Privacy Policy

In this notice ISAB S.r.l. describes how it processes the personal data of people visiting www.isab.com. The processing of customer and supplier data within contractual relationships is described in the Customer and Supplier Notice, available in the Documents section.

1. 01

   Data controller

   ISAB S.r.l., registered office at ex S.S. 114 km 146 (s.n.c.), 96010 Priolo Gargallo (SR), Italy, entered in the South-East Sicily Register of Companies, tax code and VAT number 01629050897. Contacts: privacy@isab.com, certified e-mail isab@pec.it, telephone +39 0931 208111.

2. 02

   Categories of personal data processed

   Browsing data. In the course of normal operation, the site’s systems and software acquire data whose transmission is implicit in the use of internet communication protocols: IP addresses, browser and operating system type, the URIs of the resources requested, the time of the request, the method used, the size of the file returned and the response status code. This data is used to deliver the service and to establish responsibility in the event of computer offences against the site.

   Data provided voluntarily by the user. Sending messages to the e-mail addresses published on the site entails acquiring the sender’s address and the data contained in the message.

   Data submitted through the recruitment platform. Applications are not sent from this site: the form opens on the ALLIBO® RECRUIT platform, which sets out its own notice before submission. The data and the CV are collected there.

   Cookies. The site uses technical and session cookies only, described one by one in the Cookie Policy.

3. 03

   Purposes of processing and legal basis

   The Controller processes personal data for the purposes set out below, each with its own legal basis under Article 6 of the Regulation.

   Delivery, operation and security of the site, including the prevention of abuse and unauthorised access

   Legitimate interest of the Controller (Art. 6.1.f)

   Responding to enquiries sent to the addresses published on the site

   Performance of pre-contractual measures or of the contract (Art. 6.1.b), or legitimate interest (Art. 6.1.f)

   Handling expressions of interest and tender procedures

   Performance of pre-contractual measures (Art. 6.1.b)

   Assessment of applications received through the recruitment platform

   Performance of pre-contractual measures (Art. 6.1.b)

   Compliance with legal obligations and with requests from the Authorities

   Legal obligation (Art. 6.1.c)

   Establishment, exercise or defence of legal claims

   Legitimate interest of the Controller (Art. 6.1.f)

4. 04

   How data is processed

   Processing may also be carried out by electronic or automated means, with tools designed to guarantee the security and confidentiality of the data, and covers every operation necessary to the processing itself. Data is held in the Controller’s IT systems, protected by technical and organisational measures appropriate to the risk.

5. 05

   Recipients of personal data

   Data may be disclosed to:

   • providers of IT, hosting and site maintenance services, acting as processors under Article 28 of the Regulation;
   • companies affiliated with ISAB S.r.l., for the purposes set out above;
   • professionals and consultants, for legal, accounting and technical support;
   • competent authorities, police forces and public administrations, to comply with legal obligations or measures issued by the Authorities.

   Personal data is not disseminated and does not feed automated decision-making or profiling.

6. 06

   Third-party services reachable from the site

   Two functions of the site rely on external platforms:

   • the ALLIBO® RECRUIT recruitment platform, provided by Alliance Software S.r.l., which acts as a processor appointed by the Controller. Opening the «Careers» page makes the browser request resources from the domain joblink.allibo.com, disclosing the IP address to the provider. The notice for applications is published on the platform itself;
   • the whistleblowing reporting platform, reachable at isab.segnalazioni.net, with its own notice published on the platform itself.

7. 07

   Transfers outside the European Economic Area

   Where necessary for the purposes set out above, data may be transferred to recipients established outside the European Economic Area. In that case the Controller applies the standard contractual clauses approved by the European Commission and the further measures provided for by Article 46 of the Regulation, unless the conditions of Article 49 apply.

8. 08

   Retention period

   • Browsing data and system logs: retained by the provider of the infrastructure hosting the site, for the period set out in the relevant contract, save for investigations required by the judicial authorities.
   • Correspondence received at the published addresses: 24 months from the last contact.
   • Applications: 24 months from receipt, as stated in the notice of the recruitment platform.
   • Documentation relating to tenders and contractual relationships: for the periods laid down by law, and in any case ten years under Article 2220 of the Italian Civil Code.

   Data may be retained beyond these periods in the event of litigation, requests from the Authorities, or where applicable law so requires.

9. 09

   Rights of data subjects

   Data subjects may ask the Controller for access to their personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), portability of data processed on the basis of consent or of a contract (Art. 20), and may object, on grounds relating to their particular situation, to processing based on legitimate interest (Art. 21). Where processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

   Requests should be sent to privacy@isab.com or to isab@pec.it. The Controller replies within one month of receipt, extendable by two months for complex requests.

10. 10

    Complaint to the supervisory authority

    Data subjects who consider the processing of their data unlawful may lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11 — 00187 Rome, protocollo@gpdp.it, certified e-mail protocollo@pec.gpdp.it, or apply to the courts.

11. 11

    Changes to this notice

    This notice may be updated. Later versions are published on www.isab.com with the date of the latest update.

Last updated: 12 September 2026