Company: BANCO METALLI GOLDEN AGE Srl, registered office at Corso Garibaldi, 16, Ancona (Tax Code, VAT No. and registration number with the Ancona Companies Register: 02689550420; REA AN-207468); email: info@goldenage.srl; PEC: bmga@pec.it, owner of the website https://www.helior.com/ (hereinafter, the “Site”), acting as data controller for the personal data of the Site’s users (hereinafter, the “Users”), provides the following privacy notice pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, “Regulation,” or the “Applicable Law”).
This Site and any services offered through it are reserved for persons who have reached the age of eighteen. The Controller therefore does not collect personal data relating to persons under the age of 18. At Users’ request, the Controller will promptly delete any personal data inadvertently collected relating to persons under the age of 18.
The Controller places the highest importance on the right to privacy and the protection of Users’ personal data. For any information regarding this privacy notice, Users may contact the Controller at any time, using the following methods:
By sending a registered letter with return receipt to the Controller’s registered office at Corso Garibaldi, 16, Ancona;
By sending an email to the following addresses:
email: info@goldenage.srl;
PEC: bmga@pec.it.
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
Category of data processed:
The data covered by this processing are as follows:
a) all personal data whose transmission is implicit in the use of Internet communication protocols, which the computer systems and software procedures used to operate the Site acquire in the course of their normal operation: the IP addresses or domain names of the computers used by Users, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the User’s operating system and computer environment;
b) identifying personal data (e.g. first name, last name, email address, phone number, IP address, log files, etc.);
c) any further User data voluntarily published in the “contact us” section;
d) any further User data voluntarily published through the attachment sent relating to the CV in the “work with us” form.
Purposes of processing
Users’ personal data will be lawfully processed by the Controller pursuant to Article 6 of the Regulation for the following purposes:
provision of the service, i.e. to allow the User to browse the Site. The User data collected by the Controller for this purpose is used solely to obtain anonymous statistical information on the use of the Site and to enable it to function correctly. Without prejudice to what is otherwise provided in this privacy notice, under no circumstances will the Controller make Users’ personal data accessible to other Users and/or third parties.
handling the User’s request: Users’ personal data is collected and processed by the Controller solely for the purpose of handling their request. The User data collected by the Controller for this purpose includes: first name, last name, email address, and any further User data voluntarily published in the “contact us” or “request information” section. No other processing will be carried out by the Controller in relation to Users’ personal data. Without prejudice to what is otherwise provided in this privacy notice, under no circumstances will the Controller make Users’ personal data accessible to other Users and/or third parties;
handling of “work with us” requests: activities related or instrumental to the company’s internal selection processes in order to evaluate candidates’ profiles for employees, trainees, or collaborators receiving specific professional engagement assignments; evaluation and retention of the curriculum vitae.
administrative-accounting purposes, i.e. to carry out activities of an organizational, administrative, financial and accounting nature, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations.
legal obligations, i.e. to comply with obligations imposed by law, by an authority, by a regulation, or by applicable rules, and to establish liability in the event of alleged computer crimes to the detriment of the Site.
performance of a contract, where processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures.
It is in any case always possible to ask the Controller to clarify the specific legal basis for each processing activity, and in particular to verify whether the processing is based on law, provided for by a contract, or necessary to enter into a contract.
Providing personal data for the processing purposes indicated above is optional but necessary, since failure to provide it will make it impossible for the User to submit their request to the Controller.
The personal data necessary to pursue the processing purposes described in point 2) above are marked with an asterisk within the request form.
Method of processing and data retention periods
The Controller will process Users’ personal data using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data.
Users’ personal data will be retained for the time strictly necessary to fulfill the primary purposes set out in point 2) above, or in any case for as long as necessary to protect the interests of both Users and the Controller under civil law.
Scope of data communication and disclosure
Users’ personal data may be accessed by persons in charge of managing the Site and Users’ requests. Such persons, who have been instructed accordingly by the Controller pursuant to Article 29 of the Regulation, will process User data exclusively for the purposes indicated in this notice and in compliance with the provisions of the Applicable Law.
Users’ personal data may also be accessed by third parties who may process personal data on behalf of the Controller as “External Data Processors,” such as, by way of example, providers of IT and logistics services functional to the operation of the Site, providers of outsourcing or cloud computing services, and professionals and consultants.
Users have the right to obtain a list of any data processors appointed by the Controller, by making a request to the Controller using the methods indicated in point 6) below.
Data transfer
It may become necessary to transfer your data to companies located outside the EU for specific purposes related to the management of the activities carried out by the undersigned company. The transfer will only take place if the European Commission has confirmed an adequate level of data protection in the third country, or in the presence of appropriate data protection safeguards (e.g. the EU standard contractual clauses for the transfer of data to third countries).
The Controller reserves the right to use cloud services; in that case, service providers will be selected from among those offering adequate guarantees, as provided for by Article 46 of EU Regulation 2016/679.
Rights of Data Subjects
Users may exercise the rights guaranteed to them by the Applicable Law by contacting the Controller using the following methods:
By sending a registered letter with return receipt to the Controller’s registered office at Corso Garibaldi, 16, Ancona;
By sending an email to the following addresses: email: info@goldenage.srl; PEC: bmga@pec.it
Users have the right to obtain:
access to personal data in order to know (“reactive transparency”) the purposes of processing, the categories of personal data collected, the recipients of the data communication, in particular whether recipients are in third countries or international organizations, the envisaged data retention period (Art. 15);
rectification (Art. 16);
the right to obtain erasure of personal data, where such data are no longer necessary in relation to the purposes for which they were collected and where there is no further legal need for retention (Art. 17 GDPR);
to request restriction of processing (Art. 18);
to request data portability (Art. 20);
the right to object to processing on grounds relating to their particular situation (Art. 21 GDPR). In such case, the Controller will refrain from further processing the data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject (e.g. for the exercise or defense of legal claims).
not to be subject to automated decision-making, including profiling (Art. 22).
Finally, the data subject shall have the right to lodge a complaint with the Supervisory Authority pursuant to Art. 13(2)(d) of the aforementioned Regulation and pursuant to Art. 77 of the Regulation.
The Italian supervisory authority is the Garante per la protezione dei dati personali (Italian Data Protection Authority), located at Piazza Venezia 11, 00186 – Rome (http://www.garanteprivacy.it/).
For anything not provided for in this notice, reference is made to Regulation (EU) 2016/679, to Legislative Decree 196/03 as amended by Legislative Decree 101/2018 and subsequent amendments, as well as to any other measure issued by the Italian Data Protection Authority (“Garante”).
The Controller is not responsible for keeping all links shown in this notice up to date; therefore, whenever a link is not working and/or is out of date, Users acknowledge and accept that they must always refer to the document and/or section of the websites referenced by that link. In the event that the changes made to this privacy policy are not accepted, the User is required to stop using https://www.helior.com/ and may ask the Data Controller to remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that point.
