Privacy policy

2. Data we process

• Contact and company data submitted through quotation and trade-show forms.
• Account, identification, professional profile, availability, CV, photographs and application data supplied by registered resources.
• Client, assignment and operational information managed in the private staff area.
• Ratings and optional written feedback provided by authorised staff or clients after an assignment.
• Technical and security information such as IP address, timestamps, browser data and authentication logs.

3. Purposes and legal bases

• Replying to enquiries and preparing quotations: steps requested before entering into a contract.
• Creating and managing profiles, applications and assignments: performance of a contract or pre-contractual measures.
• Operational communications and service quality management: contract performance and legitimate interest in organising and improving the service.
• Legal, accounting and fraud-prevention obligations: compliance with law and legitimate interest in protecting rights and systems.
• Analytics: consent, which can be refused or withdrawn at any time through cookie settings.

4. Required and optional information

Fields marked as required are necessary to handle the request or provide the selected service. Optional information and written reviews may be omitted without affecting other functions.

5. Recipients and service providers

Data may be processed by authorised staff and by suppliers providing hosting, database, authentication, storage, email, security and technical support. Assignment information may be shared with the relevant client only when necessary for selection and delivery. Client identities, commercial terms, internal notes and ratings are not made public and are not visible to other resources.

6. International transfers

Where a provider processes data outside the European Economic Area, the controller uses an adequacy decision, Standard Contractual Clauses or another safeguard permitted by applicable law.

7. Retention

• Quotation and contact requests: normally up to 24 months after the last meaningful interaction, unless a longer period is required for a contract or legal claim.
• Resource profiles that do not lead to an active relationship: normally up to 24 months after the last activity or consent renewal.
• Assignment, accounting and contractual records: for the period required by tax, employment and civil-law obligations.
• Security logs: normally up to 12 months, unless needed to investigate an incident.

8. Automated tools

Technical tools may assist CV extraction, photo-quality checks and profile matching. They do not make final hiring decisions: authorised staff review the information and retain decision-making responsibility. Photo checks concern only technical image quality and must not assess beauty, ethnicity, age or suitability for work.

9. Your rights

You may request access, rectification, erasure, restriction, portability and objection where applicable, and withdraw consent without affecting earlier processing. You may also complain to the competent data-protection authority.

To exercise your rights: info@hostessperfiere.it.

10. Security and updates

Access controls, private storage, signed links, database policies and organisational measures are used to reduce unauthorised access. This policy may be updated when services, suppliers or legal requirements change.