This disclosure, made pursuant to Art. 13 of EU Regulation 2016/679, by X-LAM DOLOMITI SPA in its capacity as data controller, aims to describe how the website https://www.xlamdolomiti.it is managed with regard to the processing of personal data of users who consult it.
The information is provided only for the use of services provided by X-LAM DOLOMITI SPA directly or through the site and not also for other services or websites that may be consulted by users through hypertext links published on the site but referring to third parties.
Data controller: X-LAM DOLOMITI SPA, based in Via della Stazione, 100 | 38059 Castel Ivano (TN) Italy, e-mail: firstname.lastname@example.org, C.F./P.IVA (hereinafter “Data Controller”) 02171340223
Type of data processed
1) Navigation data
The computer systems responsible for the operation of this Site acquire certain data of a personal nature transmitted via secure protocols. This collection is in no way intended to identify the user but this may be done through processing and association with data held by third parties. This category of data includes IP addresses, browser identifier, Uniform Resource Identifier (URI) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the numerical code indicating the status of the response given by the server (e.g. successful, error) and other parameters related to the user’s operating system and computer environment.
These data are used for the sole purpose of obtaining statistical information (so they are anonymous aggregates) and to monitor the proper functioning of the site.
2) Personal data voluntarily provided by the user
Apart from navigation data, the provision of personal data by users is optional. This is data voluntarily provided by the site visitor, such as by filling out forms, which will be processed for the sole purpose of performing the requested service.
Purpose of processing
Delivery of the requested service
Personal data provided by users using the services of the website (e.g. form filling) are used for the sole purpose of performing the requested service or performance. The legal basis for processing is the execution of a specific request and/or contract.
Only with your explicit consent, X-LAM DOLOMITI SPA may process your data for direct marketing activities, including specific interest related to its own or partners’ products or services.
In the case of newsletter subscription, data may be processed through profiling activities based on the area of origin or based on its specific areas of interest in order to be able to send communications based on preferences. The legal basis for processing is consent, which is optional in nature and can be revoked at any time. Lack of consent does not affect the performance of the contract or the specific request.
In any case, the Data Controller may process the data, even without consent, for the purpose of sending e-mail communications and promotions of products or services similar to those previously purchased. The legal basis for processing in this case is the legitimate interest of the Data Controller.
Mode of communication
The personal data collected will be processed only by designated personnel who need to have knowledge of it as a function of their activities or by external parties who perform services on behalf of the Data Controller (e.g., computer system management activity, agencies and communications companies) or who collaborate with the Data Controller and who may act as Data Processors or Autonomous Data Controllers.
Method of treatment
The processing of data is done through computer tools suitable to ensure the security and confidentiality of the data and in compliance with security measures deemed appropriate by the Owner, through the secure communication protocols with SSL encryption algorithms.
The data may be processed electronically, including automatically, with or without the use of electronic means according to principles of fairness, lawfulness and transparency.
Data could be transferred to a third country on the basis of the European Commission’s adequacy decisions or on the basis of adequate safeguards provided by the applicable legislation (Articles 45-46 of EU Regulation 2016/679).
Personal data collected will not be disseminated.
Personal data provided by the user will be kept for a period not exceeding the period necessary to achieve the purpose for which they are collected and for the maximum time stipulated by the legislation (10 years in the case of purchasing services on the Website).
Data processed for marketing purposes will be retained until consent is withdrawn and in any case for a period not exceeding 10 years.
Rights of data subjects
The User at any time may exercise his or her rights, as a data subject, vis-à-vis the Data Controller. In particular it will be able to:
- request access to, rectification, integration or deletion of personal data concerning him or her, or restriction of processing;
- Obtain portability of data concerning him or her;
- Revoke, at any time, the consent to the processing of their data previously given;
- Object, in whole or in part, to the processing of your data;
- Propose a complaint to a regulatory authority;
- if they believe that processing concerning them is in violation of the Regulation, the right to lodge a complaint with a Supervisory Authority (in the Member State in which they habitually reside, in the Member State in which they work, or in the Member State in which the alleged violation occurred). The Data Protection Officer (DPO) can be reached at the following address: via della Stazione 100, Castel Ivano (Tn) cap 38059 (operational headquarters), and at the email email@example.com.
The User may exercise his/her rights by written request, sent to the Data Controller, at the e-mail address: firstname.lastname@example.org.
our traffic. We also share information about how you use our site with our partners who are involved in web data analytics, advertising, and
social media, which may combine it with other information you have provided to them or that they have collected from your use of their services.
Cookies are small text files that can be used by websites to make the experience more efficient for the user.
The law states that we may store cookies on your device if they are strictly necessary for the operation of this site. For all others
types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third-party services that appear on our pages.
At any time you can change or revoke your consent from the Cookie Statement on our website.
Your consent applies to the following websites: www.xlamdolomiti.it
This policy defines and regulates the modalities of interaction with the initiatives put in place by X-Lam Dolomiti S.p.A. single member company P.IVA
02171340223 Reg. Imprese di Trento, subject to the management and coordination of EuroGroup S.p.A. (hereinafter “the Company” or “the Owner”),
with registered office in Castel Ivano (Tn), via della Stazione 100, as the owner of the processing of personal data, in order to ensure proper
procedure for the use of social media by both users and employees and/or collaborators of the Company, in light of the current legislation on the right
copyright (Law April 22, 1941 no. 633 on copyright and as amended, the EU Directive 2019/790 on Copyright in the Digital Single Market, the Code of
Self-Regulation of Commercial Communication, as well as the Digital Chart I.A.P.) in conjunction with privacy regulations (EU Regulation
2016/679, Legislative Decree 196/2003 as amended and provisions of the Guarantor for the protection of personal data).
Through social networks, users share textual and/or multimedia media elements among individuals registered in a community, through the creation of profiles
The Company, in order to better engage users, uses for the promotion of specific projects, events or prize events the platforms
Of the following social networks: Youtube, Linkedin, Facebook and Instagram. These channels are to supplement the websites, of which the Company has the domain, which of
following are given below:
Content conveyed through social networks must comply with the rules dictated by the Code of Self-Discipline for Commercial Communication, as well as the
Digital Chart I.A.P. Institutional pages opened on social networks have the following features:
1. to inform about the activities and initiatives promoted by the Society, to encourage dialogue with users through posts, comments to posts, responses to inquiries,
questions, criticisms and suggestions;
2. produce text content, photographic images, videos and other multimedia materials related to individual services and/or projects, for which the institutional page is activated.
Such content cannot be reused by third parties freely under any circumstances, except for sharing implemented through the social features of the social itself. The Society
publishes content, including multimedia, of its own or to which it has acquired rights from the owner under copyright law. Personal data are published with the express consent of users, in accordance with privacy regulations.
In particular, the Society agrees not to publish photographic and/or video images:
– Of minors, without prior permission from parents or others exercising parental authority;
– of persons whose image involves the processing of personal data falling into the special categories, without prior consent, in accordance with privacy regulations.
If this is not possible, the Company will obscure the faces of the minors and persons mentioned above. Only photographic images and/or the
video of users who have been informed in advance by means of appropriate information issued when the same images were collected and have given appropriate consent.
to the Terms & Conditions of the relevant social networks, to which the Company also adheres. Any user can participate in the life of the institutional page,
Expressing one’s personal opinion. Such expressions represent the opinion of individuals and not that of the Society, which disclaims any responsibility
about the truthfulness and correctness of what users post on their institutional pages.
The Company reserves the right to proceed to the deletion of posts that are:
– Discriminatory and offensive with respect to persons, groups of persons, or categories of persons, with respect to gender, race, language, ethnicity, religion, opinion
politics, personal and social conditions, sexual orientation and age;
– containing images of minors, without prior permission from the parents exercising parental authority;
– discriminatory and offensive with respect to other users present or not present in the discussion, bodies, associations, organizations in general, companies, and to the
Company, or otherwise infringing on the rights of third parties;
– containing language that is inappropriate, vulgar, licentious, contrary to public decency, and/or containing threatening tones;
– containing obscene, pornographic subject matter or such as to offend public morals and sensibilities;
– misleading and alarmist;
containing personal data about third parties and/or that may harm their
reputation and/or cause harm;
containing particular categories of data relating to third parties, pursuant to the
containing unlawful topics or inciting unlawful acts and/or violating the
containing advertising or promotion of profit-making activities;
containing political or propaganda topics and spam;
irrelevant to ongoing discussions, repetitive and intended to disrupt
The Society reserves the right to ban and/or block anyone who violates these rules of
moderation repeatedly and, in severe cases, even once,
reporting the user to the platform and, where necessary, to judicial authorities.
When visiting the official pages and company profiles of featured on the aforementioned
Social Media, it is possible for users’ personal data to be transferred and processed
outside the European Economic Area (EEA); in such a case, the regulations in
Data protection regulations in force in countries outside the EEA.
may not offer similar levels of data protection as those guaranteed by the
EU Regulation 2016/679, except where the European Commission has
recognized some of these countries as offering levels of data protection
personal substantially equivalent to those provided for in current regulations in the
Information on data processing by individual social media outlets, as well as
On the possibility of objecting to the processing of one’s personal data (opt-out)
can be obtained by consulting the links listed below.
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland) – Privacy
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025,
Youtube (Google Ireland – Gordon House Barrow St Dublin 4 Ireland)
Linkedin policy https://it.linkedin.com/legal/privacy-policy?
Information for exercising rights can be found at.
The Data Protection Officer (DPO) can be reached at.
address: via della Stazione 100, Castel Ivano (Tn) cap. 38059, and to the
Disclosure to applicants under Art. 13 EU Regulation 2016/679
– EU Regulation no. 679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of personal data (hereinafter “EU Regulation”);
– Legislative Decree no. 196 of June 30, 2003 (“Privacy Code”), as amended by the Legislative Decree no. 101 of August 10, 2018.
X-Lam Dolomiti S.p.A. (hereinafter “the Company” or “the Owner”), with registered office in Castel Ivano (Tn), via della Stazione 100 (hereinafter the Company), would like to inform you that your personal data will be processed in accordance with current legislation on the processing of personal data.
Specifically, the Company operates as a Data Controller, by which is meant “the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data.”
It should be noted that a Data Processor is defined as “the natural or legal person, public authority, service or other body that processes personal data on behalf of the Data Controller.”
“Processing of personal data” means “any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.”
Specifically, the processing of your personal data may be carried out by individuals specifically authorized by the Company to perform operations on personal data.
This notice is provided to you in view of your status as a “data subject,” by which is meant the natural person to whom the personal data relate.
- Personal data subject to processing
Personal data subject to processing may include, in particular, biographical data, telephone and email contact details, information regarding education and previous work experience, information regarding specific skills and abilities, images of you, and any additional information you provide within your
Personal data falling under the “special categories of personal data” referred to in Art. 9 of the EU Regulation. The aforementioned category includes personal data capable of detecting racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sexual life or sexual orientation.
- Purpose of personal data processing and legal basis for processing
Your personal data are directly provided by you by registering in the appropriate
in order to enable you to create your professional profile and transmit your
spontaneously or for the purpose of applying for specific ongoing searches.
Your personal data, moreover, are processed in order to evaluate your application, to contact you for a possible interview of a professional nature, and to carry out any further activities necessary for the fulfillment of selection operations aimed at the possible hiring or collaboration relationship with the Company, in compliance with the principle of equality between candidates and female candidates that imposes the prohibition of discrimination between the two sexes pursuant to Legislative Decree. No. 198, April 11, 2006 (Code of Equal Opportunity between men and women), as amended by Leg. No. 5, Jan. 25, 2010 and Law No. 183, November 4, 2010.
In this case, the Company will process your personal data in order to execute the pre-contractual measures taken at your request and aimed at the possible establishment of an employment or collaboration relationship with the Company; therefore, your consent is not necessary.
Please note that the Company does not require, in the fields of registration and creation of the professional profile, the provision of personal data attributable to the “special categories of data” referred to in Art. 9 of the EU Regulation; therefore, any indication in your
, of such personal data is considered to be spontaneous and its processing is done on the basis of your consent.
The processing of such personal data is carried out in accordance with the methods and limits defined by the current legislation on the processing of personal data, as well as in compliance with the provisions of the Guarantor Authority for the Protection of Personal Data and in particular the General Authorization no. 1/2016 on the processing of sensitive data in labor relations.
Please note that consent to the processing of personal data may be, at any time, revoked; revocation of consent does not affect the lawfulness of processing carried out prior to that time.
- Methods and duration of personal data processing
Processing may be carried out through the use of computerized, telematic or paper tools and media in compliance with the provisions to ensure security and confidentiality, as well as, among other things, the accuracy, updating and relevance of personal data to the stated purposes.
The personal data collected will be stored in electronic and/or paper files at the registered office or operational offices of X-Lam Dolomiti S.p.A..
Your personal data are retained only for the period of time necessary to manage any activity required for the company’s personnel search and selection process and, in any case, for a time not exceeding 12 months from their collection; after this period has elapsed, your personal data will constitute the object of deletion. The Company reserves the right, only eventual, to contact you prior to cancellation in order to assess the permanence of your interest in the continuation of the processing of your personal data for the sole purposes identified in this notice.
- Nature of provision of personal data
Providing personal data is optional, however, refusal to provide personal data prevents registration in the platform of recruiting resulting in the inability to continue with the creation of the professional profile, the transmission of your resume or in applying for current searches; consequently, the provision of your personal data is “obligatory” in order to fulfill a specific request of yours.
- Recipients of personal data
Within the limits of the purposes set out in this notice, your personal data may be disclosed in fulfillment of a legal, regulatory or EU obligation.
In particular, your personal data may be disclosed to Public Security Authorities, Public Bodies or companies of a private nature for the fulfillment of legal obligations.
Personal data will not be transferred outside the territory of the European Union (EU) or the European Economic Area (EEA).
Personal data will not be disseminated and therefore will not be disclosed to the public or to an indefinite number of individuals.
- Rights under Articles 15 et seq. of EU Regulation 2016/679.
You may exercise your rights of access to personal data under Art. 15 of the EU Regulation and the rights under Articles 16, 17, 18, 20, and 21 of the EU Regulation regarding rectification and erasure of personal data, restriction of processing of personal data, portability of personal data, and opposition to processing of personal data.
You may exercise your rights by writing to the following address:
The Data Protection Officer (DPO) can be reached at the following address: via della Stazione 100, Castel Ivano (Tn) cap 38059 (operational headquarters), and at the email
If the Company does not provide you with a response to your request within the timeframe provided by the regulations or the response to the exercise of your rights is inadequate, you may file a complaint with the Data Protection Authority.
The following are the coordinates:
Garante per la Protezione dei Dati Personali – Rome
Web site https://www.garanteprivacy.it/
Fax: (+39) 06.69677.3785
Telephone switchboard: (+39) 06.69677.1
Having read the information, I authorize the processing of personal data and any special categories of personal data contained in the curriculum, pursuant to Article 9.2.a of the European Regulation 2016/679