CESANAMEDIA privacy policy
The data provided to Cesanamedia srl, for the use of their services, as well as any other opportunities, will be processed in compliance with the current provisions on the protection of personal data, pursuant to EU Regulation 679/2016 (“GDPR”).
1. Name of holder
The holder of the data is Cesanamedia srl, based in Milan, via dei Fontanili n. 13, CAP 20141, Tel +39 02.8440441, Fiscal Code / VAT IT07361280964.
2. Nature of the processed data and purpose
The personal data of older users are handled, where personal data means any information concerning a physical person,
identified or identifiable also indirectly by reference to any other information.
The data under consideration will be as follows:
that conferred by the user to the Holder by completion of the form prepared for this purpose, such as personal data (name, surname, e-mail address), as well as any other data that the user voluntarily gives during the request for information;
those collected by Cesanamedia srl while browsing the Website, such as IP address, information acquired through cookies;
those given by the user when sending his/her candidacy for job positions through the appropriate section of the site, personal data (name, surname, gender, date of birth, nationality, postal address, telephone number, e-mail) , data relating to education, professional experience, information technology and linguistic knowledge of the user;
those conferred by the user while contacting the Holder (name, surname, e-mail address, professional position).
2.2 The processing of personal data of the user, has the following purposes:
to respond to requests for information of any kind, from obligations imposed by law,
by regulation or by community legislation as well as for the exercise of their rights in court;
sending newsletters and promotional material, by e-mail, telephone with an operator, as well as text messages
commercial proposals relating to and/or connected to the Cesanamedia srl Services.
3. Mandatory/optional nature of the confernment of data
3.1 The provision of data requested upon activation of the services for the purposes referred to in section 2.2 A above is mandatory, as it is strictly functional for the execution of the requested services, and for the execution of legal obligations. Any refusal to provide the data implies the impossibility for Cesanamedia srl to provide the requested services, and/or to comply with legal obligations.
3.2 The confernment of data requested during the activation of the services for the purposes referred to in Section 2.2b above is optional.
The refusal of consent for the purposes of section 2.2 B will not prevent the user requests.
The user can oppose the processing of the data referred to in section 2.2 B, by not initially giving their consent, either by sending an email to privacy@cesanamedia.com, or using the tools prepared for this purpose by the Holder.
4. Processing methods
4.1 The user’s data will be collected electronically during the activation of the requested services, also by means of a crossover of data, as well as through the use of the e-mail service.
4.2 The user’s data will be processed through registration, consultation, communication, storage, cancellation, carried out with the aid of electronic instruments and manually, ensuring the use of appropriate measures for the security of the data processed and ensuring its confidentiality.
4.3 The data of the user, stored on electronic/magnetic/computer supporting systems, are stored and archived on servers located in Italy.
4.4 Personal data will be processed by collaborators and/or employees of Cesanamedia srl, within the scope of their respective functions and in accordance with the instructions given by Cesanamedia srl.
5. Communication of personal data
5.1 Personal data may be disclosed to specific parties, for the execution of the required services and for the fulfillment of regulatory obligations.
In particular, the user’s personal data will be communicated to:
subjects delegated and/or appointed by Cesanamedia srl to carry out the activities or part of the activities related to the execution of the services requested and any other external collaborators to whom the communication is necessary for the correct execution of the services;
Public Administrations for carrying out institutional functions within the limits established by law or regulations.
The processed data will not be subject to distribution.
6. User rights
The user (hereinafter also called the “Interested party”) has the right to obtain, at any time, confirmation of the presence of his personal data and the purposes for which the data is processed. The user also has the right to request the updating, rectification, cancellation or blocking of data and to oppose their processing in whole or in part.
Below are the rights of the user in terms of privacy:
The user has the right to obtain confirmation of the processing of personal data concerning him or her, and to obtain access to personal data and the following information.
The user has the right to obtain the following:
the identity and contact details of the Holder and, where applicable, of its representative;
contact information of the data protection officer, where applicable;
the categories of personal data, their origin, the purpose of the processing for which the personal data is intended as well as the legal basis of the processing;
if present, the legitimate interests pursued by the Holder or by third parties;
any recipients or any categories of recipients of personal data;
where applicable, of the intention of the Holder to transfer personal data to a third country or international organization and of the existence or absence of an adequacy decision by the Commission or reference to appropriate safeguards and obtain a copy of such data or the place where it was made available.
In addition to the information above, the Holder informs the Interested of the following rights:
to know the holding period of the personal data or, if this is not possible, the criteria used to determine this period;
to ask the Holder to access personal data and to rectify or cancel it or limit their processing or to object to their processing, as well as the existence of portability rights of the data;
in so far as the processing is based on the user’s consent, the existence of the right to revoke it at any time without prejudice to the lawfulness of this is based on the consent given prior to the revocation;
to propose a complaint to a supervisory authority (privacy guarantor or similar bodies in the community);
to know if the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and if the person concerned has the obligation to provide personal data as well as know the possible consequences of not communicating such data;
to know the existence of an automated decision-making process, including profiling, and, if this process produces legal effects that affect it or significantly affects its person, significant information on the logic used, as well as the importance and consequences expected in relation to this treatment of the Interested.
With regard to the actual personal data, the user has the right to object at any time:
to any treatment, including profiling, necessary for the pursuit of the legitimate interest of the Holder or third parties;
to treatments for direct marketing purposes, including profiling in so far as it is connected to any such direct marketing.
The user also has the right:
to get a correction by the Holder of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the Interested has the right to obtain the integration of any incomplete personal data, also by providing an additional declaration;
to receive personal data concerning him/her in a common and easily readable format and to transmit this data to another Holder without hindrance;
to obtain a deletion from the Holder of personal data concerning him, connected to the obligation of the Holder to cancel the personal data without unjust delay, if one of the following reasons exists:
the personal data is no longer necessary with respect to the purposes for which they were collected or otherwise processed;
the Interested revokes the consent on which the processing is based and if there is no other legal basis for the processing;
the Interested opposes the processing and there is no legitimate overriding reason to proceed with the processing;
personal data has been processed unlawfully;
personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the Holder is subject;
to obtain from the Holder a limitation of processing operations.
To exercise the above rights, as well as to receive information relative to the subject to whom the data is communicated, or to the subjects who, as managers or agents, can become aware of the data, the user can contact Cesanamedia srl, sending a request to the latter using the addresses indicated in this statement and available on the website.
The Holder will provide to the Interested party the information relative to the action taken regarding a request submitted by the Interested without undue delay and, in any case, no later than one month after receiving the request. This deadline may be extended by two months if necessary, taking into account the complexity and the number of requests. The Holder will inform the Interested party of this extension, and of the reasons for the delay, within one month of receiving the request. If the Interested party submits the request by electronic means, the information will be provided, where possible, by electronic means, unless otherwise indicated by the Interested.
7. Duration of the process
The processing of personal data with reference to the purposes set out in sections 2.2 A will have a duration equal to that required for the execution of the requested services, to which will be envisaged an additional time period in compliance with civil, tax and legal obligations will be added.
The processing of personal data with reference to the purpose set out in sections 2.2 B (marketing/promotional activities) will have a duration of 24 months starting from the date of the granted consent.
At the end of the data processing period, the data will be deleted, or permanently void.
8. Updates to the Privacy Information
This Privacy Notice is subject to occasional reviews. If changes are introduced to the processing, Cesanamedia srl will give appropriate communication to the user, by publishing the changes on the site.
9. Transfer abroad
The data will not be distributed nor will it be transferred to non-EU countries. The management and storage of personal data will take place on servers located within the European Union. It will remain understood, in any case, that the Holder, where necessary, will have the right to move the server location to Italy and/or the European Union and/or non-EU countries. In this case, to ensure an adequate level of protection of Personal Data, the transfer of data in non-EU countries will take place under adequate decisions approved by the European Commission or the adoption by the Owner of the Standard Contractual Clauses prepared by the European Commission.