Privacy notice
As per Art.13 of legislative degree n.196 of 30 June 2003, (herein "Privacy Code"), EEM SRL, as a holder of data, gives notice of the following:
1. DATA COLLECTION
1.1. Data is collected, before or during selection, through the voluntary submission of a CV made by the interested party using: (a) a web page made available by the data holder expressly for the purpose; (b) email; (c) fax; (d) the postal service; (e) any other tools made available by the holder.
1.2. Data may also be collected through the consultation of specialised data bases, to which the interested party may have voluntarily submitted his/her CV with a view to it being available by company's potentially interested in making contact with the interested party.
1.3. Where data is received thanks to an autonomous initiative by the interested party (the unsolicited submission of a CV) or acquired through a third-party, the information contained in this notice shall be provided to all interested parties when such data is registered, and, in any case, before such information is passed to third-parties, in line with the provisions of Art. 13 of the Privacy Code.
2. TYPE OF PERSONAL DATA
2.1. The data held is mostly of a general nature and is limited to that which is strictly pertinent to the pursuit of the aims outlined in para. 3. This excludes protected categories and interested parties are requested not to submit data of a sensitive nature. Should it be necessary for interested parties to submit data of this nature, the holder may ask for a consent or waiver, or destroy the data.
2.2. In the first case, interested parties must print this notice, sign the consent form at the bottom and send to EEM SRL, Via Durini 27, 20123 Milano (Milano), fax +39.02.87399769.
2.3. "Sensitive data" is defined as "personal data that allows for the identification of race, religious, philosophical or other convictions, political opinions, membership of parties, unions, associations or organisations of a religious, philosophical, political or trade union nature, as well as personal data identifying state of health or sexual preferences.
3. AIMS
3.1. The collection and use of data is for the following:
3.1.1. To allow the holder to manage the data in all phases, up to the eventual signing of a contract, the selection of personnel required or functional with regard to a specific professional role;
3.1.2. To allow the holder to create and manage an archive made up of data collected through previous selection procedures or voluntarily submitted by interested parties, with a view to managing future personnel needs for competent resources for the business of the holder;
3.2. The aims outlined in. 3.1.1. and 3.1.2. are functionally linked and, as a consequence, the eventual consent may not be given in regard to only one of the two.
4. THE PROVISION OF DATA AND THE CONSEQUENCES OF REFUSAL
4.1. The provision of general personal data by interested parties for the purposes outlined in sections. 3.1.1. and 3.1.2. is obligatory. Total or partial refusal to provide such data, or the provision of incomplete or false data will make it impossible for the holder to proceed to the selection phases, or to contact interested parties even in the case of a compatible profile.
4.2. When personal data is provided without the holder having placed a specific announcement, data provided spontaneously by interested parties will be considered to have consent for use for the purposes outlined in sections. 3.1.1. and 3.1.2.
4.3. Should any interested party submit data of a sensitive nature, also without compiling the consent form, the spontaneous provision will be considered also as expressly providing consent for use by the holder. As such, interested parties automatically waive all rights to exceptions.
5. HANDLING OF DATA
5.1. Personal data may handled with regard to the operations outlined in. 4, c, a) of the Privacy Code. In any case, compliance with the principles of correctness, legality, aims, quality, pertinence and the non-violation of transparency rules, outlined in Art. 11 of the Code is guaranteed. The handling of general data will be done both manually or using electronic equipment. Data may also be stored on paper and in electronic archives, also to allow the identification and selection in a uniform manner. For each candidate all personal data is stored separately.
5.2. Where an interested party has provided, despite the restrictions indicated in Art. 2.1, data of a sensitive nature and where the holder has decided to retain such data in that it may be of use for the purposes outlined in Art. 3, the holder will only proceed to handle such data when a consent form, as outlined in Art. 2.2, has been received.
5.3. Data handling will be carried out directly by the holder's organisation, as explained in Art. 6, or by third-parties providing services to the holder, for which an individual with responsibility must be nominated.
5.4. In ant case, the handling of data will only be done within terms strictly related to the stated purposes and in such a way as to guarantee security and privacy through the adoption of appropriate measures to prevent the alteration, cancellation, destruction, unauthorised access or prohibited use or uses other than those stated, in compliance with section V of the Privacy Code and the relative Technical Rules (encl. B).
6. ACCESS TO DATA
6.1. Within the organisational structure of the holder, access to personal data, in the terms and manner relevant to a specific role and exclusively for the purposes outlined in Art. 3, is given only to expressly nominated individuals with responsibility for respecting the terms of use.
6.2. In particular, interested party's data may be seen by legal representatives, the internal head of privacy, recruitment, selection and human resources staff.
6.3. With special reference to the use of services for the management of staff selection using a specific IT application, access to the data of interested parties may also be given to individual responsible, as per Art. 29 of Legislative Decree 196, nominated expressly for the purpose.
6.4. With special reference to activities related to software and hardware maintenance and assistance, only name individuals with responsibility for ensuring the correct use of data may be given access to the kind of data described in this notice.
7. CIRCULATION AND COMMUNICATION OF DATA
7.1. The personal data of interested parties will not be circulated under any circumstances.
7.2. The (general) personal data of interested parties may be communicated to:
7.2.1. Professionals, for the acquisition of opinions or evaluations for the application of labour laws, with reference to the management of recruitment and selection of personnel;
7.2.2. Private or public companies, bodies or professionals providing consultancy services and/or evaluations in the context of personnel selection;
7.2.3. Private or public companies, bodies or professionals for eventual pre-selection training activities.
7.3. Wherever foreseen by the law, your consent is required only for the communication of your personal data to subjects identified in Art. 7.2. and not when handled autonomously by the same.
8. RIGHTS OF INTERESTED PARTIES
8.1. Art. 7 of the Privacy Code gives interested parties the possibility to exercise specific rights regarding personal data.
8.2 In particular, the right to obtain confirmation of the existence or otherwise of personal data, even if not yet registered, and the communication of such data in an intelligible form; indication of the origin of personal data; the purposes for which they are held and used; the logic applied when handled with the support of information technology, details of the holder, individuals responsible and the appointed representative, the subjects and/or bodies to whom/which personal data may given or that may come into contact with as a designated representative within the state territory. Interested parties also have the right to obtain: the updating, rectification, integration, cancellation, transformation in anonymous form or the blocking of data handled in violation of current legislation, including the unnecessary retention of data for aims other than those for which the data was initially collected. Interested parties also have the right to receive formal notification that the aforementioned operations have been brought to the awareness, also in terms of the content, of those to whom the data has been communicated, as well as denying, in whole or in part, for legitimate reasons, the use of personal data, even though pertinent to the initial purpose, the use of personal data for the delivery of advertising or direct marketing material or for the completion of market surveys or commercial communication.
8.3. Request made under the terms of Art. 7 of the Privacy Code may be made, as per current legislation, without particular formality, in the case of request for mere access, also orally. In order to ensure a rapid and complete response, the holder has established that such request be sent in writing to the Data Controller, as indicated in Art. 10.2, below.
9. DURATION
9.1. Personal data voluntarily provided by interested parties will be used by the holder for a period of 12 months. At the end of the period, the Holder will contact interested parties to determine whether the data owners no longer wish data to be held or updated. If no explicit response is provided by interested parties, the data will no longer be used and all information held will be cancelled definitively.
9.2. Interested parties may, however, at any time ask the holder to cease handling of personal data, with reference to Art.7 of the Privacy Code (as indicated above in Art. 8).
10. DATA HOLDER AND CONTROLLER
10.1. The holder of data covered by this notification is EEM SRL with registered offices in Milano (Milano), Via Durini 27, in the person of the pro-tempore legal representative
10.2. The data controller with the duty to respond, as per Art. 7 of the Privacy Code, can be contacted directly at EEM SRL, Office of the Data Controller, Via Durini 27, 20123 Milano (Milano).
10.3. An up to date list of individuals responsible, including the Internal Privacy Controller responsible for issues pursuant to Art. 7 of the Privacy Code, is available from the offices of the holder.