PRIVACY POLICY OF THE PROCESSING OF PERSONAL DATA

  

Aesys S.p.a. recognizes the importance of the protection of personal data, it commits to respect the privacy of the users, to treat private data with caution and confidentiality and not to use them for purposes other than those specified below.

 
To this end, this policy describes how to manage the website in relation to the processing of personal data of the users who consult it. This is a notice made, also according to the Article 13 of EU Regulation 679/2016, to those who interact with the web services of Aesys S.p.A.:

  • www.aesys.com

  • srv-ticket.cloudapp.net

This Policy may be amended or updated at any time by Aesys S.p.A.

The notice is provided only for this website and not for other websites that may be consulted by the user through links except those indicated above.

Owner of data processing

The owner of data processing is: Aesys S.p.A., Via Pastrengo 7C, 24068 Seriate (BG) Fiscal Code: 02052370166, henceforth also“Aesys”.

Data and processing purposes

Aesys informs the users of the website that the data collected will be used exclusively for the purposes specified below. The data being processed are browsing data and data provided voluntarily by the user.

1. Browsing data

The computer systems used to operate the website acquire some data necessary for the operation of the platform and information whose transmission is implicit in the protocols used for internet connection and browsing.

Some information related to the browser session and generic data related to the device used by the user are also acquired. All data are acquired anonymously and not referable, however, to a specific user or for profiling purposes.

2. Data voluntarily provided by the user
The user, in order to access some services of the website (contact form, assistance portal via ticketing) provides to Aesys different types of data in spontaneous form after having read this notice and possible consent to data processing for one or more purposes expected and listed below.

Aesys will use the collected data for:

a)      purposes related to the use of the services offered by the website (website navigation);

b)      activities strictly connected to managing relationships with customers and potential collaborators (contact requests);

c)      marketing activities, solely and exclusively with the specific consent of the user, aimed to market research; economic and statistical analyzes; sending of advertising / informative / promotional material, sending of newsletters, also in relation to programs and promotions, including online, communications, development and maintenance of business relationships.

d)      to process the data related to curricula for evaluation of job applications.

The provision of data for the purposes referred to at the letters c) d) is optional and must be provided in accordance with the procedures expressly provided for by the article 7 of the GDPR, directly from the website.

The communications related to marketing activities may take place through the use of traditional methods (e.g., paper mail, phone calls with operator), automated (e.g., phone calls without operator) and similar (e.g. fax, e-mail, sms, newsletter).

Except for dissent, Aesys may continue to send its customers commercial communications related to services similar to those they are already using.

Processing modality

Data processing will be carried out according to Art. 4 n. 2) of the GDPR, by means of the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

The data will be submitted to both paper and electronic and / or automated processing.

Starting from their receipt/update, the data will be stored for a reasonable period of time with respect to the purposes of the treatment described above. For more information regarding data retention terms, please write to privacy@aesys.com.

Communication and data transfer

The data, object of the processing, will not be diffused; they may, for the purposes indicated in this notice, be communicated to third parties, among which business partners, consultants and freelancers, banks and credit institutions, insurance companies, financial companies, factoring, leasing, services, management and credit recovery, auditors, debt collection companies, public authorities, auditing or supervisory bodies, to fulfill obligations deriving from the law, regulations, community regulations or for aspects concerning the management and execution of the legal relationship with you, occurring or occurred.

The data will be processed by the following subjects:

  • Employees of companies that operate as people authorized to process data according to the tasks performed and adequately educated.

  • External Managers under Article 28 of the GDPR.

The list of the external managers for the processing of personal data is available at the registered office of Aesys.
For all the purposes indicated in this notice, the data may be communicated also abroad, inside and outside the European Union, in compliance with the rights and guarantees provided by the current legislation, subject to verification that the country in question guarantees an "adequate" level of protection in accordance with the provisions of the GDPR.

Rights of people involved
It is specified that in the quality of people involved, at any time it may be requested:

a) the access to personal data;

b) their correction in case of inaccuracy;

c) cancellation;

d) the limitation of processing;

e) the right to oppose to the processing of data where the conditions are met;

f)  the right to data portability, i.e. to receive the personal data provided in a structured format that is commonly and automatically readable by an automatic device.

Although not expressly provided for by the provisions referred to above, reference should be entirely made to the effective legislation on the subject of Privacy and specifically to articles 15, 16, 17, 18, 20 and 21 of the GDPR.

Withdrawal of consent

Consent may be revoked at any time without this being able to:

  • prejudice the lawfulness of the processing based on the consent given before the withdrawal;

  • prejudice further processing of the same data based on other legal bases such as contractual or legal obligations.

For further information about this notice or on any privacy topic, or in case you wish to exercise the above mentioned rights or withdraw consent, you can write to: privacy@aesys.com.

 

PRIVACY POLICY OF THE PROCESSING OF PERSONAL DATA FOR CLIENTS AND SUPPLIERS

 

1. Owner of data processing

Aesys SpA, in its quality of Owner of data processing, (hereinafter referred to as "Aesys") wishes to inform you that Legislative Decree 196/03 (hereinafter the Privacy Code) and EU Regulation 2016/679 (hereafter GDPR) regulate the protection of personal data as part of their processing activities.
Aesys treats the processing of personal data according to the principles of correctness, lawfulness, transparency and necessity, thus protecting your rights.

To this end, and according to the article 13 of the Privacy Code and to the article 13 of the GDPR, we provide you with the following information.

2. Object of the processing

The processing we intend to carry out relates to your personal data, as defined by the Privacy Code and the GDPR, of which we are or of which we will be aware by virtue of the existing legal relations with you.

3. Processing purposes

The processing of your data has the following purposes:

a) completion of administrative and management activities, in compliance with the fulfillment of accounting and tax obligations, and any other obligations imposed by current legislation;

b) fulfillment of the existing contractual and pre-contractual obligations with you;

c)  to process your contract requests with our sales representative for the presentation of the services offered by Aesys S.p.A.;

d) marketing activities, only and exclusively after your specific consent, aimed to market research; economic and statistical analyzes; sending of advertising / informative / promotional material, sending of newsletters, also in relation to programs and promotions, including online, communications, development and maintenance of business relationships.

The provision of data for the purposes referred to in paragraph 3, it is mandatory and the related processing, pursuant to current legislation, may be made without the consent of the person concerned.
The lack of data provision will result in our inability to fulfill and comply with the commitments undertaken in your comparisons and arising from the existing contractual or pre-contractual relationship.

The provision of data for the purposes referred to in paragraph 3, letter d) is optional and must be provided in accordance with the procedures expressly provided for in the articles 23 and 130 of the Privacy Code and in the article 7 of the GDPR.

Communications related to marketing activities may take place through the use of traditional methods (e.g., paper mail, phone calls with operator), automated (e.g., phone calls without operator) and similar (e.g. fax, e-mail, sms , newsletter).

If you are already our customers, we can send you commercial communications related to services similar to those already used, except for your dissent (Article 130 c.4 Privacy Code).

4. Processing modality

Data processing will be carried out according to the art. 4 n. 2) of the GDPR, by means of the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

Your data will be processed either on paper or electronic and/or automated.

Your data, starting from their receipt/update, will be stored for a reasonable period in relation to the purposes of the processing referred to at point 3 and in any case no more than 10 years from the end of the relationship for the purposes referred to at the letters a), b) and until the withdrawal of consent or until the exercise of the right of opposition for the marketing purposes referred to at the  letters c) and d).


 5. Communication and data transfer

Your data, object of the processing, will not be diffused; they may, for the purposes indicated in this notice, be communicated to third parties, among which business partners, consultants and freelancers, banks and credit institutions, insurance companies, financial companies, factoring, leasing, services, management and credit recovery, auditors, debt collection companies, public authorities, auditing or supervisory bodies, to fulfill obligations deriving from the law, regulations, community regulations or for aspects concerning the management and execution of the legal relationship with you, occurring or occurred.

Your data will be processed by the following subjects:

• Employees of Aesys SpA, in Italy and abroad, who act as people authorized to process data according to the tasks performed and adequately trained.

• External Managers according to the art. 29 of the Privacy Code and of the Article 28 of the GDPR. The list of External Managers for the processing of personal data is available at the registered office of Aesys S.p.A.

For all the purposes indicated in this statement, your data may be communicated also abroad, inside and outside the European Union, in compliance with the rights and guarantees provided by the current legislation, subject to verification that the country in question guarantees an "adequate" level of protection in accordance with the provisions of the GDPR.

6. Rights of the people involved

It is specified that in your quality of people involved, at any time you may be request:

a) the access to your personal data;

b) their correction in case of inaccuracy;

c) cancellation of the data referring to you;

d) the limitation of processing;

e) the right to oppose to the processing of your data where the conditions are met;

f) the right to data portability, i.e. to receive the personal data provided in a structured format that is commonly and automatically readable by an automatic device.

Although not expressly provided for by the provisions referred to above, reference should be entirely made to the effective legislation on the subject of Privacy and specifically to the article 7 of the Privacy Code and to the articles 15, 16, 17, 18, 20 and 21 of the GDPR.
It is furthermore your right to submit a complaint to the Personal data Guarantor Authority, with its registered office in Piazza di Montecitorio n.121, 00186 Rome.


7. Withdrawal of consent

Your consent may be revoked at any time without this being able to:

  • prejudice the lawfulness of the processing based on the consent given before the withdrawal;

  • prejudice further processing of the same data based on other legal bases such as contractual or legal obligations.

For further information about this notice or on any privacy topic, or in case you wish to exercise your rights or withdraw your consent, you can write to: privacy@aesys.com.



PRIVACY POLICY OF THE PROCESSING OF PERSONAL DATA FOR CANDIDATES

 

1.  Owner of data processing

Aesys S.p.A., in its quality of Owner of data processing, (hereinafter referred to as "Aesys") wishes to inform you that the EU Regulation 2016/679 (hereafter GDPR) regulates the protection of personal data as part of their processing activities.

Aesys treats the processing of personal data according to the principles of correctness, lawfulness, transparency and necessity, thus protecting your rights.

To this end, and according to article 13 of the GDPR, we provide you with the following information.

2. Object of the processing

The processing we intend to carry out relates to your personal data, as defined by the GDPR, which you provide us or provided to us through registration on our website (www.aesys.com) or during the interview with the human resources department of Aesys S.p.A. or collected from third parties ( as an example, personal data, contact data and information about the application can be collected from the dedicated social networks and platforms and / or search and selection companies, etc.).

The personal data processed by us, typically contained in a Curriculum Vitae (C.V.), are defined by law as common personal data. Further types of data (e.g. health, judicial, biometric data and contractual and remunerative situations) will be processed in accordance with the legal requirements. In particular: any data related to health and judicial can be processed to fulfill the obligations and tasks provided by law uniquely for the purposes described below.


3. Processing purposes

 

The processing of your data has the following purposes:

a) conduct of the research and selection of candidates and any other connected or instrumental purposes

b) establishment, management and termination of the contractual work and training relationship;

c) fulfillment of legal obligations.

d) sending your candidacies to the companies associated and controlled by us and to third party companies such as Research and Selection Companies, Recruitment Agencies and Accredited Authorities.

The provision of data for the purposes referred to in paragraph 3 is mandatory.The lack of data provision will prevent Aesys from conducting research and selection of personnel, including for any targeted and/or mandatory placement and will not allow your application to be considered.

 

4. Processing modality

Data processing will be carried out according to the art. 4 n. 2) of the GDPR, by means of the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

Your data will be processed either on paper or electronic and/or automated.

Your data, starting from their receipt / update, will be stored for a reasonable period in relation to the purposes of the processing referred to at point 3 and however until the withdrawal of the consent given by the people involved.

5. Communication and data transfer

For the purposes referred to at point 3, your data may be communicated to Aesys, and to third parties, including consultants and freelancers, public authorities, audit or supervisory bodies, to fulfill obligations deriving from the law, regulations, community regulations or for aspects concerning the management and execution of any future legal relationships.

 Your data will be processed by the following subjects:

• Employees of Aesys SpA, who act as people authorized to process data according to the tasks performed and adequately trained.

• External Managers according to the Article 28 of the GDPR.

The list of External Managers for the processing of personal data is available at the registered office of Aesys S.p.A.

For all the purposes indicated in this statement, your data may be communicated also abroad, inside and outside the European Union, in compliance with the rights and guarantees provided by the current legislation, subject to verification that the country in question guarantees an "adequate" level of protection in accordance with the provisions of the GDPR.

6. Rights of the people involved

It is specified that in your quality of person involved, at any time you may request:

a) the access to your personal data;

b) their correction in case of inaccuracy;

c) cancellation of the data referring to you;

d) the limitation of processing;

e) the right to oppose to the processing of your data where the conditions are met;

f) the right to data portability, i.e. to receive the personal data provided in a structured format that is commonly and automatically readable by an automatic device.

Although not expressly provided for by the provisions referred to above, reference should be entirely made to the effective legislation on the subject of Privacy and specifically to the articles 15, 16, 17, 18, 20 and 21 of the GDPR.

For further information about this notice or on any privacy topic, or in case you wish to exercise your rights, you can write to: privacy@aesys.com.