CIGIERRE – Compagnia Generale Ristorazione S.p.A. (hereinafter "CIGIERRE" or the "Company") pays the utmost attention to the security and confidentiality of its customers' personal data running its business.
The Company is therefore the Data Controller of the personal data collected on the website www.cigierre.com (hereinafter also referred to as the "Site").

The following categories of personal data about you may be collected (the term "personal data" will refer to all the categories listed below, collectively considered):

• Other personal data – information voluntarily provided by you filling in the various collection forms on the web pages of the Site
• Curriculum Vitae data – the data contained in your Curriculum Vitae to submit a spontaneous application or respond to offers in the "Work with us" section
• Use of the Site – information relating to how you use the Site, open or forward our communications, including information collected through cookies (you can find our Cookie Policy detailing this here).

If you provide us with personal data on behalf of someone else, you must ensure that the individuals concerned have previously viewed this Privacy Notice.
We ask you to help us keep your personal data up to date by informing us of any changes.
 

The processing of personal data must be legitimized by one of the legal bases provided for by the current legislation on the protection of personal data as described below.

a) Evaluation of the candidate's professional profile
CIGIERRE may process the Curriculum Vitae data if you submit your application through the appropriate form on the "Work with us" page, in order to evaluate your professional profile, also for the benefit of (a) other companies connected and/or participated in CIGIERRE, specifically Kuore S.p.A., owner of the "Pizzikotto" brand, Arthur S.r.l., Terra Felix S.r.l. and Parsifal S.r.l., as well as (b) our Franchisees, linked to the Company by a franchise agreement. In such circumstances, the individual companies will act as independent data controllers. The collection and processing of your data are necessary for the Company's personnel search and selection activities. We ask you not to include in the Curriculum Vitae, nor send, any "special" data (meaning those suitable to reveal, for example, a general state of health, inability to perform certain tasks, membership of a union, membership of a political party, religious beliefs, racial and ethnic origin). Otherwise, the Company will immediately delete them.
Legal basis for processing: execution of pre-contractual obligations.
The provision of data is mandatory to respond to your requests; otherwise, we will not be able to proceed.

b) Compliance with legally binding requests to fulfill a legal obligation, regulations, or judicial authority orders, as well as to defend a right in court
The Company may process your personal data to fulfill a legal obligation and/or to defend its own right in court.
Legal basis for processing: legal obligations, which the Company is obliged to comply with.

The Company uses appropriate security measures to enhance the protection and maintenance of the security, integrity, and accessibility of your personal data.
All your personal data is stored on our secure servers (or secure paper copies) or on those of our suppliers or business partners specifically appointed as external data processors, and is accessible and usable according to our standards and security policies (or equivalent standards for our suppliers or business partners).
 

The Company retains your personal data only for the time necessary to achieve the purposes for which it was collected or for any other legitimate related purpose.
Your personal data that is no longer needed, or for which there is no longer a legal basis for retention, will be irreversibly anonymized or securely destroyed.
Below we list the retention times in relation to the different purposes mentioned above:
a) Evaluation of the candidate's professional profile: the data processed for this purpose may be retained for a period not exceeding 12 (twelve) months from the last activity performed, unless you request the deletion of your data.
b) In case of disputes: if it is necessary to defend ourselves or act or even make claims against you or third parties, we may retain the personal data that we deem reasonably necessary to process for such purposes, for the time in which such claim can be pursued.
 

Your personal data may be accessed by duly authorized employees, as well as external suppliers, appointed, if necessary, as data processors, who provide support for the provision of services.
If you have submitted an application for an open professional position at another company controlled, connected and/or participated in by CIGIERRE, or at a third-party Franchisee company, your personal data may be shared with that company. Please contact our Data Protection Officer (DPO) directly by email at dpo@cigierre.com if you wish to request to view the list of data processors and other subjects to whom we communicate the data.
 

The contact details of the Company, as the data controller, and the data protection officer (DPO) are as follows:
CIGIERRE – Compagnia Generale di Ristorazione S.p.A., with registered office in 33010 Tavagnacco (UD), Via Nazionale 35 - tel. +39 0432 804804 - fax. +39 0432 804601; Data Protection Officer – (D.P.O.) – (email): dpo@cigierre.com.
We invite you to contact us directly at the above addresses for any questions regarding the processing of your personal data.
 

Under certain conditions, you have the right to request from the Company:
- access to your personal data;
- a copy of the personal data you have provided us (so-called portability),
- rectification of the data in our possession;
- deletion of any data for which the Company no longer has any legal basis for processing;
- objection to processing where provided by applicable law;
- withdrawal of consent, if the processing is based on consent;
- limitation of the way the Company processes your personal data, within the limits provided by current legislation.
The exercise of these rights is subject to some exceptions aimed at safeguarding the public interest (e.g., prevention or identification of crimes) and the Company's interests. If you exercise any of the aforementioned rights, it will be the Company's responsibility to verify that you are entitled to exercise it and we will respond to you, as a rule, within one month.
For any complaints or reports on how your data is processed, we will make every effort to respond to your concerns. However, if you wish, you can submit complaints or reports to the authority responsible for data protection, the Italian Data Protection Authority, using the contact details available on the website www.garanteprivacy.it