Privacy & Cookie Policy

Information pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation)

This notice is provided in accordance with Article 13 of Regulation (EU) 2016/679 to inform visitors to our website and users of the services provided therein about the processing of their personal data. Please read this information carefully to fully understand its content.

Data Controller

AVR S.p.A. – Via Francesco Tensi, 116 – 00133 Rome (Italy)

Email address of the Data Controller: info@avrgroup.it

Data Protection Officer (DPO)

Dr. Elisa Moretti, with domicile for this role at Via Francesco Tensi, 116 – 00133 Rome (RM),

Phone: +39 06.20944  Email: elisa.moretti@avrgroup.it

Types of Services on the Website and Related Data Processing

Below is specific information regarding the processing activities related to the services available on the website:

Personnel Selection Service – “Work with Us” Section

Legal basis and purpose of the processing: The processing of personal data for this service is aimed at personnel recruitment and selection for current and future vacancies within AVR S.p.A. and its subsidiaries or affiliates, based on the voluntary consent provided by the applicant.

Data processed: The data entered in the application form and contained in the CV will be processed, including personal data (first and last name, date and place of birth, etc.), photograph (if included in the CV), contact details (email, home address, mobile phone number), academic qualifications, certifications and professional credentials, work experience, IT and language skills, and any indication of belonging to protected categories.

Data retention period: Unless employment is established, the Controller will review applications every 24 months to determine whether to continue processing or delete the data. Candidates may request early deletion if they believe the processing purpose has been fulfilled, by sending a written request to the Controller, who will then delete the data immediately.

Disclosure or communication of data: The data collected for this service will not be disclosed but may be shared, where necessary, with authorized offices and personnel of AVR S.p.A. and its subsidiaries or affiliates, solely for the same purpose.

Contact Section – Reports and Complaints Service

Legal basis and purpose of the processing: The processing of personal data for this service is aimed at managing complaints or reports related to the activities and services provided by AVR S.p.A. and group companies, based on the voluntary consent of the complainant.

Data processed: The data necessary to process the report/complaint and contact the complainant, such as personal data (first and last name), email address, phone number or residential address, and any information relating to the specific report or complaint communicated in written or oral form, via the appropriate complaint form, postal mail, social media, telephone call or voicemail, including via dedicated apps.

Data retention period: Data will be retained for the duration necessary to manage the report or complaint.

Disclosure or communication of data: The data collected will not be disclosed but may be shared, where necessary, with authorized offices and personnel of AVR S.p.A. and the public entity responsible for the service subject of the complaint or report.

Urban Hygiene Section – Bulky Waste Collection Request and Reporting Service

Legal basis and purpose of the processing: The processing of personal data for this service is intended for managing the report or request related to urban waste collection and transport, based on the voluntary consent of the user.

Data processed: Data entered in the form, such as personal details (name and surname), tax code, contact information (email, home address, telephone number), and information regarding the waste to be collected.

Data retention period: Data will be retained for the duration necessary to manage urban waste collection and transport services, and for accounting and contractual purposes related to the competent waste management authority.

Disclosure or communication of data: The data will not be disclosed but may be shared, where necessary, with authorized offices and personnel of AVR S.p.A., its subsidiaries or affiliates, and the competent waste management authority.

Transparency Section – Civic and Generalized Access Requests

Legal basis and purpose of the processing: Personal data will be processed to fulfill obligations under the civic access regulations (Legislative Decree 14 March 2013, no. 33), in particular to respond to the request and, where applicable, to protect the rights of the Controller in legal proceedings.

Data processed: Data entered in the request form and attached documents, such as personal details (name and surname), contact information (email, phone number or address), and any information related to the specific access request.

Data retention period: Data will be retained for as long as necessary to fulfill the purpose for which it was collected and may be stored longer in accordance with applicable archiving laws.

Disclosure or communication of data: The data will not be disclosed but may be shared, where necessary, with authorized offices and personnel of AVR S.p.A.

User Rights

You may exercise the rights granted under Articles 15 to 22 of Regulation (EU) 2016/679 at any time by contacting the Data Controller, including the right to obtain confirmation as to whether or not your personal data is being processed, and information regarding the purposes of processing, categories of data processed, recipients of the data, retention period, and to obtain a copy in a structured, commonly used, machine-readable format.

You may also request rectification or completion of inaccurate or incomplete data, including by submitting a supplementary statement. Additionally, you may request erasure or restriction of processing, or object to the processing in whole or in part for legitimate reasons, or withdraw your consent. Exercising these rights may result in the inability to proceed with or complete the intended purpose.

All such requests should be addressed to the Data Controller using the contact details provided above. If submitted electronically, the response will also be provided electronically, unless otherwise requested.

Responses, communications, and actions taken by the Data Controller in response to your requests are free of charge. However, in the case of manifestly unfounded, excessive, or repetitive requests, the Controller may charge a reasonable administrative fee or refuse to act on the request.

If the Data Controller has reasonable doubts regarding the identity of the requester, further information may be requested to confirm their identity.

Complaint

If you believe your data protection rights have been violated, you may file a complaint with the Data Protection Authority pursuant to Article 77 of Regulation (EU) 2016/679 and Articles 140-bis et seq. of Legislative Decree 30 June 2003, no. 196 (Privacy Code), following the procedures available at www.garanteprivacy.it, or seek redress before the competent judicial authorities (Article 79 of the Regulation).

Changes to this Privacy Policy

The Data Controller reserves the right to amend this privacy policy at any time by posting an update on this page and, where technically and legally feasible, notifying users through one of the contact details held by the Controller. Please check this page regularly, referring to the date of the last update at the bottom.

Where changes affect processing based on consent, the Controller will seek renewed consent from the user, where necessary.

Definitions and Legal References

Personal Data (or Data): Any information that directly or indirectly identifies a natural person, including personal identification numbers, location data, online identifiers, or elements relating to the physical, physiological, genetic, mental, economic, cultural, or social identity of a person.

User: The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject: The natural person to whom the Personal Data refers.

Data Processor (or Processor): A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller, as described in this privacy policy.

Data Controller (or Controller): The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of personal data processing and the tools used, including security measures relating to the operation and use of this Application. Unless otherwise stated, the Data Controller is the owner of this Application.

This Application: The hardware or software tool by which the User’s Personal Data is collected and processed.

Service: The service provided through the website and related Application as described in the applicable terms (if any) on this site/application.

European Union (or EU): Unless otherwise specified, all references to the European Union in this document are intended to include all current member states of the European Union and the European Economic Area.

Cookies: Small sets of data stored on the User’s device.

Legal References

This privacy notice has been drafted based on multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise stated, this privacy policy applies exclusively to this Application.

AVR S.p.A. Client and Supplier Privacy Policies

Cookie Policy

Purpose of the processing

User browsing data and cookies are collected to allow the use of website services, simplify and speed up website navigation, and better tailor content to user interests and needs, especially for future visits. They are also necessary for ensuring normal operation and management of the website and its applications.

Data collected (Usage Data)

Automatically collected data includes: IP addresses or domain names of computers used by Users, URI addresses, request time, request method, response file size, server response status code, country of origin, browser and OS characteristics, visit duration, page sequence, and other data on the user’s technical environment.

Cookies

This site uses cookies—small data files stored on the user’s device (computer, smartphone, tablet, etc.) during website navigation. Cookies do not allow personal identification but are necessary for accessing services and improving user experience, especially during repeat visits.

Technical and aggregated statistics cookies

This site uses technical cookies to ensure regular browsing and to collect anonymized data for aggregate statistics (analytics cookies) that help understand user interaction and improve website structure and content. Technical cookies also store session data and navigation preferences.

Google Analytics with anonymized IP

Google Analytics is a web analytics service provided by Google Inc. (“Google”). It tracks usage of this Application, compiles reports, and shares data with other Google services. IP anonymization is enabled. In exceptional cases, the full IP may be sent to Google’s servers and truncated in the USA.

Google Maps Widget

Google Maps is a mapping service provided by Google Inc., integrated into this Application for visual display of maps.

Data collection methods

Personal Data may be provided voluntarily by the User or collected automatically during site navigation or use of services.

Legal basis and user consent

Data processing is based on user consent, and the storage of cookies on terminals or browsers is under the user’s control.

Data processing and storage methods

Personal data collected through the site’s various sections are processed by the Controller’s authorized staff using paper and electronic tools, in compliance with lawful, fair, and transparent principles and adequate security measures.