Privacy policy
The Group Arcese recognizes the importance of personal data protection, and commits to respect users’ privacy, handling personal data with care and confidentiality, and not using it for purposes other than those specified below.
To this end, this policy describes how the website is managed with regard to the processing of users’ personal data. This privacy statement is provided in accordance with art. 13 of the Regulation UE 679/2016 (hereinafter “GDPR”), to those who interact with the website of Arcese Trasporti S.p.A. and other companies in the Arcese Group, accessible online on the pages of the website https://arcese.careers/
This Privacy Policy may be modified or updated at any time by Arcese Group. This information is provided only for this website and not for any other websites that the user may visit through links, except for those indicated above.
Data Controller
The Data Controller is: Arcese Trasporti S.p.A., located in Arco (TN), via Aldo Moro n. 95, VAT number 00122680226, in its quality of parent company. Additionally, other companies in the Arcese Group (Affiliates), both in Italy and abroad, that are part of the “Career Opportunities” perimeter, are Data Controllers for applications submitted to their respective countries. For the purposes of this Policy, Arcese Trasporti S.p.A. and the Affiliates are referred to as Arcese Group.
Data, purposes and legal basis of processing
Arcese Group informs the users that the data collected will be used solely for the purposes specified below. The data subjected to processing are browsing data and data voluntarily provided by the user.
Browsing data
IT systems and software procedures used to operate this website acquire, during their normal operations, certain personal data whose transmission is implicit in the use of internet communication protocols. These information are not collected to be associated with identified data subjects, but by their very nature, through processing and association with data held by third parties, may allow users’ identification.
This category of data include the IP addresses or domain names of computers used by users who access to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code showing the status of the the response given to the server and the parameters related to the user’s operating system and computing environment.
These data are used with the sole purpose of obtaining anonymous statistical information on the use of the website and to ensure its proper functioning.
The legal basis of the processing of browsing data is the legitimate interest of the Data Controller to make the functionality of the site usable as a result of the access and browsing by the User (Art. 6.1. lett. f) GDPR).
Data voluntarily provided by the user
In order to access certain services on the website, the user voluntarily provides to Arcese Group various types of data, having first reviewed this privacy policy and, where applicable, given consent for one or more of the specified purposes listed below.
The optional, explicits and voluntary submission of these data results in its consequent acquisition by Arcese Group. The acquisition is necessary to use the requested services.
The data processing has the following purposes:
Account Creation
In order to participate in the Arcese Group’s “Career Opportunities” process, Candidates have to create a personal account on the website. The personal data requested for the Account’s creation are the Email, Password, First name and Last name.
Purposes of processing and nature of data provision
The processing is aimed at creating a personal Account.
The provision of personal data is necessary to create a valid account and to properly participate in the selection process. In the absence of the requested data and registration, it will not be possible to proceed.
Legal basis of the processing
The processing is based on the lawfulness of the execution of pre-contractual measures taken at request of the data subject (art. 6.1. lett. b) GDPR).
Submission of the job application
After creating the personal Account, the Candidate presents their application for one or more job positions open within the Arcese Group companies.
Purposes of the treatment and nature of data provision
The processing is solely aimed at managing applications received through the website “Career”.
The data provision is necessary to send and properly process the application. In the absence of the requested data it will not be possible to proceed with the selection process.
Legal basis for processing
The processing is based on the lawfulness of the execution of pre-contractual measures taken at request of the data subject (art. 6.1. lett. b) GDPR).
Job offer notifications
During the Account creating procedure it is possible to give consent to receive notifications and communications on future or different job offers.
Purposes of the treatment and nature of data provision
The processing is solely aimed at sending notifications to the candidate about future or different job offers. The data provision is optional. Without the requested data, participation in the selection process can still proceed.
Legal basis for processing
The processing is based on the user’s consent (art. 6.1. lett. a) GDPR).
Data processing methods
The processing of data will be carried out through the following operations: collection, registration, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of the data.
Data will be processed both in paper form and electronic and/or automatically.
The data, from the time of their receipt/update, will be retained for a period appropriate to the purposes of the processing above mentioned. Candidate’s data are generally kept for no longer than 24 months from the data of collection, after which are anonymized. For more information regarding the data retention period you can contact privacy@arcese.com.
Data communication and transfer
The data processed will not be disseminated; however, for the purposes listed in this privacy policy, it may be communicated to Arcese Group companies and third parties, including but limited to consultants and professionals, service companies, public entities, audit or supervisory bodies, to fulfill obligations deriving from laws, regulations, EU legislation or aspects concerning the management and execution of the legal relationship with you.
Data will be processed by the following subjects:
- Employees of Arcese Group, in Italy and abroad, who are authorized to the processing of data according to their duties and after being properly instructed.
- External Data Processor under Article 28 GDPR.
The list of Data Processors is available at the registered office of Arcese Trasporti S.p.A.
Transfer of data to other member states or third countries
For all the purposes outlined in this notice, the data may also be communicated abroad, within and outside the European Union, in compliance with the rights and guarantees provided by the applicable regulations, after verifying that the country in question ensures an “adequate” level of protection as required by the GDPR.
Data subject’s rights
Any data subject may, at any time, request:
a) access to their personal data (art. 15 GDPR);
b) rectification of inaccurate data (art. 16 GDPR);
c) deletion of their data (art. 17 GDPR);
d) restriction of processing (art. 18 GDPR);
e) the right to data portability, i.e., to receive the personal data provided in a structured, commonly used, and machine-readable format (art. 20 GDPR);
f) the right to object to data processing where applicable (art. 21 GDPR).
For anything not explicitly covered by the provisions mentioned here, please refer to the applicable privacy regulations.
Moreover, the data subject can lodge a complaint with the Data Protection Authority at Piazza Venezia n.11, 00187 Rome, or with the competent supervisory authority in the relevant Country.
Withdrawal of consent
Consent can be withdrawn at any time without affecting:
- the lawfulness of processing based on consent before its withdrawal;
- further processing based on other legal grounds, such as contractual or legal obligations.
For further clarification regarding this privacy policy or any other privacy-related matter, or if you wish to exercise the above mentioned rights or withdraw consent, you can contact privacy@arcese.com.