pursuant to Articles 13 and 14 of Regulation (EU) 2016/679
Dear Applicant,
As the data subject, i.e. the individual to whom the personal data you have provided and detailed below (hereinafter referred to as “Personal Data”) refer, Fassa S.r.l., with registered office at Via Lazzaris 3 – 31027 Spresiano (TV), Tax Code and VAT Number 02015890268, in its capacity as data controller (hereinafter referred to as the “Company” or the “Controller”), hereby informs you of the following, pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”).
1. PERSONAL DATA THAT MAY BE COLLECTED ABOUT YOU
The Personal Data collected relate to the information contained in your Curriculum Vitae. Additionally, information may be collected from reference checks (if carried out), such as membership of any institution, academic background, employment history, and other relevant information to assess your suitability as an applicant, including by contacting any referees you may have indicated, as well as your previous employers. Furthermore, information and images may be collected from your profile on professional social networks, public databases, web registers, or publicly accessible multimedia archives, notes taken during interviews, and comments made by other parties such as referees during the selection process. Personal Data may be updated based on publicly available information and/or information collected from third parties and/or directly from you.
The Personal Data collected will not include racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or information relating to health, sexual life, or sexual orientation (hereinafter “Special Categories of Data”), unless such characteristics affect the manner in which the work activity is to be performed or constitute an essential and determining requirement for the performance of the activity. In such cases, the Company will process the Special Categories of Data within the limits set by applicable laws and by the measures issued by the Supervisory Authority (Art. 9, sub. 2, letters (b) and (f) GDPR).
Personal Data and Special Categories of Personal Data are hereinafter collectively referred to as “Data”.
The Company will process, for purposes related to the fulfilment of administrative, accounting and tax obligations connected to the personnel selection process, Data relating to your family members (such as name and surname, relationship, and date of birth provided by you, in order to verify the possible existence of kinship or affinity ties with persons holding public office), to whom this privacy notice also applies, in addition to you and insofar as relevant. It is your responsibility to communicate the contents of this notice to your family members (Art. 9, par. 2, letter (b) GDPR).
2. PURPOSES FOR WHICH YOUR PERSONAL DATA MAY BE USED
A. The collection and processing of your Data are necessary for the performance of pre-contractual measures and are carried out for purposes connected or instrumental to the Company’s personnel recruitment and selection activities.
Legal basis for processing: performance of pre-contractual measures taken at your request pursuant to Art. 6, first paragraph, letter (b) of the GDPR.
Providing your Personal Data for this purpose is mandatory; otherwise, the Company will be unable to proceed with the recruitment and selection process and consequently unable to establish any potential employment relationship with you.
B. The Company will process your Personal Data to verify the accuracy of the information you have provided. For this purpose, the Company may also process publicly available information contained in professional social network profiles, public databases, web registers, or publicly accessible multimedia archives.
Please note that such processing will be limited solely to information related to professional suitability for the job and, in any case, restricted to what is strictly necessary for the activity to be performed by the applicants.
Legal basis for processing: the legitimate interest of the Company pursuant to Art. 6, first paragraph, letter f) of the GDPR to ensure the proper conduct of the recruitment and selection process.
C. Your Data will be processed for purposes connected to obligations established by laws, regulations, or European legislation, as well as by provisions or requests from authorities legally empowered by law and/or supervisory and control bodies.
Legal basis for processing: compliance with a legal obligation to which the Company is subject pursuant to Art. 6, first paragraph, letter (c) of the GDPR. Providing such Data for this purpose is mandatory; otherwise, the Company will be unable to fulfil specific legal obligations and consequently unable to proceed with the recruitment and selection process or to establish any potential employment relationship with you.
D. Finally, your Personal Data may be processed for purposes related to the defence of rights in judicial, administrative or extrajudicial proceedings and in the context of disputes arising in relation to the Company’s recruitment and selection process.
Furthermore, your Personal Data may be processed by the Company to take legal action or make claims against you or third parties.
Legal basis for processing: the legitimate interest of the Company pursuant to Art. 6, first paragraph, letter (f) of the GDPR in order to protect its rights. In this case, no new or specific provision of data is required from you, as the Company will pursue this additional purpose, where necessary, by processing the Personal Data collected for the purposes described above, deemed compatible with this purpose.
3. HOW WE KEEP YOUR PERSONAL DATA SECURE, WHERE AND FOR HOW LONG
The processing of your Data will be based on the principles of fairness, lawfulness, and transparency, and may also be carried out using automated methods designed to store, manage, and transmit them. Processing will be conducted using tools suitable to ensure security and confidentiality, including the use of procedures aimed at preventing the risk of loss, unauthorised access, unlawful use, and dissemination.
For the performance of certain processing activities of your Personal Data, the Company may disclose such Data to companies belonging to the Fassa Group located in countries outside the European Union (EU) or the European Economic Area (EEA) (hereinafter “Third Countries”).
In particular, the Company informs you that Personal Data may be transferred to the United Kingdom, a Third Country; the lawfulness of such transfer is, in any case, guaranteed through the instruments provided for under Art. 46 of the GDPR, by virtue of the existence of an adequacy decision pursuant to Art. 45 of the GDPR issued by the European Commission.
Such external parties will process your Personal Data either as independent data controllers or as data processors duly appointed by the Company in accordance with the applicable data protection legislation (depending on the role they perform in relation to the processing).
You may contact the Controller at any time, using the contact details provided below, to request information on the recipients of your Personal Data and to receive a copy of the safeguards adopted for the transfer.
Your Data will be retained only for the period necessary for the purposes of personnel selection (for a specific position or also for potential future positions). The Company undertakes periodic reviews of the Data and the possibility of deleting them when no longer necessary for the stated purposes.
In any case, your Personal Data will be retained in the company databases for a period not exceeding 10 years from the date of acquisition by the Company, or for the duration of your employment relationship. After this retention period, the Data will be deleted or anonymised.
With specific reference to requests from authorities or the fulfilment of legal obligations, as well as for the defence of our rights in judicial proceedings, as referred to under points C) and D), the Data will be retained for the time necessary to comply with the request or to pursue the protection of our rights.
4. WHO WE CAN SHARE YOUR PERSONAL DATA WITH
Your Data may be accessed by duly authorised employees of the Company, as well as external service providers, appointed, where necessary, as data processors, who provide support for the delivery of services.
You may contact the Company using the methods set out in the “Contacts” section if you wish to request access to the list of data processors and other parties to whom we disclose your data.
5. YOUR DATA PROTECTION RIGHTS AND YOUR RIGHT TO LODGE COMPLAINTS WITH THE SUPERVISORY AUTHORITY
You have the right to obtain from the Company, subject to the existence of the legal basis behind your request:
a) access to your Data, as provided for in Art. 15 of the GDPR;
b) the rectification or integration of your Data held by us that you consider to be inaccurate, as provided for in Art. 16 of the GDPR;
c) the erasure of your Data for which the Company no longer has any legal basis for processing, as provided for in Art. 17 of the GDPR;
d) the restriction of the way we process your Data where one of the conditions set out in Art. 18 of the GDPR applies;
e) a copy of the Personal Data you provided to the Company in a structured, commonly used, and machine-readable format, and the transmission of such data to another controller (so-called portability), as provided for in Art. 20 of the GDPR.
Right to object: in addition to the aforementioned rights, you have the right to object at any time, for reasons related to your particular situation, to the processing of your Data by the Company for the purposes of its legitimate interests. Any objection request should be addressed to the following email address: data.protection@it.www.fassabortolo.it or, in paper form, by registered letter with return receipt sent to the Company’s registered office.
Should you exercise any of the aforementioned rights, it will be the Company’s responsibility to verify that you are entitled to do so, and you will generally receive a response within one month. You may exercise your rights using the contact details of the Company provided in paragraph 6 below.
If you believe that the processing of your Data violates the applicable data protection legislation, you have the right to lodge a complaint with the Italian Data Protection Authority, using the contact details available on their website www.garanteprivacy.it, or to take appropriate legal action.
6. OUR CONTACT DETAILS
The contact details of the Company, as a Data Controller, are as follows: registered office at Via Lazzaris 3 – 31027 Spresiano (TV), Tax Code and VAT Number 02015890268, Certified Email (PEC) personale@fassabortolo.telecompost.it, Email fassa@fassabortolo.com, Tel. +39 0422 7222.
