Privacy Policy

CANDIDATES

In compliance with the EU General Data Protection Regulation 2016/679, we inform you that the personal and sensitive data you provide will be processed by ai.esra to the extent strictly necessary for the correct management of our relationship with you, through paper and electronic registration, according to the conditions outlined below.

Purpose

ai.esra will process the personal data you provide for the following purposes:

Conducting research, evaluation, and selection activities aimed at hiring for current and/or future opportunities;
Preparing and transmitting anonymized professional skill profiles to clients and prospects;
Providing information on internal and external events and initiatives promoted by ai.esra;
Complying with all obligations required by law, regulations, community, and international legislation (especially in accounting, tax, health protection, and public order and safety matters);
Fulfilling all contractual and pre-contractual obligations between the parties.

Methods

The data referred to in point 1), collected in any form, both from the data subject and others, will be processed, including through electronic tools, solely according to logics and forms of organization strictly related to the obligations and purposes described above. In any case, the data will be stored with the necessary technical and organizational measures in place to ensure the security and confidentiality of the data, minimizing the risks of destruction or loss, unauthorized access, or unlawful processing.

Retention Period

The data you provide will be stored for a period not exceeding what is necessary to fulfill the obligations and pursue the purposes outlined in point 1), and in any case, for no longer than 48 months from the last action aimed at these purposes (unless further authorization for retention is provided).

Communication of Data to Third Parties

The data you provide may be communicated to:

Companies controlled, affiliated, or participating with ai.esra;
Employees and/or collaborators of ai.esra based on their respective duties/competencies;
Consultants and professionals involved in the evaluation process;
Clients and prospects.

Transfer of Data Abroad

The Data you provide, within the limits of obligations and purposes stated in point 1), may be transferred outside the country, including to non-EU countries (ref. List published by the Data Protection Authority and made available on the “Careers” page).

Data Controller

The data controller for this processing is:

Silvana Candeloro, Board Member of ai.esra

Headquarters: Turin, Strada del Lionetto, 6

Tel.: 011 19507211 Fax: 011 8396614

E-mail: privacy@ai-esra.com

Nature of Data Provision and Consequences of Refusal

Providing personal data by the data subject is mandatory to achieve the purposes outlined in point 1). Refusal to provide data will prevent the initiation of the evaluation process and the management of the selection process.

Inclusion in mailing lists for informational and promotional activities (as referred to in point 1.b) is optional.

Withdrawal of Consent

At any time, you may withdraw your consent given (pursuant to Article 6 of the GDPR 679/16). The withdrawal of consent will not affect the retention periods of data previously acquired and processed by the Data Controller.

Rights of the Data Subject

Every data subject is guaranteed the rights specifically outlined in Articles 15-22 of Regulation (EU), particularly:

Right of access (Article 15);
Right of rectification (Article 16);
Right of erasure (Article 17);
Right to restriction (Article 18);
Right to data portability (Article 20);
Right to object (Article 21);
Right not to be subject to automated decision-making (Article 22);
Right to lodge a complaint with the supervisory authority (Data Protection Authority).

To exercise your rights, the data subject may send their request to the following contacts:

Postal address: ai.esra, Strada del Lionetto n. 6, 10146 Turin (TO) – Privacy Office

Email: privacy@ai-esra.com

The Data Protection Officer (DPO), can be contacted by sending an email to the address: dpo@ai-esra.com

SUPPLIERS

In compliance with EU Regulation 2016/679 on the protection of personal data, this Privacy Notice is provided to natural persons acting in the name and on behalf of the suppliers of ai.esra.

1) Types of Data and Purposes of Processing

ai.esra will process the personal data of natural persons acting in the name and on behalf of the supplier for the following purposes:

Sending communications of various kinds through different means of communication (telephone, mobile phone, SMS, email, fax, postal mail);
Submitting requests or managing incoming requests and proposals;
Exchanging information aimed at the execution of the contractual relationship, including pre-contractual and post-contractual activities.

The personal data processed are those provided by the data subject in connection with:

Submission of offers;
Transmissions and transactions following the order;
Visits or phone calls;
Direct contacts related to participation in trade fairs, exhibitions, and similar events.

2) Methods

The data referred to in point 1), collected in any form, both directly from the data subject and otherwise, will be processed, including through electronic tools, solely according to logics and organizational methods strictly related to the obligations and purposes described above.
In any case, such data will be stored using appropriate technical and organizational measures designed to ensure data security and confidentiality, minimizing the risks of destruction or loss, unauthorized access, or unlawful processing.

3) Retention Period

The data provided will be retained for a period not exceeding what is necessary to fulfill the obligations and pursue the purposes referred to in point 1).
Thereafter, personal data will be retained, without further processing, for the period required by applicable civil and tax regulations.

4) Communication of Data to Third Parties

The personal data processed by the Data Controller will not be disclosed, nor made available to unspecified third parties, in any form whatsoever, including by making them accessible or available for consultation.

They may, however, be communicated to employees of the Data Controller.
They may also be communicated, within strictly necessary limits, to parties who, for the purposes of issuing orders or requests for information and quotations, must supply goods and/or perform services.
Finally, data may be communicated to parties entitled to access them pursuant to laws, regulations, or EU legislation.

In particular, based on roles and job responsibilities, certain employees have been authorized to process personal data within the limits of their competences and in accordance with the instructions provided by the Data Controller.

5) Transfer of Data

The data provided, within the limits of the obligations and purposes referred to in point 1), may be transferred outside the national territory, including to countries outside the European Union (ref. list published by the Data Protection Authority and made available on the “Careers” section of the website).

The Data Controller reserves the right to use cloud-based services; in such cases, service providers will be selected among those offering adequate guarantees, as required by Article 46 of Regulation (EU) 2016/679.

6) Data Controller

The Data Controller for this processing is:

Silvana Candeloro, Board Member of ai.esra
Headquarters: Strada del Lionetto 6, 10146 Turin (Italy)
Tel.: +39 011 19507211 – Fax: +39 011 8396614
Email: privacy@ai-esra.com

7) Nature of Data Provision and Consequences of Refusal

The processing described in this Privacy Notice is lawful and permitted, even in the absence of consent, when necessary for the performance of a contract to which the data subject is a party (supply of products and services).

The data subject may refuse to provide personal data; however, the provision of such data is necessary for the proper and efficient management of the contractual relationship.
Therefore, refusal to provide data may compromise, in whole or in part, the contractual relationship.

8) Rights of the Data Subject

Each data subject is guaranteed the rights provided for in Articles 15–22 of Regulation (EU) 2016/679, including in particular:

Right of access (Article 15);
Right to rectification (Article 16);
Right to erasure (Article 17);
Right to restriction of processing (Article 18);
Right to data portability (Article 20);
Right to object (Article 21);
Right not to be subject to automated decision-making (Article 22);
Right to lodge a complaint with the supervisory authority (Data Protection Authority).

To exercise their rights, data subjects may submit a request to the following contacts:

Postal address: ai.esra, Strada del Lionetto n. 6, 10146 Turin (TO) – Privacy Office
Email: privacy@ai-esra.com

The Data Protection Officer (DPO), can be contacted by sending an email to the address: dpo@ai-esra.comInizio moduloFine modulo

CRM CONTACTS

In compliance with the EU General Data Protection Regulation 2016/679, this Privacy Notice is provided to natural persons registered within the CRM (Customer Relationship Management) system of ai.esra.
The data contained therein refer to collaborators, employees of our clients or prospects, or other organizations with which a relationship or collaboration exists or is intended to be established.
In some cases, such data may be obtained from public sources or social media and used solely to establish an initial contact.

Types of Data and Purposes of Processing

ai.esra will process the personal data of natural persons registered in the CRM for the following purposes:

Sending communications of various kinds through different communication channels (telephone, mobile phone, SMS, email, fax, postal mail).

The personal data processed are those provided by the data subject in connection with:

Submission of offers or proposals;
Visits or phone calls;
Direct contacts related to participation in events, trade fairs, exhibitions, or similar initiatives.

Methods

The data referred to in point 1), collected in any form, both from the data subject and from other sources, will be processed, including through electronic tools, solely according to logics and organizational methods strictly related to the obligations and purposes described above.
In any case, the data will be stored with appropriate technical and organizational measures in place to ensure data security and confidentiality, minimizing the risks of destruction or loss, unauthorized access, or unlawful processing.

Retention Period

The data provided will be retained for a period not exceeding what is necessary to fulfill the obligations and pursue the purposes outlined in point 1).
Thereafter, personal data will be retained, without further processing, for the period required by applicable civil and tax regulations.

Communication of Data to Third Parties

The personal data processed by the Data Controller will not be disclosed or made available to unspecified third parties in any form, including by making them accessible or available for consultation.

They may, however, be communicated to employees of the Data Controller.
They may also be communicated, within strictly necessary limits, to third parties who, for the purposes of issuing orders or requests for information and quotations, must supply goods and/or perform services.
Finally, data may be communicated to parties entitled to access them pursuant to laws, regulations, or EU legislation.

Transfer of Data

The Data Controller reserves the right to use cloud-based services; in such cases, service providers will be selected exclusively among those providing adequate guarantees, as required by Article 46 of Regulation (EU) 2016/679.

Data Controller

The Data Controller for this processing is:

Silvana Candeloro, Board Member of ai.esra
Headquarters: Strada del Lionetto 6, 10146 Turin (Italy)
Tel.: +39 011 19507211 – Fax: +39 011 8396614
Email: privacy@ai-esra.com

Nature of Data Provision and Consequences of Refusal

The processing described in this Privacy Notice is lawful and permitted, even in the absence of consent, when necessary for the performance of a contract to which the data subject is a party.

The data subject may refuse to provide personal data; however, such provision is necessary for the proper and efficient management of the contractual relationship.
Therefore, refusal to provide data may compromise, in whole or in part, the contractual relationship.

Rights of the Data Subject

Each data subject is guaranteed the rights provided for in Articles 15 – 22 of Regulation (EU) 2016/679, including in particular:

Right of access (Article 15);
Right to rectification (Article 16);
Right to erasure (Article 17);
Right to restriction of processing (Article 18);
Right to data portability (Article 20);
Right to object (Article 21);
Right not to be subject to automated decision-making (Article 22);
Right to lodge a complaint with the supervisory authority (Data Protection Authority).

To exercise their rights, data subjects may submit a request to the following contacts:

Postal address: ai.esra, Strada del Lionetto n. 6, 10146 Turin (TO) – Privacy Office
Email: privacy@ai-esra.com

Please specify the subject of the request and the right to be exercised.

The Data Protection Officer (DPO), can be contacted by sending an email to the address: dpo@ai-esra.com