Privacy notice
PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
JOB APPLICANTS
Pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016
Dear Sir/Madam
Pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter referred to as GDPR (General Data Protection Regulation), AUTA MAROCCHI S.P.A., with registered office in RIVA CADAMOSTO 8/1, 34147 TRIESTE (TS), as the company responsible for the data processing of your personal details, informs you of the following:
Data Controller and Person in charge of processing
The data controller is AUTA MAROCCHI S.P.A., with registered office in RIVA CADAMOSTO 8/1, 34147 TRIESTE (TS).
What data we collect
If you are applying for a job with us, we collect and process personal data about you.
The personal data we process includes:
• your name, home address, e-mail address and/or telephone number;
• your date of birth, your marital status, your nationality, your social security number (if you provide it);
• your education and career history;
• other information contained in your CV or other documents or information you provide to the company;
• information obtained during the selection procedure, if any;
• references and evaluations regarding your employment with previous employers;
• medical and financial information (if you provide it);
• information confirming your identity and right to work, such as a copy of your passport;
• details of any outstanding charges; and
• information regarding your feedback on the company's organisation.
• With the specific consent of the applicant, information related to ethnicity, gender, nationality, disability, religion, sexual orientation and other diversity-related information.
Sources of collected data
The company obtains this information directly from you, our staff, through our systems and equipment, as well as from third parties such as recruitment agencies, background check companies or previous employers. In addition, we may derive information from your public profiles available online.
How we use this information and what the legal basis for its use is (purpose of processing)
We process the personal data specified in paragraph 1 for the following purposes, and only in accordance with our legitimate interests:
• to comply with our regulatory and legal obligations;
• to make recruiting decisions;
• to prevent and detect fraud or other unlawful acts;
• to establish, exercise or defend our legal rights; and
• to manage risk.
Mandatory or optional nature of data provision and consequences of a refusal to provide data
The provision of data is optional, but refusal to provide it in whole or in part may make it impossible for the company to evaluate your application for the desired job positions.
Data processing methods
The processing of personal data is carried out by means of the operations indicated in Article 4 No. 2) GDPR, for the purposes mentioned above, both on paper and computer, by means of electronic or automated tools, in compliance with the regulations in force in particular on confidentiality and security and in accordance with the principles of correctness, lawfulness and transparency and protection of human rights.
Processing is carried out directly by the data controller’s organisation, its managers and/or delegates.
Communication and Dissemination
Your personal data may be communicated, insofar as it is strictly relevant to the obligations, tasks and purposes referred to above and in compliance with current legislation, to the following categories of parties:
Other group companies, subsidiaries or parent companies, domestic or foreign, always for the purpose of evaluating applications for open job positions;
ALLIANCE SOFTWARE SRL, the company from which we have acquired ALLIBO, the service that stores applications received;
Freelance professionals, for the acquisition of opinions on the correct application of labour law, with reference to research management and staff selection;
Private or public companies, bodies or professionals who carry out consultancy and/or assessment activities as part of the staff selection process;
Private or public companies, agencies or professionals for the purposes of any training activities preparatory to the establishment of the working relationship.
Personal data shall not be disseminated in any way.
Personal data retention period
Your application will be kept for 18 months, after which it will be destroyed. Only the name, together with the outcome of any job interview, will be kept for 5 years for verification of any subsequent applications.
In the event of employment, a copy of the application will be retained in the employee's individual file.
Data transfer
Personal data is stored on servers located within the European Union. It is in any case understood that the Data Controller, if necessary, will have the right to transfer the data to servers outside the EU. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.
Rights of the data subject
In your capacity as data subject, you have the rights set forth in Article 15 GDPR and precisely the rights to:
obtain from the data controller confirmation as to whether or not personal data relating to you are being processed and, if so, to obtain access to the personal data and the following information:
the purposes of processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular if they are recipients in third-party countries or international organisations;
whenever possible, the expected retention period of personal data or, if not possible, the criteria used to determine that period;
the existence of the data subject's right to request from the data controller the rectification or erasure of their personal data or the restriction of the processing of their personal data or to object to the processing of their personal data;
the right to lodge a complaint with a supervisory authority;
where the data is not collected from the data subject, all available information on their source;
the existence of an automated decision-making process, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information regarding the logic used, as well as the importance and the anticipated consequences of such processing for the data subject.
Where personal data is transferred to a third-party country or an international organisation, the data subject shall have the right to be informed about the existence of appropriate safeguards in accordance with Article 46 relating to the transfer.
The data controller shall provide a copy of the personal data being processed. In case of further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. If the data subject submits the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in a commonly used electronic format.
The right to obtain a copy referred to in paragraph 3 shall not infringe the rights and freedoms of others.
Where applicable, you also have the rights referred to in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority (www.garanteprivacy.it).
In order to exercise your rights under Article 15 of the GDPR or for questions or information regarding the processing of your data and the security measures taken, you may in any case contact:
AUTA MAROCCHI S.P.A.
RIVA CADAMOSTO 8/1, 34147 TRIESTE (TS)
E-mail: privacy@autamarocchi.com