Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF THE GENERAL DATA PROTECTION REGULATION N. 679/16 (Hereinafter “GDPR”)

Who we are

Kalichem S.r.l. is a Lamberti Group Company, based in Via Luigi Alessandrini 8 – 25086 Rezzato (Brescia) – Italy (hereinafter “Kalichem” or the “Company”) in carrying out its business through the website www.kalichem.it (hereinafter, the ” Site “) pays the utmost attention to the security and confidentiality of its users’ personal data.
The Company reserves the right to add or remove features from the Site at any time, the Privacy Policy may be updated from time to time by the Company.
Before using the Site, please read this Privacy Policy carefully and periodically, also to check for any updates.

What personale data concerning you may be collected

In carrying out its business, the Company may collect certain categories of personal data concerning you, provided by you voluntarily (the term “Personal Data” will mean all the categories listed below).
In particular, the Company may collect:

Personal and contact data: name, surname, address, telephone number, e-mail, residence/domicile address, city of residence/domicile, country of residence/domicile, postal code of residence/domicile, place and date of birth, gender, curriculum vitae and any other data you have released for sending spontaneous applications within the “WORK WITH US” area; these and/or other data can also be collected:
– during the registration phase and use of the reserved area of the site;
– using the “Request Information” form;
– using the form “Subscribe to our newsletter”;
Other personal data – educational qualifications, work experience and any other data you voluntarily released for sending spontaneous applications within the “WORK WITH US” area;
Use of the Site – information on how you use the Site, open or forward our communications, including information collected through cookies (you can find our Cookie Policy at the following address https://www.iubenda.com/privacy- policy/79780750/cookie-policy which regulates the details);
Data provided by third parties all Personal Data that the Company receives from other sources to perform its services.

INFORMATION PURSUANT TO ART. 13 OF THE EUROPEAN REGULATION NO. 2016/679 (GENERAL DATA PROTECTION REGULATION – GDPR)

For Newsletter

KALICHEM S.R.L., Via Alessandrini, 8 – 25086 Rezzato (BS), VAT No. 02424900989, as Data Controller, informs you pursuant to Article 13 of the EU Regulation No. 2016/679 “GDPR” that your data will be processed in the following manner and for the following purposes:

1. Processing Methods

The personal data you provide will be processed by the Data Controller mainly using IT and telematic tools and occasionally in paper form.

2. Purpose of Processing

Your personal data will be processed in accordance with Article 6 paragraph 1 letter a) of the GDPR for the following purposes with your prior consent:

subscription to the newsletter, sending of commercial communications and/or advertising materials about products or services

The processing of your personal data will be carried out by means of the operations indicated in Article 4 paragraph 1 no. 2) of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data will be processed both on paper and electronically and/or through automated means.

3. Data Retention

Purpose 2: The personal data provided will be stored for the time necessary to achieve the purposes of sending the newsletter and, in any case, until the withdrawal of consent by the data subject.

4. Access to Personal Data

Your data may be made accessible for the purposes mentioned above to:

other companies of the Lamberti Group, of which Kalichem Srl is a member;
employees and collaborators of the Data Controller, in their capacity as designated personnel;
any other parties (internal or external) identified by the Data Controller for the implementation of the purposes described in this notice

5. Data Disclosure

The personal data collected will not be disclosed, sold or exchanged in any way with third parties.

6. Data Transfer

As a company operating globally, the Company may need to transfer your data to countries outside the European Union (EU) or the European Economic Area (EEA) (hereinafter “Third Countries”) to companies where servers are located or in other locations where suppliers or service providers or their servers are located, whose data protection laws may offer a lower standard of protection than those of the EEA. In such cases, the Company will ensure that any of your data accessible outside the EEA is handled with appropriate safeguards.

The Company will provide adequate guarantees and protections for such cross-border transfers, in compliance with legal requirements; these include the use of Standard Contractual Clauses approved by the European Commission, Codes of Conduct, and/or Binding Corporate Rules. These clauses impose similar data protection obligations directly on the recipient, unless the applicable data protection law allows for data transfers without such formalities. You may request a copy of this documentation by contacting us at the address indicated below.

Some Third Countries, such as Canada and Switzerland, have been authorized by the European Commission as providing protection comparable to that of the EEA regulations, and therefore do not require additional legal safeguards. In the case of companies based in Third Countries that have not received such authorization, such as India or Japan, your consent will be requested for the transfer or your personal data will be transferred using the safeguards mentioned above, as indicated by the European Commission.

7. Nature of Data Provision and Consequences of Refusal

Purpose 2: Providing consent is optional; authorization is obtained through explicit consent (Art. 6 paragraph 1 letter a) and is obtained, depending on the case, via checkbox in a form or electronically.

8. Data Subject Rights

As a data subject, you have the rights set forth in Article 15 of the GDPR, and specifically the rights to:

obtain confirmation of whether or not personal data concerning you exists;
obtain information on: a) the origin of personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out using electronic means; d) the identification details of the data controller, data processors, and the representative designated pursuant to Art. 3, paragraph 1, GDPR; e) the parties or categories of parties to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, data processors, or persons in charge;
obtain: a) the updating, rectification or, when interested, integration of data; b) the erasure, transformation into anonymous form or blocking of data processed unlawfully, including data that does not need to be kept for the purposes for which the data was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been notified, including as regards their content, to those to whom the data has been communicated or disseminated, unless this requirement proves impossible or involves a disproportionate effort compared to the right being protected;
object, in whole or in part: a) on legitimate grounds to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication.

Where applicable, you also have the rights referred to in Articles 16–21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, and right to object), as well as the right to lodge a complaint with the Supervisory Authority.

9. Methods of Exercising Rights

Purpose 2: To exercise the right to unsubscribe from the service and request deletion of your data, you may use the unsubscribe links included in every communication sent, or otherwise exercise the rights mentioned above at any time by sending:

a registered letter with return receipt to KALICHEM S.R.L., Via Alessandrini, 8 – 25086 Rezzato (BS);
or an email to kalichem@kalichem.it

10. Data Controller, Data Processors, and Authorized Persons

The Data Controller is KALICHEM SRL.

The updated list of data processors and authorized persons is kept at the registered office of the Data Controller.

How we collect your personal data

The Company collects and processes your Personal Data in the following circumstances:

if you wish to send your spontaneous application to the appropriate section of the site “WORK WITH US”;
if you wish to register on the site and use the respective reserved area;
if you wish to receive information relating to the events organized by the Company, as well as the products offered by the same;
if you subscribe to our newsletter;
if business partners legitimately transfer your Personal Data to us.

If you provide Personal Data on behalf of someone else, you must always make sure in advance, that the interested parties have read this Privacy Notice.
Please help us keep your Personal Data up-to-date by informing us of any changes.

For what purposes may your personal data be used

The Company may process your Personal Data for one or more of the purposes set out below and on the basis of the legal basis indicated from time to time.

a) Management of requests relating to your spontaneous applications
The personal and contact data and other personal data provided by you may be processed by the Company for the management of your spontaneous applications through the Site.
Prerequisite for processing: execution of pre-contractual measures requested by the interested party.
In order to send your spontaneous application for one or more open positions at the Company, you must enter your personal and contact details and other personal data in the appropriate form.
The conferment is mandatory for the correct presentation of the spontaneous application by you; failing that we will not be able to give you the course.

b) Management of registration requests on the website and access to the personal area
The Company may process the personal and contact data you provided for registration on the Kalichem.it website and for subsequent access in the reserved area of the portal
Prerequisite for processing: execution of pre-contractual measures requested by the interested party. The conferment is mandatory in order to complete your request; failing that we will not be able to give you the course.

c) Response to your requests for information relating to events organized by the Company or relating to our products
Your personal and contact data may be processed by the Company in order to provide you with the information requested by you relating to the events organized by the Company or relating to our products. Access to certain documents relating to the products is allowed only by registering in the reserved area or filling out the appropriate form to request information. Personal and contact data and other personal data can be collected during registration in the reserved area and when filling in the forms.
Prerequisite for processing: execution of pre-contractual measures of which the interested party is a party.
The conferment is mandatory; failing that we will not be able to process your requests.

d) Sending a periodic newsletter
Your personal and contact data may be used by the Company in order to send you a periodic newsletter, aimed at keeping you updated on the products offered by the Company or on the initiatives and events promoted by the same.
Prerequisite for processing: the consent of the interested party.
Failure to provide it will make it impossible to receive the newsletter itself.

e) Defense of rights during judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered
Your Personal Data may be processed by the Company to defend your rights or act or even make claims against you or third parties.
Prerequisite for processing: legitimate interest of the Company.

f) Purposes related to the obligations established by laws, regulations or community legislation, by provisions/requests from authorities legitimated by the law and/or by supervisory and control bodies
Your Personal Data may be processed by the Company for purposes related to the obligations established by laws, regulations or community legislation, by provisions/requests of authorities legitimated by the law and/or by supervisory and control bodies.
Prerequisite of processing: fulfilment of a legal obligation.

The provision of Personal Data for these purposes is mandatory since in default the Company will find it impossible to fulfil specific legal obligations and consequently to properly execute the relationship with you.

Ho we keep your personal data secure

The Company uses all the security measures necessary to improve the protection and maintenance of the security, integrity and accessibility of your Personal Data.

All your Personal Data are stored on our protected servers (or paper copies suitably stored) or on those of our suppliers and are accessible and usable according to our standards and security policies (or equivalent standards for our suppliers).

How long we keep your data

The Company retains your Personal Data only for the time necessary to achieve the purposes for which it was collected or for any other legitimate related purpose.
Your Personal Data that are no longer necessary, or for which there is no longer a legal prerequisite for its conservation, will be irreversibly anonymised or securely destroyed.
Below are the storage times in relation to the different purposes listed above:

Management of requests relating to your spontaneous applications: your personal and contact data and other personal data processed by the Company for the management of requests relating to your spontaneous applications will be kept by the Company for 12 months from the date of sending the application through the dedicated area on the Site.

Management of requests for registration to the website and access to the personal area: your personal and contact data processed by the Company for the management of the reserved area will be kept by the Company for 10 years from the date of sending the registration request to the website through the ‘dedicated area on the Site.

Response to your requests for information relating to events organized by the Company or relating to our products: your personal and contact data processed by the Company to respond to your requests for information about the events organized by the Company or our products will be kept by the Company for 36 months from the response provided.

Sending a periodic newsletter: your personal and contact data processed by the Company for sending a periodic newsletter will be kept by the Company for 24 months from the date on which the Company obtained your last consent for this purpose (except for your revocation if formulated before the expiry of this period).

Defense of one’s rights during the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered: the Personal Data processed for this purpose will be kept by the Company for 10 years from their collection.

Fulfil an obligation established by laws, regulations or community legislation, by provisions/requests of authorities legitimated by the law and/or by supervisory and control bodies: the Personal Data processed for this purpose will be kept by the Company for 10 years from their collection.

With who we can share your personal data

Your Personal Data may be accessed by duly authorized employees of the Company, as well as external suppliers, appointed, if necessary, as data processors, who provide support for the provision of services, including those necessary for the operation of the Site.

In addition, the Company may share your Personal Data with other Lamberti Group companies, its subsidiaries and/or associates, the list of which is available at http://www.lamberti.com/contacts-list.html

If you wish to ask to be able to view the list of data processors and other subjects to whom we communicate your Personal Data, please contact us at the email address kalichem@kalichem.it.

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

(pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 “GENERAL DATA PROTECTION REGULATION”)

KALICHEM S.R.L., Via Alessandrini, 8 – 25086 Rezzato (BS), VAT No. 02424900989 (hereinafter, the “Data Controller”), in its capacity as Data Controller, informs you pursuant to Article 13 of Legislative Decree 30.6.2003 no. 196 (hereinafter, the “Privacy Code”) and Articles 13 and 14 of EU Regulation no. 679/2016 (hereinafter, “GDPR”) that your personal data will be processed in the manner and for the purposes indicated below.

According to the aforementioned laws, such processing will be based on the principles of fairness, lawfulness, transparency, and necessity, protecting your privacy and your rights.

1. Subject of the Processing and Legal Basis

The Data Controller processes personal identifying data (such as name, surname, phone numbers, e-mail addresses, home address, place and date of birth – hereinafter, “personal data” or “data”) communicated by you through your curriculum vitae.

2. Purpose of the Processing

The processing is aimed at managing the relationship between candidates and our Company.

Specifically, your personal data are processed:

A) Without your express consent (pursuant to Article 24 letters a), b), c) of the Privacy Code and Article 6 letters b), c), and f) of the GDPR) for the following Service Purposes:

to comply with legal obligations, regulations, EU legislation, or orders from Authorities;
to exercise the Data Controller’s rights and/or legitimate interests (e.g., the right to legal defense), unless such interests are overridden by the interests, rights, and freedoms of the data subject;

B) Only with your specific and distinct consent (pursuant to Articles 23 and 130 of the Privacy Code and Article 7 GDPR), for the following Purposes:

activities related to the recruitment and selection of personnel for our internal structure. The personal data related to the candidate may be communicated – even partially anonymized – for the same purposes to external Data Processors in the relevant recruitment sector, in order to evaluate a possible employment relationship. Pursuant to Article 13 of EU Regulation 2016/679, we inform you that the provision of relevant and pertinent personal data to KALICHEM S.R.L. is not mandatory by law. However, refusal to provide such data may result in the Company being unable to properly evaluate the candidate’s position in relation to its recruitment needs, and therefore, unable to manage your application. The evaluation of the Candidate will, in any case, relate only to information collected directly from the candidate or from recruitment databases, concerning education, training, previous work experience, and all data relevant to the candidate’s profile. No sensitive or judicial data will be collected or processed, except for data regarding the individual’s membership in protected categories and criminal records only for roles where required.

Personal data provided in response to a specific job advertisement will also be used for future recruitment processes, unless the candidate requests limitation of the data processing to the specific position applied for.

Data processing normally takes place at the Controller’s premises: it is carried out only by authorized and/or responsible parties, using specific technical methods of authentication and in compliance with the purposes described above.

3. Methods of Processing and Data Retention

The processing of your personal data is carried out through the operations indicated in Article 4 of the Privacy Code and Article 4(2) GDPR, namely: collection, recording, organization, storage, consultation, processing, alteration, selection, retrieval, comparison, use, interconnection, blocking, communication, deletion, and destruction of data.

The Data Controller will process personal data for as long as necessary to fulfill the above purposes and in any case no longer than:

3 years from the submission of the curriculum vitae or the last activity that shows interest in the Organization (e.g., registration, login, CV update/upload) or from the end of any additional recruitment processes, unless your professional profile is deemed of particular interest for future recruitment.

Data will be processed in full compliance with the law and the confidentiality obligations to which all company personnel are bound. Data processing will be carried out using appropriate tools to ensure security and confidentiality and may also be done using computer systems as well as on paper.

Data processing may be performed not only by company personnel, but also by third parties appointed to carry out specific tasks on behalf of the organization. These internal and external subjects are respectively appointed as Data Processors and Authorized Persons, in accordance with current data protection regulations. The list of internal/external Data Processors and Authorized Persons is available at the Company’s registered office.

4. Access to Data

Your data may be made accessible for the purposes set out in points 2.A) and 2.B):

to other companies of the Lamberti Group for administrative purposes;
to employees and collaborators of the Data Controller, in their capacity as authorized persons and/or internal data processors;
to third-party companies or other entities (by way of example, banks, professional firms, consultants, etc.) that perform outsourced activities on behalf of the Data Controller, in their capacity as external data processors.

5. Data Disclosure

Without the need for express consent (pursuant to Article 24 letters a), b), d) of the Privacy Code and Article 6 letters a), e), and c) of the GDPR), the Data Controller may communicate your data for the purposes set out in point 2, as applicable, and within the limits of necessity and relevance, to supervisory bodies, judicial authorities, and those entities to whom data communication is mandatory by law, for the performance of said purposes. These entities will process the data as autonomous data controllers.

6. Data Transfer

The management and storage of personal data will take place on servers located within the European Union. Data will not be transferred outside the European Union. However, it is understood that the Data Controller, if necessary, may relocate the servers in Italy and/or the European Union and/or non-EU countries. In such cases, the Data Controller assures that any transfer of data outside the EU will comply with applicable legal provisions, including, where necessary, the stipulation of agreements that ensure an adequate level of protection and/or the adoption of the standard contractual clauses approved by the European Commission.

7. Nature of Data Provision and Consequences of Refusal

The provision of data for the purposes referred to in point 2.A) is mandatory for fulfilling specific obligations related to the employment relationship; failure to provide such data may make it impossible to carry out essential tasks.

The provision of data for the purposes referred to in point 2.B) first paragraph is optional. You may decide not to provide any data or to deny the processing of data already provided. In such cases, the Company will be unable to properly assess the candidate’s profile for recruitment and therefore unable to manage the application.

8. Rights of the Data Subject

As the data subject, you have the rights set forth in Article 7 of the Privacy Code and Article 15 GDPR, and specifically the rights to:

obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and their communication in an intelligible form;
obtain information on:

a) the origin of personal data;

b) the purposes and methods of processing;

c) the logic applied in case of processing carried out with the aid of electronic tools;

d) the identity of the data controller and data processors;

e) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them as data processors or authorized persons;
obtain:

a) the updating, rectification, or, when interested, integration of data;

b) the erasure, anonymization, or blocking of data processed unlawfully, including data which do not need to be retained for the purposes for which they were collected or subsequently processed;

c) certification that the operations referred to in points a) and b) have been notified, also as regards their content, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a disproportionate effort compared to the right being protected;
object, in whole or in part:

a) for legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose of collection;
Where applicable, you also have the rights under Articles 16–22 GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

9. Methods of Exercising Rights

You may at any time exercise your rights by sending:

a registered letter with return receipt to KALICHEM S.R.L., Via Alessandrini, 8 – 25086 Rezzato (BS);
an email to kalichem@kalichem.it

10. Data Controller, Data Processors, and Authorized Persons

The Data Controller is KALICHEM S.R.L.

The updated list of data processors and authorized persons is kept at the registered office of the Data Controller.

Contacts

Kalichem S.r.l.
Via Lugi Alessandrini 8 – 25086Rezzato (Brescia) – Italia
Codice Fiscale e P. IVA IT02424900989,
mail kalichem@kalichem.it
PEC certificata@pec.kalichem.it

DPO appointed:
POLICONSUL SRL
Tel 030 35 33 948
Mail: consulentiprivacy@policonsul.it
PEC policonsul@pcert.it

Your rights in the field of data protection and your right to propose a complaint with the supervisory authority

Under certain conditions, you have the right to ask:

access to your Personal Data;
a copy of the Personal Data you have provided us (so-called portability);
the correction of the data in our possession;
the cancellation of any data for which the Company no longer has any legal basis for processing;
the withdrawal of your consent, in the event that the processing is based on consent;
the limitation of the way in which the Company processes your Personal Data, within the limits established by current legislation.

Right to object: You have the right to object at any time, for reasons connected with your particular situation, to the processing of your Personal Data. The objection request must be addressed to the following address: kalichem@kalichem.it.

The exercise of the above rights is subject to some exceptions aimed at safeguarding the public interest (for example the prevention or identification of crimes) and the interests of the Company. In the event that you exercise any of the aforementioned rights, it will be the responsibility of the Company to verify that you are entitled to exercise it and you will be informed, as a rule, within one month.

For any complaints or reports on the methods of processing your Personal Data, the Company will make every effort to respond to your concerns. However, if you wish, you can forward your complaints or reports to the Guarantor for the protection of Personal Data, using the references available on the website www.garanteprivacy.it, or take the appropriate judicial offices.