Privacy Policy
The protection of personal data is a primary objective for ASLAN Tech.
For this reason, it was decided to formalize the principles in force in your organizations regarding the protection of personal data in order to:
- increase awareness of the importance of personal data security among all workers, providing a system of company rules that emphasize training and information as well as the responsibility of all users;
- guarantee a system of rules and structures that guarantees the security of personal data also through the structures used for their conservation;
- provide a system in which to place trust, both inside and outside the organization;
- reduce the risk of uncontrolled dissemination of personal data and of data breaches in general;
- continue updating the technical and organizational measures adopted;
- improve the management of relations with third parties (communications, disclosure of information, access to company information, risk levels);
- ensure compliance with current national and international regulations on privacy and protection of personal data, but also on the protection of intellectual property, copyright, competition.
The processing of personal data within the organization must take place in full respect of the privacy of the interested parties and in accordance with the legislation on privacy, respecting the principles of:
- Purpose and necessity: reducing the use of personal data to a minimum, it must be adequate, relevant and limited to what is necessary with respect to the identified purposes;
- Lawfulness and correctness of the processing, can only be carried out in accordance with one of the provisions of lawfulness envisaged (legal obligation, consent, contract, vital interests, public interest task, pursuit of legitimate interest of the Data Controller or third parties);
- Relevance, completeness and non-excess of the data collected with respect to the purposes of the processing;
- Accuracy and updating of data;
- Limited retention of data in such a way as to allow the identification of data subjects in a period of time not exceeding the achievement of the purposes for which the processing took place;
- Transparency: information and communications relating to data processing must be easily accessible and understandable.
Those who, by reason of the exercise of a function or an office, have access to personal data and in general to
confidential information regarding the company's activities cannot use them for their own or others' benefit, but
exclusively for the execution and in the scope of your office or business.
In accordance with the company
rules adopted, personal data, personal data belonging to particular categories,which may reveal racial or ethnic
origin, political opinions, philosophical or religious beliefs, union membership, in addition to the processing
of genetic data , biometric data, data relating to the health, sexual life or sexual orientation of a natural
person or any data concerning criminal convictions or in general concerning criminal proceedings relating to
company management, as well as, more generally, information concerning the Company and the work activity carried
out are strictly confidential and only authorized persons can become aware of it.
The communication of personal data externally to the subjects authorized to receive them must be carried out only by the competent corporate functions in compliance with the current regulations and the envisaged company rules, in implementation of the principle of transparency and truthfulness.
ASLAN TECH intends to protect the personal data processed in its organization from the widest spectrum of possible threats, in order to ensure business continuity, minimize risks, guarantee the return on investments, business opportunities, compliance with current regulations, the profitability of company activities. The protection of personal data is essential for the organization.
All companies must be aware of the importance of security in the management of information and personal data and undertake to share the objectives and security principles envisaged. The protocols adopted are evaluated - and justified - taking into consideration a series of elements including the nature, the scope, the context and the purposes of the treatment, in order to identify, based on an objective evaluation, the probability and the seriousness of the risk to the rights and freedoms of individuals. All data and information stored in the company's IT and telematic systems, including e-mail messages, are owned by ASLAN TECH and must be used exclusively for carrying out company activities, in the manner and within the limits indicated by the same.
Also to ensure compliance with privacy regulations, the correct and responsible use of IT and telematic tools is pursued; any use that has the purpose of collecting, storing and disseminating personal data and in general information for purposes other than those related to the exercise of ASLAN TECH is prohibited.
Vallese di Oppeano, 15 May 2018
The Data Controller
