Privacy Policy
Gruppo Risorse Italia, located at 51 Via Torino, Milan, Lombardy, 20123, Italy, is the data controller responsible for the processing of your personal data collected through our online platform and services.
Your privacy is important to us. This policy explains how we collect, use, disclose, and protect your personal information when you visit our site, use our services, or interact with us.
Information We Collect
We collect various types of personal information depending on how you interact with our site and services. This may include:
- Information you provide directly to us, such as when you apply for a position, request information, register for an event, or contact us. This can include your name, contact details (address, phone number), professional background, employment history, educational details, skills, application materials (CV/resume, cover letter), and any other information you choose to share.
- Information we collect automatically when you use our site. This includes technical information such as your IP address, browser type and version, operating system, referring URL, pages you visit, and the time and date of your visits.
- Information from third parties, such as publicly available sources or third parties providing services to us, where permitted by law.
How We Use Your Information
We use your personal information for specific purposes, based on legal grounds, including:
- To provide and manage our services, such as recruitment, talent acquisition, HR consulting, training, and payroll administration. This includes matching candidates with potential employers, processing applications, and delivering consulting services.
- To communicate with you regarding our services, updates, events, or responses to your inquiries.
- To operate, maintain, and improve our online platform and services, understanding how our site is used and enhancing user experience.
- To comply with legal obligations, such as employment law, tax law, or responding to lawful requests from public authorities.
- To protect our rights, property, or safety, and the rights, property, or safety of others, such as preventing fraud or ensuring network and information security.
- With your consent, for specific purposes that we clearly communicate to you.
- For legitimate interests, such as direct marketing (where permitted), business development, or internal reporting, provided these interests do not override your fundamental rights and freedoms.
Legal Basis for Processing
We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
- The processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- The processing is necessary for compliance with a legal obligation to which we are subject.
- The processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
- You have given explicit consent to the processing of your personal data for one or more specific purposes.
Sharing Your Information
We may share your personal information with:
- Clients: When providing recruitment or staffing services, we share candidate information with potential employers, always in accordance with the purpose for which the data was collected and your consent or based on our service agreement with you.
- Service Providers: We may share data with trusted third-party vendors, consultants, and other service providers who perform services on our behalf, such as IT support, hosting, analytics, and professional advisors. These third parties are contractually bound to protect your information and use it only for the purposes for which it was disclosed.
- Legal and Regulatory Authorities: We may disclose your information when required by law, regulation, legal process, or governmental request, or to enforce our agreements, policies, and terms of service.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.
International Data Transfers
Your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA) where data protection laws may be different from those in your country. When we transfer your data outside the EEA, we ensure appropriate safeguards are in place to protect your information, such as relying on standard contractual clauses approved by the European Commission or other legally permitted mechanisms.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Your Data Protection Rights
Under the GDPR, you have certain rights regarding your personal data:
- The right to access: Request a copy of the personal data we hold about you.
- The right to rectification: Request correction of inaccurate or incomplete data.
- The right to erasure (Right to be forgotten): Request deletion of your personal data under certain conditions.
- The right to restrict processing: Request the limitation of the processing of your data under certain conditions.
- The right to object to processing: Object to the processing of your data, particularly for direct marketing purposes or based on legitimate interests.
- The right to data portability: Request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
- The right to withdraw consent: If we are processing your data based on your consent, you have the right to withdraw that consent at any time.
- The right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or where an alleged infringement of the GDPR has occurred. In Italy, this is the Garante per la Protezione dei Dati Personali.
To exercise any of these rights, please contact us in writing using the contact details provided below.
Data Security
We have implemented appropriate technical and organizational security measures designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is entirely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
Cookies
Our site uses cookies and similar technologies to function effectively, improve your experience, analyze site usage, and for marketing purposes. Cookies are small text files stored on your device. You can manage your cookie preferences through your browser settings or tools provided on our site. Please refer to our Cookie Policy (if separate) for more detailed information on our use of cookies.
Links to Other Websites
Our online platform may contain links to third-party websites or services. This privacy policy applies only to our site and services. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page. We encourage you to review this policy periodically.
Contact Us
If you have questions or concerns about this privacy policy or our data practices, please contact us in writing at:
Gruppo Risorse Italia
51 Via Torino,
Milan, Lombardy,
20123, Italy.