INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE COMPILATION OF THE FORMS OF THE KROMO WEBSITE
This information integrates the website navigation policy, with the aim of illustrating how the Data Controller will specifically process the data entered in this form.
Identity and contact details of the Data Controller
KROMO – Ali Group S.r.l., hereinafter also “KROMO” or “Owner” with registered office in Via Gobetti 2/a, 20063 Cernusco sul Naviglio (MI) Italy and with production headquarters in Via Mestre 3 – 31033 – Castelfranco Veneto (TV), and can be contacted at the email address kromo@kromo-ali.com, on the telephone number +39 0423 734580.
Purposes and legal bases
- A. Management of the application (WORK WITH US form): personal data are processed for all needs related to the verification of profiles of interest.
- B. Management of requests for information (CONTACTS form): personal data are processed for all needs related to processing requests for information and/or quotes.
- C. Management of user registration (RESERVED AREA form FOR PRICE LIST AND AUTOCAD/BIM ACCESS): personal data is processed to allow the creation of an account and subsequent access to the reserved area.
- D. Defensive purposes: the Data Controller may need to process personal data for the management of out-of-court or judicial disputes and disputes.
| Purpose | Legal basis (common data) | Legal basis (particular data) |
|---|---|---|
| A. | Execution of pre-contractual measures. | Fulfillment of obligations in the field of labor law. |
| B. | Execution of pre-contractual measures; Legitimate interest of the Data Controller in responding to requests received. | / |
| C. | Execution of the contract | / |
| D. | Legitimate interest of the Owner to ascertain, exercise or defend a right. | Establish, exercise or defend a right. |
Storage time
| Purpose | Storage time |
|---|---|
| A. | 24 months from the submission of information. |
| B. | Time necessary to process the requests received and subsequent discussions. |
| C. | 36 months from the last interaction with the user (e.g. login). |
| D. | 10 years from the final resolution of the dispute. |
Nature of the provision and consequences in case of refusal
| Purpose | Nature | Consequences |
|---|---|---|
| A. | Required | Impossibility for the interested party to present his/her application and for the Data Controller to manage the selection. |
| B. | Required | Inability to register an account and receive the additional services provided for registered users. |
| C. | Required | Inability to start or continue the business relationship. |
| D. | Required | Inability to manage the dispute. |
Communication scope
The data is processed by internal staff authorized for specific tasks and is communicated externally according to the following rules:
| Purpose | Categories of external recipients |
|---|---|
| A. | Companies belonging to the same business group, occupational doctor, employment consultant, personnel selection agency, employment agencies. |
| B. | Companies belonging to the same entrepreneurial group, agents, commercial consultants. |
| C. | External consultants, companies that offer hosting/management services for technology platforms, companies that provide authentication tools. |
| D. | Law firms; credit collection or transfer company; Judicial authority. |
Since the data is also processed with IT tools, it could also be visible to those who carry out assistance/maintenance on these systems.
Data transfer to a third country or an international organization
The Data Controller does not transfer personal data outside the European Economic Area.
Rights of interested parties
The subject to whom the personal data refers is granted the following rights:
Access:
it is possible to find out whether your personal data is being processed and, if so, to obtain and request a copy of it.
Rectification:
it is possible to request the updating of your personal data, their correction (if inaccurate) and the integration of incomplete data.
Cancellation:
it is possible to obtain the cancellation of your personal data if certain conditions are met (for further information contact the Data Controller).
Limitation:
it is possible to request that the data be marked, so as to limit its processing in the future, if certain conditions are met (for further information contact the Data Controller).
Opposition:
it is possible to object to the processing of personal data, for reasons related to your particular situation, where the processing is based on legitimate interest or is necessary for the execution of a task of public interest or connected to the exercise of public powers referred to the Owner is invested;
Portability:
it is possible to receive the personal data provided to the Data Controller in a structured format and to transmit it to another data controller if the processing is based on consent or contract and is carried out by automated means.
Revocation of consent:
it is possible to revoke consent for the purposes that required it, without prejudice to the lawfulness of the processing carried out up to that point.
The rights that can actually be exercised in relation to the processing activities carried out are:
| Scope | Access | Rectification | Cancellation | Limitation | Opposition | Portability | Revocation of consent |
|---|---|---|---|---|---|---|---|
| A. | X | X | X | X | |||
| B. | X | X | X | X | X | ||
| C. | X | X | X | X | X | ||
| D. | X | X | X | X | X |
To exercise the above rights you can use the form available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and forward it to the following address: kromo@kromo-ali.com. The interested party may request from the same address to obtain further details in relation to the above information (e.g. legitimate interest balancing test or the list of data controllers).
It is possible to lodge a complaint with a Supervisory Authority: for Italy, the Guarantor Authority for the Protection of Personal Data (www.garanteprivacy.it).
