Privacy Policy

Arsenale S.p.A., with registered office in Via Giovanni Amendola, 46 – 00185 Rome, VAT number 12570881008, as data controller (hereinafter the “Company” or the “Data Controller”), provides this privacy policy pursuant to articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter, the “GDPR”) in relation to the processing of personal data of visitors to the website www.arsenalegroup.com (hereinafter, the “Website”).

1. What types of data are processed and for what purposes?

Navigation data:

The information systems and software procedures relied upon to operate this website collect personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment. These data are necessary to use web-based services and are also processed in order to (i) extract statistical information on service usage (most visited pages, visitors by time/date, geographical areas of origin, etc.); and (ii) check functioning of the services. The data could be used to ascertain responsibility in case of potential computer crimes against the Website. The navigation data are processed for our legitimate interest to guarantee the safety of the Website, to check its correct functioning and to obtain statistics related to its use (art. 6, paragraph 1, let. f) of the GDPR).

Data provided on a voluntary basis:

• through the “Contact us” section of the Website or by sending e-mails to the addresses indicated on the Website: the optional, explicit and voluntary provision of your personal data to the mail addresses or e-mail addresses published on the Website entails the subsequent collection and processing of such data, necessary to pursue our and your legitimate interest in responding to requests sent by you in relation to the Website and/or our activities (art. 6, paragraph 1, let. f) of the GDPR). You are free not to provide such data. However, failure to provide such data may cause the impossibility to follow up on your request;
• when you call us via telephone: when contacting our telephone number, we may process the personal data spontaneously communicated by you during the telephone conversation or reasonably requested by us to pursue our and your legitimate interest in providing you with what has been requested (art. 6, paragraph 1, let. f) of the GDPR). You are free not to provide such data. However, failure to provide such data may cause the impossibility to follow up on your request;
• when you spontaneously send us a curriculum vitae using the addresses on the Website, when you reply to one of our job advertisements or when you conduct a job interview with us. We will process your personal data in order to pursue our legitimate interest in selecting and hiring workers who have a professional profile suited to our needs and consistent with the job position you are applying for (art. 6, paragraph 1, let. f) of the GDPR). The provision of such personal data is optional but necessary, since if it is not provided, it will not be possible to apply for a job position with us.

2. Who might have knowledge of my personal data?

Employees and/or collaborators of the Company in charge to manage the Website, provide assistance or provide you with what you have requested, might have knowledge of your personal data. Furthermore, entities which, acting as data processor, provide us with services that are instrumental to the performance of our business, might have knowledge of your personal data, including, but not limited to, IT and logistics service providers that are functional to the operation of the Website, and group companies that provide us with intra-group services.

3. Will my personal data be disclosed to third parties?

Your data could be communicated to the Judicial Authority at their request in the cases provided for by law.

4. How will my personal data be processed and how long will they be stored?

Your personal data will be processed using automated and non-automated tools. Specific security measures are put in place to prevent data loss, illicit or incorrect use and unauthorized access. The navigation data will be retained for a maximum period of 7 (seven) days, unless further storage is necessary to ascertain responsibility in the event of hypothetical computer crimes against the Website or to fulfill requests of the judicial Authority. If you have contacted us by letter, fax or e-mail to obtain information about the Website or our business, your data will be stored for the time required by law or for the time necessary to pursue the aforementioned processing purposes. The data collected through your application for a job with us will be kept in our files for a maximum period of 1 year from the date on which we received your CV or application, unless further retention of the data is necessary to formalize the employment relationship or to enable you to work in the event of a successful selection.

5. Will my personal data be transferred outside the European Economic Area?

No, your personal data will be stored and processed exclusively within the European Economic Area. However, in relation to the data obtained through cookies, please read our Cookie Policy.

6. Do you use cookies or other similar tools on the Website?

Yes, we use cookies on our Website. Please read our Cookie Policy.

7. What are my rights?

You have the right to exercise at any time, free of charge and without formalities the following rights as per articles from 15 to 22 of the GDPR: the right to request access to personal data (or the right to obtain from us the confirmation that data concerning you are being processed and, if so, to obtain the access to personal data, obtaining a copy themof and of the information referred to in Article 15 of the GDPR) and rectification (i.e. the right to obtain the correction of inaccurate data concerning you or the integration of incomplete data) or the erasure of the same (meaning the right to obtain the deletion of data concerning you, should any of the events indicated in Article 17 of the GDPR occur) or the restriction of the processing related to you (meaning the right to obtain, in the cases indicated in art. 18 of the GDPR, the marking of stored personal data with the aim of limiting their processing in the future), in addition to the right to data portability (i.e. the right, in the cases indicated in Article 20 of the GDPR, to receive from us, in a structured, commonly used and machine readable format the data concerning you, and to transmit it to another data controller without impediments). You also have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, based on point (e) (performance of a task carried out in the public interest or in the exercise of official authority) or (f) (legitimate interest) of Article 6(1) of the GDPR, including profiling based on those provisions. You also have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before revocation.

8. How can I contact the company and exercise my rights?

You can exercise your rights by contacting us by mail at the following address “Arsenale S.p.A., Via Giovanni Amendola, 46 – 00185 Rome – To the attention of the Privacy Officer” or by e-mail at info@arsenalegroup.com. We remind you that you always have the possibility to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) or to the different Supervisory Authority of the Member State of the European Union in which you reside or work or where the alleged violation has occurred.

Last update: September 2022