Privacy Policy

 

Tecnolife IT Consulting S.r.l., as the Data Controller, hereby informs you about the processing of personal data carried out through this website, in accordance with EU Regulation 2016/679 and with international, European, and Italian laws concerning the processing of personal data.

This notice is provided pursuant to Articles 13 and 14 of EU Regulation 679/2016 and its subsequent amendments and integrations (hereinafter, the “GDPR”) and applicable international, European, and Italian data protection laws.

This Privacy Policy is an integral part of the Cookie Policy of Tecnolife IT Consulting S.r.l., available here

Data Controller

The Data Controller is Tecnolife IT Consulting S.r.l., headquartered at Via Del Serafico, 200 – 00142 Rome, Italy, Tax Code and VAT number 11747341003.

Data Protection Officer

Tecnolife IT Consulting S.r.l. has appointed a Data Protection Officer (DPO), in accordance with Article 37 of the GDPR 2016/679, who can be contacted at the email address: dpo@tecnolife.com.

Categories of Personal Data Processed

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the response status from the server (successful, error, etc.) and other parameters related to the user’s operating system and computing environment. These data are used solely to obtain anonymous statistical information on site usage and to check its correct functioning and are deleted immediately after processing. Data could be used to ascertain responsibility in case of hypothetical cyber crimes against the site: except for this possibility, web contact data do not persist for more than thirty days.

Data voluntarily provided by the user

Data required to request Services (e.g., first name, last name, and email address to subscribe to the newsletter, first name, last name, email address, phone number, company, and role to request advertising services); information provided during the use of site Services (e.g., message text written in the “Contact Us” form); data provided during use of Services on the site (e.g., sending a spontaneous application using the “Send CV” button in the “Work with Us” section). The voluntary, explicit, and optional sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the site pages set up for particular on-demand services.

Purpose and Legal Basis of Processing

Purpose of ProcessingLegal Basis of Processing
To fulfill obligations imposed by current laws and comply with requests from public authoritiesArt. 6 par. 1 lett. c) GDPR – processing is necessary for compliance with a legal obligation to which the controller is subject
To respond to specific user requests via the “Contact Us” and “Advertising Request” sectionsArt. 6 par. 1 lett. b) GDPR – processing is necessary for the performance of a contract or pre-contractual measures
Voluntary registration to the company newsletterArt. 6 par. 1 lett. a) – processing is based on the user’s consent
Evaluation of job applications received through the “Work with Us” sectionsArt. 6 par. 1 lett. a) – processing is based on the user’s consent. The related notice is available in the “Work with Us” section
Manage technical assistance requests via the online chat service using the “Send Message” buttonsArt. 6 par. 1 lett. b) GDPR – processing is necessary for the performance of a contract or pre-contractual measures
Profiling purposes via third-party cookiesArt. 6 par. 1 lett. a) – processing is based on the user’s consent
Conduct research and statistical analysis on anonymous aggregated data regarding the use of Services, to improve and meet specific user needsArt. 6, par. 1 lett. f) GDPR – legitimate interest of the Controller to continuously improve service efficiency and security
Establish, exercise, or defend legal claims of the Controller and/or third parties, including in courtArt. 6, par. 1 lett. f) GDPR – legitimate interest of the Controller and/or third parties to protect their rights

Processing Methods

Data may be processed using electronic or automated tools ensuring security and confidentiality, and will include all operations necessary for processing. Personal data are processed for as long as necessary to achieve the purposes for which they were collected.

Data Recipients

To pursue the purposes mentioned in section 4, the Controller may communicate personal data to third parties belonging to the following categories:

  • Police forces, armed forces, and other public administrations for compliance with legal obligations;
  • Third-party companies hosting the website;

The Controller ensures that any communication of personal data is limited to what is strictly necessary for the intended purposes.

Recipients may act, depending on the circumstances, as data processors (receiving appropriate contractual instructions from the Controller) or as independent data controllers.

Personal data will not be disclosed to the public.

Data Transfer Outside the EU

The Controller commits to limiting the circulation and processing of personal data (e.g., storage, archiving) to EU countries, with an explicit prohibition on transferring data to non-EU countries unless they offer an adequate level of protection, or appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules, or explicit user consent.

Data Retention Period

Personal Data will be stored on the Controller’s secure systems for as long as necessary to fulfill the purposes in section 4 and as permitted by Italian law. Afterwards, the data will be deleted. Newsletter subscriptions remain active until the user opts out using the unsubscribe link included in each email. Data may be retained longer in case of legal disputes, authority requests, or under applicable law.

Data Subject Rights

Users may exercise their rights under Articles 15–22 of the GDPR, including:

  • Right of access to personal data and information regarding processing;
  • Right to rectification of inaccurate personal data;
  • Right to erasure of data (“right to be forgotten”) under the conditions set out in Art. 17 GDPR;
  • Right to restriction of processing under the conditions set out in Art. 18 GDPR;
  • Right to notification regarding rectification, erasure, or restriction of processing;
  • Right to data portability in a structured, commonly used, and machine-readable format;
  • Right to object to processing under certain conditions as provided in Art. 21 GDPR;
  • Right not to be subject to automated decision-making, including profiling, producing legal effects or similarly significant impacts.

Under Art. 7 of the GDPR, users may withdraw their consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, contact Tecnolife, Via del Serafico, 200 – 00142, Rome, or email: dpo@tecnolife.com.

Updates and Revisions to this Policy

Changes in applicable regulations or emerging business needs may require updates to this Privacy Policy.

The Controller reserves the right to modify this Privacy Policy in whole or in part.

This is the most recent version of the Privacy Policy, revision 2 dated 16/01/2025.