Privacy Policy

General Information

Who is the Data Controller?

The website unistara.com (hereinafter “Site”) is managed by Unistara S.p.A. (hereinafter “Unistara”), with registered office in Piazza Rossetti, 3, 16129, Genoa – Italy, in its capacity as Data Controller. In its capacity as Data Controller, Unistara determines the purposes and means of the processing of personal data collected within the Site.

Personal data processed

What personal data are processed?

The following categories of personal data are processed by Unistara:

1. Personal data (e.g. Name, Surname, Email Address) provided in case of contact through the methods provided by the Site (Contacts section);
2. Personal data (e.g. data contained in the CV) provided in case of sending a spontaneous application (Work with us section);
3. Personal data (e.g. Type of device used, IP address) collected while browsing. For more details on these types of data please visit the cookie policy.
4. Personal data (e.g. email address, telephone number) provided to receive commercial and marketing communications from Unistara (e.g. Newsletter service).

How do we use this personal data?

The personal data referred to in section 2.a will be processed for the following purposes:

1. Manage the relationship between the user and Unistara. In particular, Unistara uses this information to contact the user regarding their requests.
2. Evaluation of spontaneous application.
3. Analysis of the functionality of the Site.
4. Sending commercial and marketing communications.

What are the legal bases of the processing?

1. We process Personal Data for the performance of a contract to which the user is a party.
   lThe user is free to provide the data to purchase products or services from Unistara, apply for a job position in Unistara or request commercial information from Unistara. In this case, failure to provide personal data will not result in negative consequences for the user, but the request may not be processed. For example, if the user does not provide his/her personal data, it will not be possible to contact him/her to fulfil his/her requests or to evaluate his/her application;
2. We process Personal Data with the consent of the user.
   The user is free to give his/her consent to the specific processing activity. If, for example, the user wants to receive commercial and marketing communications, he/she must give his/her consent for his/her contact data to be used for this purpose.
3. The processing of Personal Data is necessary for the pursuit of Unistara’s legitimate interest. 
   In some cases, Unistara has a legitimate interest in the processing of the user’s personal data in order to respond to certain requests for information or assistance sent to the addresses listed on this Site.

Who will we share personal data with?

The personal data provided by the user will be communicated to:

1. Unistara’s personnel trained and authorized for data processing;
2. Companies belonging to the Unistara Group with which contractual agreements are in force for the management of personal data (e.g. appointments as data processor);
3. Third-party companies that Unistara uses to carry out its business activities (e.g. telecommunication companies, IT companies, recruitment agencies) expressly appointed as Data Processors.

Where do we transfer the personal data?

Where do we transfer the personal data?
Depending on the case, some of the companies belonging to the categories referred to in point 2.d.3 may be located in countries, which do not offer an adequate level of protection of personal data. The European Commission has the power to define a Country as appropriate and the updated list of Countries offering protection can be found here

Transfers of personal data outside the European Union and to Countries not belonging to the above-mentioned list will be carried out exclusively following specific agreements between Unistara and the companies involved, through the use of instruments deemed suitable by the European Commission, such as the so-called Standard contractual clauses for data transfers between EU and non-EU countries.

How long do we process personal data?

The user’s personal data are kept for the period necessary for the processing activity for which they were provided. More specifically:

1. The data that the user sends us to communicate with us are deleted after 12 months from the last interaction of the user with Unistara.
2. The data contained in the Curriculum, are kept for 12 months from their receipt or will be kept according to Unistara’s internal procedures in case of formalization of the employment relationship.
3. The data processed for marketing purposes are kept for 24 months after opposition to the processing and, in any case, deleted within 30 days in case of specific request by the user.

Data of users under 16 years of ag

The Site is not intended for users under 16 years of age and Unistara does not intentionally collect personal information from them. If information on minors is accidentally recorded, Unistara will promptly delete the personal information of such minors, unless the personal data of such users is communicated with the express consent of the parental authority.

User rights

According to the applicable data protection rules and regulations, the user has the right to:

1. access, rectify and/or delete his/her personal data;
2. limit or oppose the processing of his/her personal data;
3. inform us that he/she no longer wishes to receive any marketing information;
4. in some cases, request that part of his/her personal data be transferred to the user himself/herself or to third parties;
5. insofar as the processing by us of the user’s personal data is based on his/her consent, revoke this consent without affecting the legitimacy of the processing based on consent prior to revocation.

We are committed to allowing users to exercise their rights: for this purpose, it is possible to contact us using the information in the header of this Privacy Policy. Users may exercise their rights, with reference to Unistara Group companies and brands, by writing to this address.

Changes to this privacy information

We periodically check that our Privacy Policy complies with new data protection laws and/or regulations. However, although this Policy may be changed over time, we will not reduce the rights of users without first obtaining their express consent. Should the handling of the request not be satisfactory, a complaint can be lodged with a supervisory authority about how we have processed the personal data.