Privacy

A. Purposes, Legal Bases for Processing, and Communication of Data

I. Services, Requests and initiatives
Personal data is processed as part of the data controller’s institutional activities, which are aimed at supporting the needs of the local labor market and promoting the recruitment, search for, and retention of qualified employees in South Tyrol.
To these activities belong the support to people moving to South Tyrol for work reasons and their settling-in. Furthermore, these activities aim to reduce the phenomenon of the brain drain and the stay of qualified young people in the region through a continue dialogue between people from South Tyrol enterprises and young people. In particular:
a. Support for the enterprises (in the search for qualified employees and by facilitating the matching of labor supply and demand);
b. Promoting South Tyrol as a place to work and live (through initiatives, projects and services aimed at employees and businesses);
c. Promoting the workforce (through initiatives and services that aim at the acquisition and maintenance of employees in the firm);
d. Tackling brain drain (through the promotion of initiatives aimed at addressing this phenomenon, facilitating the return of workers, attracting and retaining workers locally, and creating employment opportunities in South Tyrol);
e. Information, consultancy and support (aimed at people wishing to move to South Tyrol from abroad or from other Italian regions for private or professional reasons, as well as for handling requests for information, advice and support submitted by the people concerned in connection with the above-mentioned services).
The legal basis for the processing operations is Article 6 (1) (e) of the GDPR, i.e., the performance of a task carried out in the public interest or in the exercise of official authority vested in the Chamber pursuant to the laws defining its institutional responsibilities.

II. Advertising communication
Contact details may be used for the following purposes:

• Informing communication regarding the initiatives and services offered by Work in South Tyrol (newsletters and email invitations to webinars organized by the service, “Welcome Events” and “Talent Aperitifs”, the “Why South Tyrol?” project, as well as any updates and tax benefits provided for under the Budget Law).

The legal basis is the consent of the data subject pursuant to Article 6(1)(a) of the GDPR.

III. Interviews, photographs, video and audio recordings
As part of certain projects and initiatives, the Chamber may take photographs and make video and audio recordings of the data subject, as well as collect and use statements and testimonials from interviews, in order to document and report on the initiative and to promote the related projects and services through the Chamber’s institutional website and social media channels, such as Facebook, Instagram, LinkedIn and YouTube.
The creation and subsequent publication of the above-mentioned content shall, unless otherwise provided for by applicable law, be based on the consent of the data subject pursuant to Article 6(1)(a) of the GDPR.

B. Disclosure and Distribution of Data
Personal-related data may be disclosed to the entities involved in carrying out the activities, insofar as this is necessary for the performance of the respective tasks and is in accordance with the applicable data protection roles.

• public or private entities, involved in carrying out the activities and projects
• Entities, acting as data processors on behalf of the Controller, such as InfoCamere (an in-house company of the Italian Chambers of Commerce)
• companies interested in recruiting personnel;
• third-party entities and partners engaged to carry out activities on behalf of the Chamber, such as the Silvius Magnago Foundation, the “Südtiroler in der Welt” association of the KVW and RAI Südtirol (as part of the “South Tyrol for love” initiative);
• third-party entities commissioned by the Chamber to carry out video recordings and take photographs (as part of the “Welcome in South Tyrol!” initiative).

The personal data intended for publication shall be disclosed or published exclusively in the cases specified in this Privacy Policy and for the purposes stated therein and, where applicable, based on the data subject’s consent.

C. Methods of processing data
The data is processed both electronically and manually, in accordance with logical criteria that are consistent with and functional to the purposes for which the data was collected, while complying with the confidentiality and security provisions set forth by law and internal regulations.
To carry out certain activities, the data controller may engage third parties who act as data controllers or data processors within the meaning of Article 28 of the GDPR and to whom IT services, processing tasks, or other activities necessary for the performance of institutional duties are entrusted.

D. Period of retention of data
The data collected for the services, requests and initiatives described above (letter A., paragraph I.) shall be retained for as long as necessary to provide the service, process the request and/or for the duration of the project, as well as for any additional period required to comply with applicable documentation and reporting obligations.
The data collected for commercial communication (letter A, paragraph II.) will be retained until the consent is withdrawn.
Photos, videos and audio recordings (Letter A, paragraph III.) will be published for a specific and documented period of time.

E. Categories of Data Subjects
The processing of personal data may involve the following individuals, depending on the activities carried out:

• Projects participants seeking employment;
• Employees interested in moving to or returning to South Tyrol;
• Persons from abroad or from other Italian regions who are interested in working and residing in South Tyrol;
• qualified personnel and skilled professionals, interested in opportunities in the area
• Representatives and contact people of companies and other public or private entities involved in the activities of the organization;
• Participants in events, initiatives and projects organized by the organization.

F. Consent Management
How is consent given? Consent is expressly given through the following institutional websites:

• Website of the Chamber of Commerce
• Website of Work in South Tyrol

How can consent be withdrawn? Any consent given may be withdrawn at any time by using the same channels through which it was provided, without affecting the lawfulness of processing carried out on the basis of such consent prior to its withdrawal.
The channels are:

• via the personal area on the Chamber’s institutional website, using the SPID or CIE authentication method;
• via the contact forms available on the Work in South Tyrol website, which are provided by Zoho, by sending the withdrawal request to the relevant email address workinsouthtyrol@handelskammer.bz.it.

The withdrawal of consent shall have no effect on processing carried out on another legal basis.

G. Consequences of Refusing to Disclose One’s Own Data
The provision of the requested personal data is necessary or voluntary, depending on the specific purpose for which the data are processed.
Where the processing is necessary for the performance of the Chamber’s institutional activities or for the handling of requests and the provision of services and initiatives, failure to provide the personal data required for such purposes may result in the request not being processed, the requested service not being provided, or participation in the initiative being wholly or partially impossible.
For processing activities based on the data subject’s consent pursuant to Article 6(1)(a) of the GDPR, the provision of consent is voluntary.
Refusal to give consent does not affect the ability to use services and participate in initiatives for which consent is not the legal basis.
In particular, the refusal to provide consent to the taking and publication of photographs, the making and publication of video and audio recordings, and the collection and publication of interview statements shall not affect the data subject’s participation in the project or access to the related services, unless otherwise specified for individual initiatives and provided that the relevant processing is based on an appropriate legal basis.

H. Types of processed Data
For the purposes described in Section A, depending on the service requested, personal data such as the following may be processed:

• general personal data (contact information, identification data, civil status information, email address, phone number, home or temporary address, language preference and native language, information regarding educational background, training, and professional skills, professional and employment status, position within the company, life history and relocation to South Tyrol, and the company– including its name, logo, photos, videos, and audio recordings of stories and quotes).

The processing may also involve special categories of personal data as defined in Article 9 of the GDPR, such as:

• Personal information provided during video interviews, such as information about one’s private life, sexual orientation, and ethnic background.

This data is not explicitly requested; however, if it is provided voluntarily, it will be processed in accordance with the principle of data minimization and using organizational and technical measures that ensure an appropriate level of security and protection.

I. Automated Decision-Making Processes
Finally, it should be noted that personal data is not used in fully automated decision-making processes.
Personal data is not subject to automated decision-making processes, including profiling, that produce legal effects or significantly affect the data subject within the meaning of Article 22 of the GDPR.

J. Rights
Under current law, the data subject may, at any time, request access to their personal data from the Data Controller and, if they believe the data to be inaccurate or incomplete, request that it be corrected or supplemented. They may also object to the processing, request erasure or restriction of processing, and, in the cases provided for by law, exercise the right to data portability.
In the event of a restriction on processing, personal data may, subject to its storage, be processed only in the cases provided for by law. If the data subject believes that the processing of their personal data violates the GDPR, they may file a complaint with the data protection authority: www.garanteprivacy.it.

Last update: 01/10/2026