Privacy Notice on the processing of personal data of users of the website www.great-realestate.it
This privacy notice describes, pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, the “Regulation” or “GDPR”), the characteristics of the processing of personal data collected and processed through the website www.restarthospitality.it (the “Website” and this “Notice”) by GREAT S.p.A., with registered office at Via Bernardo Quaranta 40, 20139 Milan (“GREAT”).
This Notice does not apply to third-party websites, applications or content in general, even if accessible through the Website. In such cases, the data protection provisions of those third parties may apply; these may differ from this Notice and we recommend that you review them before providing any data.
- Data Controller
For the purposes of this Notice, the data controller is GREAT S.p.A., with registered office at via Bernardo Quaranta 40, 20139 Milan, registered with the Milan Companies Register under number 00815040159 (the “Controller”).
- Data collected
GREAT. collects personal data through the Website when users submit requests through the contact forms available on the Website or send communications by e-mail.
“Personal data” means any information that can be used to identify a data subject directly or indirectly.
The Controller may also automatically collect certain personal data when you access, use or interact through the Website.
Data you provide through the Website
GREAT collects personal data that each user voluntarily provides, for example by communicating with the Controller or sending requests or communications, including by e-mail or by completing the contact forms available on the Website to request information.
The personal data that each user may provide in this way includes, by way of example and without limitation, first name and surname, e-mail address and telephone number.
Data you provide through the “APPLY NOW” form
GREAT collects personal data in order to submit applications for job positions offered through the website. The data collected is: first name, surname, telephone number, e-mail address and the candidate’s curriculum vitae. Providing this data is optional and does not restrict navigation of the website.
The data will be retained in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, for a maximum period of 6 months from collection (as further specified in paragraph 7 below).
Data we may collect automatically
We use cookies and similar technological tools on the Website (collectively, “Cookies”) to collect and store data relating to use of, access to or interaction through the Website. For example, we may collect data concerning the type of device used to access the Website, the operating system, your IP address, your general geographical location as indicated by your IP address, the type of browser used, the content you view and access through the Website, how you may interact with the content available on the Website and the keywords entered to search the Website.
For more information about the use of cookies on this website, please see the Cookie Policy at this link.
- Purposes of personal data processing and legal basis
The purposes for which your personal data will be processed by GREAT S.p.A., as data controller, are as follows:
a) to respond to your requests for information, including requests sent by e-mail to the contact details indicated on the Website;
b) to perform the engagement entrusted to it and comply with the related legal obligations;
c) to assess the applicant as part of the personnel selection process for the position offered and/or to evaluate unsolicited applications;
GREAT, as data controller, processes your data to carry out the activities referred to in point a) of this paragraph 3 and, therefore, to respond to your express requests. The legal basis is therefore the Controller’s legitimate interest in responding to requests from data subjects. This interest of the Controller has been balanced against the interests of data subjects and is compatible with their reasonable expectations, since it is reasonable to assume that they wish to receive a response to their requests.
GREAT S.p.A., as data controller, processes your data to carry out the activities referred to in point b) of this paragraph 3 and therefore to perform the activities concerning the engagement entrusted by the data subject. The legal basis is therefore the performance of contractual measures.
The processing of your data for the purposes referred to in points a) and b) of this paragraph 3 is necessary: without it, your requests cannot be fulfilled.
GREAT S.p.A. processes your data to carry out the activities referred to in point c) of this paragraph 3 only with your express consent. The legal basis is therefore your consent.
Consent may validly be given and withdrawn with reference to one or more of the processing purposes indicated above.
Consent may be withdrawn at any time in ways similar to those provided for giving it, by contacting us at the contact details set out at the end of this Notice, without affecting the lawfulness of processing based on consent before its withdrawal.
- Disclosure of personal data collected
The Data will be processed by the Controller and by the parties appointed by it and may be disclosed to third parties only where necessary to carry out the activities referred to in Article 3 above.
Depending on the circumstances, third-party recipients of the Data may process it as independent data controllers or as duly appointed data processors.
The complete list of Data processors is kept at the Controller’s registered office and may be consulted upon request sent to the contact details indicated in Article 8 below.
- Methods of processing
Your personal data will be processed by employees and/or collaborators of the Controller, specifically designated as persons authorised to process data (including, by way of example and without limitation, staff responsible for the legal function, administrative function and information systems), and by external processors, whose respective names are available upon request to the Data Controller pursuant to this Notice.
The Data Controller and the third parties it uses process your personal data by electronic or otherwise automated means, according to procedures strictly related to the relevant purposes, storing it on servers and/or in archives located within the European Union and, in any event, in a manner that ensures the security and confidentiality of the personal data.
- Dissemination of personal data
Your personal data will not be disseminated.
- Personal data retention period
GREAT S.p.A., as data controller, will retain your personal data in a form that permits your identification for no longer than necessary to achieve the purposes of the processing. In particular, for the purposes referred to in point a) of paragraph 3, personal data will be retained for a maximum period of 12 months from collection; for the purpose referred to in point b) of paragraph 3, for the entire duration of the engagement, if conferred, and for the applicable limitation period; and for the purposes referred to in point c) of paragraph 3, for a maximum period of 6 months from collection.
- Rights of the data subject
Each data subject has the right at any time to: (I) obtain confirmation as to whether or not personal data concerning them exists; (II) know the purposes and methods of processing, the recipients of such personal data and the retention period; (III) obtain rectification or erasure and, where applicable, restriction of processing; (IV) object to processing; (V) where applicable, receive the personal data concerning them that they provided to the Controller in a structured, commonly used and machine-readable format, and transmit that data to another data controller without hindrance from the Controller; (VI) lodge a complaint with the Italian Data Protection Authority; (VII) select the methods by which they wish to be contacted for the purposes referred to in points c) and d) of paragraph 3 above and, in particular, indicate whether they wish to be contacted by so-called traditional methods (paper mail, telephone with an operator), by so-called automated methods (e-mail, SMS, telephone without an operator, etc.) or by both categories.
The above rights may be exercised at any time by sending a simple request to GREAT S.p.A. at Via Bernardo Quaranta, 40 – 20139 Milan (MI) – Italy, or by e-mail to privacy@gabettigroup.com.