For Higas S.r.l. the privacy and security of your personal data is fundamental and, for this reason, personal data are collected and processed with the utmost caution and by adopting all the necessary measures to process and store them adequately.
“Personal Data” means any information relating to an identified or identifiable natural person («data subject»).
An identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements characteristic of his or her physical, physiological, genetic, mental, economic, cultural or social identity.
With this document we want to describe the methods through which Higas S.r.l. (hereinafter also “Higas”, “Company” or “Controller”) processes the personal data of users (hereinafter “Users”, “You” or “Data Subjects relating to the services provided through the website https://www.higassrl.it (hereinafter also “Site”). This information does not concern other websites that may be reached through hypertext links published on the Site but referable to external resources.
Data Controller
The Data Controller of your personal data is Higas S.r.l., with registered office in Loc. Abarossa s.n.c. – 09096 Santa Giusta (OR), Fiscal Code and VAT number 01791150491, which, in its capacity, informs pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, “GDPR”), that your data will be processed in the manner and for the purposes below.
Contact details: info@higas.it , tel. +39 0783 1818068.
Types of data processed and Purpose of processing
Navigation Data
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by Users, the addresses (Uniform Resource Identifier/Locator) of requested resources, date and time of the request and other parameters relating to the operating system and the IT environment used by Users.
This data, necessary for the use of web services, can also be processed for the purpose of:
- obtaining statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
- verifying the correct functioning of the systems and services offered.
Data voluntarily provided by the user
Higas processes the personal data communicated when using the form on the Site for any requests for offers or information and in particular this may include personal and/or contact data such as name, surname, email and telephone number in addition to the data contained in any CVs sent.
In particular, the data communicated by Users may be used, among other things, to take charge of and manage all phases of management of the services offered on the Site, and in particular for the management of requests for information/assistance. In the event that the communication channels made available by Higas are used for sending applications or CVs, the information contained in the aforementioned CV will be processed exclusively for the purpose of evaluating the application for an open job position and will subsequently be stored for a maximum period of six months, after which it will be deleted.
Sending messages to the contact addresses on the Site is optional and voluntary, private messages sent by Users to institutional profiles/pages on social media (in the channels indicated on the Site), as well as filling out and forwarding the forms on the Site, involve the acquisition of data, necessary to provide a response, as well as all personal data included in the communications forwarded by Users. Specific information may be published on the pages set up for the provision of certain services.
Legal basis for processing
Your personal data, i.e. data relating to an identifiable or identifiable natural person, are processed:
- Pursuant to art. 6, letter A), subject to specific consent by the Data subject, for the use of cookies or other tracking tools other than technical ones, for marketing purposes relating to products or services offered by Higas and for measuring satisfaction with the systems, services and products offered;
- Pursuant to art. 6, letter B), to respond to requests for assistance or information as the personal data transmitted are necessary for the provision of the Services or for responding to the requests of the interested party;
- Pursuant to art. 6, letter F), for the pursuit of the legitimate interest of the Data Controller in cases of use of cookies or other technical tracking tools, for the acquisition of technical information related to the verification of the regular functioning of the systems or the Site.
Processing method
The processing of your personal data is carried out through the operations indicated in art. 4 n. 2), GDPR and, specifically: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction. Your personal data are subjected to both paper and electronic and/or automated processing.
Recipients of personal data
The subjects who may process your personal data are, in addition to Higas employees, expressly designated, authorized and trained in processing, also third parties employed by Higas to manage or offer its Services and appointed as data processors pursuant to art. 28 of the GDPR. The latter are also adequately authorized and trained on the methods and means of processing personal data and offer suitable guarantees regarding compliance with the rules on the processing of personal data. Supervisory bodies, judicial authorities, as well as other subjects to whom communication is mandatory by law or for the purposes of prevention and protection from threats and to allow Higas to ascertain or defend a right in court or before administrative authorities, may be considered recipients of personal data.
The dissemination of personal data is not envisaged.
Cross-border transfer of personal data
Personal data is stored on servers located in Italy (Aruba). Your personal data is not subject to cross-border transfer (outside the European Economic Area).
Personal data management and retention period
Personal data is retained for a maximum period of 7 days. Such data may be retained for a longer period if necessary in order to ascertain responsibility in the event of crimes.
The data contained in any CVs sent will be retained for a maximum period of six months.
The other personal data will be retained for the time necessary to fulfill the purposes of the processing mentioned above and, in any case, no longer than the terms to which the owner is subject by virtue of retention obligations provided for by law or regulation.
Nature of the provision of data and consequences of refusal to respond
Providing data other than those deriving from normal navigation on the Site is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided.
Rights of the data subject
As a data subject, in accordance with the current legislation, you may exercise the following rights:
- request access to your personal data and information relating to them, the rectification of inaccurate data or the integration of incomplete data, the deletion of personal data concerning you (if one of the conditions indicated in art. 17, paragraph 1 of the GDPR occurs and in compliance with the exceptions provided for in paragraph 3 of the same article, for example if your data is processed unlawfully), the limitation of the processing of your personal data (if one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR occurs, for example your data is processed unlawfully);
- object at any time to the processing of your personal data in the event of particular situations that concern you.
Such requests may be addressed to the Data Controller at the contact details indicated above. The model form for exercising your rights is available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924
You also have the right, if you believe that the processing of your personal data, carried out through this site, is in violation of the provisions of the European Regulation, to lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it), or to take appropriate legal action.