The privacy policy of www.pegasoftsrl.it

This website collects users’ personal data under Article 13 of Legislative Decree 196/2003 and EU Regulation 679/2016.

Pegasoft srl
Via Francesco Cilea, n.15 scala C
87036 – Rende (CS)
– Italia
Email: privacy@pegasoftsrl.it

The types of personal information collected by this website, either independently or through third parties, include: Cookies; Browsing Data including IP addresses and other parameters related to the user’s operating system and computer environment; Identifying Data including: Identifying Data including: Curriculum Vitae; First and Last Name; Company Name or Social Security Number and Address; Identifying Data including: Email; User Name; Telephone Number.

Full details of each type of data collected are provided in the relevant sections of this Privacy Policy or through specific notices displayed before the data is collected.
Personal Data may be provided voluntarily by the User or, in the case of usage data, may be collected automatically during the use of this Web Site.
Unless otherwise specified, all data requested by this website is mandatory. If the User refuses to provide it, it may be impossible for this Web Site to provide the Service. In cases where this Web Site indicates that certain data is optional, the User is free to refrain from providing such data, without this having any effect on the availability of the Service or its operation.
Users who are in doubt as to which data is mandatory are encouraged to contact the data controller.
Any use of cookies – or other tracking tools – by this Site or the owners of third-party services used by this Site, unless otherwise specified, is for the purpose of providing the service requested by the user, in addition to the additional purposes described herein and in the cookie policy, if any.

The provision of data in the corresponding “Work with us” form is optional and depends on the willingness of the interested party, therefore, the user assumes responsibility for the personal data of third parties obtained, published or shared through this website and guarantees that he/she has the right to communicate or disseminate them, releasing the owner from any liability towards third parties.

Type of treatment

The Data Controller shall adopt appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data.
The processing is carried out with the help of computer and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases other subjects involved in the organization of this Web site (administrative, sales, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed by the Data Controller may have access to the data. The updated list of Data Processors may be requested from the Data Controller at any time.

Legal basis for processing

The Owner processes personal data related to the User if one of the following conditions is met

  • the user has given his or her consent for one or more specific purposes; Note: In some jurisdictions, the data controller may be entitled to process personal data without the need for the user’s consent or any of the other legal bases listed below, as long as the user does not object (“opt-out”) to such processing. However, this does not apply if the processing of personal data is subject to European legislation on the protection of personal data;
  • The processing is necessary for the performance of a contract with the user and/or the execution of pre-contractual measures;
  • The processing is necessary for the performance of a legal obligation to which the data controller is subject;
  • The processing is necessary for the performance of a task in the public interest or in the exercise of public authority vested in the controller;
  • The processing is necessary to pursue the legitimate interests of the owner or third parties.

However, it is always possible to ask the data controller to clarify the specific legal basis of each processing operation and, in particular, to specify whether the processing is based on law, required by contract or necessary for the conclusion of a contract.

Location

All data relating to the processing of “Personnel Search” will be processed and stored in hard copy at the Data Controller’s operational locations and on Microsoft’s Azure cloud platform for secure data storage and use, and any other location where the parties involved in the processing are located. For more information, please contact the Data Controller.
The user’s personal data may be transferred to a country other than the country in which the user is located. For more information about the location of the processing, the User can refer to the section on the details of the processing of personal data.

The user has the right to obtain information on the legal basis for the transfer of data outside the European Union or to an international organization under public international law or composed of two or more countries, such as the UN, as well as on the security measures taken by the data controller to protect the data.

The User may verify whether any of the transfers just described take place by consulting the section of this document that deals with the details of the processing of personal data, or may request information from the Data Controller by contacting him at the contact details indicated at the beginning of this document.

Storage Period

The data will be processed and kept for the time necessary for the purposes for which they were collected.

So:

  • Personal data collected for purposes related to the performance of a contract between the data controller and the user will be kept until the performance of that contract is completed.
  • Personal data collected for purposes attributable to the Controller’s legitimate interest will be kept until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
  • Data collected as part of the recruitment process in the relevant “Work with us” form will be retained for 12 months from the date of receipt of the resume and completion of the form.

If the processing is based on the User’s consent, the Controller may retain Personal Data longer until such consent is withdrawn. In addition, the Controller may be required to retain Personal Data for a longer period in order to comply with a legal obligation or an order of an authority.

At the end of the retention period, the personal data will be deleted. Therefore, at the end of this period, the rights of access, deletion, rectification and portability of data may no longer be exercised.

User data is collected to enable the Data Controller to provide the Service, to comply with legal obligations, to perform a contract to which the data subject is a party or to perform pre-contractual measures taken at the request of the data subject, to respond to requests or enforcement actions, to protect its own rights and interests (or those of users or third parties), to detect malicious or fraudulent activities, as well as for the following purposes Statistics, (integration of new resources into the company), interaction with social networks and external platforms, advertising, access to accounts on third party services, commenting on content, contacting the user, interaction with live chat platforms, interaction with support and feedback platforms, location-based interactions, traffic optimization and distribution, protection against SPAM, platform and hosting services, performance testing of content and functionality (A/B testing), display of content from external platforms and tag management.

For detailed information on the purposes of the processing and on the personal data processed for each purpose, the User may refer to the section “Details of the processing of personal data”.

This site may require certain Facebook permissions to perform actions with the user’s Facebook account and to collect information, including personal information, from the user’s Facebook account. This service allows this website to connect to the user’s account on the social network Facebook, provided by Facebook Inc.

For more information about the following permissions, see the Facebook permissions documentation and the Facebook Privacy Policy.

The following permits are required:

Basic Information

The basic information of the user registered on Facebook, which usually includes the following data: id, name, image, gender and language of the location and, in some cases, Facebook “friends”. If the user has made additional information publicly available, that information will also be available.

Access to your personal data

Allows access to users’ and friends’ private data.

Personal information is collected for the following purposes and services:

  1. ACCESS TO ACCOUNTS ON THIRD-PARTY SERVICES

    These types of services allow this website to take data from your accounts with third party services and perform actions with them.
    These services are not automatically enabled, but require your explicit consent.

    Access to Facebook account (this website)
    This service allows this website to connect to the user’s account on the social network Facebook, provided by Facebook, Inc.
    Permissions required: Access to private data.
    Place of processing: United States – Privacy Policy.

  2. CONTENT COMMENT

    The comment services allow users to formulate and publish their own comments on the content of this website.
    Depending on the settings decided by the Data Controller, Users may also leave their comments anonymously. If the personal data provided by the User includes an email address, this may be used to send notifications of comments relating to the same content. Users are responsible for the content of their comments.
    In the event that a third party commenting service is installed, it is possible that even if Users do not use the commenting service, it may collect traffic data relating to the pages on which the commenting service is installed.

    Directly managed commenting system (this website)
    This website has its own system for commenting on content.
    Personal data processed: Surname; Cookie; Email; Name; Phone number; Username.

  3. CONTACTING THE USER

    Contact by telephone (this site)
    Users who have provided their telephone number may be contacted for the purpose of recruiting new resources to the Company (e.g. to arrange an interview following completion of the ‘work with us’ form) or for commercial or promotional purposes relating to this website, as well as to fulfil support requests.
    Personal data processed: phone number.

    Mailing list or newsletter (this website)
    By subscribing to a mailing list or newsletter, the user’s e-mail address is automatically added to a list of contacts to whom e-mail messages may be sent containing information, including commercial and promotional information, relating to this website. The User’s email address may also be added to this list as a result of registration on this Site or following a purchase.
    Personal data processed: Surname; Email; First name.

    Contact form (this website)
    By filling in the contact form with their data, users consent to the use of such data to respond to requests for information, offers or any other type of request indicated in the header of the form.
    Personal data processed: name; surname; e-mail; telephone.

  4. TAG MANAGEMENT
    This type of services is functional for the centralised management of tags or scripts used on this website.
    The use of these services involves the flow of user data through them and, where appropriate, their storage.

    Google Tag Manager
    Google Tag Manager is a tag management service provided by Google LLC or Google Ireland Limited, depending on where this website is used.
    Personal data processed: Usage data.
    Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.

  5. LOCATION BASED INTERACTIONS
    Non-continuous geolocation (this website)

    This website may collect, use and disclose data relating to a user’s geographic location in order to provide location-based services.Most browsers and devices provide tools by default to prevent geographic location tracking. If the user has expressly authorised this possibility, this website may receive information about the user’s actual geographical location.
    The geographical localisation of the user is carried out on a temporary basis, at the specific request of the user or when the user does not indicate in the relevant field where he/she is and allows the application to automatically detect his/her position.
    Personal data processed: geographical location.

  6. INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS
    This type of service allows you to interact with social networks or other external platforms directly from the pages of this website.
    Interactions and information obtained through this Site are subject to the user’s privacy settings for each such social network.
    This type of service may still collect traffic data for pages where the service is installed, even if users do not use it.
    It is recommended that you log out of these services. This ensures that the data processed on this website is not linked back to your profile.

    LinkedIn Social Button and Widgets (LinkedIn Corporation)
    LinkedIn’s social button and widgets are services for interacting with the LinkedIn social network provided by LinkedIn Corporation.
    Personal data processed: Cookies; Usage data.
    Place of processing: United States – Privacy Policy.

    Facebook Like Button and Social Widgets (Facebook, Inc.)
    The Facebook ‘Like’ button and social widgets are interaction services with the Facebook social network provided by Facebook, Inc.
    Personal data processed: Cookies; Usage data.
    Personal data processed: Cookies; Usage data.
    Place of processing: United States – Privacy Policy.

    Twitter Tweet Button and Social Widgets (Twitter, Inc.)
    The Tweet button and Twitter social widgets are services for interacting with the Twitter social network provided by Twitter, Inc.
    Personal data processed: Cookies; Usage data.
    Place of processing: United States – Privacy Policy.

    Jetpack by WordPress.com
    Jetpack is a service provided by Automattic Inc. that allows you to interact with social networks and external platforms and share content on this website.
    Personal data processed: various types of data as specified in the privacy policy of the Service.
    Place of processing: United States – Privacy Policy.

  7. SPAM PROTECTION
    This type of service analyses the traffic on this website, which may contain users’ personal data, in order to filter out traffic, messages and content that are identified as SPAM.

    Google reCAPTCHA (Google Inc.)
    Google reCAPTCHA is a SPAM protection service provided by Google Inc.
    Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Use.
    Personal data processed: Cookies; Usage data.
    Place of processing: United States – Privacy Policy.

  8. PLATFORM AND HOSTING SERVICES
    The purpose of these services is to host and operate key components of this Website, enabling this Website to be delivered from a single platform. These platforms provide the Owner with a wide range of tools, such as analytical tools, user registration management, comment and database management, e-commerce tools, payment processing tools, etc. The use of these tools involves the collection and processing of personal data. Some of these services operate through servers located in different geographical locations, making it difficult to determine the exact location where Personal Data is stored.

    WordPress.com (Automattic Inc.)
    WordPress.com is a platform provided by Automattic Inc. that enables the owner to develop, operate and host this website.
    Personal data processed: various types of data as specified in the privacy policy of the Service.
    Place of processing: United States – Privacy Policy.

  9. STATISTICS
    The services contained in this section allow the data controller to monitor and analyse traffic data and to keep track of the user’s behaviour.

    Google Analytics (Google Inc.)
    Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google will use the information to evaluate your use of the website, compile reports and share this information with other Google services.
    Google may use personal data to contextualise and personalise ads across its advertising network.
    Personal Data processed: Cookies; Usage data.
    Place of processing: United States – Privacy Policy Opt out.

    Google Analytics with anonymised IP (Google Inc.)
    Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google will use the information to evaluate your use of the website, compile reports and share this information with other Google services.

    Google may use personal data to contextualise and personalise ads in its advertising network.
    This Google Analytics integration will make your IP address anonymous. Anonymisation works by truncating the IP address of users within the member states of the European Union or other countries that are party to the European Economic Area Agreement. Only in exceptional cases is the IP address sent to Google’s servers and shortened within the USA.

    Personal data processed: Cookies; Usage data.
    Place of processing: United States – Privacy PolicyOpt Out.

    WordPress Stats (Automattic Inc.)
    WordPress Stats is a statistics service provided by Automattic Inc.
    Personal data processed: Cookies; Usage data.
    Place of processing: United States – Privacy Policy.

    WP Statistics (VeronaLabs)
    WP Statistics is a popular analytics plugin. It provides a detailed view of visitors, traffic sources and the most popular content, including the best performing categories, tags and authors.
    Data storage: local.
    Features: Anonymises IP recipients, respects DNT (Do Not Track) requests from browsers, generates a new salt every day and includes the user agent in the hash.

  10. DISPLAY OF CONTENT FROM EXTERNAL PLATFORMS
    This type of service makes it possible to display and interact with content hosted on external platforms directly from the pages of this website.
    When such a service is installed, it may collect traffic data relating to the pages on which it is installed, even if the user does not use the service.

    Google Fonts (Google Inc.)
    Google Fonts is a font rendering service provided by Google Inc. that enables this website to include fonts on its pages.
    Personal data processed: Usage data; various types of data as specified in the Privacy Policy of the Service.
    Place of processing: United States – Privacy Policy.

Users have certain rights with regard to the processing of data by the data controller.

In particular, according to article 7 of the Privacy Code and articles 15 and following of the GDPR, the User is entitled to

  • revoke consent at any time. The User may revoke his or her previously given consent to the processing of his or her personal data.
  • oppose the processing of their Data. You have the right to object to the processing of your data if it is based on a legal basis other than consent. Further details on the right to object can be found in the section below.
  • access to their Data. The User has the right to obtain information on the data processed by the Controller, on certain aspects of the processing and to obtain a copy of the data processed.
  • check and ask for a correction. The User may verify the accuracy of his/her data and request that it be updated or corrected.
  • obtain a limitation on processing. Under certain conditions, the User may request that the processing of his/her data be restricted. In this case, the data controller will not process the data for any purpose other than its storage.
  • obtain the deletion or removal of their Personal Data. Under certain conditions, the user may request the deletion of his/her data by the data controller.
  • receive their Data or have them transferred to another data controller. The User has the right to receive his or her data in a structured, commonly used and machine-readable format and, where technically possible, to have it easily transferred to another data controller. This provision applies when the data is processed by automated means and the processing is based on the user’s consent, on a contract to which the user is a party or on contractual measures related thereto.
  • make a complaint. The User may complain to the relevant data protection authority or take legal action.
Details of the right of objection

Where personal data are processed in the public interest, in the exercise of public authority vested in the controller or in pursuit of a legitimate interest of the controller, users have the right to object to the processing on grounds relating to their particular situation.

Users are informed that if their data is processed for direct marketing purposes, they may object to such processing without giving any reason. To find out whether the Controller processes data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise your rights

In order to exercise their rights, users may send a request to the contact details of the Data Controller indicated in this document. Requests are free of charge and will be dealt with by the Data Controller as soon as possible and in any case within one month.

This website uses tracking tools. To find out more, the user can consult the cookie policy.

Legal defence

The User’s personal data may be used by the Data Controller in the event of legal proceedings or in the preparatory stages of such proceedings, in order to defend the User’s use of this website or the services associated with it.
The User declares that he/she is aware that the Data Controller may be obliged to disclose the data by order of public authorities.

Specific details

At the user’s request, in addition to the information contained in this Privacy Policy, this Website may provide the user with additional and contextual information regarding specific services or the collection and processing of personal data.

System logs and maintenance

For operation and maintenance purposes, this Site and any third party services used by it may collect system logs, which are files that record interactions and may include personal information such as a user’s IP address.

Information not included in this policy

Further information regarding the processing of personal data is available from the Data Processor using the contact information.

How to respond to ‘Do Not Track’ requests

This website does not support ‘Do Not Track’ requests.
In order to find out whether the third party services used support them, the User is invited to consult the privacy policy of the respective third party service.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying users on this page and, where possible, on the Website and, where technically and legally feasible, by sending a notification to users via one of the contact details it holds. We encourage you to check this page periodically by referring to the last updated date at the bottom of the page.

If the changes affect processing for which the legal basis is consent, the controller shall, where necessary, obtain the user’s consent again.

Personal information (or data)

Personal information is any information that, directly or indirectly, even in conjunction with other information, including a personal identification number, identifies or allows the identification of a natural person.

Data usage

This is the information collected automatically by this website (including by third party applications integrated into this website), including IP addresses or domain names of computers used by users connecting to this site, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (e.g. the time spent on each page) and details of the itinerary followed by the user. The data collected will include the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (e.g. the time spent on each page) and details of the itinerary followed within the application, with particular reference to the sequence of pages consulted, the operating system parameters and the user’s computer environment.

User

The individual who uses this web site and who, unless otherwise indicated, is the data subject.

Subject

The natural person to whom the personal data relates.

Data Processor (or Manager)

The natural person, legal entity, public administration or any other body that processes personal data on behalf of the Controller as set out in this Privacy Policy.

Data Controller (or Owner)

The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data and the instruments adopted, including security measures, relating to the operation and use of this website. Unless otherwise indicated, the data controller is the owner of this website.

This Website (or this Application)

The hardware or software tool used to collect and process users’ personal information.

Service

The service provided by this website as defined in the relevant terms (if any) on this site/application.

The European Union (or EU)

Unless otherwise stated, any reference in this document to the European Union shall be deemed to include all current Member States of the European Union and the European Economic Area.

Cookie

A cookie is a tracking tool that consists of a small piece of data that is stored in the user’s browser.

Tracking and tracing tool

Tracking Tool means any technology – such as cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – that enables users to be tracked, for example by collecting or storing information on the user’s device.


Legal references

This Privacy Policy has been drafted on the basis of several legal requirements, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise stated, this privacy policy applies only to this website.

Last modified: 02 September 2022