INFORMATION ABOUT CURRICULUM VITAE PROCESSING AND DOCUMENTATION TRANSMITTED TO APPLY FOR A JOB AND / OR IN ANY CASE FOR JOB SEARCH IN ACCORDANCE WITH GDPR 679/2016
In compliance with the provisions of the GDPR 679/2016 we inform you, as an “interested party”, about the purpose of collection and methods of treatment with which our Company deals with the curriculum vitae and / or other documentation it receives for application and / or for job search purposes. We therefore provide you with the correct information about the processing of personal data, as specifically indicated below.
1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER (IF ANY: OF THE REPRESENTATIVE / INTERNAL MANAGER / DPO) The Data Controller is the company Epta Nord Srl with headquarters in Conselve (PD), Via Padova n. 58, VAT number 01984430288, mail: privacy@eptanord.it, pec : eptanord@legalmail.it .
2. PURPOSE OF DATA PROCESSING Given the fulfillment of the obligations established by laws, regulations and community regulations, the data collected by spontaneously sending your curriculum vitae and / or other related documentation to our Company, will be processed by us for the performance of the following activities:
- personnel selection needs.
3. LEGAL BASIS OF THE PROCESSING The legal basis of the processing is the specific consent you have given.
4. RECIPIENTS OR CATEGORIES OF ADDRESSEES OF PERSONAL DATA The personal data collected will not be disclosed and / or transferred to third parties nor they will be disseminated. The personal data may be known by the personnel expressly authorized by the Data Controller who will be able to handle the data management operations.
5. INTENTION OF THE DATA CONTROLLER TO TRANSFER PERSONAL DATA TO A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANIZATION The data controller does not intend to transfer personal data to a third country or to an international organization.
6. STORAGE OF COLLECTED PERSONAL DATA The collected data will be kept for a maximum period of 1 year, except any longer retention terms that were required by law. After the storage or retention period, as described above, we will proceed to the total deletion of the data you have provided.
7. RIGHTS OF THE DATA SUBJECT GDPR 679/2016 grants the Data Subject certain rights:
- right of access to data collected and processed – art. 15;
- right to obtain data correction – art. 16;
- the right to obtain the data deletion and the right to be forgotten – art. 17;
- right to obtain the processing limitation – art. 18;
- right to data portability to another data holder – art. 20;
- right to object to processing – art. 21;
- right not to be subjected to automated processing – art. 22;
- right to revoke consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation – art. 7.
To exercise the rights referred to in the points above, it is necessary to contact the Data Controller.
8. PROVISION OF PERSONAL DATA The provision of personal data by the interested party, although not mandatory, is necessary for the achievement of the purposes indicated above. Should you opt out your consent to your data processing, we remind you that it will no longer be possible to follow up on the evaluation processes relating to your profile.
9. AUTOMATED DECISION-MAKING INCLUDING PROFILING The data provided will not be processed by automated decision-making, including profiling.
10. DATA PROCESSING METHOD We will process the provided data in accordance with the provisions of GDPR 679/2016 and according to the following methods:
- access to data and archives allowed only to those authorized to process;
- protection of data and areas through adequate measures which are systematically monitored;
- data collection to contact directly the interested party;
- registration and processing both by means of information technology support and through files and paper supports;
- organization of archives mainly in computerized form, but also on paper;
- checks and data changes following any request from the interested party
10. COMPLAINT TO THE SUPERVISORY AUTHORITYThe interested party has the right to lodge a complaint with the Supervisory Authority in case he deems that the treatment concerning him violates the GDPR 679/2016. The reference Authority is the Guarantor for the Protection of Personal Data http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
