Privacy Policy
Not registered users
Data Controller
ENEA wishes to inform its user/visitor of the site, regarding the types, purposes, and methods of processing personal data related to the site, as well as candidates, regarding the methods of processing personal data voluntarily provided, following a search and/or during the evaluation and selection phase.
Data Protection Officer
The Data Controller has not appointed a Data Protection Officer pursuant to article 38 of Regulation EU 2016/679 (“GDPR”), however, the Interested Party has the option to contact the Privacy Officer for any questions related to the processing of their personal data and the exercise of rights provided by the GDPR at the email address: privacy@enea.it
Type of data subject to processing
Regarding users/visitors of the site, the collection concerns: Navigation data The IT systems and software procedures used to operate this site acquire, during normal operation and for the duration of the connection, certain data that are then transmitted implicitly through the use of Internet communication protocols. This includes information not linked to directly identifiable users (IP address, domain name of the computer used by the Interested Party connecting to the site, Internet service provider name, time of request, etc.). Cookies A cookie is a small text file that a website saves on the user's computer or mobile device while the user visits it. The information stored in cookies can include personal data, such as an IP address, username, a unique identifier, or an email address, but they can also contain non-personal data such as language settings or information about the type of device the person is using to browse the site. Cookies can perform important and various functions, including monitoring sessions, storing information on specific configurations regarding users who access the server, facilitating the consumption of online content, etc. The same result can be achieved through the use of other tools (e.g., fingerprinting, which is a technique that identifies the device used by the user by collecting some or all of the information related to the device's configuration adopted by the user). The site operated by ENEA uses only technical cookies. For more information, the Interested Party can refer to the Cookie policy [link to be provided] Voluntary data provided by users If the Interested Party connects to this site and sends personal data to make requests via email, such data will be processed to respond to the request of the Interested Party. Regarding candidates, the collection primarily concerns common personal data: information related to name, surname, residence address, phone number, email address, place and date of birth, education or professional situation, photograph. The Interested Party will not be required to provide particular data as defined in article 9 of the GDPR, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or membership in a union, as well as genetic data, biometric data intended to identify a natural person, data related to health or sexual life or sexual orientation, unless such data is required for the establishment of the employment relationship, with specific reference to any membership of the Interested Party in protected categories.
Purpose of processing and legal basis
The processing of personal data related to site users/visitors is carried out for the purpose of: a. Ensuring the proper functioning of the service offered; b. Saving preferences; c. Carrying out operations strictly related and instrumental to managing the relationship with the interested party. Legal basis: processing of personal data for the purposes of points a and c is necessary for executing the requested service. Legal basis: processing of personal data for the purposes of point b requires prior user consent.
Collection methods
The processing of data related to site visitors is performed through automated tools for the time strictly necessary to achieve the purposes for which the data was collected, in accordance with applicable regulations. The collection of personal data from candidates may occur through receiving by mail, email, direct delivery, or other communication means of information related to the candidate's professional and study experience (curriculum vitae).
Obligation to provide data
Providing data – specifically regarding candidates – is optional and at the discretion of the Interested Party to submit their curriculum vitae. As for any additional data requested by the Data Controller, the failure to provide it will make it impossible to verify the prerequisites for hiring and/or initiating collaboration, and thus establishing the employment relationship with the Data Controller.
Processing methods
Personal data is processed by the Data Controller in compliance with the principles of lawfulness, fairness, and transparency, with the support of IT and telematic means, and is protected through adequate security measures to ensure its confidentiality and integrity.
Data retention period
Purpose of processing | Data retention period a, b, and c | Details on the retention of each cookie can be found in the Cookie policy d | Limited to the time necessary to respond to the Interested Party's request e | Limited to the duration of recruiting or, for selected candidates not hired, no longer than 6 months from data collection f | Limited to the duration of verifications. After this period, data will be destroyed or anonymized unless there are additional reasons for retention.
Recipients and transfer of information
The collected data is not subject to dissemination. Personal data may be communicated to third parties designated by the Data Controller pursuant to art.28 of the GDPR for the above-mentioned purpose. Personal data related to candidates may be communicated to: a. Third-party subjects such as independent controllers or designated by the Data Controller pursuant to art.28 of the GDPR for the above-mentioned purpose – consultants, auditors, certification bodies, service providers, personnel selection and evaluation agencies; b. Authorities if required by applicable regulations; c. Clients who verify compliance with acquired certifications or applicable laws on personal data processing. The updated list of Data Processors is available from the Data Controller. The collected personal data is processed by authorized individuals for the specific purposes and methods of processing. Any transfer of personal data to a third country outside the European Union or an international organization will occur based on a decision of adequacy from the Commission or, in the case of transfers referred to in articles 46, 47, or 49, paragraph 1, clause 2 of the European Regulation, based on appropriate and suitable guarantees.
Rights of the Interested Party
The Interested Party has the right to request the Data Controller, at any time, access to their personal data, rectification or deletion of the same, or to oppose their processing, as well as the right to request the limitation of processing in cases provided by article 18 of the GDPR, and to obtain in a structured, commonly used, and machine-readable format the data concerning them, in the cases provided by article 20 of the GDPR. Requests can be made to the email address privacy@enea.it In any case, the Interested Party always has the right to lodge a complaint with the competent supervisory authority – the Data Protection Authority – according to article 77 of the GDPR, if they believe the processing of their data is in violation of the applicable law.
Update of information
This information is subject to updates, also in relation to the reference regulations. The Interested Party is therefore invited to periodically check its contents.
Registered users
static_pages.privacy_policy.r.owner_title
static_pages.privacy_policy.r.owner_text
static_pages.privacy_policy.r.responsable_title
static_pages.privacy_policy.r.responsable_text
static_pages.privacy_policy.r.typology_title
static_pages.privacy_policy.r.typology_text
static_pages.privacy_policy.r.scope_title
static_pages.privacy_policy.r.scope_text
static_pages.privacy_policy.r.harvesting_title
static_pages.privacy_policy.r.harvesting_text
static_pages.privacy_policy.r.mandatory_title
static_pages.privacy_policy.r.mandatory_text
static_pages.privacy_policy.r.traitment_title
static_pages.privacy_policy.r.traitment_text
static_pages.privacy_policy.r.delete_title
static_pages.privacy_policy.r.delete_text
static_pages.privacy_policy.r.destination_title
static_pages.privacy_policy.r.destination_text
static_pages.privacy_policy.r.rights_title
static_pages.privacy_policy.r.rights_text
static_pages.privacy_policy.r.update_title
static_pages.privacy_policy.r.update_text