INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF EU REGULATION 2016/679 (“GDPR”)
1. Data Controller and Data Processors
The Data Controller is Rossimoda S.r.l., CF/PI: 00350530283, with registered office in Via Venezia n. 22, 35010, Vigonza (Pd) which can be contacted to exercise the rights recognized by the GDPR and to know the updated list of all the Data Processors who may be appointed.
The Data Controller has not appointed a Personal Data Protection Officer (“R.P.D.”).
2. Purpose of the processing
The personal data provided may only be processed for the following purposes: recruitment and selection of candidates for vacant job positions.
There are no further processing activities based on the legitimate interests pursued by the Data Controller.
3. Legal Basis of the Processing
The Data Controller processes personal data lawfully where the processing:
is necessary for the candidate selection process which includes the research, selection of candidates and assessment of candidate requirements;
is necessary for the execution of pre-contractual measures;
is based on the express consent of the data subject for the purposes set out above.
4. Types of data processed
Common data (by way of example only: personal data, place and date of birth, residential address, tax code, data relating to education, work experience, data relating to job position, other data provided within the Curriculum Vitae, e.g. photographs).
Special data (e.g. health-related data).
5. Consequences of failure to provide Personal Data
Failure to provide your personal data prevents the Data Controller from being able to consider the data subject’s application for a vacant job position.
6. Communication and dissemination of data
Within the limits relevant to the processing purposes indicated above, your data will not be disclosed to third parties, nor will they be disseminated. The data will not be transferred to a third country or an international organization.
7. Profiling
Your personal data is not subject to any fully automated decision-making process, including profiling.
8. Processing methods
The processing of personal data consists of the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, alignment or combination, restriction, erasure, or destruction of such data.
The processing of personal data is carried out for the purposes set out above, in accordance with the provisions of Article 5 of the GDPR, on:
paper support;
IT support (including portable devices) and by telematic means (i.e. email)
in compliance with the provisions of art. 32 of the GDPR on security measures and in compliance with the provisions of art. 29 GDPR.
9. Data retention
Your data will be stored for a period of time not exceeding that necessary to achieve the purposes for which they are processed and in any case for a period of time not exceeding 24 (twenty-four) months.
The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
10. Rights of the data subject
The data subject has the right:
to ask the Data Controller, using the contact details indicated in point 1, for access to your personal data and information relating to them (see Article 15 of the GDPR);
the correction of inaccurate data or the completion of incomplete data (cf. Art. 16 GDPR);
the erasure (so-called “right to be forgotten”) of personal data concerning you (upon the occurrence of one of the conditions indicated in Article 17, paragraph 1, GDPR, and in compliance with the exceptions provided for in paragraph 3 of the same article);
the restriction of the processing of your personal data (in the event of one of the cases set out in Article 18(1) of the GDPR);
to request and obtain from the Data Controller – using the contact details indicated in point 1 and in the event that the legal basis of the processing is the contract or consent and the same is carried out by automated means – your personal data in a structured and machine-readable format, also in order to communicate such data to another data controller (so-called “right to portability of personal data”, see Article 20 of the GDPR);
to object at any time to the processing of your personal data in the event of special situations concerning you (cf. Art. 21 GDPR);
to revoke consent to the processing, using the contact details indicated in point 1, without prejudice to the lawfulness of the processing based on the consent acquired before the withdrawal.
In the event that you believe that the processing of personal data carried out by the Data Controller is in violation of the provisions of the GDPR, to lodge a complaint with the Data Protection Authority with registered office in Piazza Venezia, 11 – 00187 Rome (art. 77 GDPR) by the following means:
