Privacy notice
Policy on the processing of personal data of applicants
Who is the Data Controller?
Your personal data will be processed as Data Controller by e-Novia S.p.A. (hereinafter, "e-Novia" or "Controller"), C.F./P.IVA 07763770968, with headquarters in Via San Martino 12 - 20122 Milan. You can contact us at any time and for any request relating to this policy at this address: privacy@e-novia.it.
Why are we providing you with this information?
We are providing you with this information in compliance with the obligations imposed by art. 13 of the EU Regulation 2016/679 (hereinafter, the "GDPR") and it relates to the data that we will process in the case of you responding to an application posted on a social platform (e.g. LinkedIn, Facebook, Allibo, etc.), on our website (www.e-novia.it) or in the case of your spontaneous application.
What data will be processed, for what purposes, and under what legal basis?
Please note that the Controller acquires the personal data you provide through your Curriculum Vitae for the following purposes, as specified below, where the legal basis and duration of data processing is also highlighted:
|
Purpose
|
Legal Basis
|
Data processed
|
Data Retention
|
|
Application for a job position
|
Performance of pre-contractual measures [Art. 6, 1, lett. b) GDPR]
|
Biographical data:
✓ First name
✓ Last name
✓ Date of birth
Contact information:
✓ Email address
✓ Phone number
Educational background data:
✓ Education
✓ Vocational courses
Career pathway data
|
2 years
|
|
Analysis of social media profiles
|
Legitimate interest
[Art. 6, 1, lett. f) GDPR]
|
We will process your data to verify skills and eligibility to fill the specific open position.
|
Until the end of the recruiting process
|
Special categories of personal data
It could happen that in the Curriculum are provided data that fall within the categories of special data listed in art. 9.1 GDPR:
- data disclosing racial or ethnic origin;
- political opinions, religious or philosophical beliefs;
- trade union membership;
- data relating to the health, sex life or sexual orientation of the person.
We invite you to communicate such data only if it is expressly required by the job advertisement in relation to the belonging to protected categories, specifying that in the event of transmission of special categories of personal data but in the absence of specific manifestation of consent to process such data, e-Novia will not be held responsible for any reason, nor will it be able to receive complaints because in this case the treatment will be allowed as it concerns data made manifestly public by the person concerned pursuant to art. 9.1 of the GDPR. It is therefore highlighted the need to give explicit consent to the processing of these special categories of personal data when you decide to share such information.
How do we process your data?
The processing of Personal Data will take place through automated and/or manual tools in order to ensure proper security measures to prevent access, disclosure, loss, incorrect, illegal or unauthorized use of data.
Who has access to your data?
The data will be processed by the employees of the company functions assigned to the pursuit of the above-mentioned purposes, who have been expressly authorized to process the data and have received adequate operating instructions.
In addition to internal staff, personal data may be disclosed to external parties who may act as autonomous data controllers or processors. In particular, your data may be communicated to:
- ●internet service providers and platforms used by the Data Controller as organizational tools, communication and/or promotional channels (e.g. Allibo HR Software);
- ●video platforms for web conferences (e.g. Zoom, Skype, Google Meet, Microsoft Teams, etc.);
- ●authorities whose right of access to personal data is expressly recognized by law, regulations or measures issued by the competent authorities.
All these subjects have received clear and precise instructions on how to process your data and act, as the case may be, as autonomous controllers or data processors.
To find out who are the data processors appointed by e-Novia you can contact us at the following email address privacy@e-novia.it
Data retention period
Your personal information will be retained for up to two years after receipt. e-Novia reserves the right to re-contact candidates shortly before the stated deadline to request an extension of this retention period. The Controller reserves the right to delete resumes or any other document containing personal data deemed not to be in compliance with the purposes set forth in this policy.
Do we transfer your data to third countries?
The Data Controller does not transfer personal data outside the territory of the European Union. In case of a possible transfer of data to Third Countries, the Controller informs that the processing will take place according to one of the modalities provided for by articles 44 and following of the GDPR. It is possible to have further information, upon request, from the Data Controller at the contacts indicated above.
What are your rights and how can you exercise them?
The User may exercise all the rights provided for by Articles 15-21 of EU Reg. no. 679/2016, at any time and without unjustified limitations, by contacting the Data Controller at privacy@e-novia.it. Requests shall be filed free of charge and processed by the Controller within 30 days.
Specifically, the User can:
- ●Obtain from the controller confirmation as to whether or not personal data are being processed (Art.15);
- ●Obtain from the controller the rectification of inaccurate personal data (Art. 16);
- ●Obtain from the controller the erasure of personal data (Art. 17);
- ●Obtain from the controller restriction of processing (Art. 18);
- ●Have the right to receive the personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (Art. 20);
- ●Have the right to object (Art. 21);
Compliants
In any case, Users are always entitled to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), under Art. 77 of the Regulation, if they believe that the Data Controller’s processing of their Personal Data is in violation of the applicable law.
Amendments
The Controller reserves the right to amend and update the Privacy Policy as a result of any further new or revised provisions of any national and EU laws and regulations on personal data protection.