WEBSITE PRIVACY POLICY
With the document herein, VHIT S.p.A. Sole member company (hereinafter referred to as the “
Data Controller”,
and/or “VHIT SpA”,
the Company), provides the user (hereinafter referred to as the “
Data Subject”) with information about the processing of personal data provided by the latter when accessing and navigating the website
https://www.vhit-weifu.com of VHIT SpA (hereinafter referred to as the “
Website”) and using the services envisaged therein.
The policy herein is provided solely for the Website specified and not for any other websites that may be consulted by the Data Subject using the links present on the aforementioned Website or which can be reached from the said Website.
Navigation is free and does not require any registration. Any provision of personal data is envisaged in relation to the following functions present on the Website:
- Contact us for further details
- Send in your application
1) Data Controller
Pursuant to the provisions of Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) 2016/679,
VHIT SpA, with registered office in Offanengo (CR), Strada Vicinale delle Sabbione, no. 5 – 26010 (VAT registration number IT01229370190), is the
Data Controller, pursuant to the provisions of Art. 24 of GDPR, for the processing of the Data Subject’s personal data.
VHIT SpA hereby informs the Data Subject that the personal data acquired will be processed in compliance with the GDPR. As regards this processing, the Data Controller hereby provides the following information.
The term “
processing” (pursuant to the provisions of Art. 4 no. 2 of the GDPR) means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collecting, recording, organising, structuring, storing, adapting or amending, extracting, consulting, using, disclosing by transmission, dissemination or otherwise making available, comparing or interconnecting, limitation, deletion or destruction.
This processing shall be grounded in the principles of propriety, lawfulness and transparency, while safeguarding the Data Subject’s confidentiality and rights.
2) Personal data collected and processed (“Data”)
The expression
personal data means any information concerning the Data Subject and referring to the same.
The Data are provided directly by the Data Subject.
The above-mentioned functions for which the provision of Data is envisaged are as follows.
2.1.) “Contact us for further details
”: the optional and voluntary sending of e-mail messages to the addresses specified on the Website entails the acquisition of the sender’s e-mail address, as well as any further personal data voluntary provided in the message. These data are used by VHIT SpA for the sole purpose of replying to the sender.
2.2) “Send in your application”: allows the data subject to access the
https://careers.smartrecruiters.com/VHITSpA portal and apply for open positions in VHIT or send in their
CV. This site is separate from the VHIT SpA website, with its own specific Privacy Policy and Cookie Policy, which are published on that specific site.
The Data processed are the following: name, surname, date of birth, home address, phone number, e-mail address, educational background, professional experience, as well as additional Data provided by the Data Subject and contained in their CV sent in to VHIT by the same via the above-mentioned website.
Data processing may also concern data of a particular nature as referred to in Art. 9 of the GDPR, if provided voluntarily by the Data Subject in their CV; if this is the case, these Data will be processed and safeguarded as envisaged by law, in compliance with the GDPR and with Italian Leg. Decree no. 196/2003, as amended by Italian Leg. Decree no. 101/2018.
3) Purposes of Data processing and legal basis
As part of consulting the Website, the Data provided by the Data Subject are processed for the purposes set out below:
Contact us for further details:
- for the sole purpose of replying to the sender.
Send in your application:
- for VHIT to assess the professional profile of the data subject as part of its current and future recruitment processes, aimed at establishing employment or professional consulting partnerships between the Data Subject and VHIT; between the Data Subject and other companies in the VHIT Group;
- to notify the Data Subject of opportunities relating to open recruitment processes over time.
4) Data processing methods
The Data collected are processed by the Data Controller according to the principles set out in the GDPR on the subject of personal data protection.
The Data collected will be included in the relevant databases and
processed in hard copy format as well as using
automated and computerised tools.
The Data will be processed by subjects expressly appointed by the Data Controller as Data Processors and Data Co-ordinators.
These subjects may perform collection, analysis, organising, structuring, use, consulting, processing, comparison and any other processing operations specified in Art. 4, no. 2 of the GDPR, even partially automated,
in compliance with the legal provisions required to guarantee, among other things, the confidentiality, security, integrity, availability, accuracy, update and relevance of the data and in accordance with the purposes set out herein above.
As part of the processing of the data collected, VHIT SpA does not utilise fully automated decision-making processes
.
Specific security measures are taken to prevent the loss of data, unlawful or incorrect use and access or dissemination by unauthorised persons.
5) Nature of Data provision
Provision of data is to be understood to be mandatory for the provision of the services set out in point 3.
The company processes any optional data on the legal basis of consent, in other words upon the Data Subject’s explicit approval.
6) Data disclosure
Within the limits that are strictly relevant to the purposes set out in point 3 herein above, the Data collected may be disclosed
both in Italy and abroad to the entities specifically appointed as data co-ordinators.
The updated list of Data Co-ordinators is available from the registered office of VHIT SpA.
7) Transfer of Data abroad
The Data collected are
also transferred abroad to countries located in the European Economic Area, to be processed – as part of the purposes set out in point 3 herein – by companies in the VHIT Group located in the European Economic Area, as well as by entities who, using servers located in the European Economic Area, provide VHIT SpA with cloud computing and hosting services on the basis of agreements in force with the VHIT Group.
Also as part of the purposes set out in point 3 herein, the entities who provide VHIT SpA with cloud computing and hosting services may transfer the Data to intra-group entities and third-party suppliers who are also located in
Countries outside the European Economic Area. If this is the case, the said transfer shall be made while ensuring an appropriate level of personal data protection and in compliance with the provisions of the GDPR, via: Data transfer to entities situated in Countries for whom the European Commission has issued a declaration of compliance; and/or Data transfer to entities obliged to abide by Binding Corporate Rules during data processing; and/or Data transfer pursuant to the provision of an agreement that contains standard contractual clauses approved by the European Commission. In the event of Data transfer to Countries located outside the European Economic Area, the applicable laws in the said Countries may allow governments, courts and public authorities located there to access such Data.
8) Data processing location
The Data collected will be processed: on VHIT premises, with registered office in Offanengo (CR), Strada Vicinale delle Sabbione, no. 5 – 26010 Italy; on the premises of the Data Co-ordinators or Data Processors, specified in point 6 herein above (“Data disclosure”); on the premises of the entities specified in point 7 herein above, second paragraph (“Transfer of Data abroad”).
9) Data processing duration
The Data Subject’s Data specified in point 2) will be kept and processed for the
amount of time required to achieve the purposes set out in point 3.
10) Rights of the Data Subject
The
Data Subject may at any time exercise their rights vis-à-vis the Data Controller pursuant to the provisions of Articles 12, 15, 16, 17, 18, 20, 21 and 34 of the GDPR, which are set out below.
The Data Subject is entitled to obtain
confirmation as to the existence or not of Personal data that may concern them and disclosure of said data in intelligible form.
The Data Subject is entitled to
receive the following information:
- the source of Personal data;
- the purposes of the processing to which the Personal data are subjected and the processing methods;
- the categories of Personal data processed;
- the Personal data storage period;
- the existence of an automated decision-making process and the logic applied if the processing is carried out using electronic tools;
- the identification details of the Data Controller and, where appointed, the Data Co-ordinator;
- the entities or categories of entities to whom the Personal data may be disclosed or of entities who may become aware of said Data in their capacity as designated representatives, Data Co-ordinators or Processors, both in-house and external.
The Data Subject is entitled to
revoke the consent provided, without prejudice to the
consequences specified in the policies set out at the foot of each of the above-mentioned forms.
The Data Subject is also entitled to obtain:
- the updating, amendment or, where interested, supplementation of the Data, in conformance with the provisions of Articles 16 (“Right to amendment”) and 18 (“Right to processing limitation”) of the GDPR;
- the erasure of the Data concerning them in the cases set out in Article 17 (“Right to erasure” – “Right to be forgotten”) of the GDPR;
- the availability in a structured, commonly used format that is legible from any automatic device, of the Data concerning them provided to the Data Controller and is entitled to transmit the said Data to another data controller without impediment on the part of the Data Controller and, where technically feasible, to obtain their direct transmission, under the terms set out in Article 20 (“Right to data portability”) of the GDPR.
Pursuant to and in accordance with the provisions of Article 21 (“
Right to object”) of the GDPR,
the Data Subject is entitled to object, at any time, for reasons related to their particular situation, to the processing of Data concerning them, even if pertaining to the collection purposes, without prejudice to the possible consequences
specified in the policies set out at the foot of each of the above-mentioned forms.
Should the Data Subject feel their prerogatives have been violated, they are entitled to lodge a
complaint with the Italian Data Protection Supervisory Authority (
https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali), without prejudice to any other administrative appeal or judicial remedy.
11) Contact details
An appropriate response will be given to the request without undue delay and in any case within one month, which may be extended by two months, from receipt of the same, pursuant to the provisions of Article 12 of the GDPR.
E-mail:
privacy@vhit-weifu.com
Certified e-mail: vhit@pec.it
Registered mail: VHIT, with registered office in Offanengo (CR), Strada Vicinale delle Sabbione, no. 5 – 26010 Italy.
An appropriate response will be given to the request without undue delay and in any case within one month, which may be extended by one month, from receipt of the same.
12) Navigation data and use of Cookies
Computer processing systems and all software procedures used to operate the VHIT SpA Website may – during normal operation – acquire the Data Subject’s personal data whose transmission is implied in the use of Internet communication protocols. This information is however not collected to be associated with identified data subjects, but for its very nature this information could, through processing and associations with data held by third parties, make it possible to identify the users of the website. This category of data includes IP addresses or domain names of computers used by the users who connect to the website, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to make the request to the server, the size of the file obtained in reply, the numeric code indicating the state of the reply given by the server (good outcome, error etc.) and other parameters relating to the operating system and to the user’s IT environment.
This above-mentioned data are used by the Data Controller solely for the purpose of processing anonymous statistical information on the use of the website, to check that it is functioning correctly and to improve its quality. The data could be used to ascertain responsibility in the case of information technology offences committed against the website or of requests by the Authority.
For more information about the characteristics of the cookies used on the VHIT SpA website and the navigation data storage times, as well as on how to disable/delete Cookies, please
read the VHIT SpA Cookie Policy.
13) Access to website pages of other companies in the VHIT Group
The
https://www.vhit-weifu.com website grants direct access to the website pages of the VHIT Group’s foreign companies, which
constitute websites that are independent from the VHIT SpA website.
When accessing the above-mentioned websites,
the Data Subject must be aware that they are connecting to a third-party website and that navigation will continue on that website and outside the website of the Data Controller, VHIT SpA.
The processing of personal data, including navigation data, collected through the above-mentioned websites, is not carried out by VHIT SpA, and is governed by the Privacy Policy and Cookie Policy, which should be referred to, published by their respective data controllers on each of the above-mentioned websites of the VHIT Group’s foreign companies.
