Information provided pursuant to Article 13 of European Regulation no. 679/2016 (GDPR)
This page describes the methods used to manage the personal data collected via this website (browsing log and cookies) and additional services connected thereto that imply an interaction with the user:
The Privacy Policy is given pursuant to Article 13 of GDPR and it refers exclusively to the website http://comfortzoneskin.com/ and not to other websites that may be visited by the user via links present on the above mentioned site.
Users (hereinafter referred to as the “data subjects”, pursuant to Art. 4, par.1 of GDPR) are informed on the following general profiles valid for all processing areas:
Davines S.p.A.
Registered Office
Via Tommaso Ravasini, 9/A
43126 Parma (PR)
Phone: 0521 965611
Fax: 0521 292597
email: info@davines.it
Headquarters
Via Don Angelo Calzolari
località Roncopascolo
43126 Parma (Sezione Golese)
The Data Controller has appointed a Data Protection Officer (DPO) who can be addressed in order to exercise all the rights provided by Articles 15-21 of the GDPR: right of access, right to rectification, right to erasure, right to restrict processing, right to data portability, right to object, as well as to revoke consent previously granted; should their requests not be followed up, data subjects can file a claim with the Personal Data Protection Authority (pursuant to Art. Art. 13, paragraph 2, letter d of the GDPR).
DPO contact details:privacydpo@davines.it
2.1 Browsing data
The information systems and software procedures required for the proper functioning of this site will acquire, during normal operation, some personal information whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with specific individuals, but by their own nature they could enable identification of the users, through processing and associations with data held by third parties. This category of data includes IP addresses or domain names of the computers used by the users that connect to the website, URI (Uniform Resource Identifier) addresses of the resources requested, request time, method used to submit the request to the server, size of the response file, numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the user’s IT environment.
Purpose and legal basis for processing (GDPR Art.13, paragraph 1, lett. c) |
These data are used only to obtain anonymous statistical information on website use and to check that is functioning properly. Data could be used to ascertain responsibility in case of suspected computer fraud against the website (legitimate interest of Data Controller). |
Scope of communication (GDPR Art.13, paragraph 1, lett. e, f,) |
Data shall be processed exclusively by internal staff who have been duly authorized and trained about processing (GDPR Art. 29) and shall not be communicated to external subjects, disclosed or transferred to non-EU countries. Only in case of investigation they may be made available to competent authorities. |
Retention period (GDPR Art.13, paragraph 2, lett. a) |
Data are normally retained for brief periods of time, except for possible extensions connected with investigation activities. |
Transfer (GDPR Art.13, paragraph 2, lett. f) |
Data are provided voluntarily by the data subject. |
2.2 Voluntary job applications
Purpose and legal basis for processing (GDPR Art.13, paragraph 1, lett. c) |
The personal data of the data subject sent with the CV or by filling out the relevant fields. Data are processed with the consent of the data subject and anyway for activities preceding an official employment contract and regarding any associated legal obligations. |
Scope of communication (GDPR , Art.13, paragraph 1, lett. e, f,) |
Data shall be processed exclusively by internal staff working in the Human Resources office, who have been duly authorised and trained about processing (GDPR Art. 29) and shall not be communicated to external subjects, disclosed or transferred to non-EU countries. |
Retention period (GDPR Art.13, paragraph 2, lett. a) |
Data are retained for two years. |
Provision (GDPR Art.13, paragraph 2, lett. f) |
The provision of personal data is optional, however failure to provide data and denial of the consent to process them may make it impossible to carry out a proper assessment of the post for the recruitment process and thus for the company to manage the job application. |
2.3 Contacts
The optional, explicit and voluntary sending of an email and/or ordinary mail to the addresses indicated in the section “Contacts” and anyway present on this site involves the subsequent acquisition of the sender’s address, which is necessary to respond to any requests, as well as any other personal data communicated.
Definition of cookie: Cookies are short text files sent to your computer. The website uses the following types of cookies:
There are additional essential technical cookies for the correct operation of the website. These cookies enable to provide the services requested by the users and to browse the site using its best performances. This type of cookie cannot be disabled since it is necessary for the correct operation of the site.
For additional information, refer to page http://www.google.com/policies/privacy
Point “D” describes how to disable profiling cookies managed internally. Third parties are independent controllers so reference is made to their privacy policies; the link to third parties is given below: Privacy Policy.
Chrome
Click the icon on the top right “Customize and control Google Chrome”
Click “History”
Click “Delete browsing data...”
Select the option “Cookies and other site and plug-in data”
Click “Delete browsing data”
Mozilla Firefox
Click “History”
Click “Clear recent history…”
Select the option “Cookie”
Click “Clear now”
Internet Explorer
Click “Tools”
Click “Internet options”
In “General tab” click “Delete…”
Select the option “Cookie”
Click “Delete”
Safari
Click “Favourites”
Click “Privacy”
Click “Delete website data…” and confirm
Even if our internet website does not contain anything that may not be seen by children, we would like to point out that in the “Contact form” on the “CONTACT US” page no personal data should be filled out by children without the prior consent of their parents or guardians. DAVINES S.p.A. encourages all parents and guardians to instruct children on the use of personal data on the Internet in a secure and responsible way. DAVINES S.p.A. undertakes not to retain or use any personal data that may have been typed in the form by children in any way, including disclosure to third parties.
DAVINES S.p.A informs that, pursuant to Article 13 of the GDPR, the personal data contained in the CV voluntarily sent to recruiting@davines.it may undergo the processing established by the law (consisting in the collection, storage, selection, comparison, erasure and destruction) during the activities of selection and recruitment of staff, exclusively with the purpose of assessing their profiles, attitudes and professional skills. Providing data is aimed at analyzing the candidacy for possible employment.
Information updated as at 23/05/2018. This update is part of a policy of continuous information revisions.