PRIVACY POLICY

This disclosure, made pursuant to Art. 13 of EU Regulation 2016/679, by X-LAM DOLOMITI SPA in its capacity as data controller, aims to describe how the website https://www.xlamdolomiti.it is managed with regard to the processing of personal data of users who consult it.

The information is provided only for the use of services provided by X-LAM DOLOMITI SPA directly or through the site and not also for other services or websites that may be consulted by users through hypertext links published on the site but referring to third parties.

Data controller: X-LAM DOLOMITI SPA, based in Via della Stazione, 100 | 38059 Castel Ivano (TN) Italy, e-mail: info@xlamdolomiti.it, C.F./P.IVA (hereinafter “Data Controller”) 02171340223

Type of data processed

1) Navigation data

The computer systems responsible for the operation of this Site acquire certain data of a personal nature transmitted via secure protocols. This collection is in no way intended to identify the user but this may be done through processing and association with data held by third parties. This category of data includes IP addresses, browser identifier, Uniform Resource Identifier (URI) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the numerical code indicating the status of the response given by the server (e.g. successful, error) and other parameters related to the user’s operating system and computer environment.

These data are used for the sole purpose of obtaining statistical information (so they are anonymous aggregates) and to monitor the proper functioning of the site.

2) Personal data voluntarily provided by the user

Apart from navigation data, the provision of personal data by users is optional. This is data voluntarily provided by the site visitor, such as by filling out forms, which will be processed for the sole purpose of performing the requested service.

Purpose of processing

Delivery of the requested service

Personal data provided by users using the services of the website (e.g. form filling) are used for the sole purpose of performing the requested service or performance. The legal basis for processing is the execution of a specific request and/or contract.

Direct marketing

Only with your explicit consent, X-LAM DOLOMITI SPA may process your data for direct marketing activities, including specific interest related to its own or partners’ products or services.

In the case of newsletter subscription, data may be processed through profiling activities based on the area of origin or based on its specific areas of interest in order to be able to send communications based on preferences. The legal basis for processing is consent, which is optional in nature and can be revoked at any time. Lack of consent does not affect the performance of the contract or the specific request.

In any case, the Data Controller may process the data, even without consent, for the purpose of sending e-mail communications and promotions of products or services similar to those previously purchased. The legal basis for processing in this case is the legitimate interest of the Data Controller.

Mode of communication

The personal data collected will be processed only by designated personnel who need to have knowledge of it as a function of their activities or by external parties who perform services on behalf of the Data Controller (e.g., computer system management activity, agencies and communications companies) or who collaborate with the Data Controller and who may act as Data Processors or Autonomous Data Controllers.

Method of treatment

The processing of data is done through computer tools suitable to ensure the security and confidentiality of the data and in compliance with security measures deemed appropriate by the Owner, through the secure communication protocols with SSL encryption algorithms.

The data may be processed electronically, including automatically, with or without the use of electronic means according to principles of fairness, lawfulness and transparency.

Data could be transferred to a third country on the basis of the European Commission’s adequacy decisions or on the basis of adequate safeguards provided by the applicable legislation (Articles 45-46 of EU Regulation 2016/679).

Personal data collected will not be disseminated.

Retention period

Personal data provided by the user will be kept for a period not exceeding the period necessary to achieve the purpose for which they are collected and for the maximum time stipulated by the legislation (10 years in the case of purchasing services on the Website).

Data processed for marketing purposes will be retained until consent is withdrawn and in any case for a period not exceeding 10 years.

Rights of data subjects

The User at any time may exercise his or her rights, as a data subject, vis-à-vis the Data Controller. In particular it will be able to:

1. request access to, rectification, integration or deletion of personal data concerning him or her, or restriction of processing;
2. Obtain portability of data concerning him or her;
3. Revoke, at any time, the consent to the processing of their data previously given;
4. Object, in whole or in part, to the processing of your data;
5. Propose a complaint to a regulatory authority;
6. if they believe that processing concerning them is in violation of the Regulation, the right to lodge a complaint with a Supervisory Authority (in the Member State in which they habitually reside, in the Member State in which they work, or in the Member State in which the alleged violation occurred). The Data Protection Officer (DPO) can be reached at the following address: via della Stazione 100, Castel Ivano (Tn) cap 38059 (operational headquarters), and at the email dpo@gruppopaterno.it.

The User may exercise his/her rights by written request, sent to the Data Controller, at the e-mail address: info@xlamdolomiti.it.

The User may file a complaint with the Data Protection Authority, at the following references: website https://www.garanteprivacy.it, E-mail protocollo@gpdp.it /PEC protocollo@pec.gpdp.it

Changes to the privacy policy

This privacy policy may be subject to change over time – also related to the possible entry into force of new industry regulations, the updating or provision of new services or to intervening technological innovations – so the User/Visitor is invited to periodically consult this page.

This website uses cookies. We use cookies to personalize content and ads, to provide social media features, and to analyze
our traffic.
We also share information about how you use our site with our web analytics, advertising and
social media partners, who may combine it with other information you have provided to them or that they have collected from your use of their services.
Cookies are small text files that may be used by websites to make the experience more efficient for you.
The law states that we may store cookies on your device if they are strictly necessary for the operation of this site.
For all other
types of cookies we need your permission.
This site uses different types of cookies.
Some cookies are placed by third-party services that appear on our pages.
You can change or revoke your consent at any time from the Cookie Statement on our Web site.
Find out more about who we are, how you can contact us, and how we process personal data in our Privacy Policy.
Your consent applies to the following Web sites: www.xlamdolomiti.it

This policy defines and regulates the modalities of interaction with the initiatives put in place by X-Lam Dolomiti S.p.A. company with sole shareholder P.IVA
02171340223 Reg.
Imprese di Trento, subject to the management and coordination of EuroGroup S.p.A. (hereinafter “the Company” or “the Owner”),
with registered office in Castel Ivano (Tn) via della Stazione 100, as the owner of the processing of personal data, in order to ensure a correct
procedure for the use of social media by both users and employees and/or collaborators of the Company, in light of the current legislation on copyright
(Law 22 April 1941 no.
633 on copyright and s.m.i., EU Directive 2019/790 on copyright in the single digital market, the Code of
Self-Regulation of Commercial Communication, as well as the Digital Chart I.A.P.) in conjunction with the privacy legislation (EU Regulation
2016/679, Legislative Decree 196/2003 and s.m.i. and measures of the Guarantor for the protection of personal data).
Through social networks, users share textual and/or multimedia media elements among individuals who are members of a community, through the creation of personal profiles
.
The Company, in order to better engage users, uses the
platforms of the following social networks for the promotion of specific projects, events or prize events: Youtube, Linkedin, Facebook and Instagram. These channels are to supplement the websites, of which the Company has the domain, which of
following are:
– Facebook;
– Instagram;
– Linkedin;
– Youtube.
Content conveyed through social networks must comply with the rules dictated by the Code of Self-Discipline of Commercial Communication, as well as the
Digital Chart I.A.P. The institutional pages opened on social networks have the following functions:
1. to inform about the activities and initiatives promoted by the Company, to encourage dialogue with users through posts, comments to posts, responses to requests,
questions, criticisms and suggestions;
2. to produce text content, photographic images, videos and other multimedia materials referring to individual services and/or projects, for which the institutional page is activated.
Such content cannot be reused by third parties freely under any circumstances, except for sharing implemented through the social features of the social itself. The Company
publishes content, including multimedia, its own or for which it has acquired the rights from the owner, in accordance with copyright law.
Personal data are published subject to the express consent of users, pursuant to privacy legislation.
In particular, the Company undertakes not to publish photographic and/or video images:
– of minors, without prior authorization from parents or other persons exercising parental authority;
– of persons whose image involves the processing of personal data falling into special categories, without prior consent, pursuant to privacy legislation.
If this is not possible, the Company obscures the faces of minors and the above-mentioned persons.
Only the photographic images and/or
videos of users who have been informed in advance by means of a special notice issued on the occasion of the collection of the same images and have given appropriate consent are published.
The administration of the institutional pages is the responsibility of the Company’s Marketing Department.
For the conditions of use of individual social networks, please refer to
the Terms & Conditions of the relevant social networks, which the Company also follows.
Each user may participate in the life of the institutional page,
expressing his or her personal opinion.
Such expressions represent the opinion of individuals and not that of the Company, which disclaims any responsibility
about the truthfulness and correctness of what is posted on its institutional pages by users.
The Company reserves the right to proceed to the deletion of posts that are:
– Discriminatory and offensive with respect to persons, groups of persons, or categories of persons, with respect to gender, race, language, ethnicity, religion, opinion
politics, personal and social conditions, sexual orientation and age;
– containing images of minors, without prior permission from the parents exercising parental authority;
– discriminatory and offensive with respect to other users present or not present in the discussion, bodies, associations, organizations in general, companies, and to the
Company, or otherwise infringing on the rights of third parties;
– containing language that is inappropriate, vulgar, licentious, contrary to public decency, and/or containing threatening tones;
– containing obscene, pornographic subject matter or such as to offend public morals and sensibilities;
– misleading and alarmist;
 containing personal data about third parties and/or that may harm their
reputation and/or cause harm;
 containing particular categories of data relating to third parties, pursuant to the
privacy regulations;

 containing unlawful topics or inciting unlawful acts and/or violating the
copyright;
 containing advertising or promotion of profit-making activities;
 containing political or propaganda topics and spam;
 irrelevant to current discussions, repetitive and intended to disrupt
the discussion.
The Company reserves the right to ban and/or block anyone who violates these rules of
moderation repeatedly and, in the most serious cases, even once,
reporting the user to the platform and, where necessary, to the judicial authorities.
When visiting the official pages and company profiles of featured on the aforementioned
Social Media, it is possible for users’ personal data to be transferred and processed
outside the European Economic Area (EEA); in such a case, the regulations in
Data protection regulations in force in countries outside the EEA.
may not offer similar levels of data protection as those guaranteed by
EU Regulation 2016/679, except in cases where the European Commission has
recognized some of these countries as offering levels of data protection
substantially equivalent to those provided by existing regulations in the
EEA.
Information on the processing of data by individual social media outlets, as well as
on the possibility of objecting to the processing of one’s personal data (opt-out)
can be obtained by consulting the links listed below.
 Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland) – Privacy
policy: https://www.facebook.com/about/privacy/
 Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025,
USA)
Privacy policy: https://help.instagram.com/519522125107875
 Youtube (Google Ireland – Gordon House Barrow St Dublin 4 Ireland)
Privacy policy https://support.google.com/youtube/answer/7671399
 Linkedin policy https://it.linkedin.com/legal/privacy-policy?
Information for the exercise of rights can be found at
page https://www.gruppopaterno.it/privacy-policy/
The Data Protection Officer (DPO) can be reached at
address: via della Stazione 100, Castel Ivano (Tn) cap 38059, and at
mail dpo@gruppopaterno.it.

Disclosure to applicants under Art. 13 EU Regulation 2016/679

Reference legislation:

– EU Regulation no.
679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of personal data (hereinafter “EU Regulation”);

– Legislative Decree no.
196 of June 30, 2003 (“Privacy Code”), as amended by Legislative Decree no. 101 of August 10, 2018.

X-Lam Dolomiti S.p.A. (hereinafter “the Company” or “the Owner”), with registered office in Castel Ivano (Tn), via della Stazione 100 (hereinafter the Company), wishes to inform you that your personal data will be processed in compliance with the regulations in force regarding the processing of personal data.

Specifically, the Company acts as the Data Controller, by which is meant “the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data.”

It should be noted that a Data Processor is defined as “the natural or legal person, public authority, service or other body that processes personal data on behalf of the Data Controller.”

“Processing of personal data” means “any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.”

Specifically, the processing of your personal data may be carried out by individuals specifically authorized by the Company to perform operations on personal data.

This notice is provided to you in view of your status as a “data subject,” by which is meant the natural person to whom the personal data relate.

1. Personal data subject to processing

The personal data subject to processing may include, in particular, personal details, telephone and email contact information, information regarding education and previous work experience, information regarding specific skills and abilities, pictures of you, and any additional information you provide within your resume.

Personal data falling under the “special categories of personal data” referred to in Art. 9 of the EU Regulation. The aforementioned category includes personal data capable of detecting racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sexual life or sexual orientation.

2. Purpose of personal data processing and legal basis for processing

Your personal data are directly provided by you by registering in the appropriate recruiting platform in order to enable you to create your professional profile and to transmit your curriculum vitae spontaneously or for the purpose of applying for specific ongoing searches.

Your personal data, moreover, are processed in order to evaluate your application, to contact you for a possible interview of a professional nature, and to carry out any further activities necessary for the fulfillment of selection operations aimed at the possible hiring or collaboration relationship with the Company, in compliance with the principle of equality between candidates and female candidates that imposes the prohibition of discrimination between the two sexes pursuant to Legislative Decree. No. 198, April 11, 2006 (Code of Equal Opportunity between men and women), as amended by Leg. No. 5, Jan. 25, 2010 and Law No. 183, November 4, 2010.

In this case, the Company will process your personal data in order to execute the pre-contractual measures taken at your request and aimed at the possible establishment of an employment or collaboration relationship with the Company; therefore, your consent is not necessary.

Please note that the Company does not require, in the fields of registration and creation of the professional profile, the provision of personal data attributable to the “special categories of data” referred to in Art. 9 of the EU Regulation; therefore, the possible indication, in your curriculum vitae, of such personal data is considered spontaneous and its processing is carried out on the basis of your consent.

The processing of such personal data is carried out in accordance with the methods and limits defined by the current legislation on the processing of personal data, as well as in compliance with the provisions of the Guarantor Authority for the Protection of Personal Data and in particular the General Authorization no. 1/2016 on the processing of sensitive data in labor relations.

Please note that consent to the processing of personal data may be, at any time, revoked; revocation of consent does not affect the lawfulness of processing carried out prior to that time.

3. Methods and duration of personal data processing

Processing may be carried out through the use of computerized, telematic or paper tools and media in compliance with the provisions to ensure security and confidentiality, as well as, among other things, the accuracy, updating and relevance of personal data to the stated purposes.

The personal data collected will be stored in electronic and/or paper files at the registered office or operational offices of X-Lam Dolomiti S.p.A..

Your personal data are retained only for the period of time necessary to manage any activity required for the company’s personnel search and selection process and, in any case, for a time not exceeding 12 months from their collection; after this period has elapsed, your personal data will constitute the object of deletion. The Company reserves the right, only eventual, to contact you prior to cancellation in order to assess the permanence of your interest in the continuation of the processing of your personal data for the sole purposes identified in this notice.

4. Nature of provision of personal data

The provision of personal data is optional, however, any refusal to provide personal data prevents registration in the recruiting platform with the consequent impossibility of continuing with the creation of the professional profile, the transmission of your curriculum vitae or the application to current searches; consequently, the provision of your personal data is “obligatory” in order to fulfill a specific request of yours.

5. Recipients of personal data

Within the limits of the purposes set out in this notice, your personal data may be disclosed in fulfillment of a legal, regulatory or EU obligation.

In particular, your personal data may be disclosed to Public Security Authorities, Public Bodies or companies of a private nature for the fulfillment of legal obligations.

Personal data will not be transferred outside the territory of the European Union (EU) or the European Economic Area (EEA).

Personal data will not be disseminated and therefore will not be disclosed to the public or to an indefinite number of individuals.

6. Rights under Articles 15 et seq. of EU Regulation 2016/679.

You may exercise your rights of access to personal data under Art. 15 of the EU Regulation and the rights under Articles 16, 17, 18, 20, and 21 of the EU Regulation regarding rectification and erasure of personal data, restriction of processing of personal data, portability of personal data, and opposition to processing of personal data.

You may exercise your rights by writing to the following address: xlamdolomiti@legalmail.it The Data Protection Officer (DPO) can be reached at the following address: via della Stazione 100, Castel Ivano (Tn) cap 38059 (operational headquarters), and at the email dpo@gruppopaterno.it.

If the Company does not provide you with a response to your request within the timeframe provided by the regulations or the response to the exercise of your rights is inadequate, you may file a complaint with the Data Protection Authority. Below are the references: website https://www.garanteprivacy.it, E-mail protocollo@gpdp.it /PEC protocollo@pec.gpdp.it

Having read the notice, I authorize the processing of personal data and any special categories of personal data contained in the curriculum, pursuant to Article 9.2.a of the European Regulation 2016/679