Privacy notice
Further information on the processing of Personal Data
Policy on the Processing of Personal Data pursuant to Articles 13 and 14 of EU Regulation 2016/679
Pursuant to Arts. 13 and 14 of EU Regulation no. 2016/679 on the protection of personal data (hereinafter the "GDPR" or "Regulation"), Selle Royal Group S.p.A. (hereinafter "Selle Royal" or the "Controller") hereby informs you that the personal data relating to you (hereinafter the "data"), which has been provided directly by the Data Subject or collected from third parties, will be processed in compliance with the provisions of the Regulation and in accordance with the following policy.
1) DATA CONTROLLER
The Data Controller is Selle Royal Group SpA, with registered office in Via V. Emanuele, 119, 36050 Pozzoleone (VI); tel. 0444 461100; e-mail job.selleroyalgroup.com
2) PURPOSE AND LEGAL BASIS OF PROCESSING
Personal data will be processed for the following purposes:
- acquisition of candidate data for recruitment purposes and possible conclusion of a contract;
- filing of CVs for future recruitment needs;
- processing of the data contained in the curriculum spontaneously sent by you or made available for consultation through parties specialised in personnel selection does not require consent, pursuant to Art.. 111-bis of Legislative Decree 196/2003.
The data in CVs and acquired during interviews will be processed for pre-contractual purposes pursuant to Art. 6 (1)(b).
3) DATA ACQUISITION AND PROCESSING METHODS
Data is acquired through:
- spontaneous sending of CVs out by candidates to the e-mail address job@selleroyalgroup.com or through the channels indicated on the website and social media of the Controller;
- consultation of specialised databases, in which candidates have made their CVs available in order to that they may be consulted by interested companies;
- recruitment agencies and companies specialising in personnel search and selection;
- any other means by which the CVs of candidates are made available to the Company.
Processing is carried out with IT tools and on paper, respecting data confidentiality and security.
The personal data contained in the CV, in the accompanying email and any information you have voluntarily provided to support your application (such as images, certificates, etc.) are processed.
Please note that for the purposes referred to in paragraph 2, data defined as "special" by Art. 9 of the Regulation (e.g. belonging to protected categories) is not required. If such data is spontaneously transmitted by the Data Subject, it will be processed according to Art. (2)(b).
Provision of data is optional, however, refusal to provide certain data may make it impossible to participate in the aforementioned selection procedures or lead to an incorrect assessment of your professional qualities.
4) DATA RETENTION PERIOD
The data will be processed for the time necessary to contact the person and for the subsequent interview, or for filing of CVs for future personnel search requirements for a maximum of 24 months, after which your data will be deleted from both the hard copy and digital files of the Controller.
5) DATA RECIPIENTS AND TRANSFER
The data acquired will be processed by trained and authorised personnel of the Controller and will not be subject to disclosure and / or transfer to third countries.
6) DATA SUBJECT RIGHTS
Data Subjects are entitled to the rights, in the cases and within the limits set out in the Regulation, referred to in Arts. 15 to 20. By way of example, data subjects may:
- obtain confirmation of whether or not personal data concerning them is being processed;
- where processing is in progress, obtain access to the personal data and information relating to such processing and request a copy of such personal data;
- obtain rectification of inaccurate personal data and integration of incomplete personal data;
- obtain, where one of the conditions laid down in Art. 17 of the GDPR is met, erasure of the personal data concerning them;
- in the cases provided for by Art. 18 of the GDPR, obtain restriction of processing;
- receive personal data relating to them in a structured, commonly used and machine-readable format and request its transmission to another controller, if technically feasible.
In order to ensure that the above rights are exercised by the data subject and not by unauthorised third parties, the controller may request the same to provide any additional information necessary for this purpose.
7) RIGHT TO LODGE A COMPLAINT WITH THE AUTHORITY
Data subjects may lodge a complaint with the Personal Data Protection Authority if they believe that their rights under the GDPR have been violated, in the manner indicated on the website of the Authority available at:
www.garanteprivacy.it.