Privacy Policy

Dear User,

Pursuant to art. 13 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27/04/2016 (hereinafter GDPR), TIME VISION Società Cooperativa a r.l. informs you of the following:

Purposes of data processing and legal basis

Your personal data is processed by TIME VISION Società Cooperativa a r.l. as data controller for the following Service Purposes:

• A1) For the purpose of browsing this website https://timevision.it/ in order to ensure the security of the Site and the information exchanged thereon, i.e. the ability of the Site to resist, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of personal data stored or transmitted and the security of the related services offered or made accessible;
• A2) Possible acquisition of personal data (name and email address) upon receipt of a contact request submitted through the "Contact Us" section;
• A3) Acquisition and processing of data to carry out commercial activities, quotes, management and execution of contracts;
• A4) Acquisition, processing and digital storage of personal data provided by you, such as personal details, CVs and certificates, necessary to evaluate the suitability of your profile for the roles sought during the selection process, for the purpose of possible employment within our organisation. If the job application is accepted, the personal information concerning you will be stored and processed by the Controller in accordance with the employee privacy policy;
• A5) Acquisition, processing and digital storage of personal data provided by you during registration on the e-learning platform https://timevision.it/ to enable regular use of the platform itself;
• A6) Acquisition of data for email marketing, social media marketing, digital marketing, services, news, blogging, promotional activities and events;
• A7) Profiling activities through automated processes in order to optimise the services offered and to best satisfy the user's interests;
• A8) To fulfil obligations required by law, regulation, EU legislation or an order from the Authority (such as, for example, anti-money laundering regulations);
• A9) To exercise the Controller's rights, for example the right of defence in legal proceedings.

Nature of data provision

Your personal data subject to processing is collected directly by the Data Controller or by a subject expressly authorised by them.

The legal basis for processing data for purposes A2), A3) and A4) is art. 6(1)(b) of the Regulation (processing necessary for the performance of a contract or pre-contractual measures), as the processing is necessary for carrying out activities agreed on a contractual basis. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to initiate and/or continue the employment relationship.

The legal basis for processing data for purposes A5), A6) and A7) is art. 6(1)(a) of the Regulation, as your data may only be lawfully processed with your prior, specific, separate, express, documented and entirely optional consent. Regarding this processing purpose requiring your consent, please note that your refusal will not affect any obligations otherwise assumed and that consent may be withdrawn at any time.

The legal basis for processing data for purposes A1), A8) and A9) is compliance with a legal obligation pursuant to art. 6(1)(f) of the Regulation (processing necessary for the pursuit of the legitimate interests of the data controller). The provision of data is mandatory and processing for these purposes does not require your consent.

Methods of data processing

The processing of your Personal Data is carried out through the operations indicated in art. 4(2) of the GDPR, namely: collection, recording, organisation, storage, consultation, processing, extraction, use, deletion and destruction of data. Data processing will be carried out using tools suitable to guarantee security and confidentiality and may also be carried out through automated tools capable of storing, managing and transmitting the data itself. The Data Subject is responsible for the accuracy and truthfulness of the Data provided and is required to promptly communicate any updates to such Data; if the service or activity in favour of the Data Subject may have effects on or concern the Personal Data of third parties (e.g. minor children, family members, delegates), the person providing the data remains responsible in all respects for what has been communicated and requested.

We further inform you that your personal data will be:

• Processed lawfully and fairly;
• Collected and recorded for specific, explicit and legitimate purposes and used in other processing operations in terms compatible with such purposes;
• Accurate and, where necessary, updated;
• Relevant, complete and not excessive in relation to the purposes for which they were collected or subsequently processed;
• Stored in a form that allows the identification of the data subject for a period of time no longer than necessary for the purposes for which they were collected or subsequently processed.

Categories of data and their source

The subject of processing is personal and special data concerning you provided by the data subject via dedicated emails, training course registration forms, as well as any data subsequently transmitted in another way. Therefore, please note that the personal data subject to processing is collected directly from the data subject.

Scope of communication

Within the limits relevant to the stated purposes of data processing, only authorised collaborators belonging to the organisational structure of the Data Controller may become aware of the data.

Please note that your data may be transmitted to the following recipients:

• Authorised processors
• Subjects responsible for information systems maintenance
• Subjects responsible for marketing
• External consultants

The full list is available at the Controller's registered office.

Third parties accessing personal data through the website

In the context of activities carried out through the website, user data may be processed by the following third parties, each with their own privacy policy:

Retention period

In accordance with the principle of "storage limitation" set out in art. 5 of Regulation (EU) No. 679/2016 (GDPR), the data collected and processed for the purposes indicated above will be retained in accordance with the deadlines provided by law and, subsequently, for the period during which the Company is subject to retention obligations for purposes provided by law or regulation. The review of the obsolescence of data stored in relation to the purposes for which they were collected is carried out periodically.

In any case, data will be retained for a maximum period of:

• Personnel selection data: 2 years
• Training data: 10 years
• Marketing data: 3 years
• Profiling data: 3 years

Profiling and data dissemination

One or more profiling algorithms are present for commercial purposes only.

Data subject rights

As a data subject, you have the rights set out in art. 15 GDPR, specifically the rights to:

• Obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
• Obtain information on: a) the origin of personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identifying details of the controller, processors and the representative designated pursuant to art. 3(1) GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representative in the territory of the State, as processors or authorised persons;
• Obtain: a) the updating, rectification or, where you have an interest, the integration of the data; b) the erasure, anonymisation or blocking of data processed in violation of the law, including those for which retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in points a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disclosed, except where this proves impossible or involves a use of means clearly disproportionate to the protected right;
• Object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising material or direct selling or for the performance of market research or commercial communication, through the use of automated calling systems without operator intervention via email and/or through traditional marketing methods via telephone and/or postal mail;
• Right to rectification of your personal data in the event that they have changed and no longer correspond to those previously acquired or communicated (art. 16);
• Right to erasure ("right to be forgotten", art. 17). TIME VISION Società Cooperativa a r.l. will proceed with the erasure of data from all databases and archives where it is contained if one of the following cases applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent and there is no other legal basis for processing; c) the data subject objects to processing pursuant to art. 21(1) and there are no overriding legitimate grounds for processing, or objects pursuant to art. 21(2); d) the personal data have been unlawfully processed; e) the personal data must be erased to comply with a legal obligation; f) the personal data have been collected in relation to the offer of information society services referred to in art. 8(1);
• Right to restriction of processing (art. 18);
• Right to object (art. 21-22): The data subject has the right to object at any time, on grounds relating to their particular situation, to processing of personal data concerning them pursuant to art. 6(1)(e) or (f), including profiling based on those provisions. TIME VISION Società Cooperativa a r.l. does not subject data to decisions based solely on automated processing;
• Lodge a complaint with a supervisory authority (Italian Data Protection Authority – Garante per la protezione dei dati personali – Piazza Venezia n.11, Rome – www.garanteprivacy.it).

Data Controller and Data Protection Officer

The Data Controller is TIME VISION Società Cooperativa a r.l. (VAT No. 07223751210), PEC: [email protected], registered office at Corso Alcide de Gasperi 169, Castellammare di Stabia (80053 – NA).

The Data Protection Officer (DPO) is Mr. Silvio Tortora Maione, appointed by TIME VISION Società Cooperativa a r.l., who can be contacted at: [email protected]

© 2026 Time Vision Scarl – Privacy Policy compliant with EU Regulation 2016/679 (GDPR)