Privacy Policy

This privacy policy is to provide all the information on the processing of personal data carried out by T-Direct S.r.l. when the user browses through the Website and uses its services (as better indicated below).

1. INTRODUCTION – WHO WE ARE?

T-Direct S.r.l., with registered office in Viale Sarca 336 Ed.16 - 20126 Milan (Italy), VAT No. and Fiscal Code IT09290830968 (hereinafter, “Data Controller”), manager of this internet website (hereinafter, the “Website”), in its capacity as data controller in relation to personal data pertaining to the users using the Website (hereinafter, the “Users”) hereby provides the privacy policy pursuant to art. 13 and 14 of the Regulation EU 2016/679 of the Council of 27 April 2016 and UK General Data Protection Regulation (hereinafter, “Regulation” or “Applicable Law”).

2. WHAT DO WE DO? - PROCESSING PURPOSES

By browsing the Website the User can freely search for job opportunities (in this scenario, no personal data is processed, except for cookies, if the User accepts them). By registering on the Website, the User requests to access the main service offered by the Data Controller, namely the receipt of a periodic newsletter containing the main job vacancies available on the Website (hereinafter, the “Service”).

This Website and the Service offered through the Website are reserved to subjects over the age of 18 years old. Hereby, the Data Controller does not collect personal data pertaining to subjects under the age of 18 years old. 

Particularly, the personal data of the Users will be lawfully processed for the following purposes:

a)     provision of the Service: the personal data of the Users are collected and processed by the Data Controller for the provision of the Service. The personal data collected for this purpose include all data requested in the registration form (such as e-mail, name, last name, job title, etc.) as well as any additional data voluntarily provided by the User (all together, the “Data”). Unless the User gives the Data Controller a specific and optional consent to the processing of his/her Data for the further purposes provided for in the following paragraphs, the User's Data will be used by the Data Controller for the sole purpose of ascertaining the identity of the User, possibly requesting confirmation and/or specification, thus avoiding possible fraud or abuse, and contact for Service reasons only and to verify that the Service has been successful also by means of short surveys. 

b)     administrative and accounting purposes, i.e., to carry out activities of an organisational, administrative, financial and accounting nature, such as internal organisational activities and activities functional to the fulfilment of contractual and pre-contractual obligations;

c)     legal obligations, i.e., to comply with obligations imposed by law, an authority, a regulation or legislation.

Notwithstanding the provisions elsewhere in this privacy policy, under no circumstances will the Data Controller make Users’ Data accessible to other Users and/or third parties.

The provision of Data for the above-mentioned processing purposes is necessary, since failure to provide such Data will make it impossible for the Data Controller to provide the Service.

3. OTHER PROCESSING PURPOSES

Marketing communications from our Partners

Subject to your specific, free and optional consent, the Data Controller may share your Data with selected third-party companies (the “Data Controller's Partners” or only “Partners”) which are numerous and operate in a variety of different business sectors. An up-to-date list of the current Partners, together with the link to their respective privacy policies, may be requested at any time by contacting the Data Controller in the manner indicated in Section 7 below.

Each Partner acts as an autonomous data controller and will process your Data for its own purposes, namely (i) marketing purposes, including the sending of advertising material, commercial communications and personalized offers, and (ii) the sending of job opportunities and employment-related proposals. For both purposes, the Partners may contact you via e-mail, telephone (including automated systems), SMS and messaging apps. After the disclosure, each Partner will be solely responsible for providing you with the information required under the Applicable Law.

The legal basis for this processing is your consent pursuant to Article 6(1)(a) of the Regulation. Providing consent is entirely optional: refusing will not affect your ability to browse the Website, register or use the Service. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand, by contacting the Data Controller as indicated in Section 7 below.

4. LEGAL BASIS FOR PROCESSING

Provision of Service (as described in the previous paragraph 2, letter a)): the legal basis consists of art. 6, paragraph 1, lett. b) of the Regulation, or the processing is necessary for the performance of a contract to which the User is party or in order to take steps at the request of the data subject prior to entering into a contract.

Administrative and accounting purposes (as described in the previous paragraph 2, letter b)): the legal basis consists of art. 6, paragraph 1, lett. b) of the Regulation, as the processing is necessary for performance of a contract to which the User is party or in order to take steps at the request of the data subject prior to entering into a contract.

Legal obligations (as described in the previous paragraph 2, letter c)): the legal basis consists of art. 6, paragraph 1, lett. c) of the Regulation, as the processing is necessary for compliance with a legal obligation to which the Data Controller is subject.

Other processing purposes (as described in paragraph 3 above) for the processing relating to communication of data to the Data Controller's Partners, the legal basis is Article 6, paragraph 1, letter a) of the Regulation, i.e., the provision by the data subject of consent to the processing of his/her personal data for one or more specific purposes. For this reason, the Data Controller asks the User to provide specific, free and optional consent, in order to pursue such processing purposes.

5. PROCESSING METHODS AND DATA RETENTION PERIOD

The Data Controller will process the Data using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the Data.

The Data will be retained by the Data Controller for a period of 24 months from the date of collection, unless a longer retention period is required for the establishment, exercise or defence of legal claims.

In the case referred to in paragraph 3 above, where the Data are communicated to third-party data controllers, such recipients will process and retain the Data autonomously for the period they consider necessary for their own purposes, in accordance with the information provided in their respective privacy notices made available to Users.

6. TRANSMISSION AND DISSEMINATION OF DATA

The User’s Data may be transferred outside the European Union or outside the UK, and, in this case, the Data Controller will ensure that the transfer takes place in accordance with the Applicable Law and, in particular, in accordance with Articles 45 (Transfer on the basis of an adequacy decision) and 46 (Transfer subject to adequate guarantees) of the Regulation.

The Data may be disclosed to the employees and/or collaborators of the Data Controller in charge of managing the Website and the Users’ requests. These subjects, who have been instructed to do so by the Data Controller pursuant to Article 29 of the Regulation, will process the User’s Data exclusively for the purposes indicated in this policy and in compliance with the provisions of the Applicable Law.

The personal data of the Users may also be disclosed to third parties who may process personal data on behalf of the Data Controller as “Data Processors” pursuant to Article 28 of the Regulation, such as, for example, IT and logistic service providers functional to the operation of the Data Controller’s Website, suppliers of outsourcing or cloud computing services, professionals and consultants.

Users have the right to obtain a list of any Data Processors appointed by the Data Controller, making a request to the Data Controller in the manner indicated in paragraph 8 below.

The Data Controller may also communicate the Data to third-party autonomous data controllers (other than Data Controller’s Partners), to the extent necessary to fulfill contractual obligations and/or to comply with legal obligations. 

In this regard, we may share Users’ data with Digital Metrics S.r.l. and its international partners to ensure data security, prevent and detect unlawful activities, and manage risks such as fraud and financial crime. These entities will process data solely for these purposes and in compliance with applicable data protection laws.

Personal data will be retained only for the time necessary to achieve these objectives.

Users may exercise their data protection rights at any time by contacting the DPO at dpo@digitalmetrics.eu.

7. RIGHTS OF THE DATA SUBJECTS and HOW TO CONTACT US

Users may exercise their rights granted by the Applicable Law by contacting the Data Controller as follows: 

·       registered letter with return receipt to the following address: Viale Sarca, 336 Ed.16 - 20126 Milan (Italy);

·       by e-mail (to the following address privacy.trd@triboo.it.

The Users may also contact the Data Protection Officer (DPO) appointed by the Data Controller. The contact details of the DPO are: lapo.curinigalletti@triboo.it.

We have appointed GRCI Law Limited to act as our UK Representative. If you wish to exercise your rights under the UK General Data Protection Regulation (GDPR), or have any queries in relation to your rights or privacy matters generally please email our Representative at ukrep@grcilaw.com or post your request or query to:

• UK Representative, GRCI Law Limited, Unit 3, Clive Court, Bartholomew’s Walk, Cambridgeshire Business Park, Ely, Cambridgeshire, CB7 4EA, UK

When contacting our Representative please ensure you include our company name in any correspondence.

Pursuant to the Applicable Law, Users have:

a.    the right to withdraw consent at any time, if the processing is based on their consent;

b.   the right of access to personal data;

c. (where applicable) the right to data portability (the right to receive all personal data concerning them in a structured, commonly used and machine-readable format), the right to restriction of processing of personal data, the right to rectification and the right to erasure ("right to be forgotten");

d.   the right to object:

            i.        in whole or in part, for legitimate reasons to the processing of personal data concerning them, even if relevant to the purpose of collection;

           ii.        in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;

e.    if they consider that the processing of their Data is in breach of the Regulation, the right to lodge a complaint with a supervisory authority (in the Member State in which they have their habitual residence, in the Member State in which they work or in the Member State in which the alleged breach has occurred). The Italian Supervisory Authority is the Garante per la protezione dei dati personali, located in Piazza Venezia n. 11, 00187 - Rome (http://www.garanteprivacy.it/ ) The Supervisory Authority in the United Kingdom is the Information Commissioners' Office (ICO) located in Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.  Helpline number: 0303 123 1113.  https://ico.org.uk/make-a-complaint/.

8. UPDATES TO THIS PRIVACY POLICY

We may make changes to this privacy policy from time to time. 

You should check this page regularly to see our most up to date policy.  

This privacy policy was last updated on 01/07/2026

***

Identity of our Business Partners & Clients: