Privacy Policy

Last update: December 2021

This information notice on the processing of personal data (“Information Notice“) explains the features of the processing of your personal data collected – also through the website [-] (“Website” or “Site”) – by ItalVolt S.p.A. (“Italvolt” or the “Data Controller“) and excludes any reference to third party websites which you may access and/or to which you may be redirected from the Site.

The processing of personal data carried out by the Data Controller shall always be in compliance with Regulation (EU) 2016/679 (“GDPR“), Italian Legislative Decree 196/2003 as amended from time to time (“Privacy Code“), the legislation applicable from time to time, as well as the relevant measures and guidelines of the European and national data protection authorities (jointly, “Applicable Legislation“).

Furthermore, Italvolt is committed to ensuring that all information collected and used is always appropriate with respect to the purposes described and that the processing carried out does not lead to an unlawful invasion of your personal sphere.

Contact details of the Data Controller

The Holder is the Data Controller, with registered office in Galleria Vittorio Emanuele, via Mengoni 4 – 20121, Milan Italy.

For any request regarding the processing of your personal data, you can contact us by sending a communication by mail to the Italvolt head office, or by e-mail to privacy@italvolt.com.

Categories of data processed, purpose and legal basis for processing

We will process your personal data, both by manual and automated means and by specifically designated personnel who have been given detailed instructions about the processing, for the following purposes and under the following conditions.

Purpose	Legal basis	Categories of data processed
(i) To enable you to use the Site and to enjoy the content made available through the Site.	Execution of pre-contractual measures taken at your request and/or execution of a contract to which you are a party (Art. 6(1)(b) GDPR).	Details of the web browser used and the IP address and any additional surfing data (e.g., URL used, device used, etc.).
(ii) In order to process and follow up on the requests forwarded by you through the Site and/or made available by the Data Controller (e.g.. provide you with the material or clarifications requested by you, collect your spontaneous job application, etc.).	Execution of pre-contractual measures taken at your request and/or execution of a contract to which you are a party (Art. 6(1)(b) GDPR).	Your contact details, as well as the information provided by you and/or necessary for the management of your requests (e.g., name, surname, subject of the message, affiliation, work experience, etc.)
(iii) To send you newsletters or other informative communications concerning news about Italvolt’s sectors of activity and/or services.	Your express consent (Art. 6(1)(a) GDPR)	Your contact details, as well as any further information strictly necessary to send you communications that are not invasive and presumably not in conflict with your interests (e.g., frequency of communications, etc.).
(iv) To comply with the legal obligations of the Data Controller and respond to requests from the competent authorities.	Fulfillment of a legal obligation of the Data Controller (Art. 6(1)(c) GDPR).	Any information that may be required by law or to comply with requests received from the competent authorities.
(v) Activities related to the performance of corporate operations	Pursuit of a legitimate interest of the Data Controller, reasonably not in conflict with your interests (Art. 6(1)(f) GDPR).	The information lawfully processed by the Data Controller at the time of the corporate transaction
(vi) To protect the rights of the Data Controller, in and out of court.	Pursuit of a legitimate interest of the Data Controller, reasonably not in conflict with your interests (Art. 6(1)(f) GDPR).	The information lawfully processed by the Data Controller necessary to ensure the fulfillment of this purpose.

Should you decide to spontaneously transmit your curriculum through the appropriate communication channels available on the Website, we would like to inform you as of now that Italvolt does not usually process personal data falling into the particular categories referred to in Article 9, GDPR (so-called “sensitive data”) – such as, for example, information relating to your state of health, your political or religious opinions, any membership of trade unions, etc. Consequently, if necessary, we ask you to remove such information from your curriculum vitae, refraining from communicating it unless the same is accompanied by your express authorization to process it pursuant to Article 9, GDPR. In any case, in the eventual response to your application or, in any case, at the first useful opportunity, the Data Controller will provide you with specific information on the processing of your personal data as part of the job application process.

In the same way, we remind you to communicate us only the data strictly necessary for the purposes indicated in the above table. Any exceeding data will be immediately deleted by the Data Controller.

In addition, for processing operations that are based on your consent, we remind you that you can always freely revoke this manifestation of will. In this regard, if you wish to revoke your consent, you can write to the Controller at the contacts indicated in paragraph 1 or, if necessary, click on the appropriate link that you will find at the bottom of the emails that we may send you.

Finally, for information on how we process your data through the use of cookies, you can consult Italvolt’s cookie policy.

Data retention period

Your personal data will be kept for a period of time not exceeding that which is strictly necessary to achieve the purposes for which they are collected, as well as for any longer period necessary to comply with legal obligations and/or for legal protection purposes, and in any case not beyond the ordinary prescriptive terms. At the end of the storage period, your personal data will be deleted or made anonymous.

For more detailed information on the individual retention periods, please contact Italvolt directly at the addresses indicated in this policy.

Nature of data provision

The personal data collected and/or processed for the purposes referred to in points (i), (ii) of paragraph 2 above will be processed as necessary to perform a contract to which you are a party and/or pre-contractual measures taken at your request. Therefore, the provision of data is absolutely optional but, at the same time, the processing is necessary for each of the purposes; therefore, where no data is provided, it may not be possible for Italvolt to allow you to use the Website and its functions and/or follow-up your requests.

The personal data collected and/or processed for the purposes referred to in point (iii) of paragraph 2 above will be processed, subject to your consent, as necessary to send you the newsletter and other information communications prepared by the Data Controller. Also in this case, the provision of data is absolutely optional but, at the same time, necessary for the pursuit of the purposes; therefore, where no data is provided, it may not be possible to send you the communications in question.

The personal data collected and/or processed for the purposes referred to in point iv) of paragraph 2 above will be processed to the extent necessary to comply with any legal obligations imposed on the Data Controller. In this case, the provision of data is implicit in the previous purposes and necessary in order to fulfill these legal obligations.

Personal data collected and/or processed for the purposes referred to in points (v) and (vi) of paragraph 2 above will be processed on the basis of Italvolt’s legitimate interest. You may object, at any time, to the processing of your personal data by expressing your will to the Data Controller at the contact details indicated in this notice. If you exercise your right to object, this may affect your ability to continue to use the Website, its functions and, in general, to allow the Data Controller to process your personal data. For further information on the legitimate interests pursued by the Data Controller and the related balancing judgments conducted by the Data Controller, you may contact Italvolt at the contact details indicated in this policy.

Recipients of personal data

Within the limits of what is necessary to pursue the purposes set out in paragraph 2 above, your personal data may be communicated:

Italvolt’s suppliers and counterparties including, but not limited to, companies that provide specific legal, fiscal or tax consulting services, parties that provide information system management and maintenance services, contractual counterparties and/or industrial partners of the Data Controller ;
independent authorities, law enforcement and/or judicial and administrative authorities for their institutional purposes within the limits of the law, as well as for the detection and prosecution of crimes, the prevention and protection from threats to public safety, to allow the Data Controller to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of Italvolt and/or third parties.

These subjects will act, as the case may be, as autonomous data controllers or as data processors, in the latter case by virtue of a specific written agreement on the processing of personal data and following the instructions given by the Data Controller. The list of recipients of your data is available upon request, to be sent to Italvolt at the addresses indicated in this information notice.

Your personal data will not be disseminated.

Transfer of personal data beyond the European Economic Area

Your personal data is stored on servers located within the European Economic Area (“EEA“).

Without prejudice to the foregoing, within the limits of what is strictly necessary for the purposes set out in paragraph 2, your data may be transferred to entities established in countries outside the European Economic Area, which offer the Data Controller services related to the processing activities carried out. Such transfer, where applicable, will only take place in compliance with the conditions set out in the GDPR and whenever personal data is transferred to countries that do not benefit from an adequacy decision of the European Commission, the transfer shall take place only (i) subject to the signing of the standard contractual clauses adopted by the European Commission and the adoption of any additional technical, organisational and/or contractual measures suitable to ensure an adequate level of protection of personal data and, in any case, essentially equivalent to that guaranteed within the EEA, or (ii) upon the occurrence of one of the exceptions set forth in Article 49, GDPR.

A list of countries outside the EEA to which your personal data may be transferred is available on request from the contact details set out in this policy.

Your rights in relation to your personal data

In the cases and with the exclusions set out in the applicable Regulations, You may at any time exercise the rights set out in Articles 15 et seq. of the GDPR, namely:

the right to access your personal data collected and processed by Italvolt;
the right, without prejudice to the lawfulness of the processing carried out up to that moment, to revoke the consent previously given;
the right to obtain the updating of your data, their rectification, integration, as well as the limitation of their treatment;
the right to obtain the deletion of your personal data (“right to be forgotten”);
the right to object to the processing of data concerning you;
the right to receive your personal data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit it to another data controller without hindrance (“right to data portability”).

The rights listed above may be exercised at any time by sending a communication by post to the Data Controller’s registered office or by e-mail to the address privacy@italvolt.com.

Furthermore, if you believe that the processing of your personal data violates the principles laid down by the applicable legislation on the protection of personal data, you may appeal to the judicial authorities or lodge a complaint with the competent Authority for the protection of personal data. The competent Authority in Italy is the Garante per la protezione dei dati personali (“Garante“). More information is also available on the Garante’s website: http://www.garanteprivacy.it.

Changes and updates to the information

This information notice may be modified or updated over time. Any changes and updates will be promptly communicated by updating the dedicated page on the Website as well as by means of a notice on the home page and, where necessary and technically feasible, an individualized communication to the data subject whose data is still being processed.