PRIVACY STATEMENT – PERSONAL DATA PROCESSING AND PROTECTION OUR WEBSITE PRIVACY POLICY
Pursuant to arts. 13 and 14 of EU Regulation 2016/679 (General Data Protection Regulation – GDPR)
and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018
Dear Candidate,
The European Regulation 2016/679, applicable in all Member States, recognizes the protection of their personal data that are subject to treatment by third parties to each data subject, as a sign of respect for human dignity and fundamental human rights and freedom.
Based on the provisions of the aforementioned Regulation, we wish to inform you that the processing of your data will be carried out in full compliance with the principles of lawfulness, fairness and transparency and protection of the confidentiality of your data in compliance with the provisions of said regulation.
We also highlight that in order for us to assess your application for job positions at our company, we currently need or will need to acquire your personal data, without the need for your further consent, implicitly in the stipulation of the contract/agreement entered into between the parties.
Therefore, according to the provisions of the applicable European Regulation and Member State law, we provide you with the following information.
- Applied legal basis, purposes of the processing
The purposes of the processing for which your data are intended are linked to the fulfilment of the pre-contractual relationship associated with your application for job positions, for the fulfilment of rules and legal obligations to which the Data Controller is subject and for the pursuit of the legitimate interests of the Data Controller or third parties, if previously authorised. Any processing of your personal data for purposes other than those specified herein shall be subject to specific and independent disclosure and specific consent, which is not binding for the execution of the contract in question.
- Method of processing
The data concerning you will be processed and stored using computerized media and tools and/or in printed form, so as to allow you access to your personal data in our possession, according to the most suitable methods to guarantee its completeness, updating, security and confidentiality, including the protection from unauthorised and/or unlawful processing, loss, destruction or accidental damage. Subject to communications carried out in compliance with legal obligations, the data may be disclosed to third parties who perform specific tasks on behalf of the undersigned person against explicit commitment to the protection of your personal data in accordance with the provisions of this privacy statement and the rules regarding the Data Processor pursuant to arts. 28 et seq. of EU Regulation 679/2016, as well as the applicable legal provisions.
- Data retention period
The data concerning you will be retained for a maximum period of 2 years, subject to the possibility of obtaining the candidate’s consent to extend the date retention time.
- Data Controller
The data controller is Cy. Pag. S.r.l., based at 13 Via del Commercio, 23017 Morbegno (SO).
External data processors may be appointed upon the assignment by the Data Controller of external tasks, the execution of which requires the disclosure of your data, from among those who provide sufficient guarantees to put in place suitable technical and organisational measures to meet the regulation requirements and guarantee the protection of the rights of data subject, after the Data Controller has signed a specific contract/addendum to the professional assignment containing data processing requirements and specifications.
- Rights of the data subject
You may exercise all the rights envisaged by the European Regulation and Member State law, namely arts. 13, 14, 15 to 22 and 34 of said regulation and decrees, at any time on written request, in particular:
- the right of free access to the personal data and/or obtain a copy of the personal data undergoing processing, with the indication of all the aspects relevant to the processing envisaged by the GDPR;
- b) the right to obtain, free of charge, the updating, the rectification of inaccurate personal data concerning you, the restriction of processing or the addition of supplementary data, as required;
- c) the right to object, in whole or in part, to the processing of personal data concerning you even if pertinent to the purposes of collection for legitimate reasons or to withdraw, in whole or in part, your consent, whenever necessary.
- d) the right to partial or total erasure of your data, including the right to be forgotten.
- e) the right to lodge a complaint with a supervisory authority (in Italy, the Guarantor for personal data protection) or judicial authorities where the conditions exist.
The complete list of the rights of the data subject can be consulted on the Guarantor’s website or it is available at the Data Controller’s Head Office and can be sent via email, upon written request.
