Privacy

Notice provided for by article 13 of EU Reg. 2016/679- GDPR – Notice for the treatment of personal data collected from the data subject Subject to EU Reg. 2016/679 (European Regulation for personal data protection) we hereby provide the required information on the treatment of the personal data you submitted. The notice does not apply to any other websites which can be accessed through links found on the websites belonging to the domain of the controller, that cannot be held responsible for third-party websites. This is a notice provided pursuant to article 13 of EU Reg. 2016/679 (European Regulation for personal data protection). THE DATA CONTROLLER is Aromatagroup Srl – headquartered in Via Carolina Romani 35, 20091 Bresso (MI) in the person of its pro tempore legal representative. Contact data: +39 02 6650 1860 / 1970 mail: privacy@aromatagroup.com.

Finalità del Trattamento Base Giuridica Periodo Conservazione Dati
A) Website browsing; Legitimate interest article 6 letter f) and considering 47: Activities strictly necessary for site operation and for the provision of the platform browsing service Until the end of the browsing session
B) Filling-in of data collection forms in order to receive information Pre-agreement article 6 letter b) of the GDPR - processing is necessary in order to take steps at the request of the data subject prior to entering into an agreement, like providing the data subject with answers to requests for information on products, quotes etc. For the time necessary to provide the answers to the data subject, and for no longer than 1 year.
C) Filling-in of data collection forms in order to freely download the material provided by the data Controller. Agreement article 6 letter b) of the GDPR - processing is necessary for the performance of an agreement – freely downloading the material provided by the company. For the time strictly required to achieve the purpose, and for no longer than 2 years.
D) Personnel recruitment and selection Processing of personal data for personnel recruitment and selection, for the purpose of a possible hiring, even for any job positions other than those for which the data subject has chosen to apply; retaining of personal data even for future selections; management of applications submitted in response to the job offers published on our website. Pre-agreement Data shall be processed subject to the lawfulness conditions provided for by article 6 of EU Reg. 2016/679: - in order to take steps at the request of the data subject prior to entering into an agreement 12 months
E) Direct Marketing provision of commercial/promotional information by e-mail / newsletter / paper mail and calls with operator. In order to compare and possibly improve the results of the notices, the Controller uses systems that allow it to generate reports on the newsletters and promotional notices it sent. reports provide the Controller with information like: the number of readers, of openings, of unique “clickers” and of clicks; the devices and operating systems used to read the notice; detailed information on the activity of individual users; detailed information on the emails it sent, on the emails that were and were not delivered, and on the forwarded emails; all this data shall be used to compare, and possibly improve, the results of the notices. Consent article 6 letter a): the data subject has given consent to the processing of his or her personal data for one or more specific purposes Until consent is withdrawn

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA – The provided personal data shall be disclosed to recipients, that shall process the data in their capacity as processors (article 28 of EU Reg. 2016/679) and/or in their capacity as natural persons acting under the authority of the Controller and of the Processor (art. 29 of EU Reg. 2016/679), for the above-listed purposes. In order to ensure the performance of the agreements in force or for related purposes, your data shall be processed by companies bound by agreements with Aromatagroup Srl, and in particular can be disclosed to third parties belonging to the following categories:

The persons belonging to the above categories act in their capacity as data Processors, or operate autonomously in their capacity as separate data Controllers.   Transfer of data to a third-party country and/or international organisation The personal data provided shall not be transferred outside the European Union. With regard to purpose E) – marketing activities (sending of newsletters) some personal data provided (e-mail and identification data) can be transferred abroad and in particular to the United States of America (use of Mailchimp to send newsletters).  MailChimp protects the personal data – by signing the Standard contractual clauses with the data controller. To read the SCCs, please contact the data controller.   RIGHTS OF THE DATA SUBJECTS – The data subjects have the right to obtain from the data Controller, in the cases provided for, access to the personal data and the correction or erasure of the same or the restriction of processing that concerns them, or object to the processing (articles 15 et seq. of EU Regulation 679/2016). In order to exercise the rights in question you can contact the Controller- email: privacy@aromatagroup.com. In order to stop receiving automated direct marketing notices (e-mails) just send an email message, at any time, to privacy@aromatagroup.com with the subject “cancellazione da automatizzato”, or use our automatic unsubscribing systems, available for email messages only.  In order to stop receiving traditional direct marketing communications (calls with operator) just send an email message, at any time, to info@aromatagroup.com with the subject “cancellazione tradizionale”. You have the right to withdraw at any time the consent you gave, with no prejudice to the lawfulness of the processing based on your consent before its withdrawal. The data subjects who believe that their personal data is being processed in breach of the provisions of the Regulation, have the right to file a complaint with the Italian Data Protection Authority (Garante), as provided for by the article 77 of the same Regulation, or to apply to the competent judicial authorities (article 79 of the Regulation). In the cases provided for by the Regulation, you have the right to data portability, and the Controller shall provide you with your personal data in a structured, commonly used and machine-readable format. You can object at any time to the data processing based on legitimate interest.   NATURE OF THE PROVISION OF DATA The user is free to provide the personal data.  Data provision is optional or mandatory according to the specific purpose for which the data is processed. If the user fails to provided the data marked with the * symbol or with the word (required), he shall be unable to obtain what he requested or to enjoy the services provided by the data controller. The provision of the data for purposes B), C) and D) is mandatory in order to obtain answers to the request for information submitted through the contact form, to download any material or for unsolicited applications. The provision of the data for purpose E) is optional, and in its absence the data shall not be processed for the purposes in question. Denying the consent shall not prejudice the availability of purposes A), B), C) and D).   Changes to the Privacy Notice The controller reserves the right to change, update, add or remove any parts of this privacy notice, at its own discretion and at any time. For easier checking, the notice shall specify the update date. Update date: 30.09.2020