In accordance with Articles 13 and 14 of European Regulation 679/2016 on the protection of personal data, known as the “General Data Protection Regulation” (GDPR), DOS Design S.p.A. informs that this website (hereinafter the “Site”) collects personal data of users who visit it (hereinafter “Users”).

Data Controller
The Data Controller (hereinafter the “Controller”) of Personal Data is DOS Design S.p.A., with registered office at Via Arno 52, 00198 – Rome (RM), represented by its legal representative.

For any information and/or request relating to the processing of personal data carried out on the Site, the Controller can be contacted, in addition to the postal address indicated above, at the following email address: privacy@dos.design

The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted at: privacy@dos.design.

Types of collected data
Personal data may be freely provided by the User or automatically collected during the use of the Site.
The IT systems and software procedures used for the operation of this Site acquire, during their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of the computers and devices used by Users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (for example successful response, error, etc.), and other parameters relating to the User’s operating system and IT environment.

These data are necessary for the use of web services and are also processed for the purpose of:

• obtaining statistical information on the use of the services (for example, most visited pages, number of visitors by time slot or daily frequency, geographical areas of origin, etc.)
• verifying the correct functioning of the services offered

The sending of personal information and curriculum vitae through the dedicated forms available on the Site (for example, the application form) entails the subsequent acquisition of the data provided by the User. For this type of processing, please refer to the specific privacy notice available in the relevant section of the Site.

Cookies
This Site uses cookies, which are short text strings sent by the Site’s server to the browser of the user/visitor and automatically stored on the user’s device.
The main purpose of these cookies is to make browsing the Site easier; therefore, users are advised to configure their browser to accept them. Data processing is carried out on the legal basis of the legitimate interest of DOS Design S.p.A., namely to improve the performance of the Site.
Almost all browsers are set to accept cookies; however, users/visitors may independently change their browser settings and block cookies (opt-out). It should be noted that blocking cookies may significantly limit or prevent the use of the Site and certain services, particularly those that require registration.

Cookies are divided into session cookies and persistent cookies:
session cookies are deleted when the browser is closed;
persistent cookies remain stored on the user’s device until their expiration.
Persistent cookies are mainly used to facilitate navigation on the Site, understand which sections generate a certain number of pages and users, and to deliver advertising formats.

Data are retained according to the expiration dates set for individual cookies or until they are deleted.

Location
Users’ personal data are processed within the operational offices of our company, as well as in other locations where the parties involved in the processing are located.

Legal basis and purposes of data processing
The processing of the User’s personal data by the Controller pursues the following purposes:

1. Pursuing the legitimate interest of the Controller, pursuant to Article 6(1)(f) GDPR, consisting of ensuring the security of the Site and the information exchanged within it. This includes the ability of the Site to withstand unforeseen events or unlawful or malicious acts that may compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal data, as well as the security of related services offered or made accessible.
2. Responding to information requests submitted through the forms available on the Site, pursuant to Article 6(1)(b) GDPR.
3. Evaluating applications submitted by Users who complete the “Join us” section for possible employment opportunities, in accordance with Article 6(1)(b) and Article 9(2)(b) GDPR.
4. Managing interactions with Users (comments, posts) on the Controller’s social media pages, pursuant to Article 6(1)(f) GDPR. With regard to the processing of personal data carried out by the operators of the social media platforms used by the Controller, please refer to the privacy policies provided by those platforms.

Consequences of refusing to provide data
The provision of personal data for the purposes indicated in the previous paragraph, points 2 and 3, is mandatory and necessary for achieving the purposes described above.
If the User refuses to provide such data, it will not be possible to respond to the request for information or to proceed with the evaluation of the User for potential employment opportunities.

Data Recipients
The personal data provided may be made accessible to:

• employees and collaborators of DOS Design S.p.A., in their capacity as personnel specifically authorized to process the data;
• third parties acting as Data Processors, carrying out activities on behalf of DOS Design S.p.A.;
• judicial or supervisory authorities, administrations, public bodies and organizations (national or international), where necessary to comply with legal obligations or respond to requests made by such authorities.

Data retention period
The User’s personal data are processed by the Controller for the time necessary to respond to the User’s request for information and/or to evaluate the User for possible collaboration or employment opportunities.
Once these purposes have been fulfilled, the User’s personal data may be retained for the time required to comply with legal obligations or for potential legal actions, or as provided by applicable law (please refer to the specific privacy notices relating to such processing)

User rights
Pursuant to Articles 15 and following of the General Data Protection Regulation (GDPR), the User has the right to obtain information from the Controller regarding the existence of the processing of their personal data and to access their data.
Furthermore, the User has the right to request the rectification, completion, updating, or deletion of their data. The User may also request a copy of their data, request the restriction of processing, or object to the processing of their personal data.
The User also has the right to data portability and the right to lodge a complaint with the competent supervisory authorities, as provided under Article 13 GDPR

To exercise these rights, the User may send a communication to the Controller using the address indicated at the beginning of this Privacy Policy, either by registered mail or by email at privacy@dos.design.
The User may also contact the Data Protection Officer at privacy@dos.design.