1. Data Controller
The data controller for personal data processed through this website is:
2. Types of Data Processed
We process the following categories of personal data:
- Browsing data: IP address, browser type, pages visited, visit duration — automatically collected by web servers.
- Contact data: name, email address, telephone number, and any other information you voluntarily provide when contacting us or submitting a job application.
- Technical data: cookies and similar technologies (see Cookie Policy).
We do not process special categories of data (health, political opinions, religious beliefs, etc.) unless explicitly provided by you.
3. Purposes and Legal Basis
- Website operation and security — Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Responding to enquiries and requests — Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
- Processing job applications — Legal basis: consent (Art. 6(1)(a) GDPR) and, where applicable, legal obligation.
- Compliance with legal obligations — Legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Retention Periods
Personal data are retained for the time strictly necessary for the purposes for which they were collected:
- Browsing data: up to 12 months, unless required for longer periods for security or judicial purposes.
- Contact form data: until the request is fulfilled, then deleted within 24 months.
- Job application data: 12 months from receipt, or until the selection process concludes, unless you consent to a longer period.
5. Data Sharing
Personal data may be shared with:
- External service providers acting as data processors (e.g. hosting provider, email service) who process data solely on our behalf and under our instructions.
- Public authorities, where required by law.
We do not sell, rent or transfer personal data to third parties for commercial purposes. Data may be transferred outside the EU/EEA only where adequate safeguards are in place (e.g. Standard Contractual Clauses).
6. Your Rights
Under the GDPR (Regulation EU 2016/679), you have the following rights:
- Access (Art. 15): obtain confirmation of whether your data is being processed and receive a copy.
- Rectification (Art. 16): request correction of inaccurate or incomplete data.
- Erasure (Art. 17): request deletion of your data where the legal conditions apply.
- Restriction (Art. 18): request restriction of processing in certain cases.
- Data portability (Art. 20): receive your data in a structured, machine-readable format.
- Objection (Art. 21): object to processing based on legitimate interest.
- Withdrawal of consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise your rights, write to: info@caolaengineering.it. We will respond within 30 days.
7. Right to Lodge a Complaint
If you believe your rights are being violated, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):
Website: www.garanteprivacy.it — Tel: +39 06 696771
8. Cookies
This website uses cookies and similar technologies. For detailed information, please see our Cookie Policy.