Privacy Policy
Overview
Since its inception, Zeta Service has had a strong desire to partner with a team of labour consultants, now Lumina Stp S.r.l. (hereinafter Lumina), to provide its services. This allows us to guarantee a comprehensive service to our companies and to entrust Lumina with all legally reserved activities, as required by law. Zeta Service and Lumina therefore work in synergy to guarantee their clients a comprehensive service tailored to their needs.
For Zeta Service and Lumina, your privacy and the security of your personal data are extremely important. We therefore collect and manage your personal data with the utmost care and take appropriate measures to keep them secure.
The way Zeta Service and Lumina will process your personal data is detailed here below. For detailed information on how Zeta Service and Lumina process your personal data, please read this Privacy Policy in full.
Regarding the use of cookies, please read the “Cookie Policy”, which contains detailed information about how we use cookies in the terms of our services and when browsing the Website. You will find the Cookie Policy at the bottom of every page of the Website.
Information on the Database: Zeta Service has always been aware of and attentive to issues related to combating gender violence and cultural change in companies and society. In 2020, a social project strongly desired by the board became an autonomous Foundation that maintains a close collaboration relationship with Zeta Service. This foundation, Fondazione Libellula Impresa Sociale, has its registered office in Viale Ortles 54/A, Milan (MI), and is registered in the social enterprises special section of the Milan Business Registry under number 182232/37663, VAT number 11197420968.
Under the terms of the aforementioned partnership, the two entities also share certain technological tools and platforms, which are necessary to ensure the continuity and operational efficiency of the Foundation’s activities.
In the light of the above, and in view of the relationship referred to above, Fondazione Libellula, Zeta Service and Lumina share a single Database containing all the data collected through the Website and all the data collected through the website of Fondazione Libellula. Therefore, for technical reasons, all three companies can view the aforementioned personal data. It is understood that Fondazione Libellula may only view your data, and will not process it in any other way. If you do not wish to consent to your data being included in the aforementioned Database, we ask you not to provide your personal data while browsing the Website.
Notwithstanding the above, for the processing of data you provide when applying for an open position or submitting an unsolicited application, please note that a separate database is managed by Zeta Service and Lumina employees specifically for this purpose.
Data Controller
The personal Data Controller is Zeta Service S.r.l, with registered office in Corso Mazzini, 39 Lodi – 26900 (LO), VAT number 03901650964, e-mail: scrivici@zetaservice.com
Lumina STP S.r.l., with registered office in Corso Mazzini, 39 Lodi – 26900 (LO), VAT number 08669630967, e-mail: scrivici@zetaservice.com
Data Protection Officer (DPO)
Zeta Service has appointed a Data Protection Officer, who can be contacted by e-mail at privacy@zetaservice.com for any clarification, questions or needs relating to your privacy and the processing of your personal data.
Lumina has not appointed a Data Protection Officer (DPO).
Legislative references and useful links
Zeta Service and Lumina will process your personal data in full compliance with the relevant regulations provided for by Regulation (EU) 2016/679 General Data Protection Regulation (GDPR), personal data processing regulations and the provisions of the Supervisory Authority (http://www.garanteprivacy.it).
Personal Data collected
Zeta Service and Lumina will collect and process the following categories of personal data when you browse the Website:
- we collect the personal data you provided when filling out one of the contact forms on zetaservice.com;
- we collect the personal data provided when you request a service offered on zetaservice.com;
- we collect the personal data provided when you subscribe to our newsletter service;
- we collect the personal data provided when you register for events on the Website;
- we collect the personal data you provide when filling out the form and/or submitting your CV for open positions and/or for unsolicited applications.
Zeta Service and Lumina do not process personal data relating to minors. By accessing zetaservice.com and using the services offered by Zeta Service and Lumina, you declare that you are of legal age.
Purpose of personal data processing
Zeta Service and Lumina will collect and process your personal data for the following purposes:
- to manage and respond to your requests for information;
- to provide the services offered on zetaservice.com (such as events organised by the data controller). To this end, in relation to each service and its characteristics, Zeta Service and Lumina need to collect the personal data necessary to perform the service you requested;
- newsletter service;
- application for an open position or unsolicited application. In this case, we will use the information you provide us with, also via your CV, exclusively for this purpose.
- commercial communications about our products and services, to keep you updated on news, offers, promotions, and other communications regarding related companies and brands;
- conducting statistical research, opinion polls and market research to improve our services, products, operations, and relationships with our users;
- fulfilment of specific obligations established by law or arising from instructions issued by authorities and/or other entities authorised by law.
- transfer of your personal data to Fondazione Libellula Impresa Sociale, for the Foundation’s social promotion purposes.
In relation to all the activities indicated above, we will process your personal data primarily using IT and electronic means, in full compliance with applicable legislation.
Legal basis for processing
We process your personal data only when one of the following conditions is met – legal bases, as set forth in the applicable law (Article 6 GDPR – lawfulness of processing):
- In relation to the processing of your data for the purposes referred to at points 1), 2), and 4) above, the legal basis is the execution of a contract to which the data subject is party, or the implementation of pre-contractual measures adopted at the data subject’s request;
- In relation to the processing of your data for the purposes referred to at points 3), 4), 5), 6), and 8) above, the legal basis is the consent of the data subject. You are free to choose whether or not to give us your consent for the processing of your data, but without consent, we will not be able to process them for the purposes indicated;
- In relation to the processing of your data for the purposes referred to at point 7) above, the legal basis is the fulfllment of a legal obligation;
- In relation to the processing of your data for the purposes referred to at point 4) above, the legal basis, in addition to consent, is the pursuit of the legitimate interest of the data controller.
Who processes your data?
Your personal data will be processed by Zeta Service and Lumina internal personnel who have been specifically trained and authorised for the purpose. Specifically, with reference to the shared Database mentioned above, which contains the data collected through the Website, Fondazione Libellula may view your data without performing any other processing activities. Your personal data may also be transmitted to third parties we use to provide our services or carry out our activities; these parties have been carefully selected and offer adequate guarantees of compliance with personal data processing regulations. These parties have been designated by Zeta Service and/or Lumina, and where necessary, external data processors have been appointed or specific agreements have been entered into with them. These parties carry out their activities according to the instructions given by Zeta Service and/or Lumina and under their control.
The third parties in question belong to the following categories: Internet providers, companies specialising in IT and telematics services; companies that perform marketing activities on our behalf; companies specialising in market research and data processing on our behalf. Your data may be disclosed to the police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention of and protection from threats to public safety, to allow Zeta Service and Lumina to ascertain, exercise, or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
Data transfer outside the EU
Some of the third parties listed in the previous section “Who processes your data?” may be located in countries outside the European Economic Area. Such parties nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission.
In the absence of an adequacy decision, the transfer of your personal data to countries outside the European Economic Area will be carried out in compliance with the provisions of Articles 46 et seq. of the GDPR. This ensures that the transfer of personal data is guaranteed only if the third country has provided adequate safeguards and provided for data subjects to have enforceable rights and effective legal remedies.
How long do we retain data?
We retain your personal data for a limited period of time, which varies depending on the type of activity that involves processing your personal data.
After this period, your data will be permanently deleted or otherwise irreversibly anonymised.
Your personal data are retained in compliance with the following terms and criteria:
- data related to user requests: the data will be retained until your request is fulfilled;
- data collected in connection with the use of services offered on zetaservice.com: these data are retained for a period no longer than necessary to perform the requested service;
- data collected for sending newsletters: the data will be retained for the entire duration of the service until you exercise your right to object;
- data collected for open job applications or unsolicited applications: the data will be retained for a maximum of thirty-six months, after which they will be deleted, unless, after having been informed via e-mail, you authorise the data controller to retain your data for an additional 36 months.
- data used for commercial communications: the data will be retained for up to 24 months from your express consent.
- data provided for statistical research, opinion polls and market research: the data will be retained for the time necessary to fulfil the purpose for which it was collected and, where express consent has been requested, for up to 24 months.
- data provided to fulfil specific obligations established by law or by provisions issued by authorities and/or other entities authorised by law: the data will be retained for the time necessary to fulfil the purpose for which they were collected.
Withdrawal of consent, data access, and other rights
In relation to the processing of your personal data, you have the rights listed below, which may be exercised by submitting a written request to Zeta Service:
Art. 15 GDPR
Right of access (the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the data);
Art. 16 GDPR
Right to rectification (the right to obtain the correction, updating, and modification of data);
Art. 17 GDPR
Right to erasure or Right to be forgotten (the right to obtain the erasure of data);
Art. 18 GDPR
Right to restriction of processing (the right to obtain restriction of data processing);
Art. 20 GDPR
Right to data portability (the right to receive a copy of your personal data and, if applicable, request transfer of the same to another controller);
Art. 21 GDPR
Right to object to data processing;
Art. 22 GDPR Right not to be subjected to automated decision-making, including profiling, i.e. a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you;
Art. 15 letter(f)
Right to lodge a complaint against a supervisory activity: in Italy, the complaint may be lodged with the Italian Data Protection Authority. Further information on the complaint submission procedures is available on the website of the Data Protection Authority, at http://www.garanteprivacy.it.
To exercise your rights, you can contact Zeta Service by sending an e-mail to: Privacy@zetaservice.com. Please include the reason for your request and your contact information.
Pursuant to Art. 12 of the GDPR, Zeta Service will respond to the request promptly, and in any case within one month.
Security measures
We protect your personal data with specific technical and organisational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. Specifically, we use security measures that guarantee: the pseudonymisation or encryption of your data; the confidentiality, integrity, and availability of your data, as well as the resilience of the systems and services that process them, and the ability to restore data in the event of a data breach. Furthermore, Zeta Service and Lumina are committed to regularly testing, verifying, and evaluating the effectiveness of technical and organisational measures to ensure continuous improvement in the security of processing.
Changes to this Policy
The constant evolution of our services may lead to changes in the processing of your personal data as described above. Consequently, this privacy policy may be subject to changes and additions over time, which may also be necessary due to new regulatory changes regarding personal data protection.
We therefore invite you to periodically review its contents: where possible, we will try to promptly inform you of any changes made and their consequences.
The updated version of the privacy policy will be published on this page, indicating the date of its last update.
Last amendment: 22/07/2025