Privacy Policy of the website www.carafa.it
Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”), Carafa srl Società Benefit, with registered office in Via dei Mille 47 – 80124 – Naples (NA), hereby informs you about the processing of personal data of users interacting with the online services available on the website www.carafa.it.
1. Data Controller
The Data Controller is Carafa srl Società Benefit, with registered office in Via dei Mille 47 – 80124 – Naples (NA).
Contact email: info@carafa.it.
2. Types of data processed
-
- Browsing data: IP address, browser type, log data, and website usage statistics, collected automatically and used in aggregate form for statistical and security purposes.
-
- Data voluntarily provided by the user: information entered in the forms (contact or job application), such as name, surname, email address, phone number, CV, and any other data provided.
-
- Cookies: the website uses technical cookies and, if applicable, analytical or third-party cookies (see dedicated Cookie Policy).
3. Purposes and legal basis of processing
a) Contact form
-
- Purpose: to manage requests sent by users and provide the requested information.
-
- Legal basis: performance of pre-contractual measures (Art. 6, para. 1, letter b, GDPR).
b) Job application form
-
- Purpose: to evaluate unsolicited applications and manage recruitment processes.
-
- Legal basis: performance of pre-contractual measures (Art. 6, para. 1, letter b, GDPR).
-
- Special categories of data: if the CV contains sensitive data (e.g., belonging to protected categories), processing will be carried out pursuant to Art. 9, para. 2, letter b, GDPR.
4. Processing methods
Data will be processed using both electronic and paper tools, in accordance with the principles of lawfulness, fairness, and transparency, adopting appropriate technical and organizational measures to ensure data security and confidentiality.
5. Data retention
-
- Contact form: retained for the time necessary to handle the request and no longer than 12 months.
-
- Job applications: retained for up to 24 months for future recruitment purposes, unless otherwise requested by the applicant.
6. Data recipients
Data may be processed by:
-
- authorized internal staff,
-
- technical service providers (e.g., hosting, website maintenance, email providers),
-
- third parties possibly involved in recruitment processes.
Data will not be disclosed or transferred outside the European Economic Area, unless adequate safeguards are in place in accordance with Articles 44 et seq. of the GDPR.
7. Data subject rights
At any time, users may exercise their rights under Articles 15–22 of the GDPR, including:
-
- right of access to data,
-
- right to rectification or erasure,
-
- right to restriction of processing,
-
- right to object to processing,
-
- right to data portability.
Requests should be sent to info@carafa.it.
8. Complaint
In the event of a breach of the applicable regulations, users have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).