Information notice on the processing of candidates’ personal data pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, “GDPR”)
Identity and contact details of the data controller
The data controller is Pesci Combattenti S.r.l., with registered office at Via Col di Lana, n. 11, 00195, Roma (hereinafter “Pesci Combattenti”), in the person of its pro tempore official representative.
Categories of data processed, purposes, legal basis for data processing
Pesci Combattenti will process the personal data you sent spontaneously by means of curriculum vitae (spontaneous application) or collected when you submitted your application to job offers published by the Data Controller such as, for example, personal details, address of residence and other contact details, education, professional career, skills and remuneration details.
Pesci Combattenti will process your data to assess your profile and your professional skills for the search and selection of personnel by the Data Controller (“Personnel Selection”), and to comply with the legal obligations established by Italian Legislative Decree 231/2001.
The legal basis for the processing is to perform pre-contractual measures adopted at your request for submitting the application (Article 6(1)(b) GDPR) and to comply with a legal obligation to which the Data Controller is subject (Article 6(1)(c) GDPR).
If strictly necessary and essential to assessing your application for a specific position offered, Pesci Combattenti may also process special categories of data, such as data that show membership of certain protected groups. For processing these special categories of data the legal basis is your written consent to allow you to participate in the Personnel Selection (Article 9(2)(a) GDPR). In the case of spontaneous dispatch of your curriculum vitae, consent will be obtained at the first available opportunity for contact (e.g. at the interview).
Mandatory or optional nature of data disclosure and consequences of refusal to reply
Disclosure of your personal data is necessary for the Personnel Selection. Refusal to disclose the data requested or the provision of incorrect data will not allow you to participate in the Personnel Selection or could prejudice the outcome.
Data processing methods
Your personal data will be processed using both automated and manual means, by persons specially authorised to process data within the company organisation, and possibly with the collaboration of trusted external consultants, using methods strictly relating to the activities involved in the Personnel Selection, in compliance with applicable regulations and so as to guarantee data security and confidentiality. Data will not be used for profiling purposes.
Period for which the personal data will be stored
The data will be processed for the time strictly required to achieve the purposes for which they were collected and in any case for no longer than 2 years after receipt of the application for the purposes described here above and, in any case, for no longer than 5 years after the receipt of the application for administrative or legal purposes. At the end of this period, your data will be deleted or made anonymous.
Persons or categories of persons to whom the personal data may be disclosed and scope of dissemination of said data
The data will be accessible to the employees authorised to process data to fulfil the aforesaid obligations.
The data may also be processed by third parties, appointed by Pesci Combattenti as data processors, entrusted with the service of maintenance and development of the IT system, for the time strictly required to perform said service, and by providers of other outsourced services, such as, for example, labour consultancy and/or management of the personnel search and selection process who may act, as the case may be, as data processors or independent data controllers.
Any additional disclosure to third parties will only occur after the data subject’s explicit consent has been obtained.
Processing will take place within the European Union and the candidates’ personal data will not be disseminated.
Data subjects rights
You may contact the Data Controller in writing, sending a registered letter with return receipt to the Company’s head office or an email to the address email@example.com, to exercise the rights to access, amend, delete and object described below, that is, to obtain:
i) confirmation as to whether or not personal data concerning you are held, even if not yet recorded, and to have them communicated in an intelligible form;
ii) specification of the source of the data, of the purposes of processing and methods used, of the categories of personal data in question, of the details of the Data Controller and of the data processors, of the persons or categories of persons to whom the data may be disclosed or who may come to acquire knowledge thereof in the capacity of data processors or persons in charge of processing, of the period for which data will be stored or, if not possible, of the criteria for determining it;
iii) updating, rectification or integration of data, deletion, conversion into anonymous form or freezing of data processed in breach of the law, including data that do not need to be stored in relation to the purposes for which they were collected or subsequently processed, certification that the operations requested, and their content, have been brought to the attention of those to whom the data have been communicated or disclosed, unless fulfilment of this obligation proves impossible or entails an employment of resources that is clearly disproportionate to the protected right.
Furthermore, you are entitled to request the limitation of processing that concerns you and the transfer of your data to another data controller (known as right to data portability), where applicable, and to object for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection.
You are also entitled to file a complaint to the Italian Data Protection Authority and/or to the other competent supervisory authorities.