PRIVACY POLICY
pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 on the processing of personal data (GDPR)
In compliance with Articles 13 and 14 of Regulation (EU) 2016/679 on the processing of personal data, we hereby provide you, as data subjects, with the necessary information regarding the purposes and methods for processing your personal data, as well as the scope of communication and dissemination thereof.
- Processing purposes
The processing of personal data, whether sensitive of otherwise, voluntarily provided by sending your CV, is aimed solely at managing our collaborator selection procedures. - Data processing methods
Pursuant to Article 5 of Regulation (EU) 2016/679 on the processing of personal data (hereinafter also referred to simply as the ‘GDPR’), personal data subject to processing is the data stated in your CV (e.g. personal data, contact details, information on your education, etc.). Moreover, we may also process data on your references (only with your specific consent). Finally, the Data Controller may process ‘special categories of personal data’, as specified in Article 9 of the GDPR, if your CV or any other documentation provided should contain information regarding your state of health or your membership in so-called protected classes. Such data will be processed lawfully and fairly, will not be excessive in relation to the purposes set forth in point no. 1, and – if a collaboration relationship is not established – will be stored for 12 months from its receipt, unless it is anonymised and in any case without prejudice to any specific legal obligations. If consent is revoked, the data will be deleted within 3 months of the request, without prejudice to any specific legal obligations on the storage of accounting and administrative records.Processing is carried out by means of the operations or set of operations set forth in Article 4, par. 2 of the GDPR and more precisely: the collection, recording, organisation, storage, consultation, elaboration, alteration, selection, retrieval, comparison, use, interconnection, blocking, communication, dissemination, erasure or destruction of data, even if not recorded in a database.
The operations may be carried out with or without the aid of electronic or otherwise automated tools, based on logic that is fully in line with the purposes pursued.
Data is processed by the Data Controller and/or duly authorised Data-Processing Operators, as well as by Data Processors duly appointed pursuant to Article 28 of the GDPR. The full list of Data Processors is available on request from the Data Controller.
- Nature of data provision – Refusal to provide data
The legal basis for processing data for the purposes set forth in point no. 1 above is the performance of a contract (Article 6, par. 1, letter (b) of the GDPR). As a result, the provision of specific, explicit consent by the data subject is not required. The legal basis for processing ‘special categories of personal data’ is carrying out the Data Controller’s obligations in the field of employment (pursuant to Article 9, para. 2, letter (b) of the GDPR and Article 2 sexies of Italian Legislative Decree 196/2003). The legal basis for processing data on references is consent (Article 6, par. 1, letter (a) of the GDPR).
The provision of personal data, although optional, is strictly necessary to perform the above activities. The data subject’s refusal to provide said personal data makes it impossible to proceed with the assessment of their profile. - Scope of data communication
Your data, forming the subject of the processing, may be communicated to: external collaborators, consultants (tax or otherwise), accountants and, in general, to all those subjects to whom the communication is necessary for the correct fulfilment of the purposes set forth in point no. 1 (for example, the Financial Administration, the National Institute for Social Security-INPS, the National Institute for Insurance against Accidents at Work-INAIL, companies, non-profit social assistance organisations known as ‘patronati’, public or private social security bodies and institutions, insurance companies, credit institutions). Data-Processing Operators and Data Processors will only process the data if this is necessary for the performance of their assigned tasks.All this without prejudice to the guarantee of protection of the data subject’s rights.
- Scope of data dissemination
Personal data is not subject to dissemination. - Data transfer abroad
Personal data may be transferred to countries within the European Union within the scope of the purposes set forth in point no. 1, if said transfer is functional to the provision of the services offered by the Data Controller. Moreover, in the event of transferring data to third countries, for example due to the use of cloud platforms and/or to the storage of data, said data will be processed in accordance with the provisions of Article 44 et seq. of the GDPR. - Rights of the Data Subject
Pursuant to Articles 15, 16 and 17 of the GDPR, you can assert your rights by contacting the Data Controller.In particular, under Article 15 of the GDPR, you can obtain from the Data Controller:
- confirmation of the existence or otherwise of your personal data and its provision in intelligible form;
- information on the origin of the data;
- information on the purposes and methods of processing;
- information on the logic applied to the processing;
- information on the identification details of the Controller and of the persons to whom the data may be communicated;
- updating, rectification and integration of data;
- erasure, transformation into anonymous form or blocking of data processed in breach of the law.
The data subject may object, on legitimate grounds, to the processing of data concerning them, even if pertinent to the purpose of collection, and is also entitled to obtain data portability under Article 20 of the GDPR.
In order to exercise the aforementioned rights, you may contact the Data Controller by e-mail at the following address.
8. Data Controller
The Data Controller is Aglatech14 S.r.l. (Tax ID No. 08699190966), in the person of its legal representative pro tempore, with registered office in Milan (20123 – MI), Via Carducci 26, e-mail: privacy@aglatech14.it