1. General information
1.1 Premise
As they carry out their activities, the Companies
- VALEO FOOD ITALY BIDCO S.P.A, based in Via XX September 51, 20014 Nerviano (MI)
- BALCONI S.P.A, based in Via XX September, 51, 20014 Nerviano (MI)
- DOLCIARIA VALDENZA S.P.A, based in Via del Conchello, 43, 42026 Canossa (RE)
need to collect and process information (personal data) relating to individuals (those involved) in order to carry out their daily activities that can be directly and indirectly related to both the business and the management of their own Resources.
In addition, companies are required to process certain categories of personal data in order to comply with legal and/or regulatory requirements, in accordance with the European Regulation 2016/679, Italian data protection laws and any other applicable cogent rules voluntary.
In a context of maximum transparency and accountability, the Companies developed policies and procedures to ensure for each operational area the application of security measures appropriate to the protection of data protection (data protection) and therefore rights and freedoms of the individuals to whom the data relates (the interested parties).
The following information is as follows, which is relevant to the processing of personal data from general information, valid for all treatments unless otherwise specified, subsequently completed (under Articles 12, 13, 14 of the European Regulation 2016/679) from specific information for individual treatments carried out.
1.2 Regulatory framework
Without claims of exhaustion, the regulatory framework for personal data protection is summarized below:
- Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the Protection of Physical Persons with regard to the processing of personal data, as well as the free movement of such data (below the Regulation or GDPR)
- D.lgs. 196/2003, bearing the “Code on the protection of personal data” as well as novellated by the d.lgs. 101/2018 (below the Privacy Code)
- D.lgs. 101/2018, Provisions for the adaptation of national legislation to the provisions of the Regulation (EU) 2016/679 of the European Parliament and the Council, of 27 April 2016, relating to the protection of individuals with regard to the processing of data It is also important to note that there is a need for a free movement of such data and that it repeals Directive 95/46/EC (General Data Protection Regulation)
1.3 Treatment holders
Unless otherwise specified, the companies mentioned in the premise VALEO FOOD ITALY BIDCO S.P.A., BALCONI S.P.A, DOLCIARIA VALDENZA S.P.A.are the owners of the treatment. , under the agreement of the co-ownership between them under Article 26 of the GDPR, the full text of which is available at the locations of the companies mentioned, which will be referred to as “contals”.
1.4 Scope of communication
The personal data processed by the Conholder is not disclosed, that is, no knowledge is given to indeterminate subjects, in any possible form, including that of their provision or simple consultation. More specifically, the Holders of the treatment do not disclose any data or personal identification information to third parties except, possibly and however strictly necessary, to those who:
- must provide goods and/or perform services or services, including the management of the website, for the purpose of purchasing evasion, service delivery or other requests relating to the contractual relationship with the Holders;
- they are entitled to access it under the rules of law, regulations, EU regulations;
- they operate under the authority of the Contons, on the basis of the roles and job tasks performed, within the limits of their skills and in accordance with the instructions given to them;
- they are appointed as Ex Art Treatment Managers. GDPR 28.
Any additional recipients are listed in the specific information.
1.5 Data transfer
Under no circumstances do the controller transfer personal data to third countries or to international organisations. However, the Holders reserve the possibility of using services in the cloud: in which case, the service providers will be selected from those who provide adequate guarantees, as provided by art. GDPR 46.
1.6 Rights of the person concerned
You may exercise the following rights in relation to the processing of personal data in accordance with the conditions stated by the GDPR:
- right of access (Article 15 of GDPR): The person has the right to obtain confirmation from each controller that personal data is being processed or not and, in that case, to obtain access to personal data
- Right to Rectify (art 16 of GDPR):The person concerned has the right to obtain from each holder of the processing the inaccurate personal data and where appropriate the integration of the incomplete
- right to delete (Article 17 of GDPR): the person has the right to obtain from each holder of the treatment the deletion of personal data
- right to the limitation of treatment (Article 18 of GDPR): the person has the right to obtain the limitation or blocking of treatment
- right to portability (Article 18 of GDPR): The person has the right to receive in alegible and structured manner the personal data concerning him and has the right to obtain the transfer of that information to another holder
- right to object to automated decision-making (Article 22 of GDPR): the person has the right not to be subject to a decision based solely on automated treatments (e.g. profiling, as defined by GDPR)
In addition, the person concerned has the right to exercise
- Right of Opposition (Article 21 of GDPR): The person has the right to object at any time to the processing of personal data concerning him.
You may exercise your rights by writing to the e-mail address privacy@balconidolciaria.com. In order to allow the correct handling of the request, the person concerned must specify in the communication the right he intends to exercise and the treatment to which he refers, attaching a copy of a valid identity document that the authorized personnel it will only use to identify the sender and verify the legitimacy of the request without carrying out any further treatment other than mere preservation for the period strictly necessary to fulfill the request. Please note that, in accordance with the GDPR’s principle of accountability, the details of the request will in any case be tracked and retained to allow the Holders to demonstrate their management in accordance with the current legislation.
It is understood, as stipulated by art. 26 of GDPR, which, in the presence of a title, the Person concerned may exercise his rights to and against each controller of the treatment.
1.7 Withdrawal of consent
With regard to art. 7 of GDPR, the person may withdraw any consent at any time. In the absence of a different legal basis, the withdrawal of consent entails, within the strictly necessary technical timeframes, the cessation of any further processing activities, including mere preservation, without compromising the legitimacy of the previous treatments. If the treatment was not based on consent, its eventual withdrawal would not affect its legitimate continuation. The withdrawal of consent may be expressed according to the channels provided by the specific services or, if not available, following the same instructions for the exercise of the rights.
1.8 Proposition of complaint
You have the right to complain to the state of residence control authority.
1.9 Data retention
The contitholders of the treatment store and process personal data for as long as it takes to fulfil the stated purposes. The detail information shows the times and/or conditions that determine the duration of the retention period.
1.10 Automated decision-making
In no case, in relation to the following treatments, the contals carry out treatments that consist of automated decision-making processes on the data of individuals.
1.11 Privacy policy changes
The applicable law and activities may change over time. In the face of these occurrences, holders of the treatment of personal data will adjust this privacy notice. If these changes involve further and different data processing, it will be given notice or, where required by law, a request for consent, before implementing such changes.
1.12 Specific information
In the next paragraphs, supplementing the general information above, we provide details of the individual treatments carried out by the conts in line with the requirements of Articles. 12, 13, 14 of GDPR.
|
For those who want to continue browsing |
Cookie policy |
|
For those who contact The Contins through online forms |
Online form policy |
|
For Customers or Potential Customers |
Customer Information |
|
For Suppliers or Potential Suppliers |
Suppliers Statement |
|
For those who have access to the headquarters of the Conholding Companies |
Visitors Information |
|
For those who intend to work with one of the Contal Companies |
Disclosure for those who submit their resumes |
|
For those who make complaints |
Complaint Management Statement |
|
For mail recipients |
Disclosure to those who receive mail from one of the Conholding Companies |
2. COOKIES INFORMATION FOR SITE NAVIGATION
This information is made to individuals who access and consult one of the websites of the Contact companies of the treatment (below the Website), pursuant to art. 13 of the GDPR and, more generally, in relation to the provisions of Italian and European legislation on the protection of personal data.
2.1 Purpose of treatment
The computer systems and software procedures in charge of the operation of the Site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected to be associated with identified stakeholders, but which by its very nature could, through elaborations and associations with data held by third parties, allow to identify users. This data category includes the IP addresses or domain names from which site visitors connect, the Uniform Resource Identifier (URI) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server and other parameters related to the operating system and the user’s computer environment.
This data is used for the sole purpose of
- obtain statistical and totally anonymous information about the use of the site
- verify that it is working correctly
The scanned data is deleted as follows. It should be noted in any case that in full compliance with the regulations, the data could be used to ascertain liability in case of hypothetical cybercrime against the Site.
2.2 Legal basis for treatment
- The use of technical cookies is a treatment carried out in the legitimate interest of the Contons, who want to offer an online service that lives up to the expectations of visitors
- The use of analytical cookies is carried out only in the face of the consent of the person concerned.
2.3 Types of Cookies
Cookies are information entered on the user’s browser when visiting a website or using a social network with their PC, smartphone or tablet. Each cookie contains different data such as the name of the server it came from, a numeric identifier, etc. Cookies can remain in the system for the duration of a session (i.e. until you close the browser used for web browsing) or for long periods and may contain a unique identification code.
- Technical cookies
Some cookies are used to perform computer authentications, session monitoring and storage of specific information about users accessing a web page. These cookies, so-called technicians, are often useful, because they can make browsing and use of the web faster and faster, because for example they intervene to facilitate certain procedures (e.g. authentication to restricted access areas or recognition language used). A particular type of cookie, called analytics, is then used by website managers to collect information, in aggregate, about the number of users and how they visit the site itself, and then process general statistics about the service and the use it.
- Profiling cookies
Other cookies can instead be used to monitor and profile users during browsing, study their movements and habits of web consultation or consumption (what they buy, what they read, etc.), also for the purpose of sending advertisements of services targeted and personalized (c.d. Behavioural Advertising). Let’s talk about profiling cookies in this case. It can happen that a web page contains cookies from other sites and content in various elements hosted on the page itself, such as banner advertisements, images, videos, etc. These are so-called third-party cookies, which are usually used for profiling purposes. Given the particular invasiveness that profiling cookies (especially third-party cookies) can have within users’ privacy, European and Italian regulations state that the user should be adequately informed about the use consent to the inclusion of cookies on itsterminal.
2.4 Cookies used by Conholders
The Site uses cookies to make the site services simpler and more efficient for the user who visits and consults the pages. Users who access the Site will receive minimal amounts of information on their device, be it a computer or other mobile device, in the form of small text files, the so-called “cookies”, stored in the directories used by your browser.
The cookies used by the Site allow you to:
- store your browsing preferences,
- avoid re-entering the same information multiple times,
- analyze the use of the services and content provided by the site to optimize its browsing experience.
The Site may send Third Party cookies belonging to the following types:
- Cookie Analytics: These cookies are used to collect and analyze aggregated and anonymous information for analysisofaccesses and visits to the websites of Balconi S.p.A. in order to improve the performance and design of the same.
The Site uses Google Analytics. If applicable, the information generated by the site usage cookie is transmitted to Google Inc. and deposited with its servers in order to produce reports on the site’s activities, intended for the Conttors or those in charge of it. You can opt out of providing browsing data by selecting the appropriate setting on your browser. In this regard, please refer to the information posted on the Google https://www.google.it/intl/it/policies/privacy/ website and the additional browser component for disabling Google Analytics https://tools.google.com/dlpage/gaoptout?hl=it
- Google Maps cookies: to view the published map on the contact page.
2.5 Withdrawal of consent
With regard to art. 7 of GDPR, the person can withdraw the consent at any time. The withdrawal of consent will block the use of analytical cookies without compromising navigation. In any case, the person can leave the site at any time.
2.6 Reject data delivery
You may refuse to give your browsing data. To do this, you must disable cookies by following the instructions provided by your browser. Disabling cookies can make browsing and enjoying the features of the Site worse. It should be noted that
- Rejecting data may prevent you from using all the features of the site
- On the contrary, by accepting the use of cookies as described above and continuing the navigation, the user lends free and unconditional consent to the treatment of personal data by the Conttors and Google with the modalities and for the purposes above Indicated.
- If the visitor clicks on the icons of Facebook, Twitter, Youtube, Instagram etc. possibly present on the Site, it is directed to the respective sites and receives from these cookies that are not under the control of the Contitolaris.
- Finally, if the user arrives on the Site after clicking on a banner posted on external pages, he should know that the operator of the advertising network has assigned cookies necessary to detect the throughput and the amount of any purchases made. The responsibility for the management of these cookies lies with the operator of the advertising network whose information is normally available on its institutional website.
3. CONTACT FORMS POLICY
This information is made to individuals who fill out the form on the Websites operated by the Companies Of Treatment under Articles. It is not the first time that the European Parliament has been involved in this debate.
3.1 Data source
The data is granted spontaneously by the person concerned through the compilation of the proposed form(s) from the websites of the Conholding Companies.
3.2 Data category
The data processed is only common personal data: first name, last name, e-mail address, etc. strictly necessary for the pursuit of the purposes described below.
3.3 Purpose of treatment
The personal data of the individuals who fill out the online form is processed to fulfill the requests of the person concerned.
3.4 Legal basis for treatment
The personal data of the individuals who fill out the online forms are legally processed on the basis of the consent expressed by the person concerned by entering and forwarding the necessary information to the authorized staff to follow up the communication.
3.5 Data retention
The owners of the treatment retain and process personal data for the time it takes to fulfil the stated purposes and in any case deleted no more than 24 months after their bestowal.
3.6 Withdrawal of consent
With regard to art. 7 of GDPR, the person concerned may withdraw consent at any time, resulting in the interruption of any further form of treatment, including mere preservation in the absence of further constraints on the Contals.
Reject data delivery
You may refuse to give your personal data as the award is optional. However, filling in the fields indicated is essential in order to be able to fulfill the requests received and the non-conference will not allow to provide the desired feedback.
4. INFORMATIVE TO CUSTOMERS’ CONTACT PERSONS
This information is made to individuals operating in the name and on behalf of legal entities Customers of one or more of the Conholding Companies, under Articles. It is not the first time that the European Parliament has been involved in this debate.
4.1 Data source
The personal data processed is provided by the person concerned during:
- visits to the locations of the Contons;
- requests for information, including by e-mail;
- agreements, contracts and/or reports prior to the signing of the above.
4.2 Data category
The data processed is only common personal data: first name, last name, phone number, e-mail address, etc.
4.3 Purpose of treatment
The personal data of those affected is collected, stored and stored and used for the following purposes:
- organisational management and contractual performance-related fulfillments;
- performing agreed benefits;
- negotiation management and pre-contractual relations;
- forwarding of various communications concerning the products and services proposed by the Treatment Tenants.
4.4 Legal basis
The legal basis is the execution of a contract of which the person is a part or the execution of pre-contractual aspects provided at the request of the person concerned.
Some processing operations are carried out in the legitimate interest of the Holders (promotion of their business activities).
4.5 Data retention
The controller of the treatment retains personal data for as long as it takes to fulfil the above purposes. Subsequently, personal data will be retained (and not further processed) for the time set by the existing civil and tax provisions: usually ten years, except litigation or ongoing legal action.
4.6 Withdrawal of consent
With regard to art. 7 of GDPR, the person may withdraw any consent at any time. However, the treatment covered by this policy is permissible and permitted, even in the absence of consent, as it is necessary to carry out a contract of which the person is a member and/or to the fulfillment of his requests.
4.7 Reject data delivery
The provision of the identification and contact details of those concerned is not mandatory. However, the provision of personal data is appropriate for the proper and efficient management of the contractual relationship. Therefore, their failure to deliver may jeopardize all or part of the fulfillment of other requests and the quality and efficiency of the performance.
5. INFORMATION TO SUPPLIERS
This policy is made to individuals operating in the name and on behalf of the suppliers of the Contitolari companies. Under Articles. It is not the first time that the European Parliament has been involved in this debate.
5.1 Data source
The personal data processed is those provided by the person concerned during:
- visits or phone calls;
- direct contacts for participation in trade fairs, exhibitions, etc.;
- business proposals and/or offers;
- data entry via the website;
- transactions after the order.
5.2 Data category
The data processed is only common personal data (first name, last name, phone number, e-mail address, etc.) necessary for the pursuit of the purposes described below.
5.3 Purpose of treatment
Personal data is processed for the execution of pre-contractual activities, the drafting and signing of the contract that governs the supply and proper performance of all the activities provided by the contract.
In particular, personal data is processed for the following purposes:
- forward communications of various kinds and with different means of communication (phone, mobile phone, sms, email, fax, paper mail);
- make requests or fulfill requests and proposals received;
- exchange information aimed at the execution of the contractual relationship, including pre- and post-contractual activities.
5.4 Legal basis for treatment
The data collected for the purposes indicated are treated legally for the execution of a contract of which the person is a part or the execution of the relevant pre-contractual aspects.
5.5 Data retention
The controller of the treatment retains and treats personal data for as long as it takes to fulfil the stated purposes. Subsequently, personal data will be stored (and not further processed) for the time set by the existing civil and tax provisions: usually ten years, except litigation or ongoing legal action.
5.6 Withdrawal of consent
With regard to art. 7 of GDPR, the person may withdraw any consent at any time. It is clear, however, that the treatments covered by this policy are lawful and permitted even in the absence of consent, as they are intended to carry out a contract of which the Person is a part.
5.7 Reject data delivery
You may refuse to give your personal information. However, the provision of personal data is necessary for the proper and efficient management of the contractual relationship. Therefore, any refusal to award may jeopardise all or part of the contractual relationship itself.
6. INFORMATION TO VISITORS
This information is made to those who access (or wish to access) the premises where the Owners carry out their activities under Articles. It is not the first time that the European Parliament has been involved in this debate.
6.1 Data source
The personal data processed is conferred by the Interested to the staff or employees authorized by the Contons.
6.2 Data category
The data processed is only common personal data (first name, last name, phone number, e-mail address, etc.) necessary for the pursuit of the purposes described below.
6.3 Purpose of treatment
Personal data is collected, stored, and stored for the security purposes of staff, guests and corporate resources in general.
6.4 Legal basis for treatment
The data collected for the achievement of the stated purposes are treated in the legitimate interest of the Contons who want to ensure maximum security for employees, employees, guests and in general for the company’s assets.
6.5 Data retention
The Controller of the treatment retains and treats personal data for one year after the award.
6.6 Withdrawal of consent
With regard to art. 7 of GDPR, the person may withdraw any consent at any time. It is pointed out, however, that, if not otherwise specified, the treatment covered by this policy is lawful and permitted even in the absence of consent, as it finds its legal basis in the legitimate interest of the Owner.
6.7 Reject data delivery
The provision of personal data is optional. However, it is clear that any refusal to provide the data would make it impossible to proceed with the authorization for access to the desired location.
7. INFORMATION FOR THOSE WHO SEND THE CURRICULUM VITAE
This information is made to those who spontaneously, or following a search for staff, send their resume to one or more of the Companies Conholding the Treatment, under Articles. It is not the first time that the European Parliament has been involved in this debate.
7.1 Data source
The personal data processed is those provided during:
- submitting the resume;
- assessment interviews;
- direct contacts at exhibitions, fairs, exhibitions, etc.;
- third-party reporting
7.2 Data category
The data processed are
- personal data (first name, last name, date of birth, phone number, e-mail address, etc.)
- personal data related to the training and professional path
- personal data particular ex art. 9 of GDPR, with particular reference to information relating to the health of the person concerned, such as whether they belong to protected categories.
7.3 Purpose of treatment
The personal data of those who spontaneously, or following a search of staff or other reporting, submit their resume are processed for the purposes related to the evaluation and recruitment, that is, to propose job offers consistent with the professional profile of the person concerned.
7.4 Legal basis for treatment
The legal basis is the consent of the person concerned to submit the submission of his CV. Similarly, the handling of any particular data, with particular reference to information relevant to the candidate’s health status, is based on the consent of the person explicitly expressed at the time of sending his data or at the first meeting with the contacts of the contacted Conpropriet.
7.5 Data retention
The controller of the treatment retains personal data for as long as it takes to fulfil the stated purposes. In particular, in the event of non-intake all data will be retained for a period of no more than 24 months after receiving it. In the case of recruitment, the data will be kept for the duration of the employment relationship and in accordance with the relevant regulations.
7.6 Withdrawal of consent
With regard to art. 7 of GDPR, the person may withdraw any consent at any time. The withdrawal of consent will result in the immediate termination of treatment, including the mere preservation of additional reasons (e.g. regulatory constraints) that will lead to the protracted period of preservation
7.7 Reject data delivery
You may refuse to give your personal information. The provision of the data is optional, but any refusal, either completely or partially, may result in the inability to evaluate and select the application.
8. CLAIMS MANAGEMENT POLICY
This information is made to individuals who make complaints about products and services provided by the Holders of the treatment under art. 13 of the GDPR and, more generally, in relation to the provisions of Italian and European legislation on the protection of personal data.
8.1 Data source
The data is communicated spontaneously by the person through the forwarding of a communication to the e-mail addresses specially arranged by the Contons and through any subsequent communications.
8.2 Data category
The data processed is only common personal data: first name, last name, e-mail address, etc. strictly necessary for the pursuit of the purposes described below.
8.3 Purpose of treatment
The personal data of people who make complaints is processed for
- Properly handle the complaint by providing the person with all the necessary guidance
- Track the complaint you received and your feedback
8.4 Legal basis for treatment
The personal data of individuals who make a complaint is legitimately processed to allow the Holders to follow up on a request of the person concerned and subsequently retained in the interest of the Contals to ensure the continual improvement of the quality of the products and services offered and always be in a position to demonstrate the correct handling of the complaint and/or handle any litigation between the parties.
8.5 Data retention
The Owners of the treatment retain and process personal data for as long as it takes to fulfil the stated purposes and in any case no later than 5 years after receiving the complaint except ongoing litigation.
8.6 Withdrawal of consent
With regard to art. 7 of GDPR, the person concerned can withdraw consent at any time without compromising the legality of the treatment which is based on another legal precondition.
Reject data delivery
The provision of data is to be considered optional but the availability of information is essential to the Holders for the correct handling of the complaint. Failure to provide it would not allow the appropriate investigations to be initiated and to give feedback to the person concerned.
9. DISCLOSURE FOR E-MAIL RECIPIENTS
The content of the e-mails is to be considered confidential. Therefore, the information contained in them or any attachments is reserved only for recipients. People or individuals other than recipients are not allowed to read, copy, edit, spread the message to third parties. If the communication is received in error, the recipient is asked not to use and/or disclose it, but to delete it and to notify the sender of the error. The authenticity of the sender and the contents are not guaranteed, except for digitally signed documents. In addition, under art. 13 of gdpR, we inform that our records include e-mail addresses relating to individuals, companies, entities with whom previous e-mail communications have occurred, or with other media, or who have spontaneously provided their e-mail address at the time of direct contact. These addresses are used by us in accordance with the will and willingness of those concerned to receive e-mail communications from our company. We also inform you that all domain mailboxes
are company boxes and, as such, are used for communication in the workplace. Therefore, for operational and internal organization-related needs, any message, both outbound and inbound, may be read by individuals other than the sender and/or recipient.
If those concerned wish that their e-mail address should be removed from our archive, they can follow the guidance in the procedure for exercising the rights of those concerned.
