This document concerns the privacy policies on personal data processed by Zorzi S.r.l., with registered office in Verona (VR), Via Lussemburgo 22/24 (hereinafter Data controller or Zorzi) who, through the Venti e 30 S.a.S. company of Reggio Emilia manages the website:

https://www.zorzi.co

The text describes, in accordance with the applicable law on data protection – Reg EU 2016/679 -GDPR-, the methods for managing the processing of personal data of users and visitors of our sites as well as the processing of personal data carried out by the Data controller that you can contact using the following e-mail address: info@zorzi.co.

The information given here is not valid for other websites that may be consulted through our links, for which the data controller is in no way responsible. The Data Controller adopts the following information as required by Article 12 GDPR as a measure to provide to the data subject with the information referred to in Article 13 of the GDPR and the communications referred to in Articles from 15 to 22 and 34 GDPR related to the processing of data provided, this information is intended as general, provided to all those who interact with the site, accessible by electronic means and corresponding to the homepage of the official site.

Information on data processing. The Data Controller informs the third party that the Personal Data provided by contacting the Data Controller, data not included in the particular categories of personal data as listed in art. 9 GDPR, concerning himself (also in the hypothesis of subject operating as an individual enterprise, small entrepreneur, professional) or its employees, agents, representatives or collaborators (the “Data”), will be treated under the rule of GDPR. The processing is carried out according to the conditions of lawfulness provided for in Article 6 of the GDPR, for the purposes inherent to the relationship established with the Data Controller, therefore, its legal basis as required under Article 13 letter. c) GDPR finds justification in the reasons for which the relationship with the Data controller is established and in this case in relation to navigation on this Site and / or the compilation of the contact form, therefore the data will be acquired and processed following his visit to https://www.zorzi.co and the relative pages visited starting from the home page address or after sending the data by the form on the contact web page. The data processing provided by the Data Controller will include: management, organization, use, storage, database creation, processing throughout the EU and non-EU territory (countries included in the cases ex art 45 and 46 GDPR) the performance of statistics, sending of our newsletter from which you can still unsubscribe both at the first reception and at any later time, communication to the partners with whom the initiatives will be developed – subjects who will be appointed data processor pursuant to art. 28 GDPR if personal data are communicated to them. However, we would like to remind you that the processing carried out is always and only in favor of the user without aggressive marketing purposes and with the possibility even afterwards not to join the proposed initiative. The processing will also include the deletion and modification of the data processed as a result of reporting by the interested party, consultation, communication of our future initiatives, processing, soft spam by e-mail and soft marketing, or monthly newsletter, the production of statistics, the sending of promotional material as well as the use to promote conferences and meetings. Please also note that the processing of data related to the web services offered by this site physically hosted at hosting companies whose name will be communicated upon request, all these process are made and maintained only by employees, collaborators, authorized third parties in the case of occasional operations of maintenance or by our manager. Data will be processed in paper and / or electronic form by persons specifically authorized for processing. The provision of data is optional. Some browsing data (on the point see our cookies policy) are instead acquired automatically by the system and therefore it is understood that by continuing to browse and not disabling cookies, the consent will be deemed in any case pursuant to art. 4 paragraph 11 GDPR. The Controller does not process any treatment based on automated decision-making processes. The data will be kept for a maximum of 5 years and in any case for the time necessary to satisfy the purpose of the collection.

Rights of the Data Subject. The Data Controller also declares that the rights to rectification pursuant to Article 16 GDPR are guaranteed, the right to be forgotten pursuant to Article 17 of the GDPR, the right to limit the restriction of processing pursuant to Article 18 of the GDPR and the right of access to the personal data supplied and to all consequential information for as listed sub art. 15 GDPR. Data subject are also entitled to:

Ask the data controller to access personal data and to rectify or delete them or restrict their processing or

To oppose their treatment;

data portability due to the art 20 GDPR;

Where the processing is based on Article 6 (1) (a) or Article 9 (2) (a) to withdraw consent at any time without prejudice to the lawfulness of the treatment based on consent given prior to revocation;

the right to lodge a complaint with a supervisory authority;

To exercise the rights listed above or to get more information, simply send an e-mail to the following e-mail address: info@zorzi.co indicating in the object: “exercise of rights by GDPR” and inserting in the body of the email the right that you want to exercise, as well as name, surname and email address where you want to receive the answer from Zorzi. Once the Data Controller has processed what received will send its reply in the terms indicated in Article 12 of the GDPR. The data Controller in particular situations adopts specific information accompanied by the relative consent to be conferred in order to allow the processing of data, moreover, the Data Controller advises that if he intends to further process personal data for a different purpose from that for which they were collected, before such further processing, it will provide the data subject with information on this different purpose and any other pertinent information, collecting, in the specific consent case. Please note that sending e-mails from visitors to the site, to the addresses indicated therein for the purposes specified from time to time, involves the acquisition and subsequent processing of the sender’s address and other personal data entered in the letter with the methods and purposes already indicated in the above information. This submission will also involve the knowledge and acceptance of this privacy information note.

Candidate Data. In relation to the data that the user provides or sending, i.e. directly his curriculum vitae (hereinafter only CV) or filling out our application form available directly on the site in the area dedicated to open job positions, we inform you that in our position as Data controller of the processing we will use the data indicated in the form or CV sent to us to verify the correspondence with the ideal candidate we are looking for, we also specify that for this type of treatment the information referred to in Article 13 GDPR will be provided on the first contact following sending the CV. We also inform you that the data marked in the form of acquisition by asterisk will be compulsory for the purpose of taking into consideration your job application in relation to the open position while you are not obliged to provide your further data. However, if it provides data in a partial or incorrect manner it may be impossible for us to evaluate it for the job position required. In order to evaluate employment opportunities, we need to process only some information concerning you that we reasonably need.

In relation to the storage of your data, as described in the WP29 guidelines of 8.6.2017, we inform you that your data collected during the selection phase will be deleted as soon as it becomes clear that no job offer will be sent or this will not be accepted by you. In the case of CV sent spontaneously, regardless of a position open at our company, we inform you that the CV will be kept, if it were of interest to us, for 2 years, otherwise canceled within 6 months of receipt. We also inform all our candidates that the Data Controller will be able to verify the social profile of the aspiring subject in the event that it is strictly personal.

Navigation Data The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

Cookies A cookie is a small text file that is stored by a website on the hard disk of the user’s device, so that the browser uniquely identifies the browser of the browser. Cookies do not damage your computer and do not contain viruses. Cookies have the function to streamline the analysis of traffic on the Web or to signal when a specific site is visited and allow Web applications to send information to individual users. Only the user can decide to manually delete the cookies from their device or provide for automatic deletion when the installed browser is closed.

Copyright All contents of this site are protected by the provisions of law on copyright, intellectual property. Even partial reproduction in any form is forbidden. The Data controller does not grant any license to copyrights, patents or any other intellectual property rights.

Liability The Data Controller assumes no responsibility towards the navigators of the site in relation to the content of what is published (accuracy and completeness of the information provided) or to the use that third parties may make. The material and information on the site are subject, without notice, to changes or updates by the Data Controller.

Application of the law The Data Controller regularly updates this information and complies with the Privacy Policy, adapting it with the new provisions issued. For any questions or concerns regarding the present Privacy Policy, you can contact us at any time by writing to: info@zorzi.co

Complains. We will reply to users who send formal written questions and / or complaints to this e-mail info@zorzi.co to investigate the problem reported. We commit ourselves to cooperate with the competent authorities, to settle any complaints regarding the processing of personal data that are not resolved directly between the Data controller and person.