Privacy

Pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, and Recommendation No. 2/2001 concerning the minimum requirements for online data collection in the EU.  

Thank you for your interest in our website and our organization. The protection of personal data is a priority for us. For this reason, we comply with the applicable data protection legislation as well as with the Guidelines of the Italian Data Protection Authority (Cookie and other tracking tools – 10 June 2021). The following information explains how HUMAN&HUMAN S.r.l. processes your personal data. Thank you for visiting us and enjoy your browsing!

Data Controller

HUMAN&HUMAN S.r.l.
Via Alto Adige 40,
I-39100 Bolzano (BZ)
VAT/Tax ID No. 03121530210
E-mail: info@humanandhuman.it 

The following Privacy Policy is intended to provide information on the processing, purposes, methods, and overall management of personal data collected through the website www.humanandhuman.it (hereinafter referred to as the “Website”). This Privacy Policy applies exclusively to this Website and therefore excludes any other pages that may be accessed through direct links.

Purpose and Legal Basis of Processing

The Data Controller guarantees, within the framework of the applicable legal provisions, that the processing of personal data through the Website is carried out with full respect for the fundamental rights and freedoms, as well as the dignity, of the data subject (hereinafter referred to as the “User”), particularly with regard to confidentiality, personal identity, and the right to the protection of personal data.
In compliance with the conditions of lawfulness set out in Article 6 of Regulation (EU) 2016/679, the personal data provided by you through the Website may be processed by HUMAN&HUMAN for the following purposes:

Customer Care: The processing enables the Data Controller to respond to requests submitted by the data subject to our customer service (via e-mail). The legal basis for this processing lies in the performance of a contract to which the data subject is a party, or in the implementation of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) of Regulation (EU) 2016/679).

Recruiting: The processing enables the Data Controller to manage applications, including spontaneous applications (CVs), submitted by candidates through the dedicated “Jobs” section of the website. The legal basis for this processing is Article 6(1)(b) of Regulation (EU) 2016/679. Further information regarding the relevant processing can be found in the corresponding Privacy Notice (link here).

Service Circulars: The personal data you have provided to us when entering into the service agreement may also be used for sending circulars and communications by e-mail regarding the services offered by HUMAN&HUMAN. Such circulars may be sent on a weekly or occasional basis. The processing is necessary for the pursuit of the legitimate interests of the Data Controller (Article 6(1)(f) of Regulation (EU) 2016/679).

Newsletter: The processing enables the Data Controller to manage the data subject’s requests to receive updates on offers and services for clients. In particular, the data you provide may also be used to send you informational material concerning the services and promotions offered on the website, which are also advertised through the newsletter. The newsletter is published on the Data Controller’s website and sent by e-mail—automatically and free of charge—to those who have consented to the processing of their personal data for this purpose. When completing the subscription form, a specific notice regarding the processing of personal data is displayed, with the optional possibility of expressing consent by ticking a checkbox (✓). Providing data for this purpose is optional. Subscription to the newsletter is also subject to acceptance of the Privacy Policy and remains valid until withdrawal by the data subject. The legal basis for this processing is your consent, pursuant to Article 6(1)(a) of Regulation (EU) 2016/679.

Unsubscribing from Circulars/Newsletter: You may withdraw from receiving such circulars at any time by sending an e-mail to our Administration at info [at] humanandhuman.it.

Quotation Requests: The processing enables the Data Controller to contact you—by telephone or e-mail—in order to provide information regarding your request for a quotation for a specific service you have requested. The legal basis for this processing lies in the performance of a contract to which the data subject is a party, or in the implementation of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) of Regulation (EU) 2016/679).

Management of Feedback or Complaints: The processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) of Regulation (EU) 2016/679), as well as for compliance with a legal obligation related to the handling of complaints. The latter processing is based on the legal obligation set forth in Article 6(1)(c) of Regulation (EU) 2016/679.

Questionnaire / Quality: The personal data you provide in the context of surveys conducted by HUMAN&HUMAN are processed to collect general information useful for understanding the needs of the data subject, in order to improve the services offered and, if requested by the client, to provide personalized support. The provision of such data is voluntary. The processing is necessary for the pursuit of the legitimate interests of the Data Controller (Article 6(1)(f) of Regulation (EU) 2016/679). Further information regarding the relevant processing can be found in the corresponding Privacy Policy (link here).

Improvement of the Website

Further details regarding these purposes and categories of data can be found in the section “Cookie Policy.”

Type of Data Processed

For the purposes mentioned above, the following categories of personal data may be processed:
Personal data of a general nature (including but not limited to first name, last name, telephone number, and e-mail address) provided when contacting us through the communication methods available on the Website.

Personal data of a general nature (as indicated above) provided by you (via telephone, e-mail, online form, etc.), which will be used to respond to your requests, inquiries, complaints, or issues related to the use of our services.

Personal data of a general nature or belonging to special categories of data (e.g., health information) provided when submitting a spontaneous application (e.g., data contained in a CV).

Personal data collected during browsing. The computer systems and software procedures used to operate this Website acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols. Such information is not collected to be associated with identified individuals, but, by its very nature, could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by visitors connecting to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data are used solely for the purpose of providing the requested service, for compiling anonymous statistical information on Website usage, and for verifying its correct operation, and are retained only for the time strictly necessary for these purposes. The data may also be used to establish liability in the event of potential computer crimes to the detriment of the Website.

For further details on these types of data, please refer to the section “Cookie Policy,” drawn up in accordance with the new Guidelines on Cookies and Other Tracking Tools (Official Gazette No. 163 of 9 July 2021).

Methods of Data Processing

Data processing is carried out:

by employees authorized to perform data processing activities;
hrough the use of electronic systems;
by persons legally authorized to carry out such tasks;
with appropriate organizational and technical measures to ensure data confidentiality and prevent access by unauthorized third parties.

Your data will not be included in automated decision-making processes (Art. 22 GDPR) or processed through artificial intelligence systems (Art. 13 Law 132/2025).

Retention of Personal Data

The personal data you have provided will be retained only for as long as is necessary to fulfill the obligations or tasks referred to under point 2, with the gradual deletion of data related to specific purposes that are no longer pursued:

Quotation Requests 
Maximum 10 years, in accordance with the statutory retention periods for accounting, tax, and administrative documents (Art. 2200 of the Italian Civil Code).

Service Circulars
For the duration of the service agreement or until withdrawal.
Newsletter Until withdrawal.

Management of Feedback or Complaints
Maximum 2 years.

Recruitment 
Maximum 2 years.

Quality 
Maximum 1 year.

Website Navigation and Improvement 
See Cookie Policy.

Communication of Personal Data
Without prejudice to disclosures made in compliance with legal and contractual obligations, the personal data collected and processed may be disclosed only for the purposes stated above, and specifically to:

Public administrations and authorities, where required by law;
All natural and/or legal persons, public and/or private (such as law firms, administrative and tax consultancy firms, courts, chambers of commerce, etc.), when such disclosure is necessary or functional to the performance of our activities, in the manner and for the purposes indicated above.

Transfer of Personal Data

The personal data collected may be transferred to countries outside the European Union. In such cases, the transfer will take place in compliance with the provisions of Regulation (EU) 2016/679 (“GDPR”).

Specifically, data will only be transferred after the execution of the Standard Contractual Clauses approved by the European Commission under Decision No. 2021/914/EU, or to countries that ensure an adequate level of protection for personal data and are therefore subject to an Adequacy Decision adopted by the European Commission.

Some of the personal data collected may therefore be transferred abroad, to locations outside the European Union, always in accordance with the guarantees required by the GDPR for this type of activity (Articles 45–49).

The transfer will, in any case, be carried out in compliance with the guarantees provided for such activities under the GDPR (Articles 45 to 49). These include: the transfer to companies located in countries where the existence of data protection safeguards comparable to those of the GDPR has been recognized, and whose recipients are covered by an Adequacy Decision issued by the European Commission (“White List” countries); or the transfer to companies that have signed specific contractual clauses for the protection of personal data approved by the Data Protection Authority, or binding corporate rules approved by the same Authority; or, alternatively, the transfer takes place on the basis of specific derogations.

With regard to the transfer of data to the United States of America, such transfer is authorized under the Adequacy Decision of 10 July 2023, which establishes the new data transfer framework between the European Union and the United States, known as the “EU–US Data Privacy Framework.”

Rights of the Data Subject

You have the right to exercise the rights referred to in Articles 15 et seq. of Regulation (EU) 2016/679 before the Data Controller, including:

Access to your personal data and related information;
Rectification and erasure (“right to be forgotten”) of personal data;
Restriction of processing;
Right to data portability;
Withdrawal of consent to the processing of personal data.

NOTICE: Pursuant to Article 21(1) of the GDPR, you have the right, on grounds relating to your particular situation as a user/participant, to object at any time to the processing of your personal data under Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions.
Pursuant to Article 21(2) of the GDPR, you also have the right to object at any time to the processing of your personal data for these purposes.

If you believe that your rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it.

To learn more about how your data are processed by HUMAN&HUMAN, you may submit a request to the following e-mail address: info [at] humanandhuman.it

Review Clause

This Privacy Policy is subject to periodic review and updates, reflecting the services and activities of the Data Controller in line with the applicable legal framework.
This notice shall be deemed up to date.

COOKIE POLICY

According to Art. 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the recommendation on some minimum requirements for the online collection of personal data in the EU.

We are pleased about your interest in our website and our company. For this reason, we have decided to comply with the current data protection legislation as well as the guidelines of the Italian Data Protection Authority (Cookies and other tracking tools – 10 June 2021). Below you will find all the information you need to understand how HUMAN&HUMAN GmbH processes your personal data. Thank you for your visit and enjoy browsing!

Data Controller

HUMAN&HUMAN S.r.l.
Via Alto Adige 40,
I-39100 Bolzano (BZ)
VAT/Tax ID No. 03121530210
E-mail: info@humanandhuman.it 

While browsing the internet, websites store certain information in order to provide you with a correct and secure browsing experience, such as: IP addresses, MAC address, domain names of users’ computers, and all technical information implicitly required by the use of internet communication protocols.

Cookies. Our website uses cookies to ensure correct use of the website and a secure browsing experience. This policy provides you with information about the cookies used by our website, their purposes, and how they are used.

What are Cookies?

The legal basis for managing cookies is the general measure of the Data Protection Authority regarding cookies dated 8 May 2014. Cookies are small text files sent by a website to the user’s device (usually to the browser). They are stored and then sent back to the website during the next visit by the same user. While browsing a website, cookies from other websites or web servers (so-called “third parties”) may also be sent to the user’s device: on the visited website, certain elements (such as images, maps, sounds, specific links to pages of other domains) may be present that reside on different websites or web servers.

Cookies can be used for various purposes, such as computer authentication, storing configuration information of devices accessing the server, saving preferred websites, etc. Below are the types of cookies we use.

Types of Cookies

Under applicable Italian legislation, the use of cookies does not always require the user’s express consent. In particular, the so-called “technical” cookies do not require such consent, for example, when used to transmit a message over an electronic communications network, or to provide a service explicitly requested by the user. In other words, these are essential cookies for the proper functioning of the website or for activities requested by the user.

Technical Cookies: Technical cookies are strictly necessary for the proper functioning of the website; they are stored only for the duration of the browsing session.

According to the Data Protection Authority, the following cookies are considered technical cookies that do not require express consent for their use (see General Provision “Identification of simplified procedures for information and consent for the use of cookies – 8 May 2014”):

Analytics cookies, used directly by the website operator to collect information in aggregate form on the number of users and how they visit the website
Navigation cookies or session cookies (for authentication, making a purchase, etc.)
Functionality cookies: These cookies allow users to navigate based on a series of selected criteria (such as language settings, selected items for purchase), in order to improve the service provided.

For cookies that create user profiles to send advertising messages in line with the user’s preferences shown during browsing, prior user consent is required.

Analytical Cookies: Analytical cookies are used to collect aggregate information on the number of visitors and how they use the site at a statistical level (e.g., Google Analytics). These cookies do not collect information that can identify users or personal data: they are similar to technical cookies, as the fourth component of the IP address is masked. The information is processed in an aggregated and anonymized form.

Third-party cookies are created by other websites. These websites own some of the content, such as advertisements or images, that you see on the website you visit. The data controller cannot exert specific control over these cookies. For information about these cookies, their features, and functionality, please refer directly to the respective third parties. The use of third-party cookies can generally be disabled via browser settings: see instructions above.

Cookies Used by Our Website

For the above-mentioned purposes, the following categories of personal data may be processed:

This website uses only technical cookies and analytical cookies.

As for analytical cookies: the data controller has partially anonymized the user’s IP address. Therefore, the information accessible to Google Inc. is limited.

For this latter category, Google Inc. may access information that can be indirectly associated with the user’s client ID. More information: https://policies.google.com/technologies/cookies?hl=de

Brief Information on First Access – “Banner”

The banner that appears upon first access to the website allows visitors to view essential information regarding the use of cookies and contains a link to the full cookie policy. Users can express their consent to the use of optional cookies. The data concerning the user’s decision about cookie usage is stored by a technical cookie for 100 days.

How to Disable Cookies

Users can withdraw their consent or change cookie preferences at any time via their browser settings. Here are the links to the main browsers:

Banner
Directly via our banner.

Internet Explorer
https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Google Chrome
https://support.google.com/accounts/answer/32050?hl=de

Mozilla Firefox
https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen

Apple Safari
https://support.apple.com/kb/PH5042?locale=en_US

This cookie policy may be supplemented or modified by the Data Controller in the event of legislative changes.

Update: 10.10.2025