The reason for this notice

TARONI S.P.A. (hereinafter called the “Company” or the “Data controller”) is committed to the protection of your privacy and wants you to feel secure both when simply browsing the site, or if you decide to register with us and you provide us with your personal data in order to take advantage of the services available to our Users and/or Customers. On this page TARONI S.P.A. intends to provide information on the processing of personal data of the users that visit or consult the website from the address www.www.taroni.it (the “Website”). This notice is only for the website of TARONI S.P.A. and not for any other websites that may be consulted by the user by following links (for which please see their own respective notices/policies on privacy). The reproduction or use of pages, materials and information on the Website, with any means and in any format or device, is not permitted without the prior written consent of TARONI S.P.A. It is permitted to copy and/or print only for personal use and not for commercial uses (for requests about this or for clarification please contact TARONI S.P.A. at the addresses indicated below). Any other uses of the site’s content, services and information are not permitted.

As regards the content offered and the information provided, TARONI S.P.A. will act to ensure that the content of the Website is reasonably up to date and reviewed, but without offering any guarantees as to the adequacy, exactness or completeness of the information provided, expressly declining any liability for any errors of omission in the information provided on the Website.


Origin – Browsing data

TARONI S.P.A. informs you that the personal data you provide and that are acquired at the time of the request for information and/or contact, registration at the website and use of the services by whichever means by smartphone or other device used to access the Internet, as well as the data necessary for the provision of such services, including the browsing data and the data used for any purchase of products and services offered by TARONI S.P.A. will be processed in compliance with current applicable law and regulations, also where the user is simply just browsing the site. The information technology systems and the software procedures used for the working of this website acquire during their normal running some of the personal data whose transmission is implicit in the use of the Internet. This information is not gathered to be associated specifically with the interested person concerned, but could by its nature, through processing and association with data held by third parties, permit the identification of browsing users. This category of data comprises data such as the “IP addresses ” or domain names of computers used for connection to the website, the URI (uniform resource identifier) addresses of the resources requested, the time of the request, the method used in submitting the request to the web server, the size of file obtained in reply, the number code indicating the status of the response given from the web server (acceptance, error etc.) and other parameters relating to the user’s operating system and IT environment . These data are used only for anonymous statistical information for use of the website and to check on the proper working of the website of TARONI S.P.A. The aforesaid data could be used in the ascertaining of responsibility in the event of information technology crimes to the damage of the TARONI S.P.A. website or other connected or linked sites: save for this eventuality, as things stand the web contact data will not last for more than a few days.


Origin – Data provided by the user

TARONI S.P.A. gathers, conserves and processes your personal data for the purpose of providing the products and services offered on the Website, or in order to fulfil its obligations under the law. In relation to any specific services, products or promotions etc. TARONI S.P.A. may also use the data for commercial aims. In such cases a specific, separate, discretionary, and always revocable, consent will be required, according to the manner, and to the addresses, indicated below.

The discretionary, express and voluntary sending by e-mail to the addresses indicated in any particular section of the website, as well as when filling in questionnaires or forms, chat exchanges, push notifications via Apps, social networks, call centres etc, results in the subsequent acquisition of personal data, including that gathered from the use of the App and correlated services needed to be able to respond to requests. We would further point out to you that at the time of use of the mobile connection to access content and digital services offered directly by TARONI S.P.A. or by our partners, it may be necessary to transfer your personal data to such third parties. You can enter the Website or connect to areas where you could be enabled to publish information by way of blogs or notice boards, communicate with others, for example from the TARONI S.P.A. pages on Facebook®, LinkedIn®, Youtube® and other social network sites, to see and review products and offers and post comments or other online content. Before interacting with these areas we ask you to carefully read the General Terms of Use, while noting that in some circumstances the information posted may be viewed by anyone with Internet access and all information you include may be read, gathered and used by third parties.


Aims of the use of personal data and legal basis

The data are processed or used for aims:

1. Strictly connected with and necessary for registration at the website www.www.taroni.it, for the services and/or Apps developed or made available by TARONI S.P.A., regarding the use of the corresponding information services, the handling of contact requests or information, for the purchase of products and services offered through the website of TARONI S.P.A.;

2. For activities connected with the handling of requests from the Use/Customer and for the sending of replies that may involve the sending of promotional material; for the completion of purchase orders for products and services offered, including in relation to credit card payments, dealing with deliveries, any exercise of the right to rethink the decision to purchase remotely and the updating of the availability of products and services that are temporarily not available;

3. Related to the performance of obligations provided in Community and national law with regard to public order and the investigation and prevention of crime;

4. Direct marketing, i.e. the sending of advertising material, direct sales, the carrying out of market research or commercial correspondence regarding products and/or services offered by TARONI S.P.A.; such activities may also regard products and services of companies in the TARONI S.P.A. group and be carried out by the sending of advertising material/information and news/promotions and or invitations to take part in initiatives, events and offers that reward users or customers, executed with “traditional” methods (such as by way of example by post or called by an operator) or using automated contact systems (e.g. text messages, MMS messages, telephone calls without an operator, emails, faxes and interactive apps), in accordance with the provisions of article 130 c. 1 and 2 of D. lgs. 196/03 as amended;


The conferring of the data for the aims indicated in points 1), 2) and 3), connected to a pre-contractual stage or a contractual stage or relating to a user request or provided for in a specific law or regulation, is mandatory and if they are not given it will not be possible to receive the information for access to any requested services. with regard to point 4) with this information notice, consent to the use of data on the part of the user/customer is however given freely and discretionary and can at any time be revoked without consequences for the use of the products and services save the impossibility for TARONI S.P.A. to updated news on initiatives or special promotions or any advantages that may be available to the users/customers.

TARONI S.P.A. may send commercial correspondence relating to products and/or services similar to those already supplied in accordance with the provisions of Directive 2002/58/EU, using emails, or post, as indicated by you on such occasions, and which you may oppose in the manner and at the addresses indicated below.


Method, reasoning behind the use, the times of conservation and security measures

The use and processing of the data may include the use of electronic means or at least automated means, as carried out by TARONI S.P.A. and/or by third parties used by TARONI S.P.A., to store, process and transmit the data. The use of data shall be carried out according to a logic of organisation and processing of the personal data, also relating to the original log of access and use of services made available on the web, of the products and services correlated to the aims indicated above and in any case in such a way as to ensure the security and the confidentiality of the data. The processed personal data will be stored for the terms provided for by the regulations applicable at the time.

Still with regard to data security, in the sections of the website devoted to particular services, where the personal data of the browsing user are requested, the data are encrypted using a security technology called “Secure Sockets Layer” or SSL. The SSL technology encodes the information before it is exchanged on the Internet between the user’s computer and the centralised systems of TARONI S.P.A., making it incomprehensible to unauthorised persons and thus ensuring the confidentiality of the information transmitted; the transactions are moreover made using electronic payment systems that have been realised using the Provider’s Services for Payments (PSP). TARONI S.P.A. only keeps the minimum set of information necessary for the handling of any dispute. With particular reference to the matter of data protection the user/customer is requested, in accordance with the provisions of article 33 of the GDPR, to report to TARONI S.P.A. any circumstances or events which could give rise to any potential “data breach” in order to permit its immediate evaluation and the adoption of any measures to deal with the event, with notification to be sent to TARONI S.P.A. at the addresses indicated below. The measures adopted by TARONI S.P.A. do not mean that the Customer need not take care when using the site. Where so required, suitably secure passwords or PINs should be used, and periodically updated, especially if you suspect that these may have been breached or have become known to third parties. You should also look after them carefully, making them inaccessible to third parties so as to ensure the prevention of any improper and unauthorised use.


Cookies

A cookie is a short text string sent to your browser and, as the case may be, saved on your computer (alternatively this may be your smartphone or tablet or other device that accesses the Internet); this string is generally sent every time a web site is visited. TARONI S.P.A. uses the cookies for diverse aims, to be able to provide a rapid and secure digital experience for example, and allowing you to keep the connection to the protected area active during your browsing of the website.

The cookies memorised on your device cannot be used to call up any data from your hard disk, for the sending viruses or to identify or use your e-mail address. Each cookie is unique to the browser and device you have used to access to the website or to use TARONI S.P.A.’s App. In general, the aim of the cookies is to improve the working of the website and the user’s experience of it, even if such cookies may be used for sending advertising messages (as explained below). For further information on what cookies and how they work, see the website “All about cookies” http://www.allaboutcookies.org.


Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”).

Google Analytics uses the “cookies” text file on your computer to permit anonymous collection and analysis of information on your usage behaviour at our website (including your IP address). Such information is sent to Google to process to draw up a report regarding your activities on the website itself. This site does not use (and does not allow third parties to use) Google’s analytic instruments to monitor or gather your personal and identification information. Google does not associate your IP address with any other data in Google’s possession nor does it seek to connect an IP address with the identity of the computer user. Google may transfer this information to third parties where it is legal required so to do or where third parties deal with the aforesaid information on behalf of Google. You may refuse to use cookies by changing your browser settings, but to do so could impeded your use of all the functions of this website. By using our website you consent to the processing of your data by Google for aims indicated above.

For further information see Google’s notice at the following address: Google Analytics Notice. It is possible to prevent the use by Google Analytics by installing the add-on to your browser that can be downloaded from the following address: Browser add-on to de-activate Google Analytics.


The communication and transfer of the data.

In pursuance of the aims indicated above, TARONI S.P.A. may communicate and have processed, both in Italy and abroad, the personal data of users/customers to and by third parties with whom we have dealings, where these third party parties provide services at our request. We will only give to these third parties the information necessary to be able to carry out the requested services, taking all suitable measures to protect your personal data. The data may be transferred outside the European Economic area if this is necessary for the management of your contractual relationship. In which case, the recipients of the data will be obligated to the same protection and security as that warranted by the Data controller. In the case of the use of services offered directly by Partners we will only supply such data as are strictly necessary for the services to be carried out. In any case only the data necessary in pursuance of the aims provided for will be used, and, if required, the guarantees applicable for transfers of data to third party countries will be applied. We may also make known the personal data to our providers of commercial services, for marketing reasons, for which purpose we will appoint external responsible persons for the control of the data. All the personal data may moreover be notified to the competent public entities and authorities to fulfil obligations in the law and regulations or for ascertaining responsibility in the event of information technology crime that damages the website as well as notifying to, or allocating to, third parties (as responsible persons or, if they providers of services of electronic communication, independent data controllers), that provide IT and computer services (e.g.: hosting services, or services of web site management and development) used by TARONI S.P.A. for carrying out of tasks and activities that may also be of a technical and organisational nature, pursuant to the running and working of the website. The persons belonging to the above categories operate as distinct Data controllers or as Responsible persons appointed for the task by TARONI S.P.A.

The personal data may moreover be known by the employees/consultants of TARONI S.P.A. who will have been specially trained and appointed as data controllers.

The categories of possible recipients of the data can be obtained from TARONI S.P.A. at the addresses indicated below.


Your rights as interested parties

You may exercise your legally recognised rights at any time, including:

a. Accessing your personal data, obtaining evidence of the aims pursued by the Data controller, of the categories of data involved, of the intended recipients to whom they may be divulged, of the applicable period of conservation and the existence of automated decision-making processes;

b. Obtaining without delay the rectification of inexact personal data that regard you;

c. Obtaining, in the cases provided for, the deletion of you data;

d. Obtaining the limitation of the use of or opposing the use of the data, when possible;

e. Requesting the transferability of the data you have provided to TARONI S.P.A., that is to say receive them in a structured form, as commonly used and able to be read on an automatic device, also so the data can be transferred to another data controller, subject to the limits and restrictions set forth in the provisions of article 20 of the GDPR;

You may also bring a complaint before the Guarantors Authority for the protection of personal data under article 77 of the GDPR.

For the use of data described in point 4) of the aims the Customer may at any time revoke consent and exercise the right to oppose any direct marketing (whether by “traditional” or “automated” means). Such opposition, unless the contrary is stated, will relate both to traditional and automated communications.


The Data controller

The data controller, pursuant to the provisions of article 4 of the Code and of the GDPR, is TARONI S.P.A. – Via Riccardo Mantero, 20 – 22070 Grandate (CO) – tel. 0312454511.

The rights indicated above may be exercised at the request of the Interested person by the means indicated by the Customer Service or on the website of the Company, that is using the following references: TARONI S.P.A.

The use of the website, including on tablet and smartphone devices by the Customer and/or User implies full awareness of and acceptance of the content and any indications given, including in this version of the notice published by TARONI S.P.A. at the time that the website is accessed. TARONI S.P.A. informs you that this data protection notice may be changed without notice and therefore advises it is re-read periodically.

The Data controller

TARONI S.P.A.


Notice on the Use of Personal Data of Customers

Pursuant to articles 13 and 14 of the Regulation 2016/679/EU (hereinafter the “GDPR”) TARONI S.P.A. (hereinafter referred to as the “Data controller”) at Via Riccardo Mantero, 20, in its capacity as “Data controller”, informs you that your personal data as gathered for the purposes of the conclusion of the contract with the Customer and/or in the context of the execution and/or the stipulation of the contract, shall be processed in accordance with the aforesaid regulations in order to guarantee the rights, the essential freedoms and the dignity of individual persons, with particular regard to confidentiality and to personal identity. We inform you that if the activities you have provided involve the processing of personal data of third parties of which you are data controller then it shall by your responsibility to ensure that you have carried out all the duties under the law in relation to those interested parties so as to ensure their data are lawfully processed by ourselves.


Origin, aims, legal basis and status of the processed data

The processing or use of your personal data, as directly provided by yourself, is carried out by TARONI S.P.A. for the purposes of concluding the contract with the Customer and/or in its performance and/or stipulation.

It is also possible to check on the processing of personal data of third parties communicated by the Customer to the Company. With respect to this situation, the Customer acts as autonomous data controller and assumes responsibility for the consequential legal obligations and responsibilities, holding the Company harmless in relation to any challenges, claims and/or demands for compensation for damages from processing that could reach the Company from interested third parties.

In compliance with current regulations on personal data protection and without the need for the specific consent of the interested party, the Data shall be stores, gathered and processed by the Company for the following purposes:

a. The performance of contractual obligations, the execution and/or the stipulation of the contract with the Customer and/or management of any pre-contractual measures;

b. The discharging of any obligations under regulations, fiscal and tax provisions arising from the carrying out of company business and obligations connected to administrative and accounting work;

c. The sending directly or through third party providers of services of marketing and communications, newsletters and correspondence with the aims of direct marketing by means of emails, text messages, MMS, push notices, fax, paper post, and telephone calls with operators;

d. Communication of the Data to third party companies for the sending of newsletters and correspondence with the aims of marketing using emails, text messages, MMS, push notices, paper post and telephone calls with operators.


The legal basis of the processing of the data for the aims in a) and b) indicated above are articles 6.1.b) and 6.1.c) of the Regulation.

The provision of the Data for the aforesaid purposes is discretionary, but any failure to grant the Data same or a refusal to provide them would lead to the impossibility for the Company of carrying out and/or stipulating the contract and performing the services requested of it.

The legal basis for the processing of personal data for the aims in c) and d) is that in article 6.1.a) of the GDPR insofar as the treatments are based on consent; it must be noted that the Data controller may obtain a single sole consent for the purposes of marketing as here described, in accordance with the General provisions of the Guarantor for the protection of personal data “Guidelines for promotional activities and for combating spam” of 4 July 2013. The provision of consent to the use of the data for the purposes of marketing is discretionary and if the interested party wishes to oppose the use of the personal data for marketing purposes, as carried out with the means here indicated, he may revoke the consent given at any time, without out suffering any consequences (except for the fact that the person will no longer receive marketing communications) following the indications in the section on “the interested person’s rights” of this notice.

It should finally be recalled that as regards the processing and use of data carried out for the purposes of sending advertising material or direct sales or for the performance of market research or for commercial communication in relation to similar products or services to those used by the Customer, the Company may use the e-mail addresses or postal addresses in accordance with the limitations provided for in article paragraph 4 of the Privacy Code (D. Lgs. n. 196/2003) and the order of the Guarantor Authority for the protection of personal data of 19 June 2008 even in the absence of express consent. The legal basis of the use of data for such aims is article 6, paragraph 1, f, of the GDPR, save the possibility of opposing such use at any time, following the indications in the section on the “interested person’s rights” of this notice.


Correspondence

The data may be divulged to third parties appointed as responsible persons for the handing of the data pursuant to the provisions of article 28 of the GDPR and in particular banks, companies trading in the field of insurance, the providers of services strictly necessary for the carrying on of company business, or consultants of the company, where this is necessary for tax, administrative or contractual reasons or for the protection provided under current regulations.

Your personal data, or the personal data of third parties for which you are the data controller, may also be divulged to external companies from time to time identified, to which TARONI S.P.A. entrusts execution of the duties arising from the assignment received to which however will be transmitted only the details necessary for the activities request of them. All the employees, consultants, temporary staff and/or any other individuals that are carrying out their work on instructions received from TARONI S.P.A., under the provisions of article 29 of the GDPR, “data processing persons” are appointed (hereinafter called the ”Processors”). The Processors or Responsible persons, if appointed, are given suitable operating instructions by TARONI S.P.A. with particular regard to the adoption of and compliance with security measures in order to ensure the confidentiality and the security of the data. With reference to the personal data protection aspects, the Customer is requested, pursuant to article 33 of the GDPR to report to TARONI S.P.A. any circumstances or events which could give rises to a potential “data breach” to permit immediate evaluation and the adoption of any actions to deal with that event, notifying TARONI S.P.A. at the addresses indicated below.

The Data shall not be broadcast;

TARONI S.P.A. remains under a duty to divulge the data to the public authorities when so specifically requested.


Transfers Abroad

The transfer abroad of your personal data may take place if necessary for carrying out the assignment received. For the processing of information and data that may be communicated to these persons equivalent levels of protection shall be required as adopted for Personal Data of own employees. In any case only the data necessary in pursuance of the aims provided will be divulged and the regulations of Head V of the GDPR will apply.


Method and system behind the processing and storage times

Your data are lawfully gathered and recorded in accordance with the principles of propriety and for the aims indicated above, in compliance with the law and spirit of article 5 c 1 of the GDPR.

The processing of the personal data is by means of manual, information technology and computerised tools strictly in pursuance of the stated aims themselves and in any case in such a way as to ensure their security and confidentiality.

The Personal data will be processed by TARONI S.P.A. for the whole duration of the contractual term and also subsequently in order to avail itself of and to protect its own rights or for administrative purposes and/or for the performance of obligations arising under the framework law on the subject and the applicable pro tem law and regulations and in compliance with the specific obligations under the law on the conservation of data.


The conferring of the data

In relation to the aforesaid aims in a) and b) indicated above on the provision of your data, such provision is essential for the purposes of contractual performance as between you and TARONI S.P.A. and to permit the performance of the duties provided for in the applicable of the regulations: the failure to confer the Data and a refusal to furnish them could lead to impossibility for the Company to carry out and/or stipulate the contract and perform the services requested of it. We therefore inform you that the processing of the personal data will be carried out on the basis of the provisions of article 6 c. 1 b) of the GDPR.

The conferring of you personal data for aims in c) and d) is however discretionary, as you may freely decide whether or not to give your express consent, which you may also revoke at any time.


Data Controller

The data controller, pursuant to the provisions of article 4 of the Code and of the GDPR, is TARONI S.P.A. – Via Riccardo Mantero, 20 – 22070 Grandate (CO) – tel. 0312454511.


Yours sincerely


The Data controller

TARONI S.P.A.


Notice on the Use of Personal Data of Suppliers

Pursuant to articles 13 and 14 of the Regulation 2016/679/EU (hereinafter the “GDPR”) TARONI S.P.A. (hereinafter referred to as the “Data controller”) at Via Riccardo Mantero 20, (CO) – 22070 Grandate (CO), in its capacity as “Data controller”, informs you that your personal data as gathered for the purposes of the conclusion of the contract with the Supplier and/or in the context of the execution and/or the stipulation of the contract, shall be processed in accordance with the aforesaid regulations in order to guarantee the rights, the essential freedoms and the dignity of individual persons, with particular regard to confidentiality and to personal identity. We inform you that if the activities you have provided involve the processing of personal data of third parties of which you are data controller then it shall by your responsibility to ensure that you have carried out all the duties under the law in relation to those interested parties so as to ensure their data are lawfully processed by ourselves.


Origin, aims, legal basis and status of the processed data

The processing or use of your personal data, as directly provided by yourself, is carried out by TARONI S.P.A. for the purposes of concluding the contract with the Supplier and/or in its performance and/or stipulation.

It is also possible to check on the processing of personal data of third parties communicated by the Supplier to the Company. With respect to this situation, the Supplier acts as autonomous data controller and assumes responsibility for the consequential legal obligations and responsibilities, holding the Company harmless in relation to any challenges, claims and/or demands for compensation for damages from processing that could reach the Company from interested third parties.

In compliance with current regulations on personal data protection and without the need for the specific consent of the interested party, the Data shall be stored, gathered and processed by the Company for the following purposes:

a. The performance of contractual obligations, the execution and/or the stipulation of the contract with the Supplier and/or management of any pre-contractual measures;

b. The discharging of any obligations under regulations, fiscal and tax provisions arising from the carrying out of company business and obligations connected to administrative and accounting work;


The legal basis of the processing of the data for the aims in a) and b) indicated above are articles 6.1.b) and 6.1.c) of the Regulation.

The provision of the Data for the aforesaid purposes is discretionary, but any failure to grant the Data same or a refusal to provide them would lead to the impossibility for the Company of carrying out and/or stipulating the contract and performing the services requested of it.


Correspondence

The data may be divulged to third parties appointed responsible as responsible persons for the handing of the data pursuant to the provisions of article 28 of the GDPR and in particular by banks, companies operating in the field of insurance, the providers of services strictly necessary for the carrying on of company business, or consultants of the company, where this is necessary for tax, administrative or contractual reasons or for the protection provided under current regulations.

Your personal data, or the personal data of third parties for which you are the data controller, may also be divulged to external companies from time to time identified, to which TARONI S.P.A. entrusts execution of its duties arising from the assignment received. However only the details necessary for the activities requested of them will be transmitted. All the employees, consultants, temporary staff and/or any other individuals that are carrying out their work on instructions received from TARONI S.P.A., under the provisions of article 29 of the GDPR, “data processing persons” are appointed by the company (hereinafter called the ”Processors”). The Processors or Responsible persons, if appointed, are given suitable operating instructions by TARONI S.P.A. with particular regard to the adoption of and compliance with security measures in order to ensure the confidentiality and the security of the data. With reference to the personal data protection aspects, the Customer is requested, pursuant to article 33 of the GDPR to report to TARONI S.P.A. any circumstances or events which could give rises to a potential “data breach” to permit immediate evaluation and the adoption of any actions to deal with that event, notifying TARONI S.P.A. at the addresses indicated below.

The Data shall not be broadcast

TARONI S.P.A. remains under a duty to divulge the data to the public authorities when so specifically requested.


Transfers abroad

The transfer abroad of your personal data may take place if necessary for carrying out the assignment received. For the processing of information and data that may be communicated to these persons equivalent levels of protection shall be required as adopted for the Personal Data of its own employees. In any case only the data necessary in pursuance of the aims provided will be divulged and the regulations of Head V of the GDPR will apply.


Method and system behind the processing and storage times

Your data are lawfully gathered and recorded in accordance with the principles of propriety and for the aims indicated above, in compliance with the law and spirit of article 5 c 1 of the GDPR.

The processing of the personal data is by means of manual, information technology and computerised tools strictly in pursuance of the stated aims themselves and in any case in such a way as to ensure their security and confidentiality.

The Personal data will be processed by TARONI S.P.A. for the whole duration of the contractual term and also subsequently in order to avail itself of and to protect its own rights or for administrative purposes and/or for the performance of obligations arising under the framework law on the subject and the applicable pro tem law and regulations and in compliance with the specific obligations under the law on the conservation of data.


The conferring of the data

In relation to the aforesaid aims in a) and b) indicated above on the provision of your data is essential for the purposes of contractual performance as between you and TARONI S.P.A. and to permit the performance of the duties provided for in the applicable regulations: a failure to confer the Data and any refusal to furnish them could lead to impossibility for the Company to carry out and/or stipulate the contract and perform the services requested of it. We therefore inform you that the processing of the personal data will be carried out on the basis of the provisions of article 6 c. 1 b) of the GDPR.


The interested person’s rights

In accordance with, and subject to the limitations and the terms and conditions provided for in the laws on the protection of personal data in relation to the usages of the data that are the subject of this notification, as the interested party you have the right to request confirmation whether or not your personal data are currently being processed, as well as to access the personal data that regard you, with the right to request the rectification and the cancellation of those which may have been sent to our Organisation, to limit their use in the cases provided for in the law, require the transfer of the personal data as provided by you, in the cases indicated in the law, to oppose the treatment of the data and you also have, specifically, the right to oppose any decision regarding them in relation only to the automated processing of your data, personal profiling included. If you feel that the treatment of the data breaches the rules of the GDPR, you have the right to file a complaint with the Guarantors under article 77 of the GDPR.

If you intend to request further information on the processing of your personal data or to exercise any of the above rights, you can contact TARONI S.P.A. in writing.


Data Controller

Yours sincerely


The Data controller


TARONI S.P.A.


*1 under Article12 and Articles 15-22 of the Regulation 2016/679/EU


Notice on the Use of Personal Data of Candidates

Pursuant to articles 13 of the legislative decree d. lgs. 196/03 (hereinafter referred to as the “Code”) and articles 13 and 14 of the Regulation 2016/679/EU (hereinafter the “GDPR”) TARONI S.P.A. (hereinafter “Data controller”) whose registered office is in via Riccardo Mantero 20 – 22070 Grandate (CO), in its capacity as “Data controller”, informs you that the personal data gathered for the purposes of selection of personnel for TARONI S.P.A. (as employee, associates, interns, apprentices etc.) shall be used in full compliance with applicable law and regulations, fully safeguarding your fundamental rights and freedoms as recognised in the law.


Origin and type of data processed or used

The processing of your personal data, generally provided directly by yourself (via e-mail, in paper form, filling in the form from the company etc.), but also possibly from third parties charged with selection procedures work (head hunter companies, personnel selection websites etc.) is carried out by TARONI S.P.A. for the purpose of selection of potential candidates with which to establish a relationship of collaboration in the form and manner from time to time determined, in accordance with all obligations arising under the as may be applicable. The processed data regard the following:

a. Registration details, contact details, educational CV (academic qualification, training courses etc.);

b. Details of previous work experience, knowledge of foreign languages, as well as each any further information that may be useful for CV evaluation, including remuneration levels etc.

c. Data from public sources as on web sites, social network, (data contained in your Facebook and LinkedIn profiles etc.), journals and magazines, including trade publications, or anything of this kind that can be freely consulted, as well as in specialised websites designed to facilitate the bringing together supply and demand in the employment market.

There may also be, among the aforesaid data, data that current law and regulations regards as “sensitive”, or data corresponding to criminal convictions and sentences (judicial data).

Sensitive data are (under article 4. C. 1 d) of the Code and article 9 c. 1 of the Regulation), for example, those that might reveal details of the state of health, maternity, inabilities, membership of a political party or a trade union, religion, or a disability. In the case of a spontaneous candidate any particular or sensitive data will be processed in accordance with the provisions of article 24 d1 i) bis without the need for express consent.


Legal basis and aims of the use of the personal data

Your personal data, requested or acquired in advance or during the selection process, will be processed by the Data controller for the following purposes:

a. For the appraisal of your CV;

b. Programming and managing selection process interviews, including in interactive or group mode;

c. Suggesting you candidature to other companies in the TARONI S.P.A. group.

Such data are processed in accordance with the provisions of article 24 c. 1 b) of the Code and article 6 c.1 b) of the Regulation, also when sensitive, to proceed with appraisal of the candidate, in the consideration of his or her tasks and skills with respect to needs of TARONI S.P.A.

All the criteria provided for in D. lgs. 125/91 will be adopted to ensure there is no gender discrimination at the time of selection.


Communication and divulging of data

Your data may be divulged to third parties such as external companies in the trust of the company operating, by way of example, in the sectors of personnel selection, in skills assessment and, where there is such a need in bodies operating in the health sector used by TARONI S.P.A. For reasons of a technical or organisational nature, in the handling of your application, external professionals may be used, as well as connected companies and/or subsidiaries by TARONI S.P.A., and companies, consortia and/or other legal entities in which TARONI S.P.A. is a shareholder, and also any company associated with TARONI S.P.A. that may be interested in establishing an employment contract with you. Such entities, companies and Professionals will handle your data as autonomous data managers or, where necessary, as persons responsible for the processing of the data duly appointed by TARONI S.P.A.

On the basis of the co-ordination and management role played by TARONI S.P.A., your data may be processed, as part of the normal personnel selection procedure, as regards individual employees, for those necessary organisational, administrative, financial and accounting procedures carried out by each company on behalf of others.

The Data controller is under a duty to notify data to the Competent authorities, where there is a specific request on their part so to do.


Transfers abroad

Your data are not normally transferred outside the area of the EU. If however this should turn out to be necessary for the selection process, there shall be imposed on the recipients of the data the same data protection and security duties which are guaranteed by the Data controller. In any case only the data necessary in pursuance of the aims provided for will be used, and, if required, the guarantees applicable for transfers of data to third parties will be applied.


Method and system behind the processing and storage times

Your data are gathered and recorded lawfully and in accordance with propriety, in pursuance only of the aims indicated above and in accordance with the fundamental standards established by applicable law and regulations.

The processing of personal data may take place by means of manual instruments, or by computerised and digital means, but in all cases overseen by technical and organisation safeguards that ensure their security and confidentiality, above all for the purpose of reducing the risks of destruction or loss, even accidental, of the data, of unauthorised access and of use or processing that is not permitted or that in not in compliance with aims for which they have been gathered.

The personal data will be processed by TARONI S.P.A. for the whole period of the selection procedure: in the case of a spontaneous application the data will be kept for 12 months after which time they will be deleted; in the case of a response to a section process started by TARONI S.P.A. the terms of conservation are those indicated in the prospectus and in any case will not be greater than 24 months from the closure of the selection; you may request your CV be kept for any subsequent needs that may for TARONI S.P.A. arise.


Nature of the conferring of the data and consent to the use of these

As indicated above, the conferring of your data is mandatory in nature, being essential for the pursuance of the aims set for in point 1. a) and 1 b) relating to the selection of personnel. The conferring of your personal data for the aims in c) and d) is however discretionary, as you may freely decide whether or not to give your express consent, which you may also revoke at any time. If you CV contains sensitive data, their treatment is subject to consent that shall be issued in written form.


Your Rights

You may exercise your legally recognised rights at any time, including:

a. Accessing your personal data, obtaining evidence of the aims pursued by the Data controller, of the categories of data involved, of the intended recipients to whom they may be divulged, of the applicable period of conservation and the existence of automated decision-making processes;

b. Obtaining without delay the rectification of inexact personal data that regard you;

c. Obtaining, in the cases provided for, the deletion of you data;

d. Obtaining the limitation of the use of or opposing the use of the data, when possible;

e. Requesting the transferability of the data you have provided to TARONI S.P.A., that is to say to receive them in an organised form, as commonly used, and readable by an automatic device, also to transmit the data to another data controller, without any impediment on the part of TARONI S.P.A.;

f. Taking complaints to the Guarantor Authority for the protection of personal data.


The Data Controller

The data controller, pursuant to the provisions of article 4 of the Code and of the GDPR, is TARONI S.P.A. – VIA Riccardo Mantero, 20 – 22070 Grandate (CO) – tel. 0312454511.


Yours sincerely


The Data controller


TARONI S.P.A.