Pursuant to Regulation (EU) 2016/679 also known as the General Data Protection Regulation (hereinafter the “Regulation” or the “GDPR”), this page describes the procedures for processing personal data of users who consult or interact with the website of PERFORMANCE iN LIGHTING S.p.A. at the following web address:
www.performanceinlighting.com
Data controller
The Data Controller for personal data is PERFORMANCE iN LIGHTING S.p.A. (or, for short, the “Company” or “Data Controller”), based in Colognola ai Colli (VR), Viale del Lavoro n. 9/11 – 37030, VAT NO. 08517220011, contactable at the following web address: privacy.it@pil.lighting .
1. TYPE OF PERSONAL DATA
Navigation data
The servers and computer systems used in the operation of this website collect specific personal data during their normal operation whose transmission is implicit in the use of Internet communication protocols.
Such information is not collected in order to be associated with identified data subjects, but could by its very nature enable users to be identified by means of data processing operations and association with data held by third parties.
This category includes the IP addresses or domain names of computers used by users who connect with the website, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time the request is made, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the response status from the server (successful, error, etc.) and other parameters related to the user's operating system and IT environment.
Data provided voluntarily by the user
The optional, explicit and voluntary transmission of messages to the contact addresses indicated on the website, and the completion and submission of forms present on the website, shall entail that the sender's personal and contact particulars are acquired (name, surname, e-mail address), since these particulars are needed in order to reply, together with any personal data included in the communications, forms and curricula transmitted.
In particular, the website collects and processes any information provided by users in the “Contact us” and “Work with us” sections of the site, and especially personal particulars, contact details, any additional personal data contained in the request sent, information about work experience or education/training, the user’s present job and company.
If the user provides personal data (e.g. personal particulars and contact details) in order to subscribe to the “Newsletter”, relevant personal data will be processed in order to provide the newsletter service.
If you contact us, we will keep track of such correspondence.
COOKIES
Cookies are small text files placed on users’ computers by websites which those users visit. They are extensively used in order to ensure that websites function efficiently and to provide information to the website owners. We use cookies that are strictly necessary for the operation of our website. Third party analytic and targeting cookies - which help us to improve the user experience on our website and to collect useful information - are not set by default. We will not set these cookies unless you enable them through a special Cookie Banner (insert Cookie Banner link). For more detailed information on the cookies we use, you may consult our Cookie policy (insert link to the cookie policy).
2. PURPOSES AND LEGAL BASIS OF THE DATA PROCESSING
In relation to navigation data, these data are used exclusively in order to ascertain and check that the website is operating correctly. The data could also be utilised by Law Enforcement agencies to ascertain liability in the event of computer crimes compromising the website, otherwise the data are kept for the period of time required by applicable law, only for as long as strictly necessary in order to provide the requested service to the user and ensure that the communication is transmitted. For this purpose, the user’s data are processed in accordance with the provisions of Article 6(1) f) of the GDPR in the pursuit of the Data Controller’s legitimate interests.
The Data Controller will process the data voluntarily provided by the user for the following purposes:
a) management of personnel search and selection procedures in the “Work with us” section of the website and inclusion of the CV in our computer records for future contact and possible future interviews in the context of personnel selection processes. For this purpose, the data are processed in accordance with the provisions of Article 6(1) b) of the GDPR, as they are necessary for the implementation of pre-contractual measures adopted at the user’s request;
b) to process users’ requests received through the “Contact Us” section of the website. For this purpose, the data are processed in accordance with the provisions of Article 6(1) b) of the GDPR, as they are necessary for the execution of a contract to which the user is a party or for the implementation of pre-contractual measures adopted at the user’s request;
c) transmission of Newsletters related to the Company’s activity; for this purpose, the data are processed in accordance with the provisions of Article 6(1) a) of the GDPR, where the user has given his/her consent.
3. DATA PROCESSING PROCEDURES
Personal data will be processed by the Company and its officials using computerised and manual systems in accordance with the principles of correctness, good faith and transparency provided for by regulatory provisions that protect personal data and safeguard the data subject’s confidentiality and rights, by adopting suitable technical and organisational measures to ensure a level of data security that matches the risk.
4. DATA RETENTION
The data retention period depends on the purposes of the data processing and may thus vary. The following criteria are used to determine the relevant data retention period: personal data will be stored for as long as required in order to search for professional positions in line with candidate profiles as indicated in their CVs and in the information sent through the form to manage specific user requests made through the “Contact Us” section or until such time as the user revokes his/her consent for the purposes set forth in letter of this privacy notice, or exercises his/her entitlement to opt-out. If the user does not revoke his/her consent, personal data will be processed for at most 24 months to assert rights in legal proceedings; and for as long as required by law.
5. COMMUNICATION, DISSEMINATION AND TRANSFER OF DATA
Personal data will be processed by the Data Controller’s employees and non-company collaborators, duly trained, instructed and authorised to process the data in order to achieve the aforementioned purposes. In specific cases, furthermore, personal data may also be communicated to suppliers, contractors and consultants who are appointed to carry out website content maintenance tasks or to provide certain related functions or services. The recipients will only have access to personal information insofar as this is necessary to enable them to carry out their functions, and in accordance with specific contractual confidentiality obligations. The Data Controller designates these data recipients as Data Processors, pursuant to Article 28 of the Regulation.
In view of the existence of electronic links and/or correspondence with these recipients, personal data may also be transferred outside the European Economic Area (EEA), specifically to the United States. In this event, the Company ensures that the data transmission will be supported by adequate guarantees, pursuant to Articles 45-47 of Regulation (EU) 2016/679.
In the event of data transfers to the United States, in particular, standard contractual clauses or standard data protection clauses will be adopted. For further information, please contact the Company using the e-mail address indicated below.
6. DATA SUBJECT’S RIGHTS
Data subjects are entitled to have the Data Controller, in the cases provided for, grant them access to their personal data, rectify or erase personal data or limit the processing of personal data, or to object to the data processing (Article 15 et seq. of the Regulation).
The Data Controller may be contacted by email for this purpose to: privacy.it@pil.lighting.
7. RIGHT TO FILE A COMPLAINT
Data subjects who consider that their personal data are being processed in breach of the provisions of the Regulation are entitled to file a complaint with the Italian Data Protection Authority pursuant to Article 77 of the Regulation, or to bring legal proceedings as appropriate (Article 79 of the Regulation).
