INFORMATION ON THE PROTECTION OF PERSONAL DATA FOR CANDIDATES
-Legislative Decree no. 196 of 30 June 2003, amended by Legislative Decree no. 101 of 10 August 2018, Code for the protection of personal data (hereinafter the "Privacy Code");
-EU Regulation no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of personal data (hereinafter the "Privacy Regulation").
We wish to inform you that, following the sending of your curriculum vitae, in order to verify the possibility of transforming your application into an employment relationship, the writer collects and processes your personal data (as "Interested") and possibly personal data of your family members, which will be processed in accordance with current legislation on the processing of personal data.
Article 4 of the Privacy Policy defines personal data as follows: "any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, with particular reference to an identifier such as name, an identification number, location data, an online identifier or one or more elements characteristic of his physical, physiological, genetic, mental, economic, cultural or social identity".
Article 9 of the Privacy Regulation defines "special categories of data", i.e. those that reveal, for example, racial or ethnic origin, membership of a political party or the ownership of elected public offices, religious or philosophical beliefs, membership of a trade union, data relating to life or sexual orientation, or data suitable for detecting, for example, a general state of health (absence due to illness, maternity, accident or compulsory starting up) suitability or otherwise for certain tasks.
Processing of personal data means the performance of "any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction.
In particular, it should be noted that, with reference to the selection process, the undersigned may, with your express consent, process particular categories of data in so far as they are suitable for detecting, for example, a general state of health or specific conditions:
a) as necessary to detect the possibility of the interested party to be hired as a member of protected categories;
b) in so far as they are useful for taking into consideration the application in relation to specific tasks, it being understood that the actual assessment of suitability will be carried out subsequently, in the event of recruitment, in compliance with the applicable rules.
Subject to your specific consent and always with reference to the selection process, we may also acquire and manage, among your personal data, one or more photographic images to be attached to the information taken during the interview in order to select personnel. These images may be used for the purpose of better identification of the candidate and for their inclusion in the candidate management program (if any).
1. Owner, Data Processors and Data Protection Manager.
The holder of the personal data processing is Rainbow S.p.A. with registered office in Via Brecce snc, 60025, Loreto (An), hereinafter the "Owner". The updated list of data processors, where designated, can be provided at the request of the interested party. The contact data of the Data Protection Officer (pursuant to art. 37 of the Privacy Regulation) will be communicated if appointed, also by updating this web information.
2. Purpose and methods of treatment.
The personal data of the interested party are processed, as part of the normal activity of personnel selection of the Owner, to verify the possibility of transforming your application into an effective employment relationship.
In relation to this purpose, the processing of personal data is carried out by persons specifically authorized and instructed to process pursuant to Article 2-quaterdecies of the Privacy Code and Articles. 28 and 29 of the Privacy Regulation, as well as through external parties (for example, recruitment companies, external consultants for the processing of payroll and social security data, etc.).In any case, the processing will be carried out by manual, computer and telematic means, with logic strictly related to the purposes and in any case in such a way as to ensure the confidentiality and security of personal data and in full and absolute compliance with current legislation on the subject. Your data will be processed in Italy and, in any case, within the EU.
3. Compulsory or optional nature of data provision, consequences of any refusal and legal basis of treatment.
With reference to the purposes described above, the provision of personal data is mandatory, as in its absence there could be no possibility of establishing a working relationship with the person concerned. The legal basis of the treatment is, therefore, the verification of the possibility of establishing a working relationship of which the interested party is a party and at the request of the same (pursuant to art. 6, paragraph 1, letter. b) of the Privacy Policy).
With reference to the processing of particular categories of data, as suitable to detect, for example, a general state of health or specific conditions (eg. physical problems, allergies, membership of protected categories and degree of disability), the legal basis of the processing is your explicit consent, pursuant to art. 9, paragraph 1, letter a) of the Privacy Regulation.
With reference to the processing of your personal data, including the acquisition and management of one or more photographic images to be attached to the information obtained during the interview, in order to select personnel, the provision is optional and the failure to provide and the failure to provide consent does not determine the inability to participate in selection procedures: the legal basis of the processing is, therefore, your consent (pursuant to art. 6, paragraph 1, letter. a) of the Privacy Policy).
4. To whom and in what context we may transmit the personal data of the interested party.
In relation to the purposes of the processing indicated above, and within the limits strictly pertinent to the same, your personal data will be or may be communicated, in Italy, or otherwise within the EU:
(i) to all persons for any reason involved in recruiting activities aimed at entering into an employment relationship, appointed and instructed in writing in accordance with the law by the Owner according to the procedures provided by the company's job descriptions;
(ii) external consultants called upon to carry out the aforesaid activity, if not designated in writing as Data Processors.
The subjects indicated above, to whom your personal data will or may be communicated (as they are not designated in writing as data processors), will process personal data as data controllers under the current legislation, in full autonomy, being unrelated to the processing performed by the owner. A detailed and constantly updated list of these subjects, with the indication of their respective locations, is always available at the headquarters of the Owner. Your personal data will not be disclosed.
5. The rights of the interested party.
Articles. 15 et seq. of the Privacy Policy give the interested party the right to obtain, in the manner and within the limits established by Article. 2-undecies of the Privacy Code and Article. 12 of the Privacy Policy:
-
the confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form;
-
the indication of the origin of the personal data, the purposes and methods of processing, the logic applied in case of processing with the help of electronic means, the identity of the owner;
-
updating, rectification, integration, cancellation, transformation into anonymous form or blocking of data processed unlawfully - including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed -, certification that these operations have been brought to the attention, including as regards their content, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate to the protected right.
The interested party also has the right:
-
to revoke at any time the consent (if given) to the processing of personal data (without prejudice to the lawfulness of the processing based on the consent given before the revocation);
-
to oppose, in whole or in part, for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of collection;
-
to oppose, in whole or in part, the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication;
-
to make a complaint to the Local Authority for the protection of personal data in the cases provided for in the Privacy Regulation, by contacting directly the Italian Data Protection Authority - Web site www.gpdp.it - www.garanteprivacy.it E-mail: [email protected] Fax: (+39) 06.69677.3785 Switchboard: (+39) 06.69677.1
the portability of personal data within the limits of art. 20 of the Privacy Policy.
For a detailed and constantly updated list of the subjects to whom the personal data of the interested party may be communicated and to exercise the rights referred to in Articles 15 et seq. of the Privacy Regulations, the same may contact the Data Controller by simple written request or by email at [email protected]
6. Security measures.
Each treatment takes place through the adoption of appropriate technical and organizational measures to ensure a level of security adequate to the risk in accordance with the procedures set forth in Articles. 5 et seq. and 32 et seq. of the Regulation, as well as the relevant provisions of the Privacy Guarantor.
In this regard, we confirm, among other things, the adoption of appropriate security measures to prevent unauthorized access, theft, disclosure, modification or unauthorized destruction of data.
7. Duration of treatment
In accordance with art. 5 letter e) of the Regulation, the personal data being processed will be kept for the time strictly necessary in relation to the purposes referred to above and, in any case, for a period not exceeding 24 months.
