Privacy policy for website users

Art. 13 – GDPR (EU/2016/679)

Dear user, pursuant to Article 13 of EU Regulation 679/2016 on the protection of personal data (GDPR), we inform you that the data you provide may be processed in accordance with the following.

Data controller

The Data Controller is Astalegale.net S.p.A., VAT Code 11761551008, with registered office and administrative offices in Carate Brianza (MB) - 20841, Piazza Risorgimento 1, available at the email address info@astalegale.net or telephone number 0362.90761.

Data Protection Officer (DPO)

The Data Controller has appointed as Data Protection Officer, the company RP Advisor S.r.l., VAT Code 09694750960, with registered office in Mariano Comense (CO) - 22066, Via Padre Masciadri 2H, telephone: 031 2250748, email: dpo@astalegale.net

Processing

Dear user, through this website, the personal data belonging to the following categories will be acquired:

1. "Contact Us"

Page data submitted through the contact form will be processed as follows:

PURPOSES To process requests.
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally, explicitly and voluntarily sent personal data through the contact forms on the site. This involves the acquisition of the sender's contact data, which is necessary to respond, as well as all personal data included in the communications.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary to fulfill the request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

2. "Work with us" page

Data sent via the email address designated for receiving job applications will be processed as follows:

PURPOSES Evaluation of the candidate for possible employment in an employee-employer or similar relationship.
Retention for possible future employment even if not in an employee-employer relationship (e.g. project-based contracts, etc.).
Verification of the accuracy of the data provided, including through the use of external companies.
LEGAL BASIS Art. 6, paragraph 1, letter b) of the GDPR: processing is necessary for the execution of pre-contractual provisions undertaken at the request of the data subject.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary for the evaluation of the application and management of the recruitment process, and in any case for a period not exceeding 12 months.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

3. "Login/Register" Section - User Private Area

The data entered within the user Private Area login/registration form will be processed as follows:

PURPOSES Access to the Reserved Area and management of the personal account of the Reserved Area.
Creation of personal account for access to the Reserved Area.
Management of searches and user preferences
Possible participation in securities tenders
Subscription to receive announcement messages compatible with your searches.
Registration to receive information and commercial material from Astalegale.net services.
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally and explicitly created a personal user account.
Art. 6, paragraph 1, letter a) of the GDPR: the user has explicitly and voluntarily requested to receive notices similar to their searches.
Art. 6, paragraph 1, letter a) of the GDPR: the user has given their consent to receive informative and commercial material regarding the services of Astalegale.net.
DATA RETENTION PERIOD The provided data will be retained:
Until the request for the deletion of the personal account.
Until the request for the deactivation of the service of receiving personalized notices.
Until the request for the deactivation of the service of receiving informative and commercial material about the services of Astalegale.net.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to the processing under the authority of the data controller.
Data processors designated by the data controller.
Subjects to whom access to the data is granted by provisions of law, regulations or EU legislation.
Persons managing the real estate sale.

4. "Activation code request form"

The data sent through the respective form to request the activation code for the first access to the "Enforcement Management" private area will be processed as follows:

PURPOSES To issue the activation code for access to the "Enforcement Management" private area of Astalegale.net.
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally, explicitly and voluntarily submitted personal data for the creation of their account.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary to fulfill the request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

5. Sending the "publication request form" by email

Data entered within the respective form and sent via the email address will be processed as follows:

PURPOSES To process the request for publication.
LEGAL BASIS Art. 6, paragraph 1, letter b) of the GDPR: the processing is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual provisions.
DATA RETENTION PERIOD The data provided will be retained for the duration of the contract between the parties and also thereafter for compliance as provided by law.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

6. “Advertising Request and Auction Room Booking” Section

Data entered in the access form to the "Executions Management Software" for professionals will be processed as follows:

PURPOSE To access the reserved "Executions Management" area aimed at preparing online advertisements, activating online tenders and booking the Auction Room.
LEGAL BASIS Art. 6, paragraph 1, letter b) of the GDPR: the processing is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual provisions.
DATA RETENTION PERIOD The data you provide will be kept until you request the deletion of your personal account.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to the processing under the authority of the data controller.
Data processors designated by the data controller.
Subjects to whom access to the data is granted by provisions of law, regulations or EU legislation.
Other subjects regularly registered within the private area of the portal.

7. "Contact Email Addresses"

Data sent via the contact addresses given on the website will be processed as follows:

PURPOSES To process requests and provide assistance
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally, explicitly and voluntarily sent personal data through the contact information on the site. This involves the acquisition of the sender's contact data, which is necessary to respond, as well as all personal data included in the communications.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary to fulfill the request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

8. "Exercise of the Rights of Data Subjects" page

The data entered within the area dedicated to the exercise of the rights of data subjects and sent to the respective email address will be processed as follows:

PURPOSES To follow up on the request regarding the exercise of a right under Art. 15 - 22 of the GDPR.
LEGAL BASIS Art. 6, paragraph 1, letter c) of the GDPR: the processing is necessary to fulfill a legal obligation to which the data controller is subject.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary for the fulfillment of your request and also thereafter for the demonstration of proper fulfillment.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data Processors designated by the data controller.

Any designated data processors will be bound to data confidentiality and security through a contract. The updated list of data processors can always be requested from the data controller.

Rights of the data subject

In order to assert one's rights, as provided for in Article 15 and following of the GDPR, one may contact the Data Controller or Data Protection Officer, which can be contacted via the contact details above, identifying oneself and specifying the nature of the request or issue being communicated. You may exercise the following rights regarding your data: access, correction, deletion, restriction of processing and opposition to processing. For processing that is subject to consent, data subjects have the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal. The exercise of some of the rights mentioned may restrict Astalegale.net in the processing of the requested data which is indispensable for the management of the relationship, resulting in its inability to provide the service.

You can exercise your rights by filling out the online form.

Data transfer to third countries

Data processing will take place exclusively within the European Union.

Right to lodge a complaint

If you believe that the processing of the data provided violates the legislation on the protection of personal data, you have the right to lodge a complaint to the supervisory authority: Privacy Guarantor, headquartered in Rome - 00186, Piazza Venezia 11, tel. 06.696771, mail: protocollo@gpdp.it

Automated decision-making processes

No use of automated decision-making or profiling according to Art. 22(1)-(4) of the GDPR is performed or envisioned.