use ufirst!


Privacy Policy to the Visitors of the website www.corporate.ufirst.com


U-First S.r.l., whose registered office is located in Via Giovanni Amendola no. 46, 00185 Rome (Italy), registered in the Companies’ Register of Rome, with registration number and VAT number 12753241004, R.E.A. n° RM-1397673, with a share capital of Euro 180,000.00 fully paid-in, travel and tourism agency license no. GR327984 released by Regione Lazio (hereinafter, “U-First”) provides the present privacy policy, pursuant to article 13 of the Legislative Decree no. 196/2003 (the “Privacy Code”) and article 13 of the EU Regulation 2016/679 (the “Regulation”), as data controller of the personal data of the visitors of the website www.corporate.ufirst.com (hereinafter, the “Website”).


  1. Type of personal data and purposes of the processing

Browsing Data

The IT systems and software procedures, that have been set up to operate this Website, collect personal data as part of their ordinary functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects; however, in consideration of its nature, such information might allow the identification of the Visitors, through processing and matching with data held by third parties. This category of data includes IP addresses and/or the domain names of the computers used by the Visitors connecting with this Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the Visitor’s operating system and computer environment. These data are only used to obtain anonymous statistical information on Website use as well as to check its functioning; they are erased immediately after being processed. The data might be used to assess liability in case computer crimes are committed against the Website. U-First will process the browsing data for the purpose of its legitimate interest in order to ensure the Website’s security, to check its functioning and to obtain statistical information (Section 6, paragraph 1, letter f) of the Regulation).

Data supplied by the Visitors on a voluntary basis

The voluntary, explicit and optional sending of e-mail messages to the addresses indicated on this Website, as well as in the contact forms (i.e. the “Contact Us” form), implies the collection of the sender’s address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s) (Section 6, paragraph 1, letter b) of the Regulation).

Save as specified for the browsing data, the Visitor does not have an obligation to provide the data requested in the contacts forms on the Website. However, failure to provide such data may result in the impossibility to obtain what has been requested.


  1. Other processing purposes: newsletter

Subject to the Visitor’s consent, U-First will process the personal data for purpose of sending newsletters, which consist of commercial communications and news on U-First’s services and promotions sent by email (Section 6, paragraph 1, letter a) of the Regulation). The Visitor may opt-out at any time from receiving further newsletters from U-First, by clicking the unsubscribe link which will be present in any newsletter the Visitor will receive or by contacting U-First as indicated below.


  1. Processing means

Personal data are processed with electronic and non-electronic means, duly considering the relevant processing purposes, and in any case by ensuring the security and the confidentially of the data. The data will be processed and stored for the time necessary to pursue the purposes referred to in the previous paragraphs and in any case until the revocation of consent to the processing by the Visitor.


  1. Persons to whom the data may be communicated and data dissemination

U-First’s employees or collaborators entitled to manage the Website and reply to the Visitors’ requests or send the promotional communications may have access to the Visitors’ personal data. Such individuals, who have been formally appointed by U-First as persons in charge of the processing, will process the Visitors’ personal data exclusively for the purposes indicated in this policy and in accordance with the provisions of the Privacy Code and the Regulation.

Furthermore, third parties appointed by U-First as external data processors, such as, by way of example, IT and logistic service providers for the operation of the Website, outsourcing and cloud computing service providers, professionals and advisors, marketing companies sending marketing communications, which process the Visitors’ personal data on behalf of U-First, may have access to the Visitors’ personal data.

The Visitors’ personal data will not be communicated to third-party data controllers nor disseminated.


  1. Cookies

The so called “cookies” are used on the Website. Please read our Cookie Policy.


  1. Data subjects’ rights

The Visitors, free of charge and without any formality, will be able to exercise the following rights set forth in Sections from 15 to 22 of the Regulation: the right of access to their personal data (i.e. the right to obtain from the Company confirmation as to whether or not personal  data concerning them are being processed, and, where that is the case, access to the personal data and the information set forth in Section 15 of the Regulation); the rights to rectification (i.e. the right to obtain from the Company the rectification of inaccurate personal data or the right to have incompleted personal data completed); the right to erasure (i.e. the right to obtain from the Company the erasure of personal data concerning them where one of the grounds indicated in Section 17 of the Regulation applies); the right to restriction of processing where one of the grounds indicated in Section 18 applies; the right to data portability (i.e. the right to receive personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance). The Visitors also have the right to withdraw their consent at any time. The consent withdrawal will not affect the validity of the processing based on their consent before the withdrawal. The Users have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Section 6, paragraph 1, letter e) or f) of the Regulation, including profiling based on these provisions. The above-mentioned rights can be exercised by contacting U-First by (i) registered mail to the address “Via Giovanni Amendola n. 46, 00185 Rome (Italy)” and/or a fax to the number +39 06 87811673, (ii) email to the email address support@ufirst.com or (iii) lodging a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).




Privacy Policy to the Applicants

(Privacy Policy pursuant to articles 13 and 14 of Regulation (EU) 2016/679 – General Data Protection Regulation)


We would like to inform you that the EU Regulation 2016/679 (hereinafter, the “Regulation”) and the related Italian legislation set out rules concerning the protection of individuals with regard to the processing of personal data, by protecting their rights and fundamental freedoms, and in particular the right to the protection of personal data. Pursuant to articles 13 and 14 of the Regulation, we hereby inform you of the methods and purposes with which U-First S.r.l., with registered office in Via Giovanni Amendola 46, 00185 Rome (Italy), C.F. and VAT number 12753241004, registered in the Companies’ Register of Rome, REA number RM-1397673, as data controller, will process your personal data. Please, read this privacy policy carefully before providing us with any personal data concerning you or, if requested, before consenting to its processing. Please note that this privacy policy concerns the processing of personal data of candidates applying for a position with us.

All Data Subjects are requested not to send to the Company any curriculum or other document containing sensitive data (that is data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as personal data concerning health or data concerning a natural person’s sex life or sexual orientation).



  1. How my personal data were obtained?

We collect your personal data directly from you when you spontaneously send us a curriculum vitae, when you apply to one of our job advertisements or when you hold a job interview with us. In some cases, we may obtain your personal data (personal details, contact details, data relating to education and professional experience, sensitive data concerning health if you belong to a protected category, other data typically contained in curriculum vitae) from recruiting companies, to which you have given your consent to share your data with us. Finally, we may obtain some of your personal data from public lists and registers and professional registers, for example in the case where we have to check the professional competences and qualifications that you have declared.


  1. For what purposes of the processing will my personal data be processed?

We will process your personal data for the following processing purposes:

- To pursue our legitimate interest for the selection of our employees (Article 6., paragraph 1, letter f) of the Regulation)

We will process your personal data to pursue our legitimate interest in selecting and recruiting workers who have a professional profile suited to our needs and consistent with the job position indicated in the application.

- To fulfil legal obligations (Article 6, paragraph 1, letter c) of the Regulation)

If you belong to a protected category, we will process your personal data concerning your health in order to comply with legal obligations in this regard. Moreover, only in the cases expressly provided for by law and where necessary in relation to the position for which you have applied, we will process your personal data, including judicial ones, for the verification of subjective requirements and debarring assumptions.


  1. Is the provision of data mandatory or optional?

The provision of personal data is optional but necessary, as in case of failure to provide the said data, it will not be possible to apply for a job position with us.


  1. How will my personal data be processed and how long will they be stored?

Your personal data will be processed using automated and non-automated tools. Specific security measures are put in place to prevent data loss, illicit or incorrect use and unauthorized access.

Your data will be stored in our records for a maximum period of one year.


  1. Who might have knowledge of my personal data?

Our employees and collaborators who are responsible for the selection of personnel can learn about your personal data. Furthermore, the following categories of subjects who, as data processor, provide us with services that are instrumental to the performance of our business, might have knowledge of your personal data: IT service providers; providers of management services; administrative service providers; external professionals and consultants; companies of our corporate group.


  1. Will my personal data be disclosed to third parties?

Your personal data will not be disclosed or communicated to third parties who are independent data controllers nor disseminated.


  1. Will my Personal data be transferred outside the European Economic Area?

No, your personal data will not be transferred outside the European Economic Area.


  1. What are my rights?

You have the right to exercise at any time, free of charge and without formalities the following rights as per articles from 15 to 22 of the Regulation: the right to request access to personal data (or the right to obtain from us the confirmation that data concerning you are being processed and, if so, to obtain the access to personal data, obtaining a copy them of, and the information referred to in Article 15 of the Regulation) and correction (i.e. the right to obtain the correction of inaccurate data concerning you or the integration of incomplete data) or the deletion of the same (meaning the right to obtain the erasure of data concerning you, in the events indicated in Article 17 of the Regulation) or the limitation of the processing related to you (meaning the right to obtain, in the cases indicated in art. 18 of the Regulation, the marking of data retained with the aim of limiting their processing in the future), in addition to the right to data portability (i.e. the right, in the cases indicated in Article 20 of the Regulation, to receive from us, in a structured, commonly used and machine readable format the data concerning you, and to transmit it to another data controller without impediments). You also have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before revocation. We remind you that you always have the possibility to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) or to the different Supervisory Authority of the Member State of the European Union in which you reside or work.


  1. Does the Regulation also provide me with the right to object to the processing?

Yes, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, based on point (e) or (f) of Article 6(1), including profiling based on those provisions.


  1. How can I contact you and exercise my rights?

Requests to exercise your rights, as indicated above, may be submitted via registered mail to the U-First’s address (Via Giovanni Amendola 46, 00185 Rome – Italy), via fax +39 06 87811673 or via e-mail to the address support@ufirst.com.