Privacy Policy

DATA CONTROLLER

TRIADI s.r.l., Benefit Company, Spin Off of the Politecnico di Milano (hereinafter TRIADI), with registered office at Viale Monte Nero 84, 20131 Milan (MI), VAT no. – Tax code 12198350964, email: contatti@triadi.it, which you may contact via the aforementioned addresses or via the email address privacy@triadi.it.

CATEGORIES OF PERSONAL DATA PROCESSED – ORIGIN OF YOUR DATA

Navigation data:

While browsing the site, navigation data may be collected: the IT systems and software procedures responsible for the operation of this site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This category of data includes the IP addresses or domain names of the computers used by users/visitors who connect to the site, as well as other parameters relating to the operating system and IT environment of the user. This data, linked to the IP address with the last three digits anonymized, is used solely to obtain anonymous statistical information on the use of the site and to monitor its correct operation.

Cookies: For information regarding the cookies used by this site, please refer to the specific Cookie Policy.

Data provided voluntarily by the data subject:

The data subject to processing is the data you provide when contacting us through the various features of our site to request information or to submit a job application.

Depending on the services requested, we may process different categories of personal data; in particular:

a. to respond to your requests submitted through our “Contact” page: first name, surname, e-mail address;

b. to receive your application through our “Careers” page: first name, surname, e-mail address and curriculum vitae.

Failure to provide this personal data, or providing it partially or inaccurately, makes it impossible to finalize the contractual or pre-contractual relationship, as it impairs its correct execution.

Purposes and Legal Basis

TRIADI processes your personal data as defined and indicated above for the purposes set out below and on the legal bases referred to in the GDPR and specified alongside:

a. for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures adopted at the request of the data subject (GDPR, art. 6, paragraph 1, letter b) to respond to your application and to allow you to browse our website;

b. for the pursuit of the legitimate interest of the data controller (GDPR, art. 6, paragraph 1, letter f); by way of non-exhaustive example:

– protection of the company’s rights in judicial and extrajudicial proceedings;

– the security and safeguarding of the Data Controller’s information systems.

RETENTION PERIOD

The personal data collected for purpose a) will be retained:

· for the time necessary to respond to your request;

· for the 24 months following their receipt with regard to CVs. In the event of hiring, your personal data will be retained together with your personal file;

· for the 6 months following acquisition, for navigation data.

For the protection of the controller’s rights and for the purposes referred to in point b), personal data will be processed for the time necessary for the statute of limitations to expire.

At the end of the indicated periods, your personal data will be deleted from all electronic and paper archives, subject to a maximum period of 30 days for the execution of the deletion.

RECIPIENTS

Your personal data may be communicated by TRIADI, for the purposes mentioned above, to:

· companies to which we have entrusted Information Technology support;

· natural or legal persons used by TRIADI for the management of the site.

Only the minimum personal data necessary for the execution of the part of the service for which they are responsible will be communicated to these parties. Such parties, where applicable, will be appointed as data processors pursuant to art. 28 GDPR. The list of Data Processors is available upon simple request.

Personal data is processed by persons in charge of processing under the authority of TRIADI, all of whom are instructed on the relevant privacy legislation. Personal data is not disseminated.

PLACE AND METHODS OF PROCESSING PERSONAL DATA

Your personal data is processed within the territory of the European Union.

All operations – collection, processing, consultation, printing, archiving, modification, updating, etc. – may be carried out on paper or by means of electronic tools.

Should the providers of IT services used by TRIADI be based in non-EU countries, transfers of personal data to such providers will only take place in the presence of one of the safeguards provided for in Chapter V (Transfers of personal data to third countries or international organisations) of the GDPR.

TRIADI does not carry out, nor does it plan to carry out, automated decision-making, including profiling, on your personal data.

RIGHTS OF DATA SUBJECTS

TRIADI, the Data Controller, also informs you that you may exercise the rights provided for by current legislation:

– right of access to the personal data concerning you (art. 15 GDPR);

– right to rectification of your personal data (art. 16 GDPR);

– right to erasure of your personal data (art. 17 GDPR);

– right to restriction of processing of your personal data (art. 18 GDPR);

– right to object to the processing of your personal data (art. 21 GDPR).

by sending any request to the e-mail address: privacy@triadi.it

COMPLAINTS

It is always possible to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) by following the procedures and instructions published on the Authority’s official website, available at www.garanteprivacy.it