Last updated: October 13, 2026
1
Data Controller
The Data Controller for personal data is D&D ASSOCIATI SRL, with its registered office at Via Boscofangone, 80035 S.s. 7BIS NA.
For information regarding the processing of personal data and to exercise the rights provided by law, you may write to:
Email: backofficededassociati@gmail.com
2
Types of data processed
In relation to the use of the site, the following categories of data may be processed, depending on the features actually used:
• Browsing data: technical information necessary for the operation and security of the site, such as IP addresses and data regarding requests sent to the server.
• Data provided via contact forms: information voluntarily entered by the user, such as name, email address, telephone number, and message content.
• Job application data: first name, surname, email, telephone number, sales territory or professional area of interest, experience, and curriculum vitae, depending on the form completed.
• Preference and browsing data: information collected via cookies or similar technologies, within the limits of the tools actually used and the preferences expressed by the user.
Users are advised not to transmit information that is not relevant to the purposes of the requested service. 13. Purposes and legal bases
3
Data Controller
Personal data may be processed to:
• enable browsing and the proper functioning of the site;
• respond to requests submitted via contact forms;
• receive and manage job applications or collaboration proposals;
• protect the site against spam, abuse, and unauthorized access attempts;
• comply with legal obligations;
• manage any additional site features, provided they are actually active and based on an applicable legal basis.
Depending on the specific case, the legal bases are: the performance of pre-contractual measures requested by the data subject; compliance with legal obligations; the Data Controller’s legitimate interest; or consent, where required by law.
4
Provision of data
Providing the data marked as mandatory in the forms is necessary to process the request or application. Failure to complete these fields may prevent the communication from being sent or processed.
Providing any optional data is voluntary.
5
Processing methods and security
Data is processed using IT tools and organizational procedures appropriate to the stated purposes. The Data Controller adopts reasonable measures to protect data against unauthorized access, loss, alteration, or improper disclosure.
6
Data recipients
Data may be processed by authorized personnel and disclosed to technical service providers that support site operations, hosting, maintenance, email services, and the specific features being used.
Depending on the circumstances, these parties act either as data processors or as independent data controllers. The list and roles must be verified based on the suppliers actually engaged.
The data are not intended for public disclosure, unless required by law or specifically communicated to the data subject.
7
Application management
Data submitted via the “Work with us” section is used to receive, evaluate, and manage applications and to contact candidates regarding potential professional or collaborative opportunities.
Applications may be forwarded to the company email address designated for handling them. For employment applications, a CV in PDF format may be requested.
Data is accessible only to authorized personnel or service providers involved in managing the service, within the scope of their respective duties.
Application retention period: Personal data and CVs will be retained for a maximum of 12 months from receipt of the application, unless further retention is required to comply with legal obligations or to protect the Data Controller's rights. At the end of this period, the data will be deleted or anonymized, where possible, unless there are further legal grounds for retaining it.
8
Cookies and similar technologies
The site may use technical cookies necessary for page functionality and, where applicable, additional cookies or tracking tools provided by third-party services.
Categories, purposes, retention periods, and any recipients must be described in the specific cookie policy, based on a technical verification of the tools actually in use.
Where required, non-essential cookies or tools are installed only after valid consent has been obtained. Users must be able to manage their preferences via the methods made available on the site.
Cookie policy: https://www.dedassociati.it/cookie-policy-ue/
9
External services and anti-spam protection
The site may integrate external services for technical or security functions. If Google reCAPTCHA is active, the service is used to help distinguish legitimate submissions from automated ones.
The information processed, the recipients, any transfers to third countries, and the relevant safeguards must be verified based on the specific service configuration and the provider's up-to-date documentation.
10
Retention period
Personal data are retained for the time necessary to fulfill the purposes for which they were collected, taking into account legal obligations and the legitimate interests of the Data Controller.
Specific retention periods must be defined for each data category—including contact requests, job applications, technical data, and cookie preferences—based on the purposes and tools used.
11
Transfers to third countries
Where the use of external providers or services involves the transfer of personal data to countries outside the European Economic Area, such transfers are carried out in compliance with the conditions and safeguards set out in the GDPR.
Specific details must be finalized after verifying the providers actually used.
12
Data subject rights
Subject to the limits and conditions set out in the GDPR, the data subject may request access to their personal data, as well as rectification, erasure, restriction of processing, and—where applicable—data portability. They may also object to processing based on legitimate interests and withdraw previously given consent, without affecting the lawfulness of processing carried out prior to such withdrawal.
Requests may be sent to backofficededassociati@gmail.com.
The right to lodge a complaint with the Data Protection Authority remains unaffected. 33. Changes to the policy
13
Changes to the Privacy Policy
The Data Controller may update this policy in the event of changes to the website, processing methods, or applicable regulations. The updated version will be made available on this page.