Privacy Policy
Information provided under Article 13 of European Regulation 2016/679 (GDPR)
WHY THIS NOTICE
This page describes the personal data processing carried out by this company in relation to all categories of data subjects (hereinafter “data subjects”, under Article 4(1) GDPR) and sets out the Company Policy adopted to ensure compliance with GDPR 2016/679, Italian Legislative Decree 196/2003, national provisions on this matter, Guidelines issued by the European Data Protection Board and EU Directives concerning the protection of individuals' personal data.
This notice is provided under Article 13 of EU Regulation 2016/679 to anyone establishing any form of relationship with this company.
This website's Privacy Policy does not cover other processing carried out or described when browsing websites accessed through links that may be available on this website.
DATA CONTROLLER
- the Data Controller is this company:
Promoservice Parma S.r.l., represented by its current legal representative
Viale Mentana, 92
43121 Parma
Telephone: +39 0521 1685101
Email: info@promoserviceparma.it
- The Controller has appointed a Data Protection Officer (DPO), who may be contacted to exercise all rights provided for in Articles 15 to 22 GDPR: the right of access, rectification, erasure, restriction, portability and objection, and withdrawal of previously given consent. If requests receive no response, data subjects may lodge a complaint with the supervisory authority for personal data protection (under Article 13(2)(d) GDPR).
DPO contact details: privacydpo@promoserviceparma.it
- all data is processed lawfully, fairly and transparently in relation to the data subject, in accordance with the general principles in GDPR Article 5;
- specific security measures are applied to prevent data loss, unlawful or improper use, and unauthorised access.
TYPES OF DATA PROCESSED
CONTACT REQUEST DATA
The optional, explicit and voluntary submission of personal data necessary for a contact request through the forms available on this website, or through any email addresses listed on this website, entails the subsequent acquisition of only the data necessary to respond to the requests submitted.
For more information, please use the website's “Contact us” form
Purposes and legal basis for processing
(GDPR Article 13(1)(c))
These data are used solely to respond to information requests submitted by completing the forms
Disclosure of data
(GDPR Article 13(1)(e), (f))
Data are processed exclusively by duly authorised internal staff who have been instructed in data processing (Article 29 GDPR). Data may be disclosed to external parties acting as Data Processors, but will not be publicly disclosed or transferred to countries outside the EU. In the event of an investigation, data may be made available to the competent authorities. Any different arrangements will be specified in the relevant form.
Processing methods
(GDPR Recital 39)
Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are taken to prevent data loss, unlawful or improper use, and unauthorised access.
Data retention period
(GDPR Article 13(2)(a))
Data are normally retained for short periods, solely to meet the requests received and, in any event, for no longer than 6 months from receipt.
Provision of data
(GDPR Article 13(2)(f))
Data subjects provide their data voluntarily.
Lawfulness
(GDPR Article 6(1))
Processing is necessary to respond to the requests received; consent is therefore expressed by completing the form.
JOB APPLICATION DATA
Personal data voluntarily provided by data subjects through CVs submitted using specific forms, are processed for purposes related to recruitment, selection and the management of any future employment relationship.
Purposes and legal basis for processing
(GDPR Article 13(1)(c))
Personal data submitted by data subjects through a CV or by completing the fields provided are processed as a pre-contractual measure, for activities preceding the conclusion of a possible employment contract and related legal obligations. The legal basis is therefore the performance of pre-contractual measures (Article 6(1)(b) GDPR) and, for unsolicited CVs, Article 111-bis of Italian Legislative Decree 196/2003, which excludes the need for consent. Please do not include special categories of data (Article 9 GDPR) in your CV unless necessary for recruitment purposes.
Disclosure of data
(GDPR Article 13(1)(e), (f))
Data are processed exclusively by internal Human Resources staff who are duly authorised and instructed in data processing (Article 29 GDPR). Data may be disclosed to external parties acting as Data Processors, but will not be publicly disclosed or transferred to countries outside the EU. Any different arrangements will be specified in the relevant form.
Data retention period
(GDPR Article 13(2)(a))
Data are retained:
- if the application is unsuccessful, the CV and the data it contains will be retained for a maximum of 6 months
- if the assessment is positive, the CV is added to the prospective employee's file and retained for a maximum of 12 months on a local company server.
- if an employment contract is concluded, the CV will be retained in accordance with the criteria governing contractual relationships.
Provision of data
(GDPR Article 13(2)(f))
Providing personal data is optional. However, failure to provide them may prevent a proper assessment for recruitment purposes and consequently prevent the company from managing the application
BROWSING DATA
The IT systems and software procedures used to operate the website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its nature could allow users to be identified through processing and association with data held by third parties. This category includes, for example, IP addresses, online identifiers, the URLs of requested resources, request times, the method used to submit the request to the server, the browser type, operating system and other parameters relating to the user's IT environment. These data are used solely to ensure the website functions properly, protect its security and establish any liability in the event of cybercrime against the website.
Purposes and legal basis for processing
(GDPR Article 13(1)(c))
These data are used solely to ensure the proper functioning and security of the website.
Legal basis: the Controller's legitimate interest in the security and functionality of the website (Article 6(1)(f) GDPR).
Disclosure of data
(GDPR Article 13(1)(e), (f))
Data are processed exclusively by duly authorised internal staff who have been instructed in data processing (Article 29 GDPR). Data may be processed by the website hosting provider, appointed as Data Processor under Article 28 GDPR, and made available to the competent authorities in the event of an investigation. Data are not transferred outside the European Union.
Data retention period
(GDPR Article 13(2)(a))
Data is normally retained for short periods, except where an investigation requires an extension.
Provision of data
(GDPR Article 13(2)(f))
The provision of browsing data is implicit in the use of Internet communication protocols and does not require the data subject's consent.
COOKIES
The website uses technical cookies necessary for its operation, which do not require the user's consent.
Only with the user's prior consent, expressed through the cookie banner, does the website also use Google Analytics 4, a service provided by Google Ireland Limited, to produce statistics on website use. The service collects information through a random identifier assigned to the device; the Controller consults it only as aggregate statistics and does not carry out profiling, marketing or personalised advertising activities.
The legal basis is the data subject's consent (Article 122 of Italian Legislative Decree 196/2003 and Article 6(1)(a) GDPR), which may be withdrawn at any time through the “Manage Cookies” link.
For detailed information, please refer to the Cookie Policy published on this website and prepared in accordance with the Decision of 10 June 2021 issued by the Italian Data Protection Authority, which supplements and completes this document.
DATA SUBJECT RIGHTS (GDPR Articles 15–22)
At any time, the data subject may exercise the right to:
- request confirmation of whether personal data concerning them exists.
- obtain information about processing purposes, personal data categories, recipients or categories of recipients to whom data has been or will be disclosed, and, where possible, the retention period.
- obtain rectification and erasure of data.
- obtain restriction of processing.
- obtain data portability: receive data from a controller in a structured, commonly used, machine-readable format and transmit it to another controller without hindrance.
- object, on grounds relating to their particular situation, to processing based on the Controller's legitimate interest, and at any time to processing for direct marketing purposes.
- object to automated individual decision-making, including profiling.
- withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR).
- lodge a complaint with the Italian Data Protection Authority.
Requests must be sent to the Data Controller by completing the dedicated contact form.
This is the “Privacy Policy” for this website and is subject to updates.
This information document was updated on 26/10/2026