Controprogetto > Privacy Policy

Privacy Policy

Privacy Notice pursuant to Article 13 of EU Regulation 2016/679

A. Data Controller

Pursuant to Article 13 of EU Regulation 2016/679 (GDPR), Controprogetto, a brand of D&D srl, with operational headquarters at via del Ricordo 31, 20128 Milan (MI), email: laboratorio@controprogetto.it, is the data controller of personal data.

The Controller informs that personal data provided by the user/data subject, in connection with ongoing legal relations, will be processed in compliance with current legislation and according to the principles of lawfulness, fairness, transparency, and minimization under Article 5 of the GDPR. Any further communications may also be provided subsequently.

B. Data subject to processing

Personal data voluntarily provided through the website, in particular via contact forms, include:

  • Name and surname
  • Email address
  • Phone number (optional)
  • Any personal data contained in CVs submitted voluntarily

In addition, navigation data are automatically collected by the IT systems and software procedures that enable the website’s functioning, whose transmission is implicit in the use of Internet communication protocols.

C. Purpose of processing

Personal data are processed for the following purposes:

  • To ensure the proper functioning of the website;
  • To respond to requests for information, contacts, or quotations submitted via forms;
  • Recruitment and evaluation of spontaneous applications;
  • Subject to explicit consent, sending informational and promotional communications (newsletters) regarding Controprogetto services and projects.

D. Duration of processing

Personal data will be retained only as long as strictly necessary for the purposes for which they were collected:

  • For the purposes under point C.1, according to the cookie policy;
  • For recruitment purposes, up to 12 months from receipt of the CV;
  • For marketing purposes, for a maximum period of 24 months, unless consent is revoked.

Consent can be withdrawn at any time.

E. Nature of data provision

Providing personal data is optional. Failure to provide them may make it impossible to respond to the data subject’s requests.

Processing data for marketing purposes and for the use of non-essential cookies is subject to explicit consent.

F. Methods of processing

Processing is carried out using paper-based and IT tools, in compliance with appropriate technical and organizational security measures to ensure data integrity, confidentiality, and availability, in accordance with the GDPR.

Access to data is allowed only to authorized personnel. Data may be shared with third parties appointed as Data Processors if necessary for service delivery or legal obligations.

G. Social media platforms

The website may contain links to social media platforms. Data processing by these platforms is governed by their respective privacy policies, to which reference is made.

H. Communication to third parties and dissemination

Personal data will not be disseminated. They may be shared with external parties (professionals, suppliers, consultants, IT platforms) exclusively for purposes related to the Controller’s activities or for legal obligations.

I. Transfer of data to third countries

Personal data may be transferred to countries outside the EU. In such cases, the transfer will comply with the safeguards provided under Articles 44 et seq. of the GDPR, through standard contractual clauses or other appropriate instruments.

J. Rights of the data subject

The data subject may exercise the rights provided under Articles 15 et seq. of the GDPR at any time, including:

  • Access to personal data;
  • Rectification or deletion;
  • Restriction or objection to processing;
  • Data portability;
  • Withdrawal of consent;
  • Lodging a complaint with the Data Protection Authority.

K. Contacts to exercise rights

To exercise their rights, the data subject may write to: laboratorio@controprogetto.com or send a communication to the operational headquarters at via del Ricordo 31, 20128 Milan (MI).