INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users who consult the ANSALI SA website
pursuant to the Federal Law on Data Protection LPD 235.1 of 19 June 1992 (Status as of 1 January 2014) and Regulation (EU) GDPR 2016/679
This page describes how to manage the site with reference to the processing of personal data of users who consult it and their confidentiality. This is an information notice that is provided to those who interact with the ANSALI website, accessible electronically from the address:
corresponding to the home page of the official website of ANSALI SA.
This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the site but refer to resources outside the ANSALI SA domain.
THE "OWNER" OF THE TREATMENT
Following consultation of this site, data relating to identified or identifiable persons may be processed. The "owner" of the processing of personal data that may be processed following consultation of our site and any other data used for the provision of our services, is ANSALI SA, Via ai Crotti 8, CH-6830 CHIASSO - Switzerland.
PLACE OF DATA PROCESSING
The treatments connected to the web services of this site [physically "hosted" through the external manager DHH Switzerland SA, Via Motta 18, CH-6830 Chiasso ("https://www.artera.net") at the Data Center in Switzerland] take place at the headquarters of the owner and are only handled by technical staff of the office in charge of processing, or by persons in charge of occasional maintenance operations.
The personal data provided by users who forward requests for information or sending information material (information, newsletters, registrations, quotes, etc.) are used for the sole purpose of performing the service or provision requested and are not disclosed to third parties, except for following possible cases:
• commercial partners of ANSALI SA;
• persons, companies or professional firms that provide assistance and consultancy to ANSALI SA in accounting, administrative, legal, tax and financial matters;
• subjects whose right to access data is recognized by law or by orders of the authorities;
TYPES OF DATA PROCESSED
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for more than seven days.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. The data will be kept only for the registration required when sending newsletters and will not be disclosed to anyone. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.
Personal information relating to visitors to the website is not collected or used. Visitors remain anonymous. The only exception concerns the information for personal identification necessary to comply with any requests made to the user visiting the site.
Visitors to the site can register for our newsletter service. By registering, the user's e-mail address will be automatically added to a list of contacts to which e-mail messages containing periodic updates with information, including commercial and promotional information, relating to initiatives, events or promotions may be transmitted. of the data controller.
To subscribe to the Newsletter, you can use the registration forms on the site by entering your name and e-mail address. The data entered will be used for the sole purpose of sending our newsletter via e-mail and will not be disclosed to third parties.
Management of Personal Data Collected from Personal Curriculum
ANSALI SA accepts the personal Curriculum Vitae of any candidates both on paper and in electronic format. The spontaneous and voluntary sending of the Curriculum will be considered implicitly as informed consent hereby issued by the interested party to the receipt and processing of the personal data contained therein, exclusively following the purpose linked to the selection of potential candidates.
The data processed for the purpose of selecting candidates are of a personal nature useful for finding the particular profile required. In general, the nature of personal data is of a normal type, except in some possible cases where it is possible to indicate sensitive data necessary for the identification of particular requirements provided for by the regulations in force, such as indication to particular protected categories, suitability for certain mandatory works and / or start-ups, in compliance with the limits indicated by law.
The provision of data relating to the selection of candidates is mandatory. Any refusal to provide such data makes it impossible to carry out a regular selection activity and possible recruitment. The data in question will not be disclosed to anyone.
General rules for sending the Curriculum Vitae
Any Curriculum Vitae received spontaneously, in response to an announcement or to our request will be filed directly by special authorized persons in charge of processing personal data according to the personal data security directives adopted in compliance with the security measures referred to in Chapter IV section 2 ) of the GDPR. These will only be printed on the occasion of a meeting and interview with the person concerned. After the job interview, if the candidate is not selected, the CV will be kept for a maximum period of two years and then it will be deleted and / or destroyed.
To send Curriculum Vitae, use the "Careers" page on this site at https://www.ansali.net/it/lavora-con-noi/.
DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD
In compliance with the provisions of art. 5 paragraph 1 lett. e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
The retention times of personal data provided through the website depend on the purpose of the processing carried out, in particular:
• purposes related to technical navigation data for the correct functioning of the website: storage only for the relative session, at the end of which the data are deleted;
• purposes of responding to the request for information / provision of services requested (maximum 12 months for contact request; 10 years for any administrative / accounting / financial documentation relating to the provision of a service);
• data collection for personnel selection (maximum 24 months);
• newsletters, marketing or promotional communications in general via e-mail (until consent is revoked);
• administrative-accounting management purposes: 10 years as per the terms of the law for the conservation of administrative / accounting / financial documentation.
TRACKING TECHNOLOGIES USED
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
Personal data are not transferred to third countries, outside Switzerland or outside the EU. In the case of transfers to the USA (GOOGLE) or other third countries, in the absence of an adequacy decision pursuant to Article 45, paragraph 3, or adequate guarantees pursuant to Article 46 of the GDPR, it takes place on the basis of consent. expressed by the interested party pursuant to art. 6 para. 2 lett. b) LPD and 6 a) and 49 paragraph 1, a) of the GDPR through the web banner of cookies on the home page of this site.
OPTIONAL PROVISION OF DATA
Apart from that specified for navigation data, the user is free to provide personal data contained in the request forms to ANSALI SA or indicated in contacts with the company to send CVs, to make requests for information online, solicit the sending of informative material or other communications. Failure to provide them may make it impossible to obtain what is requested.
METHOD OF TREATMENT
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
RIGHTS OF THE INTERESTED PARTIES
The subjects to whom the personal data refer, pursuant to art. 8 and 15 of the LPD 235.1 and of Chapter III of the GDPR 679/2016 have the right to request confirmation of the existence of data concerning them and of the processing logic to which they are subjected, the right to request its integration, the right to object their processing for legitimate reasons, as well as the right to request their rectification, updating, cancellation (Oblivion) or blocking if processed in violation of the law, the right to obtain a copy of the personal data being processed in a structured format, the right to data portability, by submitting a specific request to the Data Controller, also through the e-mail address: email@example.com
RIGHT OF REMOVAL
Interested parties who believe that the processing of personal data referring to them carried out through this site is in violation of the provisions of the Federal Law or the Regulations have the right to lodge a complaint with the "Federal Data Protection and Transparency" authority, as also provided for by art. 77 of the GDPR itself, or to take the appropriate judicial offices (Article 79 of the GDPR).