Dear Employee/Collaborator,
Pursuant to Art. 13 of EU Regulation 2016/679 (GDPR), we inform you that the processing of your personal data will be carried out in accordance with the principles of correctness, lawfulness, and transparency, protecting your confidentiality and your rights.
Data Controller of personal data:
Name: TOSCO ESPANSI SRL
Address: Via Trento, 4, 53036 Poggibonsi (SI)
VAT Number: 00735870529
Telephone: 0558078151
Email: amministrazione@toscoespansi.it
Purposes and legal basis of the processing
Your personal data are processed for the following purposes:
- Fulfillment of contractual and pre-contractual obligations related to the employment relationship.
- Administrative and accounting management of personnel, including payroll processing.
- Fulfillment of obligations provided for by labor, tax, and social security legislation.
- Attendance management via electronic badges, specifying that:
- No geolocation tracking is carried out.
- Detailed information on the processing will be provided upon registration on the IT portal.
The legal basis of the processing is Art. 6, paragraph 1, letters b) and c), and for special categories of data, Art. 9, paragraph 2, letter b) of the GDPR.
Categories of data processed
The personal data processed include:
- Personal details and contact information.
- Economic and tax data.
- Health-related data (e.g., medical certificates, fitness for work).
- Data deriving from the use of the electronic badge (e.g., recording of attendance and access).
Recipients of personal data
Your data may be communicated to:
- Public and private entities for the fulfillment of legal obligations.
- Legal and tax consultants for management needs.
- IT service providers for the management and maintenance of company systems.
The data will not be subject to dissemination.
Data retention period
Your personal data will be kept for the entire duration of the contractual relationship and for the time necessary to fulfill legal obligations. Subsequently, they will be deleted or anonymized.
Rights of the data subject
You have the right to:
- Access your personal data.
- Request their rectification or erasure.
- Object to the processing or request its limitation.
- Exercise the right to data portability.
- Lodge a complaint with a supervisory authority (Garante per la protezione dei dati personali).
Methods of processing
The processing will be carried out in manual and computer electronic modes, adopting appropriate technical and organizational measures to guarantee the security and confidentiality of personal data.
For further information: you can contact the Data Controller using the contact details