PRIVACY POLICY
Information notice pursuant to art. 13 Of the regulation (EU) 2016/679 (“GDPR”).
Information to be provided where personal data are collected from the data subject.
SUBJECTS OF THE PROCESSING
DATA CONTROLLER, pursuant to art. 4 and 24 of the Regulation (EU) 2016/679, is Duferco, having its head office in Rue Guillaume Schneider 2522, Luxemburg, as represented by the pro-tempore legal representative. The contact details of the controller: info@duferco.com.
| PURPOSES OF THE PROCESSING | LAWFULNESS OF THE PROCESSING | DATA RETENTION PERIOD |
|---|---|---|
| Browsing on this website: the data collected during the navigation will be processed to obtain anonymous statistical information on the use of the site and to check its correct functioning. | Legitimate interest | Valued on the basis of reasonable expectations given by the data subject who surfs the current website. | Only for the related session, after which the data are deleted. |
| Possible request for contact or request information by filling out a dedicated form | Controller’s legitimate interest: reply to users’ requests | 1 year |
| Staff recruitment and evaluation of CVs provided through email | Contract | pre-contractual measures | 1 year |
| Organizational, administrative, financial and accounting activities and clients / users management | Performance of a contract and compliance with a legal obligation | 10 years or different legal obligation |
| Download Annual Report | Controller’s legitimate interest: reply to users’ requests | 6 months |
NATURE OF DATA PROVISION AND REFUSAL
Except for what specified for navigation data which are necessary in order to allow navigation of the website, data subjects are free to provide their personal data and their failure to provide data may result in the impossibility of obtaining the information or services requested and provided by this website.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data provided by you may be communicated to recipients, appointed pursuant to art. 28 of the Regulation EU 2016/679, which shall process your data as processors and/or persons acting under the authority of the Controller and the Processor, in order to perform agreements or related purposes. Precisely, your data may be communicated to recipients part of the following categories:
– Group Companies;
– suppliers of the information system and communication networks (e-mail; web platform)
– advisory and consultancy firms and companies;
– competent Authorities for the fulfillment of obligations of law, if required;
The subjects belonging to the aforesaid categories act as data Processors or act in complete autonomy as separate data Controllers. The list of designated data Processors is constantly updated and available at the offices DUFERCO or by writing to info@duferco.com
DATA TRANSFER TO A THIRD COUNTRY AND/OR TO INTERNATIONAL ORGANISATIONS
The personal data provided may be transferred abroad or within the European Union, within the limits and under the conditions set out in articles 44 et seq. of the EU Regulation 2016/679, in order to comply with purposes related to the transfer itself. Specifically, the data that will be transferred to the hoster company of the GoDaddy Operating Company, LLC site is guaranteed by the company’s Privacy Shield certification.
DATA SUBJECT’S RIGHTS
You may exercise your rights pursuant to articles 15, 16, 17, 18, 19, 20, 21, 22 of the Regulation EU 2016/679, by contacting the data Controller, by writing to info@duferco.com
You have the right, at any time, to request the data Controller to access, rectify, cancel your personal data or limit their processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling) and to the portability of your data.
Without prejudice to any other administrative and judicial appeal, if you believe that the processing of your data violates the provisions of Regulation EU 2016/679, pursuant to art. 15 letter f) of the aforementioned Regulation EU 2016/679, you have the right to lodge a complaint with the Data Protection Authority and, with reference to art. 6 paragraph 1, letter a) and art. 9 paragraph 2, letter a), you have the right to withdraw the consent given at any time.
In case of request of data portability the Controller shall provide you with your personal data in a structured, commonly used and machine-readable format, subject to the provisions set forth in paragraphs 3 and 4 of art. 20 of Regulation EU 2016/679.
Updating date: 04th June 2019