Information on the processing of personal data pursuant to art. 13 and 14 of the Regulation (EU) 679/2016 (GDPR)

This information is provided to you by Eudaimon S.p.A. ("Eudaimon") as Data Controller ("Data Controller"), in addition to the general information on the processing contained in the Privacy Policy section, to be informed in advance about the use of data concerning you and to be able to express your consent (where necessary) in an informed, free and conscious way to certain processing and certain communications of the personal data you have provided, in your capacity as an interested party ("Data Subject"), in compliance with the provisions of EU Regulation 2016/679 ("GDPR") relating to the protection of individuals with regard to the processing of personal data and the national legislation related to the GDPR.

 

1. Data Controller and Data Protection Officer

The data controller is Eudaimon S.p.A., with registered office in Vercelli (13100), Piazza Pajetta, 2. 

Eudaimon has appointed an internal data protection officer (e-mail address rpd@eudaimon.it), who has taken all the measures deemed necessary and appropriate for adequate data protection.

 

2. Personal data being processed - Purpose, modalities of the processing and legal basis

The treatments operated by Eudaimon concern:

  • Personal data you provide voluntarily and directly;
  • Personal data received from third parties to whom you have consented to the transfer for marketing purposes (eg LinkedIn).

The treatments take place through paper processing or electronic or automated tools, according to logic strictly related to the purposes for which the Personal data ("Personal Data") are provided or acquired and in any case in such a way as to guarantee their confidentiality and security.

Personal Data are processed by Eudaimon for the following purposes (even if separated from each other):

a) Provide a response to the Data Subject's requests conveyed through the email addresses published on the site and / or by submitting the inquiry forms available on the website.

The legal basis of the processing is the consent given by you (even previously if the request is connected to treatments for which consent has already been issued) or by the execution of a contract (if you are part of a previous contractual relationship with Eudaimon) or, in any case, by the legitimate interest of the Data Controller in responding to the request received.

b) Proceed with any activities requested by the Data Subject via the email addresses published on the site and / or by submitting the inquiry forms available on the website.

The legal basis of the processing is the consent given by you (even previously if the request is connected to treatments for which consent has already been issued) or by the execution of a contract (if you are part of a previous contractual relationship with Eudaimon) or, in any case, by the legitimate interest of the Data Controller in responding to the request received.

c) Carry out an evaluation of the Data Subject for the purposes of a possible employment or collaboration relationship and related / instrumental activities.

The legal basis of the processing is your express consent, or, even failing that, in the legitimate interest of the Data Controller in the selection and hiring of staff.

d) Sending commercial and promotional communications and information connected or pertaining to corporate welfare services offered by Eudaimon, through automated contact methods or e-mails, or for related purposes or obligations imposed by laws, regulations, and community regulations.

The legal basis is constituted by your express consent, issued to Eudaimon, or in the Consent you have issued to the third party from whom Eudaimon has received the data.

 

3. Categories of subjects to whom the data may be communicated

The Personal Data may be communicated and transferred, exclusively in relation to the purposes of the processing previously set out:

  1. to subjects who can access by virtue of provisions of law, regulation or community legislation, within the limits set by such rules;
  2. to Eudaimon personnel, as long as they are qualified as responsible or in charge of processing, or as system administrator;
  3. to third parties, which Eudaimon makes use of for the purposes of the processing indicated and who operate as separate data controllers or as external data processors, appointed by Eudaimon.

Without prejudice to the above, the Personal Data processed by Eudaimon are not subject to any other disclosure to third parties.

4. Data transfer abroad - purpose

Personal Data may be hosted and / or transferred, for the exclusive purposes of collection, processing, archiving and storage, to third parties residing in non-EU countries, whose legislation on the protection of personal data has been recognized as adequate by the European Commission, o with which the Data Controller has entered into agreements containing the specific contractual guarantee clauses for the transfer of personal data to third countries, approved by the European Commission and confirmed by the Data Protection Authority (SCC).

The list of these third parties residing in non-EU countries is constantly updated and the Data Subject can consult it free of charge by submitting a request to the e-mail address indicated in paragraph 1.

 

5. Data retention period

The data will be kept for the time necessary to carry out the specific activities for which they were acquired and processed, as well as for that prescribed by civil, fiscal, and regulatory laws, in compliance with the terms of the law and as better detailed in Eudaimon’s Data Retention Policy.

 

6. Rights of the Data Subject

In relation to the processing of Personal Data, the Data Subject will have the following rights under the GDPR:

  1. Right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data an related information (right of access)
  2. Right to obtain the rectification of inaccurate or incomplete Personal Data (right to rectification)
  3. Right to obtain the erasure of personal data concerning him or her (right to erasure / right to be forgotten)
  4. Right to obtain the restriction of processing in certain circumstances (right to restrict processing)
  5. Right to transfer its Personal Data to another Data Controller (right of data portability)
  6. Right to object to processing of personal data concerning him or her (right to object)
  7. Right to withdraw consent given to process personal data for certain activities, preserving the previous processing
  8. Right to lodge a complaint with Data Protection Authority

The exercise of their rights under this paragraph may be exercised by the Data Subject by sending a registered letter with acknowledgement of receipt to the address of the data controller or by communicating to the email address of the Data Protection Officer.

In the event of a request for cancellation, the Data Subject may activate this request by clicking on the appropriate link at the bottom of the communications and commercial and promotional information received in electronic form.

 

7. Changes to this Notice

This Information may undergo, over time, changes related to the introduction of new treatments or the modification of the current ones. The Data Controller reserves the right to modify or simply update its content, in part or completely, also in response to changes in the Applicable Regulations. Eudaimon will inform you of these updates as soon as they are introduced, through publication in the relevant section of the website.