Privacy policy

The Controller processes the following types of Personal Data voluntarily provided by the Data Subject:

• Contact data: first name, surname, address, email, phone, images, authentication credentials, any further information sent by the Data Subject, etc.
• Tax and payment data: tax code, VAT number, credit card data, bank account details, etc.
• Employment-related data: data entered in the curriculum vitae, data relating to spouse or children, social security data, etc.

The Controller processes the following types of Personal Data collected automatically:

• Technical data: Personal Data produced by the devices, applications, tools and protocols used, such as device information, IP addresses, browser type, Internet provider (ISP).
• Browsing and Application usage data: pages visited, number of clicks, actions taken, session duration, etc.

Failure to provide the Personal Data for which there is a legal or contractual obligation will make it impossible for the Controller to establish or continue the relationship with the Data Subject.

The Application uses cookies, web beacons, unique identifiers and other similar technologies to collect Personal Data of the Data Subject on the pages, links visited and other actions performed when the Data Subject uses the Application.

The processing of Personal Data is necessary for the performance of the contract with the Data Subject, for compliance with legal obligations, on the basis of the Controller's legitimate interest (email marketing, management and monitoring of the technical infrastructure, security and anti-fraud, statistics with anonymous data) and on the basis of the Data Subject's consent (profiling for marketing purposes and marketing of the Controller's products and/or services).

The processing of Personal Data is carried out using paper and electronic tools with organisational procedures and logic strictly related to the purposes indicated and by adopting appropriate security measures. Personal Data will not be disseminated indiscriminately in any way.

Personal Data will not be transferred outside the territory of the European Economic Area (EEA).

Personal Data will be kept for the period of time necessary to fulfil the purposes for which it was collected. At the end of the retention period, all Personal Data will be deleted or kept in a form that does not allow the identification of the Data Subject.

Data Subjects may exercise certain rights with regard to the Personal Data processed by the Controller. In particular, the Data Subject has the right to:

• be informed about the processing of their Personal Data
• withdraw consent at any time
• restrict or object to the processing of their Personal Data
• access their Personal Data
• verify and request rectification of their Personal Data
• obtain deletion of their Personal Data
• transfer their Personal Data to another controller
• lodge a complaint with the supervisory authority for the protection of their Personal Data and/or take legal action.

To exercise their rights, Data Subjects may send a request to info@godot.work. Requests will be taken up by the Controller immediately and handled within 30 days.

Last updated: 23/06/2024