Legal & Compiliance

Privacy Policy

Pursuant to and for the purposes of Article 13 of EU Regulation 2016/679 (hereinafter also referred to as the “GDPR”), this document describes the methods of processing the personal data of users who consult and use the services available on the website of Work House Srl, with registered office at Via E. Mattei 40/2, 40138 Bologna (BO), Italy (hereinafter also referred to as “WORK HOUSE”), accessible electronically at the following address: workhousesrl.com

This information does not concern other websites, pages, or online services that may be reached via hyperlinks published on this website but referring to resources external to the domain.

MAIN DEFINITIONS AND LEGAL REFERENCES

Personal Data
Any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or one or more elements specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
Special Categories of Personal Data
These are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning health, a person’s sex life, sexual orientation, and judicial data.
Usage Data
Information collected automatically by the website or by third-party applications used by the website, such as IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses, the method used to submit requests to the server, the size of the file obtained in response, the numerical code indicating the status of the server response, the country of origin, the characteristics of the browser and operating system used by the visitor, various time-related parameters of the visit, and details of the path followed within the website, with particular reference to the sequence of pages visited and parameters relating to the operating system and the user’s IT environment.
Data Subject
The natural person to whom the personal data relates. In the case of website navigation, the individual who uses the website (or a person authorized by them) and whose personal data is subject to processing.
User
The individual who uses this website and who, unless otherwise specified, coincides with the Data Subject.
Processing
Any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Data Controller
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Protection Officer (DPO)
The natural or legal person who informs and advises the Data Controller on compliance with the GDPR, monitors compliance with the Regulation, provides advice regarding Data Protection Impact Assessments (DPIA), cooperates with the supervisory authority, and acts as a contact point with the Data Protection Authority.
Data Processor
The natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.
Authorized Person
A natural person authorized to perform data processing operations.
Recipient
A natural or legal person, public authority, agency, or another body to which personal data are disclosed.
Website and Database
The IT tool through which personal data of data subjects are collected.
Cookies
A small portion of data stored on the user’s device.
Legal References
Italian Legislative Decree No. 196/2003 and subsequent amendments, and EU Regulation 2016/679 (GDPR).

CHANGES TO THE PRIVACY POLICY

WORK HOUSE reserves the right to make changes to this Privacy Policy at any time. Users are therefore invited to consult this page frequently, paying attention to the revision date indicated at the bottom.
Further information regarding the processing of personal data may be requested at any time using the contact details provided at the end of this notice.
Requests will be processed within 30 days.

DATA CONTROLLER
Work House Srl
Via E. Mattei 40/2
40138 Bologna (BO)
Italy

TYPES OF DATA PROCESSED
Usage Data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and devices used by users, URI/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters relating to the user’s operating system and IT environment.
This information is collected through cookies, small text files that websites send to the user’s device (PC, smartphone, tablet).
For more information, users are invited to consult the website’s Cookie Policy.

Data Provided by the User
These are personal data voluntarily provided by the user.

PURPOSE AND LEGAL BASIS OF PROCESSING
Personal data provided by users/data subjects are processed by the Data Controller to enable website navigation and to respond to requests for information.
Personal data collected by WORK HOUSE through its website are necessary for:

• Website navigation
• Collection of statistical information on service usage (e.g., most visited pages, number of visitors by time or day, geographical areas of origin, etc.)
• Handling requests for information

The legal bases for processing under Article 6 of EU Regulation 2016/679 are:

• for data necessary for the functioning of the website: processing is necessary for the legitimate interests pursued by the Data Controller or third parties;
• for data provided by users when requesting information: processing is necessary for the performance of a contract or pre-contractual measures taken at the request of the data subject.

Failure by the user to provide the requested data will make it impossible to access the services and/or requested information.

PROCESSING METHODS AND DATA RETENTION
Personal data are processed using IT and telematic tools, including automated systems, adopting appropriate security measures to prevent data loss, unlawful or incorrect use, and unauthorized access.
Personal data will be processed only by authorized personnel and managed by various company departments (for example: marketing, IT, administrative departments).
Processing is carried out for the time necessary to achieve the purposes for which the personal data were collected.
In particular, contact data are retained for 12 months.
Further information regarding data retention may be requested using the contact details indicated at the end of this notice.

CATEGORIES OF DATA RECIPIENTS
Personal data provided through the website may be shared with third parties, suppliers of Work House, appointed as Data Processors pursuant to Article 28 of EU Regulation 2016/679.
Further information regarding Data Processors may be requested at any time using the contact details provided at the end of this notice.

DATA TRANSFER
Personal data processed by WORK HOUSE are transferred and/or stored __________________.
Further information regarding data transfers may be requested using the contact details indicated below.
The website also allows access to the corporate platform dedicated to whistleblowing reports.

DATA SUBJECT RIGHTS
Users may contact the Data Controller regarding any issues related to the processing of their personal data and to exercise the rights provided for in Articles 15 and following of EU Regulation 2016/679 (for example: right of access, right to object or restrict processing, right to rectification and erasure, right to data portability, etc.).

Where certain conditions apply, users may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

CONTACT DETAILS
For further information regarding the processing of personal data and to exercise the rights provided by EU Regulation 2016/679, please contact:
Email: risorseumane@workhousesrl.com
PEC: workhousesrl@pec.it
Please include in the subject line:
“Exercise of data subject rights pursuant to Articles 15–22 GDPR”.
Requests will be processed within 30 days.
2026, 06^th March