INNOVIÙ SRL

PRIVACY POLICY

PURSUANT TO ART. 13 AND 14 OF EU REGULATION 2016/679

Pursuant to EU Regulation 2016/679 (GDPR), Innoviù SRL (Data Controller) informs you as follows about personal Data treatments achieved by the following website:

www.innovyou.co
www.innovyou.it

This policy concerns Data Controlle’s pages only. Online services that may be reached by the links published on the website www.innovyou.it – referring to external resources – are not included.

  1. DATA CONTROLLER

    To any information request or to exercise the rights provided by EU Regulation 679/2016, You can reach the Data Controller at the following addresses:
    Data Controller: Innoviù SRL
    Address: Via Quarto, 10 – 07036 Sennroi (SS)
    Email: privacy@innovyou.co
    PEC: innoviu@pec.it

  2. DATA PROTECTION OFFICER

    The Data Protection Officer (DPO) can be reached at the following email address: dpo@innovyou.co

  3. METHOD OF DATA TREATMENT AND PROCESSED DATA CATEGORIES

    User’s personal Data may be processed with IT and analogue systems capable of managing, transmitting and storing the Data according to logic strictly related to the purposes of the processing. The treatment will be carried out in compliance with the security, organizational, technical, physical and logical measures aimed at preventing the alteration, destruction, loss, theft and improper or illegal use of the Data. The Data are processed exclusively by personnel authorized to process them, according to the principles of correctness, lawfulness, transparency, pertinence and minimization, with respect to the purposes of collection and subsequent processing. The Data Controller does not use any automated decision-making process.

    Navigation Data

    The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal Data whose transmission is implicit in the use of Internet communication protocols. These Data are not
    collected to be associated with identified interested parties, but due to their nature, through processing and association with Data held by third parties, allow Users to be identified. These Data are used for the sole purpose of obtaining
    anonymous statistical information on the use of the website and to check its correct functioning. These data and are not nor will be used in any case by the Data Controller to carry out profiling activities.

    Data provided voluntarily by the User (Data subject)

    Particularly:

    1. e-mail address and other personal Data that may be contained in e-mail messages sent to the addresses indicated on the website and/or in the related attachments, in order to carry out the processing activities necessary to respond to User requests;
    2. personal Data, identification Data, address, contact and billing Data provided to request quotations and estimates of products and services provided by Innoviù SRL, in order to process and transmit the related pre-contractual measures;
    3. personal Data, address, contact details and any other personal Data provided by completing the “Send Application” form and/or by sending your CV, in order to participate in the human resources selection procedures.
    Cookies and other tracking systems

    Innoviù SRL uses technical, analytical, marketing and profiling cookies, together with other tracking systems, in order to collect and store information aimed at identifying the User’s browser or device and collect and store information when the User interacts with the website and/or purchases the products and services offered. For more information, visit our Cookie Policy.

    Social Media

    Regarding Data Controller’s Social Media Channels, the processing of personal Data is carried out by our social media managers. Innoviù SRL processes the personal Data provided by Users for the purposes set out in this disclosure, therefore, exclusively to manage interactions with Users (comments, public posts, etc.) and in compliance with current regulations. The processing of personal Data of users of Innoviù SRL’s social media channels complies with the policies in use on the platforms in use. Personal or sensitive Data entered in public comments or posts within social media channels may be removed. The Data shared by Users through private messages sent directly to the channel managers will be treated in compliance with current regulations and this privacy policy. For further information please refer to the privacy policies provided by respective Social Media Platforms.

  4. PURPOSE OF THE TREATMENT

    The User’s personal Data will be processed by Innoviù SRL for the following purposes:

    1. Processing of pre-contractual measures (estimates) relating to products and services requested by the User;
    2. Response to information requests sent by the User;
    3. Collection of statistical information on the use of web services;
    4. Ensure the website security and proper functioning;
    5. Follow up on the candidate selection procedure aimed at establishing the employment relationship

  5. LEGAL BASES OF THE TREATMENT

    Legal basis of the processing, identified from time to time, will be:

    • the execution of a contract and/or pre-contractual measures – art. 6 – par. 1, lit. b) of EU Reg. 679/16
    • legitimate interest – art. 6 – par. 1, lit. f) of EU Reg. 679/16

    It’s possible to request clarifications regarding the concrete legal basis applied to each treatment, by contacting the Data Controller at the following e-mail address: privacy@innovyou.co

  6. MANDATORY OR OPTIONAL NATURE OF PERSONAL DATA PROVISION

    The provision of the User’s personal Data for the purposes referred to in paragraph 4, letters from a) to d), of this policy, is optional but necessary for:
    the correct establishment and execution of the contractual relationship;
    for the execution of the obligations arising from the contract;
    for the execution of pre-contractual measures requested by the User;
    to respond to User requests;
    to ensure the security and proper functioning of the website.

    Any refusal to provide your personal Data will make it impossible to carry out the activities listed above.
    The provision of the User’s personal Data for the purposes referred to in paragraph 4, letter e) of this policy, is mandatory
    since it is necessary to follow up on the candidate selection procedure aimed at establishing the employment relationship.
    Any refusal to provide personal Data will make it impossible to send the application.

    The provision of the User’s personal Data for the purposes referred to in paragraph 4, letters from a) to d), of this policy, is optional but necessary for:

    • the correct establishment and execution of the contractual relationship;
    • for the execution of the obligations arising from the contract;
    • for the execution of pre-contractual measures requested by the User;
    • to respond to User requests;
    • to ensure the security and proper functioning of the website.

    Any refusal to provide your personal Data will make it impossible to carry out the activities listed above.

    The provision of the User’s personal Data for the purposes referred to in paragraph 4, letter e) of this policy, is mandatory since it is necessary to follow up on the candidate selection procedure aimed at establishing the employment relationship. Any refusal to provide personal Data will make it impossible to send the application.

  7. DURATION OF THE TREATMENT

    The User’s personal Data, acquired for the purposes referred to in paragraph 4, letters from a) to e), will be kept for the time necessary to pursue the purposes in question and up to ten years from the expiration of the contractual relationship, in compliance with the times prescribed by law, and/or for the period necessary to allow the Data Controller to protect its interests and/or fulfill the legal obligations to which it is subject. The navigation Data does not persist for more than 15 days (except for any need for the investigation of crimes by the judicial authorities). Once these terms have expired, the Data will be destroyed or made anonymous.

  8. RECIPIENTS AND DATA TRANSFER

    Where necessary, the User’s personal Data may be shared with:

    1. subjects delegated and/or appointed by the Data Controller – i.e. companies or professional firms that provide assistance and consultancy in the IT sector, payroll and contribution processing, as well as tax and legal consultants – to carry out activities strictly related to the pursuit of the aforementioned purposes, rightly appointed as Data Processors;
    2. domain administrators, third-party resellers, hosting providers who provide assistance in using the service may have access to the personal Data of the interested parties;
    3. subjects authorized to process personal Data who are committed to confidentiality or have an appropriate legal obligation of confidentiality;
    4. subjects, bodies or authorities to whom the communication of your personal Data is mandatory by virtue of provisions of law or regulation or orders of the authorities, or for reasons of public interest.

    It is possible to request the Data Processors list by making an explicit request to the addresses referred to in paragraphs 1 and 2 of this policy.

    Personal Data is stored on servers located within the European Union and can be transferred to EU countries and/or to third countries with respect to the EU, within the scope of the purposes referred to in this policy, in compliance with the provisions of Applicable law, subject to the stipulation of the standard contractual clauses envisaged by the European Commission. Personal Data are not subject to disclosure.

  9. RIGHTS OF THE INTERESTED PARTY

    The Data Subject has the right to exercise the faculties provided for by the articles 7, 15-22, 77 of EU Regulation 679/2016 (GDPR), in particular, upon simple request to the Data Controller, you have the right to:

    • request access to Personal Data, i.e. to know which Data the Data Controller processes (art. 15);
    • obtain the updating and rectification of the Data, i.e. have one’s Data modified if they have changed (art. 16);
    • request the cancellation of Data processed in breach of current legislation (Article 17);
    • request the limitation of the treatment, i.e. limit the use of the Data by the Data Controller (art. 18);;
    • request Data portability, i.e. receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments, in a structured and readable format on an IT support (art.
      20);
    • oppose, for legitimate reasons, the processing of Personal Data concerning him and the processing of Data for profiling and direct marketing purposes (art. 21);
    • not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way (art. 22)
    • revoke the consent at any time, without prejudice to the lawfulness of the treatment based on the previously given consent (articles 7, 13);
    • lodge a complaint with the Privacy Guarantor in the event of violations of the law (art. 77).

    The Data Subject may exercise his rights by contacting the Data Controller by e-mail at the following address: privacy@innovyou.co

  10. CHANGES

    The Data Controller reserves the right to update this policy at any time and make Users aware of it through the most appropriate tools. For any further information or question it’s possible to refer to the Data Controller addresses..