Information notice pursuant to art. 13 Reg. UE 2016/679- GDPR
Information for data processing collected from the data subject
In compliance with art. 13 of the European Regulation n.679/2016 (EU General Data Protection Regulation) we provide you with information regarding the processing of personal data provided by applying for a position at our company and during the interview carried out for the purposes of the same.
Who’s Data Controller? How to contact him?
Data controller, pursuant the art. 4 and 24 of the Reg. EU 2016/679 is Dell’Orto Spa, with registered office in Seregno (MB) via R. Sanzio, 2 – 20831, Italy and operational headquarters in Cabiate (CO) via Kennedy, 7 – 22060, Italy as represented by the pro tempore legal representative.
To contact the Data Controller, write to: email@example.com telephone: 031 7692111.
Why does Dell’Orto process your data?
|Purposes of processing||Legal basis|
|a) Personnel selection, carrying out the research and selection of personnel for the purpose of establishing an employment relationship, even for any positions other than those for which the interested party spontaneously applied;
Retention of personal data also for future selections;
Management of applications in response to job vacancies posted on our website.
|Legal basis of the processing is art. 6 par. 1 letter b) – Execution of pre-contractual measures
|b) Obtain references by contacting the third parties mentioned in the CV.
|Legal basis of the processing is art. 6 par. 1 lett. f) – Legitimate interest of the Data Controller.
The owner, in the face of previous experience, reserves the right to receive references on the candidate from, for example, former employers, if there are not already letters of reference. The information collected will not be stored following the closure of the application cycle.
To whom will the personal data collected be disclosed?
Personal data provided by you may be communicated to recipients, which shall process your data as processors (art. 28 of Reg. EU 2016/679) or persons acting under the authority of the Controller and the Processor (art. 29 del Reg. UE 2016/679), in order to perform agreements or related purposes.
Precisely, your data may be communicated to:
– Subjects providing services for the management of the information system;
– studies or companies in the context of assistance and consultancy relationships and communication networks (including e-mail);
– any third parties and labor consultants and companies for the purposes of personnel selection, in the context of assistance and consultancy relationships;
– competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request
Some of the aforementioned subjects operate in total autonomy as separate Data Controllers (for example the competent authorities).
The list of designated data Processors is constantly updated and available at the offices of Cabiate (CO) via Kennedy, 7 – 22060.
Does Dell’Orto Spa transfer personal data outside EU?
Personal data will not be transferred outside the European Union.
How long is data kept for?
The processing will be carried out in an automated and / or manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically trained for this.
With respect to the law art. 5 par. 1 lett. e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
The CVs collected for the purpose of selecting personnel will be kept for a maximum of 24 months from the last update.
Information received through references will not be retained following the closure of the application cycle.
Is the provision of data mandatory? Or is it necessary? Or is it optional?
The provision of personal data is necessary in order to proceed with the application and the selection of personnel. Failure to provide for example the provision of the CV, will make it impossible to acquire the information necessary for the purposes of your application.
What are your rights? How can you exercise them?
You may exercise your rights pursuant to articles 15 and ff. of GDPR, by contacting the Data Controller, by writing to firstname.lastname@example.org. You have the right, at any time, to request the data Controller to access, rectify, cancel your personal data or limit them. You have the right to withdraw the consent given at any time.
In the cases provided for, you have the right to the portability of your personal data and in this case the Data Controller will provide you with your personal data in a structured format, commonly used and readable by an automatic device. In the event that you believe that the processing of personal data carried out by the owner is in violation of the provisions of Regulation (EU) 2016/679, you have the right to lodge a complaint with the Supervisory Authority – Italian Guarantor (https: // www. garanteprivacy.it/), or to take appropriate judicial offices. You can object to data processing based on legitimate interest at any time. In the cases provided for, you have the right to the portability of your personal data and in this case the Data Controller will provide you with your personal data in a structured format, commonly used and readable by an automatic device. In the event that you believe that the processing of personal data carried out by the owner is in violation of the provisions of Regulation (EU) 2016/679, you have the right to lodge a complaint with the Supervisory Authority – Italian Guarantor (https: // www. garanteprivacy.it/), or to take appropriate judicial offices. You can object to data processing based on legitimate interest at any time.
Updated: March 10, 2021