This “Privacy Policy” has been prepared by SIRA S.p.A., with headquarters at Via della Resistenza, 53, 20090, Buccinasco (MI), hereinafter referred to as “the Company and/or the Data Controller,” pursuant to Articles 13 and 14 of European Regulation No. 679 of 2016 (“GDPR”), in order to describe how the website www.sira-spa.com (the“Website”) and the services made available through the Website (the“Services”) with regard to the processing of personal data of users who visit the Website and/or use the Services (the“Users”). This privacy policy applies only to this Website and not to any other websites that the User may visit via links.

1. COLLECTION OF PERSONAL DATA AND PURPOSES

1.1 Registration on the Website

Users are free to browse the Site without having to register in advance; however, users are encouraged to review the security policies established by the Site Owner in the designated section (“Cookie Policy”).
To use the Services made available to Users, they are required to register in a specific section of the Website (“Contact Us” or “Careers”), or to send an email to one of the company contacts listed on the Website.
By consenting to the use of their personal data, the user authorizes the Company to respond to inquiries in the event that a resume is submitted and/or to send new commercial offers in the cases provided for by Directive 2002/58/EC, and to receive communications, including via email, at the email address provided by the user.

2. VOLUNTARY PROVISION OF DATA

The provision of the personal data described above is optional; however, failure to provide such data may make it impossible for the Company to respond to Users’ requests.

3. METHODS OF PROCESSING

3.1 Data Retention Period

Personal data is also processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected and, in any case, in accordance with the principles of lawfulness, fairness, data minimization, and relevance set forth in current privacy laws.

3.2 Data Storage and Access Procedures

In its capacity as Data Controller, the company has appointed “Personal Data Processors” or “Authorized Persons for the Processing of Personal Data” (“Processors”)—that is, the personnel specifically designated for the collection, recording, and, more generally, the processing of such data. The data is, therefore, processed exclusively by personnel—including technical staff—designated to handle the data, or by individuals responsible for maintenance and/or updating/improving the Website itself, in accordance with the principles of fairness, lawfulness, transparency, relevance, and proportionality with respect to the purposes of collection and subsequent processing.
The database is accessible only to authorized individuals through methods that ensure its protection and confidentiality, thanks to the implementation of security measures designed to prevent data loss, unlawful and/or improper use, and unauthorized access.

3.3 Treatment in General

The Data Controller uses Users’ data in accordance with the choices the User has freely made by giving consent, either at the time of collection or subsequently, as well as to comply with obligations set forth by law, regulations, or EU directives.

3.4 Data Processing Operations Subject to Consent, Disclosure, and Distribution of Data

In order to fully carry out the activities requested by Users, the Company may disclose the data provided by Users to third parties—external data processors—who are responsible for performing specific tasks, such as, but not limited to, fulfilling the User’s specific requests.

User data will never be disclosed.

3.5 Links to External Content

The Site may link to or direct users to other websites, services, social networks, or external content that are beyond the Company’s control. Once the User has left the Site, the Company cannot guarantee the security of the User’s personal data and cannot be held responsible for the protection and privacy of any personal data that the User may have provided on other sites.

4. DATA CONTROLLER

The data controller is Sira S.p.A., with its registered office at Via della Resistenza, 53, 20090, Buccinasco (MI).
For any requests, information, clarifications, or questions regarding the processing of your personal data, please submit a written request to the following email address: privacy@sira-spa.com

5. USER RIGHTS

In accordance with the provisions of Articles Under Articles 15 through 22 of the GDPR, the user may:
a) request confirmation of the accuracy of their personal data;
b) obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and, where possible, the retention period;
c) obtain the rectification and erasure of the data;
d) to obtain restriction of processing;
e) to object to the processing at any time.
f) to withdraw consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal;
g) to lodge a complaint with the supervisory authority

6. CHANGES TO THIS PRIVACY POLICY

Provided that the Data Controller does not carry out any processing operations other than those expressly authorized and/or requested by each User, this privacy policy may be subject to changes to comply with new legal provisions or changes in data processing policies.
Any updated version of this Privacy Policy will be made available on the Website in the dedicated section; the Data Controller therefore encourages all Users to check the Website periodically to stay informed about the latest version posted.