Skip to main content

C90

Menu
Menu

PRIVACY POLICY

Pursuant to Regulation (EU) 2016/679 (“GDPR”), this Privacy Policy describes how the personal data of users who visit and use the website https://www.c90.it (hereinafter the “Website”) is processed.

Data Controller

The Data Controller is:

C90 – Engineering & Consulting S.r.l.

Registered office: Via Fogliano 22 – 00199 Rome (RM), Italy

Email: info@c90.it

Scope of Application

This Privacy Policy applies to all users who access and use the Website, regardless of their geographical location.

Personal data is processed in accordance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian data protection legislation.

Types of Data Processed

1. Browsing Data

During normal browsing of the Website, certain personal data may be collected, the transmission of which is inherent in the use of Internet communication protocols, including:

  • IP address;
  • domain name of the device used;
  • browser type and operating system;
  • date and time of access;
  • pages visited;
  • technical information relating to navigation.

Such data is not collected in order to identify users directly, but could allow identification through processing and association with data held by third parties.

Browsing data may be used exclusively to obtain anonymous statistical information on the use of the Website, ensure its proper functioning, and ascertain liability in the event of cybercrime against the Website.

2. Contact and Job Application Form

The voluntary submission of data through the contact and job application form available on the Website involves the collection of:

  • first and last name;
  • email address;
  • Curriculum Vitae attached in PDF format.

The Curriculum Vitae may contain personal details, contact information, educational background and professional experience.

Users are requested not to include special categories of personal data pursuant to Article 9 GDPR (such as health data, religious beliefs or political opinions), unless strictly necessary for the application process (for example, protected category status).

3. Downloadable PDF Files

The Website provides downloadable PDF documents.

Downloading these files does not involve the collection of any additional personal data, except for the normal recording of technical access logs by the server.

4. Cookies

The Website uses:

  • technical cookies necessary for the proper functioning of the Website;
  • analytics and other third-party cookies only after the user’s prior consent.

In particular, the Website uses Google Analytics 4 to collect aggregated statistical information regarding the use of the Website, exclusively after the user’s consent.

Cookie preferences are managed through a dedicated consent banner. Users may modify or withdraw their consent at any time through the cookie preference panel.

For further information, please refer to the Cookie Policy available on the Website.

Purposes and Legal Basis of Processing

Personal data is processed for the following purposes.

Website operation and security

Legal basis: the legitimate interest of the Data Controller (Article 6(1)(f) GDPR).

Management of requests submitted through the contact form

Legal basis: performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).

Recruitment and personnel selection

Legal basis: performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR) and Article 111-bis of the Italian Legislative Decree No. 196/2003, as amended.

Compliance with legal obligations

Legal basis: compliance with legal obligations to which the Data Controller is subject (Article 6(1)(c) GDPR).

Processing Methods

Personal data is processed using electronic and IT tools, adopting appropriate technical and organisational measures to ensure data security and prevent unauthorised access, disclosure, loss or unlawful processing.

Data Retention

Browsing data

Browsing data is retained only for the period strictly necessary for the technical purposes described above and, where necessary, for the investigation of cybercrime.

Data submitted through the contact form

Personal data submitted through the contact form is retained for the time necessary to manage the request and, in any event, no longer than 12 months after its completion, unless otherwise required by law.

Curriculum Vitae and job applications

Curriculum Vitae and related application documents are retained for a maximum period of 12 months from the date of receipt.

After this period, they will be permanently deleted unless an employment relationship is established or the applicant voluntarily submits an updated Curriculum Vitae.

Disclosure of Personal Data

Personal data will not be disclosed.

It may be communicated only to third parties providing services necessary for the operation of the Website or the organisation of the Controller’s activities, including, by way of example:

  • hosting providers;
  • IT service and maintenance providers;
  • web analytics service providers;
  • consultants involved in personnel management.

Where required, such parties will be appointed as Data Processors pursuant to Article 28 GDPR.

An updated list of Data Processors may be requested from the Data Controller.

Transfers of Data Outside the European Union

The use of certain services, including Google Analytics 4, may involve the transfer of personal data to countries outside the European Economic Area.

Such transfers take place only in accordance with the safeguards provided for by Articles 44 et seq. of the GDPR, including adequacy decisions adopted by the European Commission or other appropriate safeguards.

Data Subject Rights

Pursuant to Articles 15 et seq. of the GDPR, users have the right to:

  • obtain confirmation as to whether personal data concerning them is being processed;
  • access their personal data;
  • request rectification or updating of their personal data;
  • request deletion where permitted by law;
  • request restriction of processing;
  • object to processing where provided for by law;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
  • lodge a complaint with the competent Supervisory Authority or seek any other remedy available under applicable law.

Requests may be sent to:

info@c90.it

All trademarks, logos and trade names displayed on this Website are the property of their respective owners and are used solely for descriptive and informational purposes.

Changes to this Privacy Policy

The Data Controller reserves the right to amend or update this Privacy Policy at any time, including as a result of legal or regulatory changes or changes to the services provided.

Any updates will be published on this page and shall become effective upon publication.

Last updated: 7 August 2026.