Privacy policy

Artt. 12 et seq. of EU Regulation 679/2016
Legislative Decree no. 196 of 30 June 2003
Legislative Decree no. 101 of 10 August 2018



By means of this document 4Sigma Srl, as Data Controller, informs you of the use that will be made of your data, a use at all times guided by the principles of fairness, lawfulness, transparency and protection of your confidentiality and your rights.

Applications and personnel selection.
Origin and type of data. The data we process is the data you provided to us directly by sending your CV, possibly also through professional social networks. In any case, the personal data processed is the data contained in your CV, such as your first and last name, date and place of birth, personal contact details and qualifications (education, training courses, internships), identity documents, photograph and any other information included therein. If your CV contains them, we may also come to know special categories of data: in such cases, where the information is not relevant to the selection purposes or proves excessive, we will refrain from using it.

Purpose of the processing. Your data will be used solely for the purposes of selection and examination of your CV and, where necessary, to comply with legal obligations.

Methods of processing. Your data will be processed internally using paper and electronic means, following logic strictly related to the purposes for which the data was collected. In any case, the methods and tools used guarantee the security and confidentiality of the data, through the adoption of appropriate measures designed to prevent its alteration, deletion, destruction, disclosure or unauthorised access, or any processing that is not permitted or not consistent with the purposes of the collection. We also inform you that your data is not subject to processing consisting of automated decision-making.

Legal basis of the processing and withdrawal. Where you send us your CV on your own initiative, 4Sigma Srl processes your data in order to perform the pre-contractual measures requested by you, that is, to act upon your unsolicited application. Providing the data for that purpose is optional, but it is necessary in order to examine your CV. Accordingly, without it we will not be able to consider your application.

Data retention period. Your personal data will be kept only for as long as is necessary to pursue the purposes indicated, unless another overriding reason applies, including: (i) the selection process is still ongoing, in which case the one-year period will run from the conclusion of the procedure; (ii) the selection procedure has been successful and the hiring procedure has begun, in which case you will receive a specific notice when the employment contract is concluded; (iii) a legal obligation requires a longer retention period, or (iv) an extension is necessary because of pending legal proceedings. As a guideline, the data will be kept for 1 year from the receipt of the CV for the purposes of the selection process.

Data recipients. The data collected upon receipt of your CV will not be disseminated, sold or exchanged with third parties without an adequate legal basis. It may be disclosed to parties which:

• act as persons Authorised by the Data Controller to process the data for the purposes indicated above;
• act as autonomous Data Controllers, where this is required by a legal obligation (for example, public authorities; judicial authorities)

In no case is the data disclosed outside the territory of the European Union.

Data Controller. The Data Controller is 4Sigma Srl, with registered office at via Scarlatti 7, 20124 Milan (MI), VAT no. IT 07797470965, which can be contacted at the following e-mail address info@4sigma.it

Rights of data subjects. The Data Controller acknowledges and guarantees the rights set out in Art. 15 et seq. of the GDPR, namely the rights of information and access, rectification, updating, integration, erasure, objection, restriction and portability. To exercise the rights set out above, including the refusal of a service and the withdrawal of consent, and to request any information, please send an e-mail to info@4sigma.it, if you wish using the form that can be downloaded from the website of the Italian Data Protection Authority at the following link:

https://www.garanteprivacy.it/documents/10160/10704/MODELLO+esercizio+diritti+in+materia+di+protezione+dei+dati+personali and send it to the e-mail address above.

Complaint to the Supervisory Authority. If you believe that your rights regarding the protection of personal data have been infringed, you may lodge a complaint with the competent Supervisory Authority pursuant to Art. 77 of EU Regulation 679/2016.

Website statistics and session recording. This website measures its own use with Umami, an analytics platform installed on the Data Controller’s own servers located in the European Union. The data collected is not sent to Google, to advertising networks or to any other third party, and it is not used for profiling or marketing purposes.

Anonymous, cookie-free statistics. Basic measurement runs on every visit, uses no cookies and stores no identifier on your device; the legal basis is the Data Controller’s legitimate interest in understanding how the website performs (Art. 6(1)(f) of EU Regulation 679/2016). The following is recorded in aggregate form:

• the pages viewed, the time of the visit and the website or search engine you arrived from;
• your browser, operating system, device type, screen size and language;
• your approximate location — country, region and city — derived from your IP address on our servers using a local geolocation database;
• page performance measurements, such as loading and response times;
• a limited set of interaction events, including the submission of the contact form: that event is sent by our server and not by your browser.

Your IP address is used solely to derive the approximate location and to generate a temporary, non-reversible session identifier: it is not stored. The data collected in this way cannot be linked to you as an identified person.

Session recording. Only if you give your consent through the dedicated banner do we also record your navigation of the website: pointer movement, clicks, scrolling and changes on the page. The purpose is to identify the parts of the website that are unclear or not working.

• whatever you type into forms, including the contact form, is always masked and is never recorded;
• recordings and the heatmaps derived from them are deleted automatically after 30 days;
• the legal basis is your consent (Art. 6(1)(a) of EU Regulation 679/2016), which you may withdraw at any time; your choice is stored solely in your browser’s local storage;
• if you do not consent, or until you have made a choice, the recording script is not loaded at all: no recording exists.

Retention and recipients. Aggregated statistics are kept for as long as the website is operated; session recordings and heatmaps are kept for 30 days, except for those expressly saved for a specific analysis, which are kept until that need ceases. The data resides on the Data Controller’s infrastructure within the European Union, is backed up in encrypted form and is accessible only to the staff responsible for running the website. It is not disclosed to third parties, nor transferred outside the European Union.

Exercising your rights. To withdraw your consent to session recording, to request the deletion of your data or to exercise the other rights set out in this notice, you may write to info@4sigma.it. Because the statistics are anonymous, it may not be possible to trace them back to you; recordings, if you consented to them, can be identified by the date and time of your visit.