Privacy Policy

Information pursuant to art. 13 of Legislative Decree no. 196/2003 (Personal data protection code) and EU Regulation 2016/679 (GDPR – General Data Protection Regulation).

Giamaio wishes to inform the interested parties being processed that the personal data referred or referable to the interested party are processed by the undersigned Company in full compliance with current legislation on data processing and the confidentiality obligations that have always inspired us. "Personal data processing" means any operation or set of operations, carried out even without the aid of electronic instruments, concerning the collection, registration, organization, storage, consultation, processing, modification, the selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not recorded in a database.

Pursuant to article 13 of Legislative Decree 196/2003 and article 13 of the GDPR, in relation to the personal data we process following the establishment of reciprocal contractual and working relationships, we disclose the following information.

The Data Controller” for all legal purposes is Giamaio;
info@giamaio.com

Personal data is always collected from the interested party and may also concern company contact names provided by the companies with which the undersigned Company has contractual/commercial relationships.

The personal data of the interested party are processed in relation to contractual requirements and the consequent fulfillment of legal and fiscal obligations, as well as to allow effective management of financial and commercial relationships; this treatment will take place for the entire duration of the contractual relationship and also subsequently, for the fulfillment of legal obligations and for administrative and commercial purposes. The provision of personal data is mandatory in order to be able to fulfill the indicated purpose.

As part of the purpose for which personal data is collected, BioFuego processes said data according to the principles of correctness, lawfulness, transparency and protection of the confidentiality of the rights of the interested party.

Data processing takes place through the use of instruments and procedures suitable for guaranteeing security and confidentiality and can be carried out both through paper supports and through the aid of electronic instruments.

Personal data will not be disseminated in any way, while they may be communicated by us to the persons in charge, suitably appointed, of their treatment within our Studio; furthermore they may be communicated to subjects who need to access such data for purposes auxiliary to the relationship between our Company and the interested party, within the limits strictly necessary to carry out the auxiliary tasks entrusted to them, such as for example: credit institutions, administrative consultancy firm.

The provision of personal data is mandatory in order to fulfill contractual obligations; any refusal to provide such data could lead to the failure or partial realization of the contractual object.

The treatment is carried out with the use of appropriate security measures to minimize the risk of unauthorized access to data by third parties, their destruction and / or deterioration, and to guarantee confidentiality, pursuant to art. 32 of the GDPR.

Special categories of personal data.

When sending curriculum vitae, pursuant to articles 26 and 27 of the Privacy Code and articles 9 and 10 GDPR 2016/679, the interested party could voluntarily provide, to the undersigned Company, data that can be classified as "particular categories of personal data" (i.e. those data that reveal "racial or ethnic origin, political opinions, religious beliefs or philosophical, or trade union membership… genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sex life or sexual orientation of the person”). This category of data may be processed by Kapo Solution only with the prior consent of the interested party, expressed in writing.

The subject interested in the treatment may exercise the rights pursuant to art. 7 "Right of access to personal data and other rights" of the Code regarding the protection of personal data, the content of which is reproduced below in full:

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

The interested party has the right to obtain the indication:

a) the origin of the personal data;

b) the purposes and methods of processing;

c) of the logic applied in case of treatment carried out with the aid of electronic instruments;

d) of the identification details of the owner, of the managers and of the designated representative pursuant to article 5, paragraph 2;

e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents.

The interested party has the right to obtain:

a) updating, rectification or, when interested, integration of data;

b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;

c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means manifestly disproportionate to the protected right.

The interested party has the right to object, in whole or in part:

a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;

b) to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication".

Furthermore, pursuant to the GDPR, we point out that the interested party may exercise the following rights against the undersigned Company:

– Obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to personal data and all the information required by art. 15 of the GDPR.

– Obtain the rectification of inaccurate personal data concerning you without unjustified delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.

– Obtain the cancellation of personal data concerning you without unjustified delay.

– Obtain the limitation of treatment when one of the hypotheses provided for by art. 18 of the GDPR.

– Receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning the interested party provided to the undersigned Company.

– Oppose at any time, for reasons related to your particular situation, to the processing of personal data concerning you pursuant to article 6, paragraph 1, letters e) of) of the GDPR. In this case, the company will refrain from further processing the personal data unless there are binding legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

– Not to be subjected to a decision based solely on automated processing, which produces legal effects concerning you or which significantly affects your person in a similar way. This right does not apply in cases governed by art. 22, paragraph 2 of the GDPR.

– Contact the Supervisory Authority to complain if you believe that your data has been processed unlawfully.

The Data Controller

Jamaica