Data Protection Notice for Our Newsletter

Contents

  1. Introduction
  2. Controller and contact details
  3. Categories of data
  4. Purposes and legal bases
  5. Sources of the data
  6. Necessity of the data
  7. Automated decision-making
  8. Recipients of the data
  9. International transfers
  10. Retention period
  11. Rights of data subjects
  12. Right to lodge a complaint
  13. Changes

1. Introduction

This data protection notice informs you about how your personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) when you subscribe to and receive our HR newsletter.

2. Controller and contact details

The controller for the processing described here is:

onboard S.r.l.
Via Dr. J. Köllensperger 10/b
39011 Lana (BZ)
South Tyrol / Italy
E-mail: [email protected]

Our data protection officer (DPO) can be contacted at [email protected].

3. Categories of data

We collect the following categories of personal data for the purposes set out below:

“Contact Data”: your e-mail address.

“Identity Data”: your name, if you choose to provide it.

“Employment Data”: the company you work for, if you choose to provide it.

“Usage Data”: information on whether you have opened a newsletter or clicked on a link contained in it.

4. Purposes and legal bases

When you subscribe to the newsletter, we process your Contact Data and, where provided, your Identity Data and Employment Data in order to send you our HR newsletter by e-mail with information about our products and services. After subscribing, you will receive an e-mail containing a confirmation link. Your subscription is only completed once you have confirmed it (double opt-in).

Our newsletters contain tracking pixels and similar technologies. We use them to process your Usage Data in order to measure whether our newsletters are opened and which links are clicked, and to improve our newsletter.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future, most easily via the unsubscribe link at the end of each newsletter or by e-mail to [email protected]. You may also confine your withdrawal to the usage analysis. In that case you will continue to receive the newsletter, but without tracking pixels or click measurement. To do so, please write to [email protected].

5. Sources of the data

The personal data are collected directly from you.

6. Necessity of the data

You are under no statutory or contractual obligation to provide your personal data. However, we need your e-mail address in order to send you the newsletter. Providing your name and company is optional.

7. Automated decision-making

There is no automated decision-making within the meaning of Art. 22 GDPR.

8. Recipients of the data

If and to the extent necessary for one of the purposes set out above, service providers acting as processors on our behalf may have access to your data.

We use MailerLite, a service of MailerLite Limited, 88 Harcourt Street, Dublin 2, Ireland, to send the newsletter. MailerLite acts as our processor, stores the data in the European Union and engages affiliated companies and further processors. MailerLite’s privacy policy is available at https://www.mailerlite.com/legal/privacy-policy.

9. International transfers

In connection with the use of MailerLite, personal data may be transferred to the United States. For this purpose we have entered into the standard contractual clauses adopted by the European Commission. For further information, please contact us (see contact details under section 2).

10. Retention period

We store your personal data for as long as you are subscribed to the newsletter. After you unsubscribe, your data are removed from the mailing list. We retain proof of your consent and of your unsubscription for the duration of the limitation period for the establishment, exercise or defence of legal claims (Art. 2947 of the Italian Civil Code). We store Usage Data for six months from the date of the respective mailing.

11. Rights of data subjects

As a data subject, you have the following rights:

  1. right of access (Art. 15 GDPR);
  2. right to rectification (Art. 16 GDPR);
  3. right to erasure (“right to be forgotten”) (Art. 17 GDPR);
  4. right to restriction of processing (Art. 18 GDPR);
  5. right to data portability (Art. 20 GDPR);
  6. right to object (Art. 21 GDPR);
  7. right to withdraw your consent (Art. 7(3) GDPR), see section 4.

To exercise these rights, please contact us (see contact details under section 2).

12. Right to lodge a complaint

If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). In Italy, this is the Garante per la protezione dei dati personali (Italian Data Protection Authority, GPDP), based in Rome.

13. Changes

We may change this data protection notice at any time.

 

Last updated: 09.10.2026