Privacy policy for website users

Art. 13 – GDPR (EU/2016/679)

Dear user, pursuant to Article 13 of EU Regulation 679/2016 on the protection of personal data (GDPR), we inform you that the data you provide may be processed in accordance with the following.

1. "Contact Us"

Page data submitted through the contact form will be processed as follows:

PURPOSES To process requests.
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally, explicitly and voluntarily sent personal data through the contact forms on the site. This involves the acquisition of the sender's contact data, which is necessary to respond, as well as all personal data included in the communications.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary to fulfill the request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

2. "Work with us" page

Data sent via the email address designated for receiving job applications will be processed as follows:

PURPOSES Evaluation of the candidate for possible employment in an employee-employer or similar relationship.
Retention for possible future employment even if not in an employee-employer relationship (e.g. project-based contracts, etc.).
Verification of the accuracy of the data provided, including through the use of external companies.
LEGAL BASIS Art. 6, paragraph 1, letter b) of the GDPR: processing is necessary for the execution of pre-contractual provisions undertaken at the request of the data subject.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary for the evaluation of the application and management of the recruitment process, and in any case for a period not exceeding 12 months.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

3. "Login/Register" Section - User Private Area

The data entered within the user Private Area login/registration form will be processed as follows:

PURPOSES Access to the Reserved Area and management of the personal account of the Reserved Area.
Creation of personal account for access to the Reserved Area.
Management of searches and user preferences
Possible participation in securities tenders
Subscription to receive announcement messages compatible with your searches.
Registration to receive information and commercial material from Astalegale.net services.
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally and explicitly created a personal user account.
Art. 6, paragraph 1, letter a) of the GDPR: the user has explicitly and voluntarily requested to receive notices similar to their searches.
Art. 6, paragraph 1, letter a) of the GDPR: the user has given their consent to receive informative and commercial material regarding the services of Astalegale.net.
DATA RETENTION PERIOD The provided data will be retained:
Until the request for the deletion of the personal account.
Until the request for the deactivation of the service of receiving personalized notices.
Until the request for the deactivation of the service of receiving informative and commercial material about the services of Astalegale.net.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to the processing under the authority of the data controller.
Data processors designated by the data controller.
Subjects to whom access to the data is granted by provisions of law, regulations or EU legislation.
Persons managing the real estate sale.

4. "Activation code request form"

The data sent through the respective form to request the activation code for the first access to the "Enforcement Management" private area will be processed as follows:

PURPOSES To issue the activation code for access to the "Enforcement Management" private area of Astalegale.net.
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally, explicitly and voluntarily submitted personal data for the creation of their account.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary to fulfill the request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

5. Sending the "publication request form" by email

Data entered within the respective form and sent via the email address will be processed as follows:

PURPOSES To process the request for publication.
LEGAL BASIS Art. 6, paragraph 1, letter b) of the GDPR: the processing is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual provisions.
DATA RETENTION PERIOD The data provided will be retained for the duration of the contract between the parties and also thereafter for compliance as provided by law.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

6. “Advertising Request and Auction Room Booking” Section

Data entered in the access form to the "Executions Management Software" for professionals will be processed as follows:

PURPOSE To access the reserved "Executions Management" area aimed at preparing online advertisements, activating online tenders and booking the Auction Room.
LEGAL BASIS Art. 6, paragraph 1, letter b) of the GDPR: the processing is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual provisions.
DATA RETENTION PERIOD The data you provide will be kept until you request the deletion of your personal account.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to the processing under the authority of the data controller.
Data processors designated by the data controller.
Subjects to whom access to the data is granted by provisions of law, regulations or EU legislation.
Other subjects regularly registered within the private area of the portal.

7. "Contact Email Addresses"

Data sent via the contact addresses given on the website will be processed as follows:

PURPOSES To process requests and provide assistance
LEGAL BASIS Art. 6, paragraph 1, letter a) of the GDPR: the data subject has optionally, explicitly and voluntarily sent personal data through the contact information on the site. This involves the acquisition of the sender's contact data, which is necessary to respond, as well as all personal data included in the communications.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary to fulfill the request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data processors designated by the data controller.

8. "Exercise of the Rights of Data Subjects" page

The data entered within the area dedicated to the exercise of the rights of data subjects and sent to the respective email address will be processed as follows:

PURPOSES To follow up on the request regarding the exercise of a right under Art. 15 - 22 of the GDPR.
LEGAL BASIS Art. 6, paragraph 1, letter c) of the GDPR: the processing is necessary to fulfill a legal obligation to which the data controller is subject.
DATA RETENTION PERIOD The data provided will be retained for as long as necessary for the fulfillment of your request and also thereafter for the demonstration of proper fulfillment.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Subjects assigned to processing under the authority of the data controller.
Data Processors designated by the data controller.

Any designated data processors will be bound to data confidentiality and security through a contract. The updated list of data processors can always be requested from the data controller.