Privacy Statement

Information Notice on Personal Data Processing users visiting the web site
https://esa-engineering.com/
in relazione al trattamento dei dati personali

in accordance with Art. 13 of the General Data Protection Regulation (GDPR 2016/679)

PURPOSES FOR THIS INFORMATION NOTICE
This information describes the methods of processing the personal data of users visiting the website https://esa-engineering.com/

owned by the company E.S.A. Engineering Srl on personal data processing concerning identified or identifiable natural persons who consult it and interact with it.

 

The information is provided only for this website and not for other external websites, which may be consulted by the user via links.

DATA CONTROLLER

E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI) Tel. 055 373949, Fax 055 9029994, email: info@esa-engineering.com

PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Your personal data provided through the site will be processed by the company E.S.A. Engineering Srl for the following purposes:

  • for the provision of a service or the response to a request made by the user; the legal basis for processing personal data in this case is the execution of a contract to which the user belongs or the implementation of the pre-contractual measures adopted upon your request (eg: contact via email addresses on the website or through the Jobs Application or Information form, etc.);
  • to perform statistical research / analysis on aggregate or anonymous data, without therefore the possibility of identifying the user, aimed at measuring the functioning of the Site, measuring traffic and assessing usability and interest;  and possibly for
  • the fulfillment of a legal obligation to which the owner is subject;
  • ascertain, exercise or defend a right in a court of law or whenever the judicial authorities exercise their jurisdictional functions;

In the last two cases, the purpose and the legal basis coincide.

The provision of your personal data for the purposes listed above is optional, but any refusal could make it impossible to meet your request or fulfill a legal obligation to which the owner is subject.

If you decide to send us your curriculum vitae using the form on the website, the data will be processed for the following purposes:

  • assessing if your profile meets our requirements (e.g. job vacancies), and more generally, managing the selection of employees and collaborators, and/or
  • contacting you to plan and conduct job interviews or for selection tests if needed, by using the contact detail you have provided

The legal basis for processing personal data for the above-mentioned purposes is the implementation of the pre-contractual measures adopted upon your request. Provision of your personal data for these purposes is optional. However, refusal to provide such data may result in our company not being able to evaluate your profile and therefore proceed with the selection process.

However, through your curriculum we could collect special (sensitive) data as defined in art. 9 of the Regulations. In this regard, should it not be strictly necessary, unless we believe that this type of data is useful for better classifying your position, especially in relation to belonging to protected groups, please do not provide this type of information; however, if you decide to give it to us, we shall ask you to fill out the consent that you can freely express in the attached form. The legal basis of the processing, in case you decide to enter your particular data, is your consent.

However, we invite you to read, if necessary, the specific information published below.

TYPES OF DATA PROCESSED AND CANCELLATION TIMES

 

Data provided by the user 

The optional, explicit and voluntary sending of messages to the contact addresses present on the site, as well as the compilation and submission of the contact forms, involves the acquisition of the contact details of the sender, necessary to respond to requests, and of all personal data included in communications. In general, we will delete the data referring to or referable to the user in our possession when they are no longer necessary to achieve the stated purposes.

 

Navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers and terminals used by users, the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

These data are used in order to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow – given the architecture of the systems used – the correct supply of the various features you requested, for security reasons and to ascertain responsibility in the case of hypothetical computer crimes against the site or third parties and are canceled after 7 days.

 

Cookies and other tracking systems

Our site uses third-party analytical cookies to collect information in aggregate and anonymous form about the number of users and how they visit the site; session and technical cookies strictly limited to what is necessary for safe and efficient site navigation.

 

For information on the use of cookies and the ability to choose which specific cookies to authorize access to the extended information on the use of cookies at the following link:

Cookie Policy

Our site does not use technologies other than cookies to profile the user (pixel tag, web beacons ecc…)

 

RECIPIENTS OF DATA

 The following subjects are recipients of the data collected following the consultation of the website:

  • Register.it S.p.A., for the website hosting service, which typically acts as the controller on behalf of the owner;
  • Google Dublin, Google Ireland Ltd., for the creation of aggregate and anonymous statistics through the Google analytics platform; which typically acts as a controller on behalf of the owner;
  • Our personnel authorized to treat who acts on the basis of specific instructions provided (eg employees and collaborators of the owner);

To have a complete list of data processors, you can contact the Data Controller at any time.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Your data, because we use third-party services, could be transferred to the Google LLC server farm in the USA; this company has adhered to the adequacy decision called Privacy Shield USA-EU

 

AUTOMATED PROCESSING

The company does not process the data on the basis of an automated decision-making method, including profiling that produces legal effects against it or that may have a significant impact on you.

 

RIGHTS OF THE DATA SUBJECT

As data subject, natural person, you can enforce your rights as per art. 15 to 21 of the RGPD 2016/679, summarized below, by contacting the data controller at any time. Specifically, you may access your personal data, request rectification or erasure of your personal data, or restriction of processing of your personal data, data portability, or object to such processing.

 

RIGHT TO COMPLAIN

Each data subject who believes that the processing of his personal data by this website violates the Regulation has the right to complain with the Garante (Italian Data Protection Authority), as provided for by art. 77 of the Regulation, or to start judicial proceedings (Article 79 of the Regulation).

 

CONTACT DETAILS FOR THE DATA SUBJECT TO ENFORCE HIS OR HER RIGHTS

Data Controller, E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI), Italy, Tel. +39 055 373949, Fax +39 055 9029994, email: info@esa-engineering.com

 

Data Protection Officer, Ms. Elenia Gori email: e.gori@esa-engineering.com

Information Notice for Job Applicants

Information Notice on Personal Data Processing for Job Applicants

in accordance with Art. 13 of the General Data Protection Regulation (GDPR 2016/679)

Pursuant to Art. 13 of the UE 2016/679 Regulation, the company E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI), the Data Controller, shall provide you with the following information on personal data processing concerning natural persons.

Purposes and legal basis for the processing

Personal data provided in your CV shall be processed for the following purposes:

  • assessing if your profile meets our requirements (e.g. job vacancies), and more generally, managing the selection of employees and collaborators, and/or
  • contacting you to plan and conduct job interviews or for selection tests if needed, by using the contact detail you have provided.

The legal basis for processing personal data for the above-mentioned purposes is the implementation of the pre-contractual measures adopted upon your request. Provision of your personal data for these purposes is optional. However, refusal to provide such data may result in our company not being able to evaluate your profile and therefore proceed with the selection process.

However, through your curriculum we could collect special (sensitive) data as defined in art. 9 of the Regulations, such as data revealing, by way of example, racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership in parties, trade union, or in religious, philosophical or trade union associations or organizations, as well as personal data revealing your health status and sexual life. In this regard, should it not be strictly necessary, unless we believe that this type of data is useful for better classifying your position, especially in relation to belonging to protected groups, please do not provide this type of information; however, if you decide to give it to us, we shall ask you to fill out the consent that you can freely express in the attached form. Should you provide your particular data without the relevant consent, we shall not be able to consider your application. The legal basis of the processing. in case you decide to enter your particular data, is your consent.

For the same purposes, you will also be required to express your specific consent to provide your data to the companies “Esa engineering UK” and “ESA Middle East FZ-LLC”, that together with our company form part of Esa Group (please refer to the final part of this information). In this instance, should you not provide your consent, your application can be considered only by our company and not by the other companies belonging to ESA Group.

Method of Processing

Data shall be processed by using suitable tools and procedures to ensure security and confidentiality, and shall be performed either by paper, or with electronic tools. To have the complete list of the Processors, you can contact the Data Controller and the Data Protection Officer at any time at the addresses provided below.

Scope of Data Processing and Communication

Personal data will be processed by our authorized personnel, and by our consultants within the limits necessary to carry out their professional assignment on behalf of our Company, and identified as the Processors.

To have the complete list of the Processors, you can contact the Data Controller at any time at the addresses provided below

We shall not “disseminate” your personal data, i.e. we shall not made it available to unspecified parties; we may “communicate” it to public and private third parties, that can access the data by virtue of the provisions of law or regulation and within the limits imposed by these rules.

Automated Data Processing

The company does not carry out data processing based on an automated decision-making process, including profiling that produces legal effects concerning a person or that may significantly affect him or her.

Data retention period

Your data shall be retained for 24 months as from the date you have provided it, and may be used to contact you and to arrange interviews. At the end of this period, your data shall be deleted permanently.

Rights of the Data Subject

As data subject, natural person, you can enforce your rights as per art. 15 to 21 of the RGPD 2016/679, summarized below, by contacting the data controller at any time.

Specifically, you may access your personal data, request rectification or erasure of your personal data, or restriction of processing of your personal data, data portability, or object to such processing.

Right to complain

Each data subject that believes that the processing infringes the Regulation has the right to lodge a complaint with the Garante (Italian Data Protection Authority), as provided for by art. 77 of the Regulation, or to start judicial proceedings (Article 79 of the Regulation).

Contact details for the Data Subject to enforce his or her rights

Data Controller, E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI), Italy, Tel. +39 055 373949, Fax +39 055 9029994, email: info@esa-engineering.com

Data Protection Officer, Ms. Elenia Gori

Kind regards.

The Company E.S.A. Engineering Srl

Data Controller