Privacy
Privacy notice
How IDRAN Ingegneria e Tecnologia S.r.l. processes the data of those who visit the site, request a discussion or submit an application, pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).
Questions and rights
For information on the processing or to exercise your rights, write to info@idran.net.
In brief
We process only the data necessary for the activities below. Statistics are optional and depend on your consent.
| Why we process data | Which data | Legal basis | For how long |
|---|---|---|---|
| Operating and protecting the site | Technical data: IP address, date and time, pages requested, browser and device | Legitimate interest (Art. 6.1.f) | Logs for 30 days |
| Responding to contact requests | Name, email, organisation, message and optional data | Pre-contractual measures (Art. 6.1.b) or legitimate interest (Art. 6.1.f) | Until the request is closed, then for no more than 6 months |
| Assessing applications | Contact details, CV, professional information, interview outcomes | Pre-contractual measures (Art. 6.1.b) | Until the selection is closed, then for no more than 6 months; unsolicited applications 12 months from receipt |
| Statistics on site usage (optional) | Online identifiers, device, interactions with pages | Consent (Art. 6.1.a GDPR and Art. 122 of the Italian Privacy Code) | Cookies 6 months; data in Analytics 2 months |
| Recording your choices | Choice, date, version of the notice | Obligation to demonstrate consent (Arts. 6.1.c and 7.1) | 12 months from the choice |
Who processes your data
The data controller is IDRAN Ingegneria e Tecnologia S.r.l., VAT no. 11306211001, registered office Via Leone Dehon n. 64, 00165 Rome (RM).
For information or to exercise your rights you can write to info@idran.net.
Contact requests
If you write to us through the form or by email, we process the data you provide, such as name, contact details, organisation and the content of your message, in order to respond to your request. The legal basis is the performance of pre-contractual measures taken at your request, if you are a party to the prospective contract (Art. 6.1.b GDPR). For other requests, including those sent on behalf of an organisation, it is our legitimate interest in managing the communications received (Art. 6.1.f GDPR).
We retain the data until the request is closed; afterwards, only the communications necessary to handle any follow-up queries, for a maximum of 6 months, on the basis of our legitimate interest in the continuity of correspondence. If a contractual relationship arises, the data necessary to manage it is processed in accordance with the relevant notice.
Please do not include in your message data concerning health or other special categories of data, or data of other persons that is not needed for the request. We do not use the contact details from the form for newsletters or advertising.
Applications and selection
If you apply for an open position or send an unsolicited application, we process your contact details, CV and the professional information you provide, together with interview outcomes, in order to assess your application and contact you. The legal basis is the performance of pre-contractual measures taken at your request (Art. 6.1.b GDPR): consent is not required for this purpose (Art. 111-bis of the Italian Privacy Code).
We retain the data for the duration of the selection. After it closes we keep only the documentation containing ordinary data necessary to handle requests for clarification on the outcomes, for a maximum of 6 months, on the basis of our legitimate interest in managing and documenting the selection (Art. 6.1.f GDPR), without reusing it for other roles. Unsolicited applications are retained for 12 months from receipt, in order to assess them against the positions that open during this period; the data is then deleted. You may withdraw your application and request its deletion at any time.
Include only relevant data in your CV: photographs, identity documents, data concerning health, personal beliefs or judicial data are not needed. If specific information is essential and permitted by law, we will tell you how to provide it separately. Any special-category data necessary for obligations or rights in the field of employment, for example for targeted placement of persons with disabilities, is processed within the limits permitted by law (Arts. 6.1.c and 9.2.b GDPR). Judicial data may be requested only in cases authorised by law, with the safeguards of Art. 10 GDPR and Art. 2-octies of the Italian Privacy Code.
If you send your CV by email, we provide this notice in our first useful reply.
Statistics and cookies
Only with your consent do we use Google Analytics 4 to understand how the site is used and to improve it (Art. 6.1.a GDPR). Online identifiers, information about the device and interactions with pages are processed. Consent also covers the use of cookies (Art. 122 of the Italian Privacy Code).
You can reject or withdraw consent from Cookie preferences, without losing access to the forms or to the site. The Cookie policy describes the tools, durations and ways of choosing.
Which data is necessary
You are free to contact us or to apply. Fields marked with * are necessary to handle the request: without this data we may not be able to reply to you or to assess your application. The other fields are optional. Consent for statistics is optional and is not needed to use the forms.
Who can access the data
The data is accessible to persons authorised by IDRAN and to the providers that support us, within the limits of their respective activities. Those acting on our behalf are appointed as data processors (Art. 28 GDPR); consultants and authorities may act as independent controllers where provided for. The data is not disseminated.
| Service | Provider | Role |
|---|---|---|
| Site hosting and maintenance | Hostinger | Data processor |
| Form management and CV storage | No external provider: forms are delivered to the info@idran.net mailbox and the data is stored in IDRAN’s internal systems | Internal processing, restricted to authorised persons |
| Statistics (only with consent) | Google Analytics, provided by Google Ireland Limited | Data processor |
For the up-to-date list of providers you can write to info@idran.net.
Transfers outside the European Economic Area
When data is transferred outside the European Economic Area we rely on an applicable adequacy decision, such as the EU-US Data Privacy Framework for certified US companies, or on the safeguards provided for by the GDPR, such as standard contractual clauses and any supplementary measures (Arts. 44–49 GDPR). You can obtain information and a copy of the safeguards by writing to info@idran.net.
Record of your choices
We record the choice, date and version of the notice in order to respect your preferences and demonstrate consent (Arts. 6.1.c and 7.1 GDPR). We retain this evidence for 12 months from the choice, with restricted access and without using it for other purposes.
Retention and automated decisions
Once the retention periods have expired, we delete the data or anonymise it. We retain it for longer only if it is needed for specific legal obligations (Art. 6.1.c GDPR) or for pending or reasonably anticipated disputes, until they are resolved (Art. 6.1.f and, for special-category data, Art. 9.2.f GDPR).
Applications are assessed by people: we do not take decisions based solely on automated processing that produce legal effects or similarly significantly affect you (Art. 22 GDPR).
Your rights
In the cases provided for by the GDPR you can obtain access, rectification, erasure, restriction of processing and portability of your data. You can object to processing based on legitimate interest on grounds relating to your particular situation and withdraw consent at any time, without affecting the lawfulness of processing already carried out (Arts. 7 and 15–21 GDPR).
Write to info@idran.net: we reply without undue delay and within one month of receipt. If the complexity or number of requests requires an extension of up to two further months, we will inform you of the reasons within the first month (Art. 12 GDPR).
You may also lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority), www.garanteprivacy.it (Art. 77 GDPR).
Updates to the notice
If the processing changes, we update this page and the date at the top. If the tools or purposes of the cookies change, we ask for your choice again.
