PRIVACY POLICY

Ventisette Digital Communication s.r.l. has adopted company Procedures and Policies in line with the European Union’s General Data Protection Regulation (GDPR – EU Reg. 2016/679), in order to ensure high security standards and rules designed to allow appropriate processing of Personal Data.

Data Protection Officer VENTISETTE DIGITAL COMMUNICATION S.r.l. has appointed a Data Protection Officer pursuant to Article 37 of the GDPR. If you wish to exercise a right, submit a report or receive information about how your data is processed, you can contact the Data Protection Officer. The Data Protection Officer can be reached at the following e-mail address: dpo@ventisettedigital.com

Persons authorised to process data
The Data is processed by resources internal and external to the offices of the Group Companies, duly identified, instructed and operating as personnel authorised to process the Data.

Data retention periods

The data is kept for the time strictly necessary for the purposes of processing.

categories	duration	main regulatory references
applicants	maximum 24 months	Art. 5(e) of EU Reg. 2016/679.
employees and agency workers	10 years	art. 43 of Presidential Decree 600/73; art. 2946 of the Civil Code on ordinary limitation periods; Title I, Chapter III, of Legislative Decree 81/08 as amended.
customers and suppliers, agents, consultants, training course participants, members	5 – 10 years	art. 2948 of the Civil Code, which provides for a 5-year limitation period for periodic payments; art. 2220 of the Civil Code, which requires accounting records to be kept for 10 years; art. 22 of Presidential Decree no. 600 of 29 September 1973.
Website visitors	A. 1 year for requested contacts B. For the duration of the session for all remaining purposes	A. 1 year for commercial contact purposes based on the performance of pre-contractual measures adopted also at the request of the data subject through the contact form on the Ventisette Digital Communication S.r.l. website or through commercial telephone contacts. B. Legitimate interest art. 6(f) and recital 47: processing is necessary for the pursuit of the legitimate interest of the data controller or of third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on their relationship with the data controller. Activities strictly necessary for the operation of the site and for providing the browsing service on the platform.
Prospective customers	1 year for requested contacts	1 year for commercial contact purposes based on the performance of pre-contractual measures adopted also at the request of the data subject through the contact form on the Ventisette Digital Communication S.r.l. website or through commercial telephone contacts.
prospective customers, applicant data, agency workers, customers for marketing purposes, newsletter subscribers	in compliance with the time limits prescribed by law for the type of activity and in any case until consent is withdrawn or until the right to object is exercised	General Provision of 15/05/13; art. 21 of EU Reg. 2016/679.
Contacts at customers and suppliers	For the time necessary to fulfil the contractual purposes	Set for a period not exceeding the achievement of the purposes for which they are collected and processed for the performance and fulfilment of the contractual purposes, pursuant to art. 5(1)(e) of EU Reg. 2016/679.

Privacy Notices

Privacy Notice – CANDIDATES TO BE CONSIDERED FOR THE ESTABLISHMENT OF AN EMPLOYMENT RELATIONSHIP

Privacy Notice – CUSTOMERS

Privacy Notice – CONSULTANTS AND SELF-EMPLOYED PROFESSIONALS, ALSO IN ASSOCIATED FORM

Privacy Notice – SUPPLIERS

Privacy Notice – NEWSLETTER SUBSCRIBERS

Privacy Notice – SOCIAL NETWORK USERS

Privacy Notice – WEBSITE VISITORS

Privacy Notice – POTENTIAL CUSTOMERS

Privacy Notice – CONTACTS AT CLIENT COMPANIES

Privacy Notice – CONTACTS AT SUPPLIER COMPANIES

Privacy Notice – VISITORS