Datenschutzerklärung

CRAMARO HOLDING S.p.A. is committed to the protection of the Personal Data entrusted to it. Therefore, its management and security are guaranteed with the utmost care, in accordance with the requirements of the legislation on the protection of Personal Data (EU Regulation 679/2016).

  1. CONTACT DETAILS OF THE DATA CONTROLLER

CRAMARO HOLDING S.p.A. - Via Quari Destra, 71/G, 37044 Cologna Veneta (VR), Italy, VAT no. IT04452060231, email address: privacy@cramaro.com

  1. TYPES OF DATA COLLECTED

The Personal Data collected by the cramarogroup.com, either independently or through third parties, includes Usage data; Cookies; first name; surname; telephone number; company name; country; email address; various types of data; town.
Full details on each type of data collected are provided in the dedicated sections of this Privacy Policy or through specific information displayed before the data is collected.
Personal Data may be freely provided by the Data Subject or, in the case of usage data, collected automatically while using this Application.
Unless otherwise specified, most of the data requested by cramarogroup.com is mandatory. If the User refuses to send it, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain data as optional, Users are free to refrain from sending such data, without this having any impact on availability of the Service or its operation.
Users who have doubts about what data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies - or other tracking tools - by this Application or by providers of third party services used by this Application, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared by this Application, and guarantees having the right to disclose or disseminate such data, releasing the Data Controller from any liability to third parties.

  1. PURPOSE AND LEGAL BASIS OF PROCESSING

CRAMARO HOLDING S.p.A. will use your data exclusively for the purpose of sending the newsletter and updates relating to new publications on in-depth studies, opinions and research, as well as invitations to promotional events and fairs.
The processing will be carried out on the basis of your consent, as provided for by art. 6 para.1 letter a) of the GDPR.
The provision of data is optional, as an expression of your interest, however the refusal to provide the data makes it impossible to obtain the newsletter service, to contact you as per your request and to include you among our candidates for the open positions on our site.
We will not use your Personal Data for any other purpose than those described in this Policy, unless we inform you in advance and, where necessary, obtain your consent.

In the context of the careers service and curriculum vitae management, Personal Data is processed for the following purposes:

  1. collection of candidate data for personnel research purposes and, where necessary, the finalisation of a contract;
  2. archiving curriculum vitae for future personnel research needs;

The processing of the data contained in the curriculum vitae you spontaneously send or make available for consultation through specialised personnel selection functions does not require consent, pursuant to art. 111-bis of Decree Law 196/2003. The data present in the curriculum vitae and collected during the interview will be processed for pre-contractual purposes pursuant to art. 6 para. 1 letter b) of the GDPR.

  1. DATA RETENTION

Data is processed and stored for the time required for the purposes for which it was collected. Therefore:

  • Personal Data collected for purposes related to the execution of a contract between the Data Controller and the User will be retained until the execution of such contract is completed, and as for an administrative request 10 years from the conclusion of the contract and the payment of the invoice.
  • Personal Data collected for purposes related to the collection, by consent, for newsletters will be retained until such interest is satisfied. Further information regarding the legitimate interest pursued by the Data Controller can be obtained from the relevant sections of this document or by contacting the Data Controller.

When processing is based on User consent, the Data Controller may retain Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of the authorities. At the end of the retention period the Personal Data shall be deleted. Therefore, upon the expiry of this term, the rights of access, deletion, correction and the right to data portability may no longer be exercised.
For the careers service and curriculum vitae management, the data will be processed for the time necessary to contact the person and the subsequent interview, or for the archiving of the curriculum vitae for future personnel research needs for a maximum of 12 months, after which your data will be deleted from both the paper and digital archives of the Data Controller.

  1. DATA TRANSFER

The data is processed at the Data Controller's site and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.
Personal Data may be transferred to a country other than that in which Users are located. More information on the place of processing is available in the section on details of Personal Data processing.
In the context of the careers service and curriculum vitae management, the data collected will be processed by trained and authorised personnel of the Data Controller and will not be subject to dissemination and/or transfer to third countries.

  1. METHODS OF COLLECTION AND PROCESSING OF CURRICULUM VITAE DATA

The data is collected through the spontaneous sending of a curriculum vitae by the candidate through the channels indicated on the website and on the Data Controller’s social media pages.
The processing is carried out with computer tools and on paper, respecting the confidentiality and security of the data.
The Personal Data contained in the curriculum vitae, in the accompanying email and any information you spontaneously provide to enhance your candidacy (e.g. images, certificates) shall be processed.

Please note that for the purposes of the curriculum vitae collected, data defined as "particular” by art. 9 of the Regulation (for example, belonging to protected categories) is not required. Where such data is spontaneously transmitted by the Data Subject, it will be processed pursuant to art. 9 para. 2 letter b).
The provision of data is optional, however refusal to provide certain data may make it impossible to participate in the aforementioned selection procedures or cause an incorrect assessment of your professional qualities.

  1. RIGHTS OF THE USER

Users may exercise certain rights with reference to the data processed by the Data Controller.
In particular, the User has the right to:

  • withdraw consent at any time. The User may withdraw their previously expressed consent to the processing of their Personal Data.
  • oppose the processing of their data. The User may object to the processing of their data when its legal basis is other than that consented to. Further details on the right of opposition are indicated in the section below.
  • access their data. The User is entitled to obtain information on the data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the data processed.
  • verify and request correction. The User can verify the correctness of their data and request its updating or correction.
  • obtain limitations on the processing. When certain conditions occur, the User may request the limitation of the processing of their data. In this case, the Data Controller will not process the data for any other purpose than its conservation.
  • obtain the deletion or removal of their Personal Data. When certain conditions occur, the User may request the data to be deleted by the Data Controller.
  • receive their data or have it transferred to another Data Controller. The User has the right to receive their data in a format that is structured, in common use and readable by an automatic device and, where technically feasible, to obtain its transfer without hindrance to another Data Controller. This provision is applicable when the data is processed with automated instruments and the processing is based on the consent of the User, relating to a contract to which the User is a party or relating to contractual provisions connected to them.
  • make a complaint. The User can lodge a complaint with the competent Personal Data Protection Authority or undertake proceedings in court.

We will process your request with the utmost commitment to ensure the effective exercise of your rights. You will also have the right to lodge a complaint with the national Personal Data Protection Authority.

How to exercise the rights:
In order to exercise the User's rights, Users may address a request to the Data Controller using the contact details indicated in this document. The requests are filed free of charge and pursued by the Data Controller as swiftly as possible, and in any case within one month, writing to privacy@cramaro.com.

  1. WITHDRAWING CONSENT

At any time you have the right to withdraw your consent without this however:

  • prejudicing the lawfulness of the processing based on the consent provided before such was withdrawn;
  • prejudicing further processing of the same data on other legal bases (for example, contractual or legal obligations to which CRAMARO HOLDING S.p.A. is subject).
  1. DETAILS REGARDING THE PROCESSING OF PERSONAL DATA

Personal Data is collected for the following purposes and using the following services:

  • Contacting the User

Mailing List or Newsletter (Cramarogroup.com)
By registering for the mailing list or newsletter, the User's email address is automatically included in a list of contacts to which email messages containing information, including commercial and promotional information relating to cramarogroup.com, may be sent. The User's email address may also be added to this list as a result of registering with cramarogroup.com or after making a purchase.
Personal Data processed: email, first name, surname; company, town, country, language.

Contact form (Cramarogroup.com)
The User, by filling in the contact form with his/her data, consents to its use in order to respond to requests for information, quotes, or requests of any other kind indicated in the header of the form, contacting the sales network and/or the service points.
Personal Data processed: first name, surname, company, email, telephone, town, country, message that will contain various types of data as specified by the Privacy Policy of the service.

  • Address management and sending of email messages

This type of service allows you to manage a database of email contacts, telephone contacts, or contacts of any other type, used to communicate with the User.
These services may also allow us to collect data relating to the date and time of display of messages by the User, as well as the User's interaction with them, such as information on clicks on links placed in messages.

Mailchimp (The Rocket Science Group, LLC.)
MailChimp is an email address and email message sending management service provided by The Rocket Science Group, LLC.
Personal Data processed: email address.
Location of processing: USA – Privacy Policy. Standard Contractual Clauses for the transfer of data to Third Countries.

  • Hosting and back-end infrastructure

This type of service has the function of hosting data and files that allow CramaroGroup.com to function, it allows for distribution and provides a ready-to-use infrastructure to deliver specific features of CramaroGroup.com.
Services provided through servers located on European territory.
The hosting and back-end service is provided by: Develon Digital Srl.
Personal Data processed: various types of Data as specified in the Privacy Policy of the service.
Location of processing: Europe.

  • Tags management

This type of service provides for the centralised management of tags or scripts used on this Application.
The use of these services involves the flow of User data through them and, if necessary, its retention.

Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Usage data
Location of processing: Ireland – Privacy Policy. Standard Contractual Clauses for the transfer of data to Third Countries.

  • Statistics management

The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour.

Google Analytics (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected to track and analyse the use of this Application, creating reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and customise ads in its advertising network.
Personal Data processed: Cookies, Usage data.
Location of processing: Ireland – Privacy Policy. – Opt Out. Standard Contractual Clauses for the transfer of data to Third Countries.

  • Infrastructure monitoring

This type of service allows this Application to monitor the use and behaviour of components of the same, to allow the improvement of performance and functionality, as well as for maintenance or troubleshooting.
The Personal Data processed depends on the characteristics and methods of implementation of these services, which by their nature filter the activity of this Application.

Sentry (Functional Software, Inc.)
Sentry is a monitoring service provided by Functional Software, Inc.
Personal Data processed: various types of data as specified in the Privacy Policy of the service.
Location of processing: United States – Privacy Policy. Standard Contractual Clauses for the transfer of data to Third Countries.

  • Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and to interact with them.
This type of service could however collect traffic data for the web pages where the service is installed, even when users do not use it.

Google Fonts (Google Ireland Limited)
Google Fonts is a typeface visualisation service provided by Google Ireland Limited that allows this Application to incorporate content of this kind into its pages.
Personal Data processed: Usage data; various types of Data as specified in the Privacy Policy of the service.
Location of processing: Ireland – Privacy Policy. Standard Contractual Clauses for the transfer of data to Third Countries.

Widget Mapbox (Mapbox Inc.)
Mapbox is a typeface visualisation service managed by Mapbox Inc. that allows this Application to incorporate content of this kind into its pages.
Personal Data processed: Cookies, Usage data.
Location of processing: United States – Privacy Policy. Standard Contractual Clauses for the transfer of data to Third Countries.

Video Vimeo (Vimeo, LLC)
Vimeo is a video content visualisation service managed by Vimeo, LLC that allows this Application to incorporate content of this kind into its pages.
Personal Data processed: Cookies, Usage data.
Location of processing: United States – Privacy Policy. Standard Contractual Clauses for the transfer of data to Third Countries.