Who is responsible
ENLABOR S.R.L., Corso Matteotti 8A, 23900 Lecco (LC), Italy, is the data controller. For privacy enquiries, contact info@enlabor.com.
Enquiries sent through the form
The contact form asks for first name, last name, work email, optional company and product of interest, and the content of the enquiry. ENLABOR uses this information only to receive, assess and respond to the request. The form does not subscribe users to newsletters or marketing communications.
Purposes and legal basis
Where a request concerns a quotation, product information or other steps requested before entering into a possible contract, processing is necessary to take pre-contractual steps at the request of the person concerned (Article 6(1)(b) GDPR). Other general enquiries, together with proportionate measures used to secure the form and prevent abuse, are processed on the basis of ENLABOR's legitimate interest in receiving and answering communications and protecting its website and communication channels (Article 6(1)(f) GDPR). Where processing is required to comply with a legal obligation, Article 6(1)(c) GDPR applies.
How information is handled and who may receive it
Authorised ENLABOR personnel may access enquiries where necessary to respond. The website is designed to use Amazon Web Services for hosting and contact-form processing, including API Gateway, Lambda, Amazon SES and temporary anti-abuse records in DynamoDB. The message body is not stored in DynamoDB. ENLABOR may also use its ordinary email and IT service providers as processors where applicable.
Temporary anti-abuse records can include a time-windowed hash derived from the connecting IP address, request identifiers, a request fingerprint and counters. These records are pseudonymous and are used only to protect the service. Application and infrastructure logs may contain connection and technical metadata but are configured not to include the content of contact messages.
Where a service provider processes personal data outside the European Economic Area, the transfer must be covered by an adequacy decision or other safeguards permitted by Chapter V of the GDPR, such as applicable standard contractual clauses.
Retention
Contact enquiries and related correspondence are kept for up to 12 months from the last meaningful interaction, unless the enquiry leads to a contractual relationship or a longer period is necessary to comply with law or to establish, exercise or defend legal claims.
Technical anti-abuse records are shorter-lived: depending on the record, they are configured to expire within a few days, while application/API logs created by the project are configured for 14 days. Deletion performed through cloud-service TTL mechanisms may occur asynchronously after the configured expiry time.
Cookies and tracking
The current implementation does not use advertising cookies, analytics scripts, marketing pixels, embedded maps or remote fonts. No behavioural profiling is carried out. If the website later introduces non-essential tracking technologies, this notice and any consent mechanism will be reviewed before they are enabled.
Job applications
Applications and CVs are submitted directly by email to cv@enlabor.com; the website does not upload or store CV files. Candidate data are used to assess the application and manage the recruitment process. The principal legal basis is taking steps at the candidate's request before a possible employment or collaboration relationship (Article 6(1)(b) GDPR), together with any legal obligations that apply to the recruitment process.
Please include only information relevant to the application and avoid unnecessary special-category data. If information that is not relevant to recruitment is received, ENLABOR will not use it for the selection. Where special-category data are genuinely necessary for employment-law purposes, they are handled only where an applicable legal basis under Article 9 GDPR and Italian law permits it.
For unsuccessful candidates, CVs and related selection records are retained for up to 12 months from the closure of the relevant selection process. For unsolicited applications, the period is up to 12 months from receipt or the last relevant interaction. A longer period may apply only where necessary to comply with law or to establish, exercise or defend legal claims. If a candidate is hired, information required for the employment relationship becomes part of the relevant personnel records and follows the applicable retention rules.
Your rights
Under the conditions provided by the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing and data portability where applicable, and you may object to processing based on legitimate interests. Requests can be sent to info@enlabor.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Automated decisions
The website does not use automated decision-making or profiling to decide whether to respond to enquiries or to evaluate job applicants.