you are aware that you may voluntarily provide data belonging to special categories (e.g. data relating to the processing of personal data): health status, membership of protected categories, etc.) processed by ABOCA in accordance with the above provisions and declare that I have read and understood the information listed above.
NEWSLETTER INFORMATION:
By giving your express consent, your data may be processed for marketing purposes or commercial communications via a newsletter.
If you wish to read the full Privacy Policy for further information on the protection of your rights, please visit https://it.aboca.com/privacy-policy on our website.