top of page




We inform users (hereinafter "data subjects", ex. Art. 4, par.1 of the GDPR) of the following general profiles, valid for all areas of processing:

the “Data Controller” is the undersigned Company:



Via Monte Napoleone, 8

20121 Milano



The Data Controller has appointed a Data Protection Officer (DPO) to whom it is possible to apply to exercise all the rights provided for by the Arts. 15 to 21 of the GDPR: right of access, rectification, cancellation, limitation, portability, opposition, and revoking a previously agreed consent; in the event of a failure to comply with their requests, the data subjects may submit a complaint to the Supervisory Authority for the protection of personal data (pursuant to Art. 13, paragraph 2, letter d of the GDPR).

all data are processed in a lawful, correct, and transparent manner in relation to the Data Subject, in compliance with the general principles established in Art. 5 of the GDPR;

in order to prevent data loss, abuse, or incorrect use of data and unauthorized access, specific security

measures have been implemented.




2.1 Navigation data

During their normal operation, computer systems and software procedures used to operate this Website acquire some personal data the transmission of which is implicit in the use of internet communication protocols. This information is not collected with the intent of associating it with identified users but, by its nature, could lead to the identification of users through processing and association with data held by third parties. This data category includes IP addresses, or domain names, of the computers used by users to connect to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, time of the request, the method used to submit the request to the server, size of the file obtained in response, numerical code indicating the server response status (successful, error, etc.), and other parameters pertaining to the user's operating system, and IT environment.

Purpose and legal basis of the processing

(GDPR, Art.13, paragraph 1, letter c) This data is solely used to compile anonymous statistics on the use of the Website and to verify its correct operation. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the Website (legitimate interests of the Data Controller).

Scope of communication

(GDPR Art.13, paragraph 1, letter e, f) The data are processed exclusively by internal personnel, duly authorized and instructed to the processing (GDPR Art. 29), and will not be communicated to external parties, disseminated or transferred to non-EU countries. Only in the case of an investigation, they shall be made available to the competent authorities.

Data retention period

(GDPR, Art.13, paragraph 2, letter a) The data are normally kept for short periods of time, except for any extensions related to investigation activities.


(GDPR, Art.13, paragraph 2, letter f) The data are optionally provided by the data subject.


2.2 Spontaneous applications

Purpose and legal basis of the processing

(GDPR, Art.13, paragraph 1, letter c) The personal data is sent by the data subject by sending the curriculum vitae or filling in the appropriate fields. The data are processed with the consent of the data subject and in any case for preventive activities for the formalization of a possible employment contract and related legal obligations.

Scope of communication

(GDPR, Art.13, paragraph 1, letter e, f) The data are processed exclusively by internal personnel employed in the Human Resources Office, duly authorized and instructed to the processing (GDPR Art. 29), and will not be communicated to external parties, disseminated, or transferred to non-EU countries.

Data retention period

(GDPR-Art.13, paragraph 2, letter a) The data shall be kept for two years


(GDPR-Art. 13, paragraph 2, letter f) The provision of personal data is optional, however, the failure to provide data and consent to the processing may result in the impossibility to make a correct assessment of the position for the purpose of the selection itself and consequently the impossibility for the company to manage the application


2.3 Contacts

The optional, explicit, and voluntary sending of e-mail and/or ordinary mail to the addresses indicated in the "Contacts" section and however, present within this Website entails the subsequent acquisition of the sender's address, which is necessary to reply to requests as well as any other personal information contained in the communication itself.



Please consult the Cookie and Advertising Management section of the Website for more information about cookies generally and how to turn cookies on and off.



Although our Website does not have in any section content, which cannot be viewed by minors, we would like to point out that in compiling the "request form placed on the "CONTACT US" page, no personal data should be entered by minors without the prior consent of the parents or guardians. JENIA HAIR. encourages all parents and guardians to educate children about the use of their personal data on the Internet in a safe and responsible manner. JENIA HAIR. undertakes not to retain or consciously use any personal data entered in the form by minors for any purpose, including disclosure to third parties.



JENIA HAIR. informs that, pursuant to Art. 13 of the GDPR the personal data contained in the Curriculum Vitae voluntarily sent to, maybe the subject to processing provided by law (consisting in the collection, storage, selection, comparison, cancellation, and destruction) in the context of research and selection activities for personnel, exclusively for the purpose of evaluating the profile, aptitudes and professional skills. The provision of data is aimed at examining the application for possible recruitment.


Policy updated on 13/07/2021. This update is carried out within a policy of constant review of the information.

bottom of page