If there is any conflict between the policies in this statement and the Principles, the Principles will govern. This statement outlines the general policy and practices for implementing the Principles, including the types of information CHECCHI E MAGLI S.R.L. gathers, how the information is used, and the choices affected individuals have regarding CHECCHI E MAGLI S.R.L. 's use of, and their ability to correct, that information.
The use of EU employee Personal Data will include global enterprise headcount reporting, statistical analysis, compensation planning and related transactions, career development, staffing, international personal security issues, internal investigations, ethics investigations, law enforcement inquiries, U.S. Government agency inquiries, and mergers, acquisitions, and divestitures.
The EU adopted the Directive on Data Protection ("EU Directive"), which requires EU member states to adopt laws protecting Personal Data collected within their borders. These laws must, among other provisions, restrict the transfer of Personal Data only to countries that have data protection laws deemed "adequate" under standards established in the EU Directive. The U.S. Department of Commerce and the European Commission have agreed on the Principles to enable U.S. Companies to satisfy the requirement under EU law that adequate protection be given to Personal Data transferred from the EU to the U.S.
Identifiable Person - means a natural person that is or can be identified, directly or indirectly, as a particular person by reference to an identification number or to one or more aspects of the person's physical, physiological, mental, economic, cultural or social identity. Identifiable Persons may include any employee, applicant, former employee, or retiree of CHECCHI E MAGLI S.R.L., its operating divisions, or subsidiaries in the EU.
Personal Data - is any information about an Identifiable Person that is within the scope of the EU Directive, is received by CHECCHI E MAGLI S.R.L. in the U.S. from the EU, is recorded in any form and is about, or pertains to, a specific individual; and can be linked to that individual.
Personal Data does not include information that is encoded or anonymized, or publicly available information that has not been combined with non-public Personal Data.
Processing - means any online, offline or manual processing and includes such activities as copying, filing, and inputting Personal Data into a database.
Sensitive Data - is data that pertains to medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sexual orientation or any other data that is identified as "sensitive" by the Identifiable Person.
Where CHECCHI E MAGLI S.R.L. collects Personal Data directly from Identifiable Persons in the EU, it will inform them about the type of Personal Data collected, the purposes for which it collects and uses the Personal Data, and the types of non-agent third parties to which CHECCHI E MAGLI S.R.L. discloses or may disclose that information, and the choices and means, if any, CHECCHI E MAGLI S.R.L. offers individuals for limiting the use and disclosure of their Personal Data. Notice will be provided in a clear and conspicuous language when individuals are first asked to provide Personal Data to CHECCHI E MAGLI S.R.L., or as soon as practicable thereafter, and in any event before CHECCHI E MAGLI S.R.L. uses or discloses the information for a purpose other than that for which it was originally collected.
Where CHECCHI E MAGLI S.R.L. receives Personal Data from their subsidiaries or operating divisions in the EU, it will use and disclose such information in accordance with the notices provided by such entities and the choices made by the individuals to which the Personal Data relates.
To the extent practical and appropriate, CHECCHI E MAGLI S.R.L. collects Personal Data directly from the Identifiable Person. In those cases where CHECCHI E MAGLI S.R.L. A collects Personal Data from other persons, it takes measures to respect the privacy preferences of the Identifiable Persons. Examples of when CHECCHI E MAGLI S.R.L. may seek information from others include, without limitation, evaluating employees, recruiting, benefit administration and succession planning.
CHECCHI E MAGLI S.R.L. 's collection and use of Personal Data in the employment context is essential to the conduct of CHECCHI E MAGLI S.R.L. human resources and business functions. Examples of the purposes for which CHECCHI E MAGLI S.R.L. collects and uses Personal Data include, without limitation, recruitment, payroll, and personnel management, such as compensation, promotion, evaluation, benefit administration and succession planning.
While recognizing that all Personal Data deserves to be protected, CHECCHI E MAGLI S.R.L. exercises special precautions and safeguards for Sensitive Data. Unless required by applicable law, CHECCHI E MAGLI S.R.L. does not request or record Sensitive Data.
CHECCHI E MAGLI S.R.L. will offer Identifiable Person(s) the opportunity to choose (opt-out) whether their Personal Data is (a) to be disclosed to a non-agent third party, or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. In addition, where consent of Identifiable Persons or their representatives is required by law, contract, or agreement for the collection, use, or disclosure of Personal Data, CHECCHI E MAGLI S.R.L. will request such consent and respect the Identifiable Person's choice in such matters.
In certain limited or exceptional circumstances, in accordance with the Safe Harbor Principles, CHECCHI E MAGLI S.R.L. may disclose Personal Data without notice or the consent of the Identifiable Person. For example, this may occur when CHECCHI E MAGLI S.R.L. is required to disclose information by law or legal process or in the vital interests of the Identifiable Person, such as when life or health are at stake.
Except as provided by the Safe Harbor Principles or applicable law, an Identifiable Person must give affirmative permission (opt in consent) before CHECCHI E MAGLI S.R.L. will disclose Sensitive Data to a third party or use Sensitive Data for a purpose other than those for which it was originally collected or subsequently authorized by the Identifiable Person.
CHECCHI E MAGLI S.R.L. will provide Identifiable Persons with reasonable mechanisms to exercise their choices.
To enable CHECCHI E MAGLI S.R.L. to provide employees with certain services such as payroll direct deposit, personnel benefits, or other human resource services, CHECCHI E MAGLI S.R.L. may disclose Personal Data without consent to sub-contractors, vendors or other third parties, if the third party (i) subscribes to the Safe Harbor Principles, (ii) is subject to laws meeting the minimum standards required by the EU Directive or (iii) enters into an agreement with CHECCHI E MAGLI S.R.L. obligating the third party to provide at least the same level of privacy protection as required by Safe Harbor Principles.
CHECCHI E MAGLI S.R.L. takes reasonable precautions to protect Personal Data against loss, misuse and unauthorized access, disclosure, alteration, destruction and theft.
These precautions include password protections for online information systems and restricted access to Personal Data. All inquiries from outside CHECCHI E MAGLI S.R.L., whether written or oral, concerning the identity, employment record or performance of an employee or former employee must be referred to the Human Resources Department.
Employees are responsible for helping maintain security through safeguarding Personal Data, e.g., by protecting passwords used to access CHECCHI E MAGLI S.R.L. computer systems, by keeping paper records under lock and key when not in use, and by disposing of files and reports no longer needed in a secure manner.
CHECCHI E MAGLI S.R.L. takes reasonable steps to keep Personal Data accurate, complete, and up-to-date. Each Identifiable Person is responsible for informing CHECCHI E MAGLI S.R.L. or its EU subsidiaries of any changes in Personal Data so that the information that CHECCHI E MAGLI S.R.L. holds about him or her is accurate, complete and up-to-date.
CHECCHI E MAGLI S.R.L. retains Personal Data only as long as necessary to meet the purposes for which it was collected or as required by law, contractual agreement, or the Safe Harbor Principles.
Certain Personal Data may be archived to administer post-employment benefits, to meet legal requirements, to provide evidence in cases of litigation, for statistical purposes, or to assist in decision relating to re-employment.
CHECCHI E MAGLI S.R.L. uses reasonable procedures, following retention guidelines, to ensure that it archives or destroys Personal Data no longer required for the purposes for which it was originally collected, unless otherwise agreed to by the Identifiable Person.
CHECCHI E MAGLI S.R.L. provides Identifiable Persons with a reasonable opportunity to examine their Personal Data, to challenge its accuracy and to have it corrected, amended or deleted as appropriate, subject to certain exceptions. Upon request, Identifiable Persons will be given reasonable access to the Personal Data CHECCHI E MAGLI S.R.L. holds about them. Reasonable access means that requests for access are made during normal business hours, following standard procedures, and that the frequency of access requests is not excessive.
If an Identifiable Person is denied access to Personal Data, CHECCHI E MAGLI S.R.L. will provide such Identifiable Person with the reason(s) for denying access and a contact point for further inquiries.
If the Identifiable Person notifies CHECCHI E MAGLI S.R.L. that the Personal Data on file is incorrect and provides CHECCHI E MAGLI S.R.L. with appropriate supporting documentation, CHECCHI E MAGLI S.R.L. will either correct the Personal Data or direct the Identifiable Person to the source of the information for correction.
If, upon review, CHECCHI E MAGLI S.R.L. believes that the existing Personal Data is correct, CHECCHI E MAGLI S.R.L. will inform the Identifiable Person. If the Identifiable Person continues to dispute the accuracy of the Personal Data, CHECCHI E MAGLI S.R.L. will note that dispute in the record of the Identifiable Person upon written request.
The Safe Harbor Principles provides for some exceptions to the obligation to provide access to Personal Data. Access to confidential or proprietary information, such as business reorganization or succession plans, or where granting access has to be balanced against the privacy interests of others, may be restricted. In addition, access may be denied
- when the information requested relates to an ongoing investigation, litigation or potential litigation,
- where the burden or expense of providing access would be disproportionate to the risks to the privacy of the Identifiable Person or when the rights of persons other than the Identifiable Person would be violated.
For complaints that cannot be resolved between CHECCHI E MAGLI S.R.L. and the complainant, CHECCHI E MAGLI S.R.L. has agreed to participate in the dispute resolution procedures of the panel established by the European data protection authorities to resolve disputes pursuant to the Principles.
CHECCHI E MAGLI S.R.L. 's privacy practices are self-certified annually to the U.S. Department of Commerce. The Vice President, Human Resources is responsible for:
Overseeing responses to inquiries and resolutions of complaints relating to the privacy of Identifiable Persons;
Working with CHECCHI E MAGLI S.R.L. 's legal department to ensure CHECCHI E MAGLI S.R.L. 's ongoing compliance with applicable privacy laws and agreements, as well as any obligations CHECCHI E MAGLI S.R.L. may enter into voluntarily, such as the Safe Harbor Principles; and
This policy may be amended by time to time, consistent with the requirements of the Safe Harbor Principles. A notice will be posted on CHECCHI E MAGLI S.R.L. 's web page at www.checchiemagli.com.
Mailing List Checchi e Magli
Informativa sul trattamento dei dati personali ai sensi del D.Lgs 196/2003 (informativa resa solo per il presente sito e non per altri visitabili tramite link)
a seguito della consultazione di questo sito possono essere trattati dati relativi a persone identificate o identificabili.
La presente informativa Le viene consegnata in ottemperanza all'art. 13 del Decreto Legislativo 196/2003.
Il titolare del trattamento è la Checchi e Magli che al proprio interno ha nominato uno o più responsabili del trattamento e diversi incaricati.
I trattamenti connessi a questo sito hanno luogo presso la suddetta sede e sono curati da personale dell'Azienda incaricato al trattamento, a strutture esterne da noi individuate oppure da eventuali incaricati per occasionali operazioni di manutenzione.
Il trattamento dei dati si svolgerà nel pieno rispetto delle libertà fondamentali senza ledere la Sua riservatezza e la Sua dignità, adottando sempre principi ispirati alla correttezza, liceità e trasparenza e per scopi non eccedenti rispetto alle finalità della raccolta. Per il trattamento dei Suoi dati verranno utilizzati strumenti sia elettronici che manuali adottando tutte le misure di sicurezza idonee a garantire la riservatezza e l'integrità dei dati. I dati trattati non verranno comunicati a soggetti privi di autorizzazione concessa dal Titolare o dal Responsabile, fatta salva la comunicazione o diffusione di dati richieste, in conformità alla legge, da forze di polizia, dall'autorità giudiziaria, da organismi di informazione e sicurezza o da altri soggetti pubblici per finalità di difesa o di sicurezza dello Stato, di prevenzione, accertamento o repressione di reati. Il conferimento dei dati è facoltativo ma il rifiuto a fornirli potrebbe pregiudicare la parziale o totale esecuzione del contratto.
In qualità di Interessato in ogni momento potrà fare valere tutti i diritti garantiti dall'art.7 del D.lgs.196/2003 nei confronti del Titolare del trattamento. In allegato è presente il dettaglio dell'articolo citato.
Diritti dell'interessato (Legge sui dati 30 Giugno 2003, n. 196 "Codice in materia di protezioni dei dati Personali"):
1. L'interessato ha diritto di ottenere la conferma dell'esistenza o meno di dati personali che lo riguardano,anche se non ancora registrati, e la loro comunicazione in forma intelligibile.
2. L'interessato ha diritto di ottenere l'indicazione:
a. dell'origine dei dati personali;
b. delle finalità e modalità del trattamento;
c. della logica applicata in caso di trattamento effettuato con l'ausilio di strumenti elettronici;
d. degli estremi identificativi del titolare, dei responsabili e del rappresentante designato ai sensi dell'articolo 5, comma 2;
e. dei soggetti o delle categorie di soggetti ai quali i dati personali possono essere comunicati o che possono venirne a conoscenza in qualità di rappresentante designato nel territorio dello Stato, di responsabili o incaricati.
3. L'interessato ha diritto di ottenere:
a. l'aggiornamento, la rettificazione ovvero, quando vi ha interesse, l'integrazione dei dati;b. la cancellazione, la trasformazione in forma anonima o il blocco dei dati trattati in violazione di legge, compresi quelli di cui non è necessaria la conservazione in relazione agli scopi per i quali i dati sono stati raccolti o successivamente trattati;
c. l'attestazione che le operazioni di cui alle lettere a) e b) sono state portate a conoscenza, anche per quanto riguarda il loro contenuto, di coloro ai quali i dati sono stati comunicati o diffusi, eccettuato il caso in cui tale adempimento si rivela impossibile o comporta un impiego di mezzi manifestamente sproporzionato rispetto al diritto tutelato.
4. L'interessato ha diritto di opporsi, in tutto o in parte:
a. per motivi legittimi al trattamento dei dati personali che lo riguardano, ancorché pertinenti allo scopo della raccolta;
b. al trattamento di dati personali che lo riguardano a fini di invio di materiale pubblicitario o di vendita diretta o per il compimento di ricerche di mercato o di comunicazione commerciale.
Art. 4, comma 1, lettera a) - D. Lgs 196/2003
Trattamento: qualunque operazione o complesso di operazioni, effettuati anche senza l'ausilio di strumenti elettronici, concernenti la raccolta, la registrazione, l'organizzazione, la conservazione, la consultazione, l'elaborazione, la modificazione, la selezione, l'estrazione, il raffronto, l'utilizzo, l'interconnessione, il blocco, la comunicazione, la diffusione, la cancellazione e la distruzione di dati, anche se non registrati in una banca di dati.