PRIVACY
Statement. ECM guarantees that the processing of data received via mail or electronic forms for registration will be in accordance with the provisions of the privacy legislation (leg. dec. no. 196/2003).
This statement is provided for the protection of personal data pursuant to art. 13 legislative decree 196/2003 for those who interact with the web site. This information is only valid for the ECM site and not to other external websites that may be accessed by users via a link.
The site contains no hidden technological tools that can obtain the Visitor's personal information.
In general, to access information available on the ECM site providing personal information is not required. If ECM requires visitors to provide personal information, it is requested, in accordance with applicable laws regarding the protection of personal data, after obtaining consent on the basis of this statement. In such cases, ECM:
- only collects personal information to the extent necessary to achieve a specific purpose and the data collected in this manner is not reused for purposes incompatible with the specific purpose;
- will not disclose personal data to third parties, except when necessary to achieve the stated purpose and will only transmit data to specified categories of recipients;
- will not disclose the data collected for direct distribution marketing;
- undertake the commitments to take the necessary security measures to prevent the misuse of such data by third parties;
- will store the information collected only for the period of time necessary to achieve the purpose for which it was collected.
Purpose od data processing. The processing of any personal data collected is exclusively aimed at achieving the following objectives:
- for needs resulting from a request for contact and to permit the fulfilment of the request;
- for site operational and management reasons;
- for the need to monitor and process statistics relative to the use of the services provided by this site;
- for purposes of recruitment for job positions open or following spontaneous applications.
The data is only shared with third parties where this is necessary for that purpose.
Processing of data. This may include recording, storage, modification, communication and cancellation of data as well as its collection.
The data collected will be processed by manual or automatic computer equipment, with logic strictly related to the purposes and in any case to ensure the privacy and data security, for the time necessary to achieve the purposes for which data were collected.
ECM will take all precautions and safety measures necessary to protect information, data and knowledge to ensure that its confidential nature is in no way compromised in compliance with the requirements of Art. 31 of. legislative decree 196/2003. Specific security measures are taken to prevent loss of data, illicit or improper use and unauthorised access. In particular ECM implements all the necessary technical, information, organisational, logistical and procedural safety measures provided by the legislative decree no. 196/2003 and Annex B, to ensure the security, integrity and confidentiality of personal data processed, so as to guarantee the minimum level of data protection as dictated by law.
The methods applied guarantee that access to data is only allowed by the persons or person within ECM in charge of data processing.
Data provision. Apart from what has already been specified for navigation data, the provision of data is optional, given that the processing purposes are not connected obligations under law or other binding regulations. Therefore, the user is free to provide personal data in data collection forms or otherwise detailed in contacts at the addresses listed on this site, on the other hand not providing this data may make it impossible to process the request (i.e. job applications).
Children under eighteen years may only provide personal data with the consent of their legal representative (i.e. a parent or guardian).
It is important to remember that when you provide personal information to ECM through the Internet site, this information may travel through systems that are not under the control of the Company and which could therefore be intercepted by unauthorised third parties.
Types of data processed.
Navigation data: computer systems and software used to operate this website acquire, during normal operation, some personal data whose transmission is implicit in the communication protocol of the Internet. This information is not collected to be associated with specific individuals, but by their very nature could, through processing and association with data held by third parties, be used to identify users. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) of the resources required, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters regarding the operating system and computer environment. This data is only used to obtain anonymous statistical information about the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. Other than in this case, the data on web contacts do not last for more than seven days.
Data provided voluntarily by the user: The optional, explicit and voluntary sending of e-mails to the addresses listed on this site involves the acquisition of the sender's address, needed so as to respond to requests, and any other data included in the message. All personal data received to candidate a user for a job will contain explicit consent to the processing of data, otherwise the data will be deleted immediately upon receipt and will not be processed and, consequently, the assessment of the Visitor's working abilities will not be evaluated.
The submission and processing of data, especially regarding the selection of staff, could also relate to the category of data called sensitive and / or judicial proceedings, which will be treated in accordance with law.
Communication and dissemination of data. No data from the web service is communicated or disseminated. Personal information provided by users who submit requests (including the attaching of their curriculum vitae) is only used to perform the service or activity requested and is only communicated to third parties-where this is necessary for that purpose. Should the data collected nevertheless be disclosed, it will only be aggregated, anonymous and for monitoring and statistical requirements relating to the visitor's use of the services provided with the site.
When aiming to recruit staff ECM may request a curriculum vitae, and any identifying and personal information to determine whether the candidate's professional profile is in line with the requirements of the Company. ECM reserves the right to remove the data received from its archive, when it proves to be inaccurate, incomplete or outdated upon inspection.
ECM can also request the Visitor to provide further data to be able to inform the Visitor of its promotions and activities: with that purpose, while preserving the anonymity of the person, the Company may use all data provided for statistical purposes.
Rights of the Interested Party. Ex Art. 7 legislative decree 196/2003, the interested party has the right to:
- the confirmation of whether or not personal data concerning him/her exists, even if not yet recorded, and its-communication in intelligible form;
- an indication of the content and origin of personal data;
- verify the accuracy of the data and its-integration or updating or rectification;
- the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data which need not be kept for the purposes for which the data were collected or subsequently processed;
- attesting that the transactions referred to in the immediately preceding paragraphs have been notified, also as regards their contents, to those whose data have been communicated or disseminated, unless this requirement proves impossible or involves the use of means clearly disproportionate to the protected right;
- an indication of the purposes and methods of treatment;
- an indication of the logic applied in cases of treatment with the help of electronic means;
- indication of the identity of the owner, manager and the representative appointed pursuant to art. 5, paragraph 2, legislative decree 196/2003;
- the names of individuals or categories of persons to whom the data may be communicated or who can come into contact with the data as an appointed representative to the State, managers or agents.
The subject has the right to object, in whole or in part:
- for legitimate reasons, to the processing of data concerning him, even if the purpose of treatment;
- the processing of personal data concerning him/her for the purpose of sending him/her advertising materials or direct selling or for carrying out market research or commercial communication.
The above rights may be exercised either directly or through an agent in the manner detailed in Articles 8 and 9 Legislative decree no.196/2003.
If the visitor feels that his/her rights have been violated as a result of processing of personal data, he/she may complain to the Data Protection Authority, an independent supervisory authority.
Data Controller. The data controller is the legal representative of ECM SpA, with headquarters in Serravalle Pistoia (PT), locality Cantagrillo, Via IV Novembre no. 29.
To exercise his/her rights or to obtain additional information, the visitor can apply directly to the Manager of Data Processing a for ECM SpA via normal mail to the registered office or via e-mail to address privacy@ecmre.com.
Data processing location. Processing related to the services on this web site takes at the offices of ECM and is directly and exclusively managed by the data controller.
Consent to Processing of personal data. Consent to the processing of personal data in the manner and for the purposes outlined above is optional. In case of refusal or omission of the agreement, ECM will not be able to process your personal data.
When the information supplied to ECM contain sensitive data (i.e. data revealing racial or ethnic nature, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, religious, philosophical, political or trade union as well as data disclosing health and sex life) this data can only be processed with the express written consent by the individual. In the case of disclosure of sensitive data, the applicant will authorise the data to be processed. If no consensus is given such data cannot be processed in any way and will, therefore, be deleted.