Privacy e cookie policy

Pursuant to arts. 13 and 14 of Regulation (EU) 2016/679 (“the Regulation”), we would like to inform Users about how and why the personal data of those interacting with our websites are processed. This Web Privacy and Cookie Policy is provided solely for https://www.saras.it/it and not for other websites possibly consulted by the user. This Policy considers all sector regulations, with specific reference to:

• Recommendation 2/2001 of the Article 29 Working Party, related to the minimum requirements for the collection of online data in the EU;
• Directive 2009/136/EC, amending Directive 2002/58/EC (so-called “e-Privacy Directive”), related to the processing of personal data and protection of private life in the electronic communications sector;
• General Provision of the Authority for the protection of personal data “Identification of the simplified methods related to information and acquiring consent to use cookies” of 8 May 2014;
• “Guidelines cookies and other tracking tools” of the Italian Authority for the protection of personal data of 10 June 2021.

The information about the processing of data is provided only for the Site and for the processing carried out by the Company and does not extend to the processing carried out by third parties through other sites that may be consulted by the User through links on the Site. the Company assumes no responsibility, since the User must refer to the individual Privacy and Cookie Policies of third-party sites.

Data Controller

Data Controller is Saras S.p.A., with registered office in 09018 - Sarroch (CA), S.S. 195 Sulcitana Km. 19. You can contact the Privacy Office by writing to: privacy@saras.it

Types of Data Collected

Through the Site, the Company receives and collects information relating to the User who visits the pages of the Site and who uses the available web services on the Site. The Company acquires and processes the following information:

1)Data collected through online browsing and cookies

When the User visits the Website, the latter collects certain data such as pages viewed, links or buttons clicked by the User, the date and time of access, the IP address of the User, the utilized browser and operating system (the so-called “browsing data”). The browsing data could also be used to ascertain liability in the case of any digital crimes committed against the Site. Secondly, in relation to the collection of User data through cookies and similar technologies, please refer to part of this Policy related to Cookies.

2)Data provided by the user

Company limits the collection of information voluntarily provided by the User to the data that is necessary for the pursuit of the purposes set out in the following paragraph and for the supply of any expressly requested services. In addition, the Company may collect and process additional personal data if the latter is voluntarily provided by the User in connection with the services offered by the Website, for example in the case that the User contacts the Company to report poor or non-functioning services or to exercise his/her rights on the processing of personal data, etc. This data will be processed by the Company solely for the purposes strictly related to the User's request. Failure to provide the data may make it impossible to obtain the requested service.

Purpose of the data processing and its legal basis

The Company may process the data of the User through the Website for the following purposes:

• Collection of candidates through the section “Work with us”. The Company provides the User with the opportunity to fill in a specific contact form in the “Work with us” section and to upload his/her CV directly within the Website in order to spontaneously forward an application for employment at the Company. For this purpose, the Company will acquire and use the information provided by the User for the sole purpose of selection and management of candidate applications. The Company may also process so-called “special categories of personal data” - the latter indicated in Art. 9 of the Regulation – but only if strictly necessary according to the law for the purposes of selection and evaluation of the application (e.g., if the candidate belongs to protected categories). The legal basis of the processing is the execution of pre-contractual provisions which aim at the stipulation of a potential employment contract with the Company and any refusal to provide personal data will result in the impossibility for the Company to acquire and review the candidate’s application.
• Responding to User requests. The User may – through the section of the Website named “Feedback Form” – insert his/her personal data (name and surname, email) and send comments/request information from the Company on activities and initiatives offered by the Company. For this purpose, personal data of the User will be processed by the Company in order to acquire, correctly manage and respond to the User’s communication. The legal basis for the processing is the execution of the service that was explicitly requested by the User; any potential refusal to supply the personal data will result in the impossibility of the Company to manage and respond to the communication or the information request.
• Pursuit of the legitimate interests of the Company and/or of third parties. The data of the User may also be processed to exercise the rights and legitimate interests of the Company and/or of third parties, including the right for legal defense, the management of complaints and disputes, potential credit collections, the prevention of fraud and/or illegal activities, protection of the Website’s security and of the information exchanged within it. In these cases, even if the supply of the User’s personal data is not mandatory, it is still necessary because this data is closely related and instrumental to the pursuit of these legitimate interests which do not prevail over the rights and fundamental freedoms of the User and a potential refusal to supply the data would make it impossible to provide the requested services (e.g. send comments and/or request information from the Company, spontaneously forward applications).
• Fulfilment of legal obligations. The Company may also process personal data provided by the User or which is otherwise acquired during interactions between the User and the Website for purposes linked to the execution of legal obligations, regulations, national regulations and/or EU norms deriving from provisions imparted by authorities legitimized by law; this represents the legal basis for the processing and does not require the prior consent of the User.
• Implementation of aggregated statistical analyses in an anonymous manner. In order to improve the services offered through the Website, the Company may conduct aggregate statistical analyses on an anonymous basis. In this case, no consent from the User will be requested given that the processing will solely be implemented with anonymous data.
• Profiling the user, only prior user's consent, in order to offer content that are more suitable with the interests and needs of the data subject.

Data retention period

Personal data are processed for the time required to implement the activities specified in the above paragraph; subsequently, it will be retained for administrative purposes and/or in the case of disputes or pre-litigation if required to enforce or defend a right. Please note that your personal data may be retained for longer periods compared to that provided for in this Policy but solely for purposes of analysis and statistics and in pseudo-anonymous and aggregate manner while complying with technical and organizational provisions required by the law to protect your rights and freedoms. The retention and destruction of personal data will be implemented in compliance with a “Data Retention & Destruction Policy” adopted by the Company.

Persons to whom personal data may be communicated

The data provided by the User and those collected by the Website as part of its services (e.g., IP address) will not be disclosed and may be communicated, for the purposes and in the manner described in this Privacy and Cookie Policy, to the categories of entities indicated below:

• companies, collaborators, consultants or freelance professionals that the Company appoints to carry out tasks of a technical or organizational nature (such as, for example, IT service providers), or with whom the Company collaborates (including other companies in the Group), in order to provide and operate its services, or for any communication activities;
• persons, companies or professional firms providing assistance and advice to the Company, particularly, but not exclusively in accounting, administrative, legal, tax and financial matters;
• entities whose right to access the data is recognized by law or by orders of the Authorities.

The entities belonging to the above categories will use the data in their capacity as independent data controllers pursuant to the law or as data processors, duly appointed by the Company pursuant to Article 28 of the GDPR Regulation.

Transfer of data to non-EU countries/organizations

Where necessary for the purposes mentioned above, personal data may be transferred abroad, to non-EU countries/organizations which ensure a level of protection of personal data deemed adequate by the European Commission by a decision, or on the basis of other appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission. A copy of any data transferred abroad, as well as the list of non-EU countries/organizations to which the data have been transferred, may be requested from the data controller by sending an e-mail request to privacy@saras.it.

Rights of the data subject

Articles 15 to 22 of the GDPR Regulation give data subjects the possibility of exercising specific rights. In particular, the data subject can obtain: a) confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data; b) rectification of inaccurate personal data and the right to have incomplete personal data completed; c) the erasure of personal data concerning him or her in the cases when allowed by the Regulation; d) restriction of processing, in the cases provided for by the Regulation; e) the communication of any requests of rectification or erasure of personal data or restriction of processing made by the data subject to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort; f) receipt of the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller at any time, including upon termination of any relationships held with the controller. The data subject also has the right to object at any time to the processing of personal data concerning him/her: in such cases, the controller is obliged to refrain from any further processing, except in the cases allowed by the Regulation. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless such a decision: a) is necessary for entering into, or performance of, a contract between the data subject and a controller; b) is authorized by Union or Member State law to which the controller is subject; c) is based on the data subject’s explicit consent. In the cases referred to in points (a) and (c) above, the data subject shall have the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision. Requests can be submitted by e-mail to the following addressprivacy@saras.it. The data subject also has the right to lodge a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR Regulation (EU) 2016/679, as well as to seek judicial remedy pursuant to Articles 78 and 79 of the said Regulation.

Cookies and other tracking systems

Cookies are small text strings that a website sends and stores on the User’s device, for use by the website at the next visit by the User. During browsing, the User may also receive on his/her device cookies that are sent by different websites or web servers (belonging to “third parties”), which may have some elements (for example, images, maps, sounds, specific links to pages of other domains) present on the website visited. Cookies are used for various purposes such as, for example, performing computer authentication, monitoring sessions and storing information about specific configurations of the users accessing the server. Therefore, cookies can be classed as:

• First-party cookies, sent directly from Saras to the User’s device
• Third-party cookies, originating from a third party but sent on behalf of Saras.

You can select your cookie consent preferences via the dynamic cookie banner when you first access the site. This website records your cookie consent choices so that you do not have to be asked again every time you visit the website. If you wish, you can update your preferences at any time by clicking on the “Cookie settings” button at the bottom of the pages of the website you visit. You are free to block the installation of unnecessary cookies at any time, without affecting your ability to visit the website and enjoy its content.

Types of cookies used

Strictly necessary cookies

Strictly necessary cookies allow the main website functionality such as user login and account management. The website cannot be properly used without strictly necessary cookies, therefore the installation of these cookies does not require the users’ prior consent, while the obligation to provide this cookie policy information remains. These cookies are listed in the table below.

Targeting cookies

Targeting cookies are used to identify visitors between different websites, e.g., content partners, banner networks. Such cookies can be used by companies to profile visitors' interests or show relevant ads on other websites. Users' prior consent is required for the installation of such cookies. These cookies are listed in the table below.

Functional cookies

Functional cookies are used to remember visitor information about the website, e.g., language, time zone, advanced content. Users' prior consent is required for the installation of such cookies. These cookies are listed in the table below.

Disabling cookies through the browser

In addition to accepting or rejecting all or part of the cookies utilized by the Website for additional ends by means of the mechanisms illustrated in this Privacy and Cookie Policy, the User may – if he/she desires to do so, and in the future – also delete the cookies installed on the Website by his/her browser by changing the latter’s settings. The majority of browsers are pre-set to accept cookies. However, the User can configure his/her browser in order to restrict the number of accepted cookies or block all cookies by changing the settings of the browser as follows:

Click on the 'Tools' icon in the upper right corner and select 'Internet Options'. In the pop-up window select 'Privacy'. Here the User can change the cookie settings.

Click the “wrench” icon in the upper right corner and select 'Settings'. At this point, select Display advanced settings' and change the 'Privacy' settings.

From the drop-down menu in the upper left corner, select 'Options'. In the pop-up window select 'Privacy'. Here the User can adjust the cookie settings.

From the drop down setting menu in the upper right corner select 'Preferences'. Select 'Security' and here the User can adjust the cookie settings.

It should be noted, however, that disabling the use of all cookies on the Website (including technical cookies) will disable certain features.

Below is the table with the list of all cookies.

Last update: 09/01/2022