Privacy Policy

Privacy Policy

Last updated: November 12, 2025

This Privacy Policy describes how DAS2 S.r.l. (“Data Controller”) collects, uses, and discloses personal data when you use our website https://www.das2.it/ (“Website”).
It also explains your rights under the EU General Data Protection Regulation (GDPR – Regulation EU 2016/679) and the Italian Data Protection Code (Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018).

1. Data controller

DAS2 S.r.l.
Email: info@das2.it

2. Types of data collected

The data collected by the Website pertains the following:

  • Identification data (name, surname, email address);
  • Technical data (IP address, browser type, operating system, access logs);
  • Browsing and usage data (visited pages, time spent on the Website);
  • Any data voluntarily provided via contact forms or registration processes.

All information provided by users when they use the contact forms (e.g., “Work with us” or “Contact us”) will be collected, such as the following data: name, surname, Curriculum Vitae and email. The provision of personal data through the contact forms is not a legal or contractual obligation; however, please note that fields marked with an asterisk (*) are mandatory, as such information is necessary to fulfill or respond to the user’s request. Other information or personal data is shared at the user’s discretion when filling out the contact forms. If users contact the Data Controller, it will be the Data Controller’s responsibility to keep track of this correspondence.
Users who have doubts about which data is mandatory are encouraged to contact the Data Controller.

3. Purposes of data processing

Your personal data are processed for the following purposes:

  • To provide and manage the services offered through the Website;
  • To handle information requests and user support;
  • To comply with legal and regulatory obligations;
  • To send informational or promotional communications, subject to your explicit consent;
  • To ensure Website security and prevent fraudulent or abusive activities.

Data related to the user’s curriculum vitae registration (by filling out the “Work with us” form) are collected for the purpose of candidate search and selection. The provision of data marked on the form is “mandatory”. Any refusal to provide them would make it impossible for the Data Collector to consider the application and/or the impossibility of adequately evaluating the professional profile. The processing of particular personal data (with specific reference to belonging to protected categories) will be subject to express consent to be given at the bottom of the registration form.

4. Legal basis for processing (Article 6 GDPR)

  • Consent: when you have given explicit consent for one or more specific purposes (e.g., newsletter subscription);
  • Performance of a contract: when processing is necessary to perform a service requested by you;
  • Legal obligation: when processing is necessary to comply with applicable laws;
  • Legitimate interest: when processing is required to ensure Website functionality, improve services, or maintain security.

5. Methods of processing and data security

Data are processed using electronic and IT tools in compliance with the principles of fairness, lawfulness, transparency, and confidentiality.
Appropriate technical and organizational measures are implemented to prevent unauthorized access, disclosure, alteration, or destruction of your data.

6. Data retention

Pursuant to Art. 5 of the GDPR, the user’s personal data will be stored by the Data Collector for a period of time no longer than is necessary to achieve the purposes for which they are collected and processed.

Therefore:

  • Personal data collected for purposes related to the performance of a contract between the controller and the user will be retained until the performance of such contract is completed.
  • Personal data collected for purposes attributable to the legitimate interest of the controller will be retained until that interest is satisfied. The user can obtain further information regarding the legitimate interest pursued by the controller in the relevant sections of this document or by contacting the controller.

When processing is based on the user’s consent, the controller may retain the personal data for a longer period until such consent is revoked. Furthermore, the controller may be obliged to retain personal data for a longer period to comply with a legal obligation or by order of an authority.
At the end of the retention period, personal data will be deleted. Therefore, upon expiry of this term, the right of access, erasure, rectification, and the right to data portability can no longer be exercised.

7. Data sharing and international transfers

Your data may be shared with third parties acting as Data Processors under Article 28 of the GDPR, such as IT service providers, hosting providers, marketing, or communication services.
An updated list of Data Processors is available upon request.

Transfer of Data Outside the EU

Should your data be transferred outside the European Economic Area (EEA), such transfers will comply with Articles 44–49 of the GDPR and ensure adequate protection through the European Commission’s adequacy decisions or standard contractual clauses.

8. Data subject rights (Articles 15–22 GDPR)

You have the following rights regarding your personal data:

  • Right of access – to obtain confirmation as to whether your personal data are being processed and access to such data (Art. 15);
  • Right to rectification – to correct inaccurate or incomplete data (Art. 16);
  • Right to erasure (“right to be forgotten”) – to request deletion of your data (Art. 17);
  • Right to restriction of processing (Art. 18);
  • Right to be informed of the eventual rectification or erasure of personal data or restriction of processing (Art. 19);
  • Right to data portability – to receive your data in a structured, commonly used format (Art. 20);
  • Right to object – to object to processing carried out on the basis of legitimate interest (Art. 21);
  • Right not to be subject to automated decision-making, including profiling (Art. 22).

To exercise these rights, you can send a written request to: info@das2.it.
The Data Controller will respond within 30 days as required by Article 12 of the GDPR.

9. Cookies and tracking tools

This Website uses technical cookies and, subject to your consent, analytical and profiling cookies.
For details about the types of cookies used, their purposes, and how to manage or disable them, please refer to our Cookie Policy.

10. Right to lodge a complaint

If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) –
Website: www.garanteprivacy.it – or with another competent supervisory authority within the EU.

11. Changes to this Privacy Policy

This Privacy Policy may be amended or updated from time to time.
Any changes will be posted on this page with the updated revision date. Continued use of the Website following such updates constitutes acceptance of the revised Privacy Policy.