PRIVACY POLICY – WEB GENERAL - Information Notice pursuant to art. 44 of Data Protection Act UK and UK GDPR
According to Data Protection Act UK and UK GDPR, we provide you the due information concerning the processing of collected personal data. This notice is not to be considered valid for other websites attainable trough links and data processor shall not be held responsible for third parties’ web pages.
This notice is provided pursuant to art. 44 of the Data Protection Act UK.
Personal data we may collect and process
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity.
Navigation data: IP addresses, domain name, URI/URL addresses, time and methot of the request, response code from server and a few information regarding the useragent (OS version, resolution, devise type).
Voluntarily provided data: The optional, explicit and voluntary transmission of messages to contact addresses or forms, entails the subsequent acquisition of sender's address; the latter, along with any other personal information provided, will be necessary for us to reply.
Social media: For more information regarding the processing of personal data carried out by any Social Media platforms deployed on this website, please refer to their respective privacy policies. The Data Controller processes the personal data through the pages of the dedicated Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.
Specific privacy statement may be furnished with regards to specific processings or services offered by the website.
COOKIES: More information available in the specific statement; please click here
DATA CONTROLLER is ATLANTE UK LTD – Lynton House, 7/12 Travistock Square – London WC1H 9LT, UK, in person of its Legal Representative. Contact detail: privacy@atlante.co.uk
PURPOSES AND LAWFULNESS OF PROCESSING
| PURPOSE OF PROCESSING |
LEGAL BASIS |
DATA RETENTION |
DATA CONFERRAL |
| A) |
Website browsing
Activities strictly related to site operations and to platform browsing service provision. The data required to avail yourself of this website, will be processed as well in order to:
- Gather statistical information (most viewed pages, number of visitors, timeline visits, geographical source of visit)
- Monitor the status of services
|
Legitimate interest | Data subject rights
Art. 6 lett. f) UK GDPR:
the processing is necessary for pursuing the legitimate interest of data controller or third parties’
|
Single browsing session and up to 7 days after (except from any requests by the Judicial Authority for crime prevention needs)
|
Necessary in order to guarantee the navigation
|
| B) |
Website Analytics
By means of cookies and similar technologies
More information available in the cookie policy
|
Cookies other than technical ones (or similar) require users’ consent in order to be deployed (art. 6.a GDPR) Whether required, the consent will be requested by means of our cookie policy and its banner
|
More information available in the cookie policy
|
More information available in the cookie policy
|
| C) |
Contact or information request
By means of phone calls, contact forms, Whatsapp
|
Legitimate interest | Data subject rights
Art. 6 lett. f) UK GDPR:
the processing is necessary for pursuing the legitimate interest of data controller or third parties’
|
1 year
|
Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms
|
| D) |
Direct marketing;
For promotional communication, newsletters and/or invitation to events promoted or organized by the Data Controller, by e-mail, SMS, MMS, phone call also without operator, mail, or other communication tool.
Data won’t be disclosed to third parties
The data controller shall make use of reporting systems in order to gather a few more information relating to his service (e.g. number of readers and unique clicks, devices information when opening our communication, single users activity on website.
In order to compare and possibly improve the results of automated communications, the Data Controller does make use of reports. Thanks to reports, the controller will be able to discover, in eg.: the number of readers, of openings and unique "clickers"; the device and the operating systems requesting contents; details on the activity of individual users; the detail of sent, delivered or forwarded E-Mails.
|
Consent
Art 6.1.a) UK GDPR:
the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
|
Until consent withdrawal (opt-out)
|
Optional: in case of denial the data controller won’t be able to send you promotional communication
|
| E) |
Staff recruiting
research and selection of personnel for the purpose of establishing an employment relationship, also for any positions different from those for which the data subject is a candidate; storage of personal data also for future selections; managing applications in response to job vacancies posted on our website; interviews and any video-interviews (data processing including image / audio).
|
Contract
Art. 6(1)(b) UK GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
|
Up to 24 months
|
Necessary: The provision of personal data is mandatory where mandatory and in case of lack the Data Controller will not be able to consider your candidacy
|
| F) |
Management of data subjects’ requests pursuant to art. 15 and following (GDPR)
|
Legal obligation
Art. 6.1.c) UK GDPR
processing is necessary for compliance with a legal obligation the controller is subject to;
|
5 years after its closure, except from controversy
|
Necessary: The provision of personal data is mandatory in order to execute legal obligations
|
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data provided by you may be communicated to recipients who will act as Processors (art. 28 of the UK GDPR) and/or persons acting under the authority of the Controller and the Processor (art.29 UK GDPR) for the purposes pointed ahead. Precisely, your data may be disclosed to recipients being part of the following categories:
- Subjects providing services for the management of the information system used by ATLANTE UK LTD and telecommunication networks:
- Studies or companies in the context of assistance and consultancy relationships;
- Subjects providing services related to the management of the above-mentioned purposes (communication, brochure printing, fliers, websites, videos);
- Head-hunters agencies
- Commercial partners, upon consent;
- Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;
You can request a complete listing of processors writing to the abovementioned addresses.
DATA TRANSFER TO A THIRD COUNTRY AND/OR TO INTERNATIONAL ORGANISATION
Your personal data will be disclosed to the EEA, subject to the limits and conditions by an adequacy decision set forth both by the UK Government and the European Commission.
AUTOMATED-MEAN PROCESSINGS
Personal data will be subjected to traditional and manual, electronic or automated processing. Fully automated decision-making processes are not carried out.
DATA SUBJECT’S RIGHTS
You are entitled to exercise the right granted to you by art. 93 and seq. of UK Data Protection Act contacting the Data Controller. You have the right to be informed, to access you data, not to be subject to an automated decisione-making, to rectify and erasure your data. You have the right for data portability and in this case you have the right to get your personal data from an organisation in a way that is accessible and machine-readable. In accordance with Data Protection Laws and in addition to the aforementioned rights, you are entitled to lodge a complaint to the Information Commission Officer. Without prejudice to any other administrative or judicial remedy, in case you consider the processing conflicting with Reg. UE 2016/679 you have the right to lodge a complaint with a supervisory authority (www.ico.org.uk).
Informative amendments: The Data controller retains the right to modify, update, add or remove some parts of this informative at any time.
Date of review: 12/12/2023
