1. Purposes, legal grounds and categories of personal data
The data processed by INSTEEL SERVIZI S.R.L.S. may be used for purposes such as:
1.1 Administration and maintenance of this Website, which also involves the use of cookies, in order to ensure fast and smooth interactions between users and the Website (legal basis: Art. 6 (1) lit. a) and f) GDPR, i.e. your consent and the legitimate interest of INSTEEL SERVIZI S.R.L.S., as applicable).
1.2 For more details about the use of cookies by INSTEEL SERVIZI S.R.L.S., please consult the dedicated page located in the footer menu of the website.
1.3 Rental of spaces, organization of private or corporate events (legal basis: Art. 6 (1) lit. b) GDPR – execution of a contract or steps requested by the data subject prior to concluding the contract), where applicable.
1.4 Recruitment processes, for purposes such as: evaluating applications, qualifications, skills and interests in the available position, organizing and conducting interviews, selecting and hiring, facilitating access to occupational medicine services, and conducting general background checks (legal basis: Art. 6 (1) lit. b) and f) GDPR – pre-contractual measures, execution of the employment contract, or fulfillment of our legitimate interests, as applicable).
As part of your application, it is necessary to process the data included in the documents you send us (CV, cover letter, etc.). These will generally include: name, surname, contact details (phone number, email address), professional experience, education, and any other information you choose to provide. Additionally, during interviews we may process professional preferences, details about experience and studies not listed in your CV, and salary expectations.
As part of the hiring process, we may request additional documents (such as transcripts, diplomas, permits, professional qualifications), which also contain personal data.
To evaluate your application, we may also access your publicly available social media profiles (such as LinkedIn). Since your private life is not relevant to us, we will not consult or consider profiles or information clearly intended to remain private and unrelated to professional aspects.
1.5 Employment relations, for executing employment contracts, fulfilling legal obligations and/or legitimate interests (legal basis: Art. 6 (1) lit. b), c) and f) GDPR, as applicable). In certain cases, INSTEEL SERVIZI S.R.L.S. may process employees’ personal data based on their consent (Art. 6 (1) lit. a) GDPR). Details of employee data processing are provided in specific internal information notices.
1.6 Marketing and promotional activities carried out by INSTEEL SERVIZI S.R.L.S. (such as sending newsletters, promotional materials, commercial offers, marketing communications), requesting feedback (via client satisfaction surveys), and conducting market, product, and service analyses (legal basis: Art. 6 (1) lit. a), f) GDPR – your consent or our legitimate interest, as applicable, including under Law no. 506/2004 regarding personal data processing in electronic communications).
You can unsubscribe from newsletters at any time, free of charge, by selecting the “Unsubscribe” option within the email.
1.7 Security of assets, persons and premises through video surveillance (legal basis: Art. 6 (1) lit. c) and f) GDPR – legal obligations and legitimate interest). For this purpose, INSTEEL SERVIZI S.R.L.S. may process your image captured by CCTV, your name, surname, and vehicle license plate number, if applicable.
1.8 Communication with collaborators and contractual partners (legal basis: Art. 6 (1) lit. b) and f) GDPR). Data processed may include: name, surname, job title, represented organization, handwritten or electronic signature, and ID details.
1.9 Handling your requests, questions or complaints (legal basis: Art. 6 (1) lit. b) and f) GDPR – contract execution, pre-contractual measures, or legitimate interest). Data processed may include: name, surname, contact details, and your opinions.
2. How we collect data
INSTEEL SERVIZI S.R.L.S. may obtain data:
directly from you (e.g., when you use our services, contact us, request offers, visit our Website or social media pages, or apply for open positions);
3. Disclosure of your personal data
Your personal data may be disclosed by INSTEEL SERVIZI S.R.L.S. to:
yourself, when exercising GDPR rights;
contractual partners (courier companies, suppliers, subcontractors, consultants, technical experts, etc.);
public authorities, according to legal obligations;
external auditors, for audit purposes;
lawyers, tax/business consultants, in case of disputes or consultancy needs;
bailiffs, for contractual notifications or enforcement of contracts or judgments;
debt recovery agencies;
in case of a sale or reorganization process, data may be transferred to the acquiring entity, its consultants, or the reorganized entity.
Data may be transferred within the EEA or outside the EEA, in compliance with GDPR and based on Standard Contractual Clauses or other recognized safeguards.
4. Data retention period
INSTEEL SERVIZI S.R.L.S. processes your personal data for as long as necessary to fulfill the purposes for which they were collected, and thereafter as required by legal obligations.
After mandatory retention periods expire, data may be anonymized, thus losing their personal character.
5. Your rights
In the context of personal data processing, you have the following rights:
the right to be informed,
the right of access,
the right to rectification,
the right to erasure,
the right to restriction,
the right to data portability,
the right to object,
the right not to be subject to automated decision-making,
the right to lodge a complaint with the competent Data Protection Authority (see: www.dataprotection.ro) or with the competent courts.
To exercise these rights, you may submit a request addressed to INSTEEL SERVIZI S.R.L.S., for the attention of the Data Protection Officer.
