Privacy Policy pursuant to article 13 of Regulation (EU) 2016/679
Dear Applicant,
pursuant to article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter “GDPR” or “the Regulation”) - we wish to inform you that your personal data provided to our company in a preliminary manner with a view to the establishment of a working relationship (hereinafter “Data”), will be subject to processing as defined in article 4 of the GDPR, pursuant to said regulation and in accordance with the confidentiality obligations which underpin our Company’s activities. In particular, we wish to inform you of the following:
a. Data Controller details
The Data Controller is Pieralisi Maip S.p.A., with headquarters at Via Don Battistoni 1, 60035 Jesi (AN), Italy.
b. Purposes and Methods of Processing
The collection and processing of data relating to the Data Subject is performed in order to allow this Company to carry out the following activities:
The legitimising legal basis is the performance of precontractual measures, pursuant to article 6, para. 1 b) of the GDPR.
The Data Subject’s personal information will be processed by personnel authorised pursuant to the provisions of article 29, GDPR.
Such Data may also be collected by third parties, in which case we will inform you in a timely manner of this, as provided for by article 14, GDPR.
The Data will be processed for these purposes using computerised and manual methods, on the basis of logical criteria compatible with and functional to the purposes for which the data were gathered, in compliance with the confidentiality and security rules laid out by law and internal company procedures. Some Data may also be processed on behalf of the Company by third companies, organisations or professionals who, as outsourced Processors, carry out specific processing services or activities complementary to ours. Data concerning the Data Subject are, or have been, supplied to the Company by the Data Subject themselves.
c. Categories of Recipients of Personal Data
The Data, or a portion thereof, may be transferred to the following persons or organisations who may perform processing on our behalf:
- Freelance professionals and consultants, including associations of the same;
- Subsidiary, associated and investee companies.
The Data will not be disseminated in any manner.
d. Transfer of Personal Data to Third Countries
Your data will not be transferred outside of the European Union.
e. Retention Period
CVs provided, in addition to other Data, will be deleted at the end of the calendar year following the year of receipt; if you wish to make a new application subsequent to this, you will therefore need to resend them.
f. Rights of the Data Subject
Applicable legislation provides Data Subjects with wide-ranging rights which we suggest you familiarise yourself with. We would specifically draw your attention to the following rights:
1. Access to the following information:
a. Purpose(s) of the processing
b. Categories of personal data in question
c. Recipients or categories of recipients to whom such personal data has been transferred, in particular when international organisations or located in third countries
d. Existence of the Data Subject’s right to request that the Controller correct or delete their personal data, or else request limitation of the processing of personal data concerning them or object to their processing
2. Correction is taken to mean:
a. Correction of personal data concerning them which is not accurate/contains errors, to be performed without undue delay
b. Supplementation of/addition to incomplete personal data, including by providing a supplementary declaration
3. Deletion of data concerning them without undue delay, if:
a. The data are no longer necessary for the purposes for which they were gathered or otherwise processed
b. A revocation of consent notice has been sent and no additional legal basis for the processing exists
c. They object to the processing and there is no prevailing legitimate motive for carrying out processing
d. The personal data have been processed illegitimately
e. The personal data must be deleted to fulfil a legal obligation
f. The personal data were gathered relating to the offering of information society services
4. Limitation of the processing:
a. Should the Data Subject contest the accuracy of the personal data, for the period required by the Controller to check the accuracy of such personal data
b. When the processing is illegitimate and the Data Subject opposes the deletion of the personal data and instead requests that its use be limited
c. When the personal data are necessary to the Data Subject for the ascertainment, use or defence of a right in court, as long as the Controller no longer needs them for the purposes of the processing
d. Whenever the Data Subject objects to the processing in light of their right to object
5. Receive notification in the event that correction or deletion of the personal data, or limitation of the processing, has been carried out
6. Data portability, in other words the right to receive personal data concerning them in a structured, commonly used and machine readable format, following which the Data Subject has the right to transmit said data to another Controller, whenever:
a. The processing is based on the express consent of the Data Subject for one or more specific purposes, or occurs on the basis of a contract signed with the Data Subject, and
b. The processing is performed via automated means
7. Object at any time, for reasons relating to their specific situation, to the processing of personal data concerning them.
In order to exercise the rights outlined above, you can contact the Controller by sending a registered letter with return receipt to the address given, or an email to privacy@pieralisi.com.
You have the right to make a complaint to the Italian data protection agency (“Garante”) if you feel that the rights outlined here have not been recognised.
g. Mandatory or Optional Nature of Providing Data and Consequences
Providing personal Data for the purposes outlined above is strictly necessary. Failure to provide such Data, even partial, could impede the hiring activities or restrict the availability of the information required to evaluate your application for available positions.