Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)

Information when personal data are collected from the data subject


According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you with the due information concerning the processing of the collected personal data. This privacy policy is given pursuant to art. 13 Regulation UE 2016/679 (General Data Protection Regulation).


1. DATA CONTROLLER, pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is Poltrona Frau S.p.A. a s.u.  – registered office Via L. Busnelli 1, Meda (MB), operational headquarter in Tolentino (MC) - Via Sandro Pertini 22.

The company has appointed the Data Protection Officer (DPO) pursuant to art.37-39 of the Reg. UE 2016/679 whose contact is:



The Personal data shall be processed in accordance to the requirements for the lawfulness of processing set forth by Art.  6 of the Regulation (EU) 2016/679 for the following purposes:

- visit the website – art.6. 1. f) as legal basis of the processing;

- request for information forwarded – art.6. 1. f) as legal basis of the processing;

- to create an account in the area “People & Careers”; - to fill out a collection form for staff selection; - to recruit, to fulfil the contractual relationship, to formalize the application, to carry out training courses and internships, to use the application for further selection; - to obtain references by contacting (possibly) third parties, such as Universities, former employers, schools, etc .;

The processing of Personal Data is based on Article 6 (1) (f): (recital 47), taking into account the reasonable expectations of the Data Subject at the time and in the context of the data collection, when the Data subject can reasonably expect that their personal data are  processed for this purpose.




Personal data provided by you may be communicated to recipients, which shall process your data as Processors  (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed in point 2 ahead. Precisely, your data may be communicated to recipients part of the following categories: -Group company for administrative-accounting purposes or for process your request; internal staff of the Data Controller; - subjects providing services for the management of the information system and communication networks (including e-mail and web sites); - studies or companies in the context of assistance and consultancy relationships; - Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request; - The subjects belonging to the aforesaid categories act as data Processors or act in complete autonomy as separate data Controllers.



Personal data may be transferred within or outside the European Union, in favour of companies part of the Group for administrative-accounting purposes or for process your request. Personal data may be transferred outside the European Union and the transfer will be made by Data Controller to the limits and conditions set forth by art. 44 and subsequent articles of the Regulation EU 2016/679 “General Principle for transfers”.



The processing shall be carried out in automated and / or manual manner, with methods and tools aimed at ensuring the best security and confidentiality, by persons specifically appointed to do so.

According to the provisions set forth in art. 5 par. 1 lett. e) of the Regulation EU 2016/679, collected personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal Data will be retained:

- to visit the current internet website (temporary);

- request for contact  (1 year);

- collection of the resumes (36 months). 



Below, for each purposes of the processing of the Personal Data are listed the nature of underwriting.

The provision of data is necessary to navigate on this website.  The provision of personal data is necessary to the creation of the account in the area “People and Career”, to the application to an open position, to send a resume. The non submittal of personal data may make impossible to use the service provided in this area.



You may exercise your rights as indicated in the Regulation EU 2016/679, by contacting the data Controller, sending an e-mail to  or contacting the Data Protection Officer by sending an e-mail to . In particular, you have the right to: obtain confirmation that a treatment is underway and if so, to request the data Controller to access of this Data and obtain other information like: kind of Personal Data; recipients or categories of recipients of personal data; data retention period or relevant criteria; the right to ask to rectification, cancellation of your personal data or the limitation of the processing of them; the right to object the processing of your data; the right to lodge a complaint with the Data Protection Authority; if the Personal Data has not been collected by the Data Subject, all the information concerning the origin; the existence of authomated decision-making (profiling also art.22 GDPR); appropriate safeguards in case of data transfer to a third country or international organization art 44 and subsequent of GDPR; the right to obtain a copy of your Personal Data.  


Upgrade date: 13th July 2018