(Articles 13 and 14 of Regulation (EU) 2016/679 – “GDPR”)
Data Controller: CENTRO CARNI COMPANY S.p.A. Registered Office: Via S. Antonio, 80 – 35019 Tombolo (PD) – Italy Tax Code and VAT No.: IT00900670282 Website: www.centrocarnicompany.com1. Purpose of Processing
The Controller informs you that your personal and identifying data (e.g. name, surname, company name, address, telephone number, email, bank and/or payment details, etc.; hereinafter “Personal Data” or “Data”), collected verbally, directly or through third parties, as well as data collected in the future, may be processed in full compliance with the GDPR. The processing is lawful, in particular, for the performance of a contract to which you are a party or for the execution of pre-contractual measures requested by you (Art. 6 GDPR). “Processing” means any operation performed on the Data (collection, recording, organization, storage, consultation, elaboration, modification, selection, retrieval, comparison, use, interconnection, blocking, communication, dissemination, erasure, or destruction).2. Legal Basis and Purposes of Processing
Legal basis: Regulation (EU) 2016/679.
2.A) Purposes Without Consent (Art. 6, letters b), c), e) GDPR)
- Fulfilment of pre-contractual, contractual, and fiscal obligations deriving from existing relationships.
- Compliance with legal obligations, regulations, EU legislation, or orders issued by Authorities (e.g. anti-money laundering).
- Exercise of the Controller’s rights (e.g. right of legal defense).
- General accounting and management purposes (invoicing, document management, etc.).
- Credit management, statistical analysis, quality control, insurance management, technical assistance.
- technical and functional access to the website (no data retained after browser closure);
- enhanced browsing and/or management of personalized content;
- statistics and analysis of user navigation.
2.B) Purposes Requiring Consent (Art. 7 GDPR)
Subject to your specific and explicit consent, the Data may be processed for:- sending (via email, mail, SMS, telephone) newsletters, commercial communications, and advertising material regarding the Controller’s products or services;
- sending (via email, mail, SMS, telephone) commercial/promotional communications from third parties (e.g. business partners).
3. Data Collection for Submission of Curriculum Vitae
Data collection occurs through the form on the website www.centrocarnicompany.com or via transmission (mail, fax, email) of personal and professional information in CV format, such as:- spontaneous application;
- application for specific job postings published on the Controller’s website, other sites, print media, or other channels.
4. Processing Methods
Processing is carried out through the operations referred to in Art. 4, no. 2 GDPR (collection, recording, organization, structuring, storage, adaptation, modification, retrieval, consultation, use, communication, dissemination, comparison/interconnection, restriction, deletion/destruction, blocking). Data are processed using paper and electronic/automated tools, with suitable measures to ensure security and confidentiality.5. Retention Period and Additional Information
- For contractual/legal purposes: for the time necessary and, in any case, within the terms set forth by applicable laws, starting from the end of the relationship.
- For marketing/commercial purposes: until the purposes are achieved or consent is withdrawn; generally no longer than 36 months from collection.
Users agree not to send or publish unlawful/offensive or harmful content (e.g. viruses, malware) and not to misuse the site (e.g. hacking activity).
6. Access to Data
Data may be made accessible, for the purposes referred to in points 2.A) and 2.B), to:- shareholders, employees, and collaborators of the Controller (in Italy and abroad), as authorized persons and/or internal processors and/or system administrators;
- third-party companies/entities performing outsourcing activities on behalf of the Controller as external processors (associated firms, lawyers, data processing services, certification bodies, accounting/tax consultants, banks, insurance companies, public bodies/offices, occupational safety services, subcontractors, IT suppliers, carriers/shippers/customs brokers, etc.).
The updated list of processors is available at the Controller’s registered office.
7. Data Communication
Without the need for consent (Art. 6, letters b) and c) GDPR), Data may be communicated for the purposes described in point 2.A) to supervisory bodies, judicial authorities, insurance companies, and entities to whom communication is mandatory by law. These entities operate as independent controllers. During/after browsing, Data may be communicated in particular to:- Google (advertising, targeting, analytics/measurement, personalization, optimization services);
- Google Ads (advertising, targeting, analytics/measurement, personalization, optimization services);
- Google Analytics (targeting, analytics/measurement, optimization).
8. Data Transfer Abroad
Data are stored on devices located at the Controller’s premises or at providers within the European Union. If necessary, the Controller may transfer Data to non-EU countries in compliance with applicable laws, based on appropriate safeguards (e.g. Standard Contractual Clauses) pursuant to Articles 44–49 GDPR. Adequate technical and organizational measures are adopted (Art. 32 GDPR). Browsing data may be transferred, for the above purposes, to EU countries and the United States.Cookie management: it is always possible to change browser preferences to block/install certain cookies. See the user guides of the browser in use.
9. Nature of Data Provision and Consequences of Refusal
- Mandatory for the purposes in 2.A): failure to provide data will make it impossible to provide related services.
- Optional for the purposes in 2.B): if consent is denied/withdrawn, you will not receive newsletters or commercial communications, without prejudice to the services referred to in 2.A).
10. Rights of the Data Subject
As a data subject, you may exercise the rights referred to in Articles 15–22 GDPR, including access, rectification, erasure, restriction, portability, objection, as well as lodging a complaint with the Data Protection Authority. In particular, under Art. 15 GDPR, you have the right to obtain:- confirmation of whether your data are being processed and access to such Data and information on purposes, categories, recipients, retention period/criteria, rights, source of the Data, existence of automated decision-making (profiling), and related logic/consequences;
- information on safeguards adopted in the event of transfers to third countries/international organizations (Art. 46 GDPR);
- a copy of the Data being processed (any additional copies may incur a reasonable administrative fee). If the request is made electronically, the response will be provided in a commonly used electronic format, unless otherwise requested.
11. Personal Data Not Obtained from the Data Subject
It may occur that the undersigned acts as joint controller or external processor and receives your Data from third parties under specific agreements. In such cases, the undersigned will ensure that you are informed and, where required, have given consent. You may always request information about the origin of your Data.12. Data Controller, DPO, and Contacts
Data Controller: CENTRO CARNI COMPANY S.p.A. Data Protection Officer (DPO): Mr. Rodolfo Bottaro – dpo@centrocarnicompany.com The updated list of external processors and authorized persons is available at the Controller’s registered office.Note: this text constitutes an information notice pursuant to Articles 13–14 GDPR. It must be adapted and updated according to the actual processes, legal bases, and tools used by the organization.