Dear User,
"BERTO E.G. INDUSTRIA TESSILE S.R.L., Via Mazzini, 11 - Bovolenta 35024 (Padua) Italy
Tel: +39 049 9599711 - Fax: +39 049 9599700, info@berto.it, acting as Data Controller (hereinafter "Berto" or the "Data Controller") considers the privacy and protection of Personal Data, one of the main objectives of its activity. This document has been prepared in accordance with art. 13 of the Regulation (EU) 2016/679 (hereinafter the “Regulation") in order to allow you to learn about our privacy policy; We invite you therefore before disclosing any Personal Data to the Data Controller to carefully read this Privacy Policy since it contains important information regarding the protection of your Personal Data."
This Privacy Policy:

• Is intended for the website http://www.berto.it (hereinafter the "Website");
• Is an integral part of the Website and of the services we offer;
• Is written pursuant to art. 13 of the Regulation for those who interact with the services of the Website.

The processing of your Personal Data shall be based on the principles of correctness, lawfulness, transparency, limitation of purpose and storage, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the Regulation. Your Personal Data will therefore be processed in accordance with the provisions of the Regulation and the confidentiality obligations set out therein.
Processing means any operation, or set of operations, which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

TABLE OF CONTENTS
1. Data Controller
2. Personal Data Subject to Processing
a. Browsing Data
b. Special Categories of Personal Data
c. Data Provided Voluntarily by the User
d. Third Party Data Provided Voluntarily by the User
e. Cookies
3. Purpose of Data Processing
4. 4. Legal Basis and Mandatory or Optional Nature of the Processing
5. Recipients of Personal Data
6. Transfer of Personal Data
7. Retention of Personal Data
8. Rights of the Data Subject
9. Modifications

1. Data Controller
The Data Controller is BERTO E.G. INDUSTRIA TESSILE S.R.L., as defined above.

2. Personal Data Subject to the Processing
Following the navigation of this Website, we inform you that Berto will process your Personal Data, which may consist of identifying information such as a name, an identification number, an online ID or one or several elements which can be used to identify the user in question or make them identifiable (hereinafter referred to solely as “Personal Data”). The Personal Data processed through the Website are as follows:
a. Browsing Data
During their normal operation, the computer systems and software procedures used to operate this Website acquire some Personal Data whose transmission is implicit in the use of internet communication protocols. These data is not gathered so it can be associated with identifiable interested parties, but by its very nature could, through processing and by associating it with data held by third parties, allow users to be identified. This category includes IP addresses, or domain names, of the computers used to connect to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, timestamp of the request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the server response status (successful, error etc.), and other parameters pertaining to the user's operating system, and IT environment. This data is used to obtain anonymous statistical information on the use of the Website and to check its correct functioning, to allow, given the architecture of the systems used, the correct provision of the various functionalities, for security reasons and to ascertain responsibility in case of hypothetical computer crimes against the Website or third parties, and are deleted immediately after processing.
b. Special Categories of Personal Data
In the section of the Website "JOB" you might provide us with Personal Data that falls within special categories as set forth in art. 9 of the Regulation, namely: “[…] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership. Any processing of such data shall be in accordance with current pro tempore permissions regarding the protection of Personal Data.
c. Data Provided Voluntarily by the User
The Website offers users the opportunity to voluntarily provide personal information through, for example, the request of services, information or quotes, the optional sending of, explicit and voluntarily, e-mail to the addresses listed on the Website, etc. This Privacy Policy is intended for the processing of Data provided voluntarily by the User through the Website.
d. Third Party Data Provided Voluntarily by the User
In using certain services of the Website, Personal Data of third parties, which you have provided, may be processed. In this event, you are the independent data controller, assuming all the legal obligations and responsibilities. In this sense, you confer on this point the widest indemnity with respect to any objection, claim, request for compensation for damages from processing etc. that should reach the Data Controller from third parties whose Personal Data has been processed through your use of the services on the Website in violation of the rules on the protection of relevant Personal Data.
In any case, if you provide or in other way process Personal Data of third parties in using the Website, you henceforth guarantee – assuming all related responsibilities – that this specific processing is grounded on an appropriate legal basis in accordance with art. 6 of the Regulation, which legitimizes the processing of the information in question.
e. Cookies
For information about the cookies used by this Website, please refer to the specific notice contained in the banner visible when opening the Website.
3. Purpose of Data Processing
Your Personal Data will be processed where applicable, with your consent where necessary, for the following purposes: a. to allow the provision of the services required (e.g.: contact request, request for quotes, request for delivery of documents, reporting abuse) as well as browsing the Website;
b. to find specific requests addressed to the Data Controller;
c. to fulfill any obligations under applicable laws, regulations or community legislation, or to satisfy requests from authorities;
d. to analyze your CV, assess the consistency of your profile with respect to job positions available by the Data Controller, to manage the recruitment process and contact candidates who have transmitted their application through the section of the Website: “JOB”;
e. to process statistics, without it being possible to trace your identity. Your Personal Data, also falling within special categories (such as, for example, information about your state of health), shall be processed with automated and manual means.
4. Legal Basis and Mandatory or Optional Nature of the Processing
The legal basis for the processing of Personal Data for the purposes described in section 3.a. and 3.b. is art. 6.1 lett. b) of the Regulation (“[...] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”), since the processing is necessary for the provision of services or for requests of the data subject. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services.
The processing of your Personal Data referred to in section 3.c. represents a legitimate processing pursuant to art. 6.1 lett. c) of the Regulation (“[...] processing is necessary for compliance with a legal obligation to which the controller is subject”).
The processing of your Personal Data for the purposes described in section 3.d. is art. 6.1 lett. b) of the Regulation (“[...] the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract"). The provision of your Personal Data is optional, but failure to provide it may result in the impossibility for the Data Controller to evaluate your profile or plan interviews.
It is also specified that the processing referred to in section 3.e. is not performed on Personal Data and therefore can be freely carried out by the Data Controller.
5. Recipients of Personal Data
Your Personal Data may be shared for the purposes set out in section 3 of this Privacy Policy with:
a. Individuals who typically act as Data Processors, namely: i) individuals, companies or private practice providing assistance and advice to the Data Controller for administrative and legal issues, with respect to the provision of the services; ii) individuals with whom it is necessary to interact to provide the services (for example hosting providers); iii) or delegated individuals to carry out technical maintenance (including maintenance of network equipment and electronic communication networks); collectively referred to as "Recipients";
b. Individuals, bodies or authorities to whom your Personal Data have to be communicated in accordance with the provisions laid down by law or by order of the authorities or when issuing alerts to investigate complaints and identify the source of the messages received by users;
c. Individuals authorized by the Data Controller to process Personal Data necessary to perform activities strictly related to the provision of services, whether they are committed to confidentiality or have an appropriate legal obligation of confidentiality (i.e. employees);
d. Business partners only if you have granted your specific consent to do so.
6. Transfer of Personal Data
The Data Controller does not intend to transfer your Personal Data outside the European Economic Area.
7. Retention of Personal Data
Personal Data processed for the purposes referred to in section 3.a. and 3.b. will be kept for the time necessary to achieve the same objectives. In any case, since this processing is performed for the provision of Services, the Data Controller shall process Personal Data up to the time allowed by Italian law to protect its own interests (Art. 2946 and ff. of the Italian Civil Code). Personal Data processed for the purposes referred to in section 3.c. shall be kept until the time provided for by the specific obligation or applicable law. Regarding the processing referred to in section 3.d., CVs sent will be stored for 24 months from their delivery and may be used for contacts and future interviews. At the end of this period, you will receive a prompt to update your Personal Data: in the absence of a response, after 15 days of submitting the request, your Personal Data will be deleted; in case of feedback it shall be kept for another 12 months and then deleted.
Nevertheless, the possibility remains for the Data Controller to keep your Personal Data for the time provided for and admitted by the Italian law to protect its interests (article 2947 par. 1 and 3 of the Italian Civil Code).
8. Rights of the Data Subject In accordance with Articles 15 and the following of the Regulation, you have the right to ask the Data Controller, at any time, access to your Personal Data, to correct or delete it or to object to its processing in accordance with art. 21 of the Regulation; you have the right to request the restriction of processing in the cases provided for by art. 18 of the Regulation, as well as to obtain the data concerning you in a structured format of common use and readable by an automatic device in the cases contemplated in art. 20 of the Regulation.
Requests shall be sent in writing to the following address: info@berto.it.
In any case, You always have the right to lodge a complaint with a supervisory authority (Data Protection Supervisor), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to current law.
9. Modifications
The Data Controller may modify or update in part or completely this Website Privacy Policy as the result of changes in laws and regulations that govern this matter and protect your rights. Changes and updates of the Privacy Policy shall be notified to users on the home page of the Website. We invite you to regularly visit this section so that you are aware of the most recent and updated version of the Privacy Policy in order to remain up-to-date on the data collected and the Data Controller's use of them.