Privacy Policy

Pursuant to the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (“Regulation”), the data controller XNEXT S.r.l. (the “Company”) wishes to inform you about the way the personal data referring to you are processed when you use or interact with our website www.x-next.com (“Website”).

The processing of personal data freely provided by you or otherwise collected during your use of the Website will be carried out in accordance with the applicable data protection laws.

In particular, your personal data will be processed lawfully, fairly and in a transparent manner. The data will be relevant, complete and not exceeding the purposes for which they will be processed. In addition,the data will be collected and stored for the sole purposes indicated in this Policy. Further information is available in the Cookie policy.

1 Data controller

XNEXT S.r.l. with registered office in Via Valtorta 48, 20127, Milano (MI), Tax Code and VAT No. 08523280967, certified email (“PEC”): xnextsrl@legalmail.it.

2 Categories of data processed

We will process personal data (“Personal Data” or “Data”) collected or provided by you during your use of and interaction with the Website, such as:

  • your IP address;
  • navigation data on the Website;
  • information on the browser and the device;
  • information collected through cookies as better specified in the Cookie policy;
  • your name, surname, e-mail address or other Data provided when you use our contact forms on the Website or ask to access our catalogue;
  • your name, surname, contact details and all other Data you provide in your CV and cover letter applying for a job position at the Company.

3 Purposes of the processing

Personal Data are processed by the Company for the following purposes:

  • to fulfil any legal obligation under laws in force;
  • to allow you to benefit from the information and the features offered by the Website;
  • to obtain the information you requested through our contact form in the “Contact Us” section or to give you access to the catalogue;
  • to allow you to submit your application for a job position at the Company through the “Join us” section.

The Personal Data collected may also be processed in the context of any corporate transaction (e.g. sale of the Company or going concern), due diligence exercises, in the event of defence of legal claims and related preliminary activities.

4 Legal basis of the processing and consequences of failure to provide Data

Without prejudice to legal obligations under paragraph 3, lett. a), the processing of your Personal Data provided by you for the purposes referred to in paragraph 3, lett. b) is carried out in order to provide you with the services and information requested. For more information, please read our Cookie policy.

The processing of Personal Data for the purpose referred to in paragraph 3, lett c) is carried out in order to respond to your requests on the basis of a legitimate interest of the Company. Any refusal to provide the Data for the purposes set out above will make it impossible to manage and follow up your requests.

The processing of Personal Data for the purpose referred to in paragraph 3, lett. d), is necessary in order to perform the pre-contractual measures adopted upon your request when you apply for a job position at the Company. Where you provide “special categories of data” under art. 9 of the Regulation (e.g. data concerning your health), you provide your consent for processing such data to the Company. Any refusal to provide the Data for the purposes set out above will make it impossible to complete the selection procedures with reference to your application.

In case of processing in the event of any potential corporate transaction (e.g. sale of the Company or going concern), due diligence exercise, in case of defence of a right in court and with reference to the related prodromal activities, such processing will be carried out on the basis of legitimate interests of the Company in the continuation of its commercial activities and for the protection of its rights. In the unlikely case that the defence of the Company’s right will require the processing of “special categories of data” under art. 9 of the Regulation (e.g. data concerning your health), the Company will rely on the legal basis provided by art. 9(2)(f).

5 Methods of processing and Data retention period

Personal Data are processed mainly at the Company with suitable electronic and manual means as to guarantee security and confidentiality, implementing the security measures.

Your Data will be stored, in compliance with the applicable law, for a term not exceeding what is necessary to pursue the purposes for which they are processed.

The criteria for determining the storage period of the Data takes into account the allowed processing period and the applicable law on limitation of rights and legitimate interests of the data subject where these are the legal basis for processing.

After this, Data will be deleted, aggregated or anonymized.

The processing of Personal Data referred to in the previous points will be carried out both with the use of paper and with suitable electronic and IT tools to ensure the security and confidentiality of the Data.

6 Data communication and transfer

Personal Data will be disclosed to the persons authorized to process Data in the Company’s staff.

The Data may be disclosed by the Company solely and exclusively for the purposes indicated and where necessary to the following categories of subjects:

  • service providers such as website hosting, data analysis, information technology and related infrastructure use, customer service, email delivery, auditing and other services;
  • consulting firms, law firms, accounting firms;
  • where required, the competent judicial authorities;
  • where required, public administrations and supervisory and enforcement authorities.

Personal Data will not be disclosed to the public.

Entities belonging to the categories listed above, may act, as the case may be, as data processors (and in this case they will receive appropriate instructions from the Company) or as autonomous data controllers. In the latter case, the Personal Data will be communicated only with the express consent of the data subjects, except where the communication is mandatory or necessary pursuant to law or for the pursue of purposes for which the consent from the data subject is not required.

The Company, in its capacity as data controller, also have the right to transfer your Personal Data to third countries. Transfers of Data outside the European Economic Area are subject to a special regime pursuant to the Regulation, and are only made in respect of countries that ensure an adequate level of personal data protection, on the basis of an adequacy decision of the Commission or where adequate safeguards have been adopted (including the standard contractual conditions provided by the European Commission), provided that the data subjects have enforceable rights and effective judicial remedies.

7 Data subjects’ rights

At any time, you will be entitled to:

  • obtain confirmation from the Company as to whether your Data is being processed, and where that is the case, to access to the personal information pursuant to art. 15 of the Regulations;
  • obtain the rectification of inaccurate Data concerning you, or, taking into account the purpose of the processing, the integration of incomplete Personal Data;
  • obtain the erasure of your Personal Data, where one of the grounds under Article 17 of the Regulation applies;
  • obtain the restriction of processing of your Personal Data, where one of the cases under Article 18 of the Regulation applies;
  • object to the processing of your Personal Data on grounds relating to your particular position, where applicable;
  • receipt in a structured, commonly used and machine-readable format Personal Data concerning you and provided by you, as well as to transmit those Data to another controller, in the cases and within the limits referred to in art. 20 of the Regulation, where applicable.

You also have the right to withdraw your consent to the processing of your Personal Data (where given) at any time, without prejudice to the lawfulness of the processing based on your consent before the relevant withdrawal.

These rights may be exercised by sending a communication via e-mail to privacy@x-next.com According with the Regulation, the Company may not charge for complying with the any of the requests mentioned in this paragraph, unless they are clearly unfounded or excessive, and are repetitive. Should you request more than one copy of your Personal Data or in cases of excessive or unfounded requests, the Company may: (i) charge a reasonable expense, considering the administrative costs incurred to fulfil the request; or (ii) refuse to fulfil the request. In these cases, the Company will inform you of the costs before fulfilling the request. 

The Company may ask for further information before fulfilling the requests if it needs to verify the identity of the person who has made them.

Without prejudice to any administrative or legal remedy, you also have the right to lodge a complaint to the relevant supervisory Authority (the “Garante per la protezione dei dati personali”), if you believe that processing of your data breaches the Regulation. More information is available on the website https://www.garanteprivacy.it.

In any case, the Company is interested in knowing the reasons for the complaint and requests that you use the above contact methods before turning to the authorities, in order to prevent and resolve any disputes, amicably and promptly, with the greatest courtesy, professionalism and discretion.

We use technical cookies and analytics cookies with low identifier power in order to make this site work and assess its performances. You may disable these cookies by changing your browser settings but this may affect your experience on this website. For more information, please read our Cookie policy

Europe Flag

Xnext Eu fundend No 849381

Xnext has received funding from the European Union’s Horizon 2020 Research and Innovation Programme under grant agreement N° 849381