en
OPEN POSITIONS

Privacy Policy

Privacy Notice pursuant to (EU) Regulation 679/2016

This privacy policy describes the methods of processing the personal data of users viewing the website https://quadraresearch.it (hereinafter referred to as the “Website”) and is issued pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (Personal Data Protection Code) as amended by Legislative Decree 101/2018.

1. DATA CONTROLLER

The Data Controller is Quadra Research S.r.l., with registered office in Udine, Viale Giovanni Paolo II 3, Tax Code/VAT No. 02786400305.

Controller’s Contact Details:

  1. Telephone: 0432.486407
  2. Telefax: 0432.487229
  3. Email: selezione@quadraresearch.it

2. CATEGORIES OF PERSONAL DATA PROCESSED

2.1 Browsing Data
During website navigation, the IT systems and software procedures involved in the functioning of the same acquire automatically certain personal data, whose transmission is implicit in Internet communication protocols.

This category includes:

  1. IP addresses or domain names of the computers and terminals used.
  2. URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources.
  3. Request time.
  4. Method used to submit the request to the server.
  5. Size of the response file.
  6. Numeric code indicating the server response status (successful, error, etc.).
  7. Other parameters relating to the user’s operating system and IT environment.

2.2 Data Voluntarily Provided by the User
The optional, explicit and voluntary sending of:

  1. Messages to the contact addresses indicated on the Website
  2. Completion and submission of forms on the Website entails the acquisition of the sender’s contact details (e.g., name, surname, email address, telephone number) and any other personal data included in the communications, necessary to respond to requests or provide services.

3. PURPOSES AND LEGAL BASES FOR PROCESSING

3.1 Browsing Data
Navigation data is processed for the following purposes:
1. Technical functioning of the Website: To enable the Website to function and be used correctly.

Legal basis: Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) to ensure the correct functioning of the web pages and their contents.

IT security: to ensure the security of the Website and the underlying infrastructure, including by detecting any attempts at unauthorized access and preventing potential threats.

Legal basis: Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) to protect the integrity of its IT system and prevent cyber fraud.

The legitimate interest of the Data Controller has been specifically balanced with the fundamental rights and freedoms of the data subjects, taking into account the nature of the data collected, the purposes pursued and the reasonable expectations of users browsing the Website. Data subjects may request information on this assessment by contacting the Data Controller at the contact details provided.

3.2 Data provided voluntarily by the user
Data provided voluntarily by the user is processed for the following purposes:
1. Management of requests: To manage and respond to requests for information, contact or quotes submitted via the forms or addresses on the Site.

Legal basis: Performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).

  1. Compliance with legal obligations: To comply with any obligations imposed by law, regulations or EU legislation.
    Legal basis: Compliance with a legal obligation to which the Data Controller is subject       (Art. 6(1)(c) GDPR).

4. RECIPIENTS OF PERSONAL DATA
The personal data collected may be processed by:

  1. Authorised personnel of the Data Controller, previously trained and operating under the authority of the Data Controller.
  2. Data processors appointed by the Controller pursuant to Article 28 GDPR, who provide services functional to the purposes indicated above, such as:

o Providers of hosting and maintenance services for the Website.

o Providers of IT services.

o Any technical or legal consultants.

The complete and updated list of data processors is available at the Data Controller’s registered office or may be requested via the contact details provided.

Personal data will not be subject to dissemination. However, they may be disclosed to third parties in the following cases:

  1. When disclosure is required by laws, regulations or EU legislation.
  2. When disclosure is necessary to establish or defend a right of the Data Controller in judicial proceedings.

5. DATA RETENTION PERIOD

Personal data will be retained for no longer than is necessary to achieve the purposes for which they are processed, in compliance with the minimisation principle referred to in Article 5(1)(c) GDPR.

Specifically:

  1. Browsing data: Browsing data will be retained for 14 days from collection and subsequently aggregated in anonymous form for statistical purposes, without the possibility of identifying the user.
  2. Data voluntarily provided by the user: Data provided through contact forms or other means of communication will be retained for the time necessary to process the user’s request and, in any case, for no longer than 24 months from the date of collection, unless different retention periods are required due to legal obligations or the need to establish or defend a right in court.

6. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

Personal data are processed within the European Union and stored on servers located within the European Union.

Should it become necessary, for technical or operational reasons, to use providers located outside the European Union, the transfer of personal data to such countries will take place in compliance with the conditions set out in Chapter V GDPR, for example by:

  1. European Commission adequacy decisions recognising an adequate level of protection in certain countries.
  2. Appropriate safeguards as provided for in Article 46 GDPR.
  3. Binding corporate rules pursuant to Article 47 GDPR.
  4. Standard contractual clauses approved by the European Commission.

In the absence of such conditions, any transfers will be based on one of the derogations provided for in Article 49 GDPR.

7. DATA SUBJECT RIGHTS

Pursuant to Articles 15-22 GDPR, data subjects have the right to:

  1. Access personal data (Article 15 GDPR): The right to obtain confirmation as to whether or not personal data are being processed and, if so, access to such data and information relating to the processing.
  2. Rectification of personal data (Article 16 GDPR): The right to obtain the rectification of inaccurate personal data and the completion of incomplete personal data.
  3. Erasure of personal data (“right to be forgotten”, Article 17 GDPR): The right to obtain the deletion of personal data in the cases provided for by the GDPR.
  4. Restriction of processing (Article 18 GDPR): The right to obtain processing restrictions in the cases provided for by the GDPR.
  5. Data portability (Article 20 GDPR): The right to receive personal data in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance, in the cases provided for by the GDPR.
  6. Object to processing (Article 21 GDPR): The right to object at any time to the processing of personal data carried out based on the legitimate interest of the Data Controller.
  7. Withdrawal of consent (Article 7, paragraph 3 GDPR): For consent-based processing, the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
  8. Complaint to the Data Protection Authority (Article 77 GDPR): The right to lodge a complaint with the Data Protection Authority in the event of an alleged violation of the GDPR.

To exercise the rights listed above, data subjects may contact the Data Controller using the contact details provided in this policy. The Data Controller will handle the request and provide the data subject with information on the action taken, without undue delay and in any case within one month of receipt of the request.

8. AUTOMATED DECISION-MAKING PROCESSES

The Data Controller does not adopt any automated decision-making process, including profiling as referred to in Article 22, paragraphs 1 and 4 GDPR.

9. COOKIES AND TRACKING TOOLS

9.1 General information

The Website uses cookies and other tracking tools to ensure the correct functioning of procedures, improve navigation experience and analyse Website usage by users.

9.2 Cookie Policy

For detailed information on cookies and other tracking tools used by the Website, their characteristics, operation, purposes of processing, and how to manage user preferences regarding such tools, please refer to our Cookie Policy.

9.3 Matomo Analytics

The Website uses Matomo Analytics, a web analytics platform. For specific information on the configuration of Matomo adopted by the Website and on how to disable tracking, please refer to the Cookie Policy.

In particular, as indicated in the Cookie Policy, users may opt out of tracking carried out by Matomo Analytics by following the procedure described in the section “User opt-out procedure for Matomo Web Analytics” found at the end of the original notice or in the Website’s Cookie Policy.

Last updated: 05/05/2025

[matomo_opt_out language=en]