This information describes, pursuant to and for the purposes of art. 13 of EU Regulation 679/2016 (General Data Protection Regulation, hereinafter “GDPR”), the methods by which the Data Controller processes the personal data collected or provided by the User while browsing this Website.
Data Controller
The Data Controller, pursuant to and for the purposes of arts. 4 and 24 GDPR, is Sicea S.r.l. in the person of its legal representative pro-tempore, with registered office in Via Bachelet, 8 – 35010, Vigonza (PD) and VAT number 03452880283, e-mail: segreteria@sicea.com.
Origin and type of data collected
- Browsing data. The computer systems and software procedures used to operate the Website may acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols. This category of data may include the IP addresses or domain names of the devices used, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given to the server (successful, error, etc.) and other parameters relating to the operating system and the User’s IT environment.
- “Contacts” section. The following data are acquired through the appropriate form: name, surname, email address, telephone number and any other information that the User shares with us in the message area.
- Any personal and special data contained in the CVs that may be sent to the email addresses indicated on the Site. The Data Controller – in accordance with the provisions and guidelines of the Guarantor – will provide information on the processing of data contained in the CVs at the time of the first useful contact with the candidate.
- Personal data transmitted optionally, explicitly and voluntarily to the email addresses indicated on the Site. In this case, the email address is acquired, as well as all other personal data included in the letter.
Purposes and legal bases of the processing
The data are processed for the following purposes:
- to guarantee the proper functioning of the Website and the User’s navigation.
The legal basis is the legitimate interest of the Data Controller (art. 6, letter f, GDPR).
- to respond quickly and effectively to Users’ questions formulated through the Contact section or other channels made available;
The legal basis is the execution of contractual and pre-contractual measures adopted at the request of the customer (art. 6, letter b, GDPR) and the legitimate interest of the Data Controller (art. 6, letter f, GDPR) to be more efficient, to provide information on the services offered, as well as to improve and develop new products and services.
- to consider the application for a job position.
The legal basis is the execution of pre-contractual measures adopted at the request of the interested party (art. 6, letter b, GDPR). The processing of any “special” data is lawful on the basis of the Provision of the Guarantor of 5 June 2019 which integrates and modifies the General Authorization no. 1/2016.
- to comply with legal obligations to which the Data Controller is subject and to fulfill any requests from the competent Authorities.
The legal basis is the fulfillment of legal obligations (art. 6, letter c, GDPR).
Provision of personal data
The mandatory or optional nature of the provision is specified from time to time – with reference to the individual information requested – by placing a special symbol (*) next to the mandatory information. Any refusal to communicate the data marked as mandatory makes it impossible for the Data Controller to execute the contract or provide the available services. The provision of additional data is, however, optional.
Processing methods
The processing of personal data is carried out by the Data Controller using both paper and electronic or telematic methods, using internal personnel specifically authorized to process personal data. Adequate security measures are adopted in order to minimize the risks of destruction or loss – even accidental – of the data, unauthorized access or processing not permitted or not compliant with the purposes of collection.
Retention period
The data is processed for the time necessary to perform the service requested by the User or in general until the purposes for which it was collected are achieved. Some data will be retained for longer periods of time, by virtue of obligations relating to fiscal-administrative-accounting obligations (e.g. 10 years pursuant to art. 2220 of the Civil Code). Data relating to applications for our job positions are retained for a maximum of 24 months. Upon completion of the intended processing purposes, the personal data will be deleted or permanently anonymized.
Communication of personal data
The User’s personal data will not be disclosed to unspecified parties; however, the data may be communicated to third parties, legal and/or natural persons, who provide the Data Controller with outsourced technical and organizational services, such as IT services, communication services, e-mail marketing services, logistics services, etc. The same will operate as duly appointed owners, joint owners or data controllers, in full compliance with the legislation in force indicated above; they are provided only with the information necessary to carry out the relevant functions. The complete and updated list of data controllers can be known upon request.
Please note that the data may be made available to persons who have the right to access them pursuant to legal provisions, within the limits and for the purposes set out in such regulations, as well as to banks, credit institutions, debt collection companies and insurance agencies.
Transfer of personal data
Any transfer of personal data to non-EU countries that may be necessary to follow up on the contract in place with the User or to guarantee the services offered (consider the case of suppliers based in third countries) is carried out in compliance with articles 44 et seq. of the GDPR, by providing specific tools that guarantee adequate guarantees of data protection.
Rights of the interested party
At any time, pursuant to articles 15 et seq. of EU Regulation 679/2016, the User may exercise the following rights:
- obtain confirmation as to whether or not processing concerning him or her is in progress and access to personal data;
- obtain information on the origin of the data, the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and the expected retention period or the criteria used to determine it;
- request the rectification, limitation of processing or deletion of data, provided that the deletion is compatible with the legal obligations of fiscal and accounting conservation to which the Data Controller is subject;
- object to the processing;
- request data portability, where possible;
- revoke consent, without prejudice to the lawfulness of the processing based on the consent given before the revocation;
- file a complaint with the Supervisory Authority for the protection of personal data.
The exercise of rights, with the exception of letter g), may take place by sending a request to the email address privacy@sicea.com
Updates and changes
In the future, the Data Controller may modify or simply update, in whole or in part, the Privacy Policy of the Site, also in consideration of the modification of laws or regulations that govern this matter and protect the rights of the interested party. The modifications and updates of the Privacy Policy will be binding as soon as they are published on the Website. We therefore invite the User to regularly access this section to verify the publication of the most recent and updated Privacy Policy.
This document was updated on 02/07/2025.
