Pursuant to the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (“Regulation”), the data controller XNEXT S.r.l. (the “Company”) wishes to inform you about the way the personal data referring to you are processed when you use or interact with our website www.x-next.com (“Website”).
The processing of personal data freely provided by you or otherwise collected during your use of the Website will be carried out in accordance with the applicable data protection laws.
XNEXT S.r.l. with registered office in Via Valtorta 48, 20127, Milano (MI), Tax Code and VAT No. 08523280967, certified email (“PEC”): email@example.com.
We will process personal data (“Personal Data” or “Data”) collected or provided by you during your use of and interaction with the Website, such as:
Personal Data are processed by the Company for the following purposes:
The Personal Data collected may also be processed in the context of any corporate transaction (e.g. sale of the Company or going concern), due diligence exercises, in the event of defence of legal claims and related preliminary activities.
The processing of Personal Data for the purpose referred to in paragraph 3, lett c) is carried out in order to respond to your requests on the basis of a legitimate interest of the Company. Any refusal to provide the Data for the purposes set out above will make it impossible to manage and follow up your requests.
The processing of Personal Data for the purpose referred to in paragraph 3, lett. d), is necessary in order to perform the pre-contractual measures adopted upon your request when you apply for a job position at the Company. Where you provide “special categories of data” under art. 9 of the Regulation (e.g. data concerning your health), you provide your consent for processing such data to the Company. Any refusal to provide the Data for the purposes set out above will make it impossible to complete the selection procedures with reference to your application.
In case of processing in the event of any potential corporate transaction (e.g. sale of the Company or going concern), due diligence exercise, in case of defence of a right in court and with reference to the related prodromal activities, such processing will be carried out on the basis of legitimate interests of the Company in the continuation of its commercial activities and for the protection of its rights. In the unlikely case that the defence of the Company’s right will require the processing of “special categories of data” under art. 9 of the Regulation (e.g. data concerning your health), the Company will rely on the legal basis provided by art. 9(2)(f).
Personal Data are processed mainly at the Company with suitable electronic and manual means as to guarantee security and confidentiality, implementing the security measures.
Your Data will be stored, in compliance with the applicable law, for a term not exceeding what is necessary to pursue the purposes for which they are processed.
The criteria for determining the storage period of the Data takes into account the allowed processing period and the applicable law on limitation of rights and legitimate interests of the data subject where these are the legal basis for processing.
After this, Data will be deleted, aggregated or anonymized.
The processing of Personal Data referred to in the previous points will be carried out both with the use of paper and with suitable electronic and IT tools to ensure the security and confidentiality of the Data.
Personal Data will be disclosed to the persons authorized to process Data in the Company’s staff.
The Data may be disclosed by the Company solely and exclusively for the purposes indicated and where necessary to the following categories of subjects:
Personal Data will not be disclosed to the public.
Entities belonging to the categories listed above, may act, as the case may be, as data processors (and in this case they will receive appropriate instructions from the Company) or as autonomous data controllers. In the latter case, the Personal Data will be communicated only with the express consent of the data subjects, except where the communication is mandatory or necessary pursuant to law or for the pursue of purposes for which the consent from the data subject is not required.
The Company, in its capacity as data controller, also have the right to transfer your Personal Data to third countries. Transfers of Data outside the European Economic Area are subject to a special regime pursuant to the Regulation, and are only made in respect of countries that ensure an adequate level of personal data protection, on the basis of an adequacy decision of the Commission or where adequate safeguards have been adopted (including the standard contractual conditions provided by the European Commission), provided that the data subjects have enforceable rights and effective judicial remedies.
At any time, you will be entitled to:
You also have the right to withdraw your consent to the processing of your Personal Data (where given) at any time, without prejudice to the lawfulness of the processing based on your consent before the relevant withdrawal.
These rights may be exercised by sending a communication via e-mail to firstname.lastname@example.org According with the Regulation, the Company may not charge for complying with the any of the requests mentioned in this paragraph, unless they are clearly unfounded or excessive, and are repetitive. Should you request more than one copy of your Personal Data or in cases of excessive or unfounded requests, the Company may: (i) charge a reasonable expense, considering the administrative costs incurred to fulfil the request; or (ii) refuse to fulfil the request. In these cases, the Company will inform you of the costs before fulfilling the request.
The Company may ask for further information before fulfilling the requests if it needs to verify the identity of the person who has made them.
Without prejudice to any administrative or legal remedy, you also have the right to lodge a complaint to the relevant supervisory Authority (the “Garante per la protezione dei dati personali”), if you believe that processing of your data breaches the Regulation. More information is available on the website https://www.garanteprivacy.it.
In any case, the Company is interested in knowing the reasons for the complaint and requests that you use the above contact methods before turning to the authorities, in order to prevent and resolve any disputes, amicably and promptly, with the greatest courtesy, professionalism and discretion.