DISCLAIMER FOR PERSONAL DATA PROCESSING

The present disclaimer is to inform you that the European Regulation of 27th April 2016 n. 679 (“GDPR”) lays down rules relating to the protection of natural persons with regard to the processing of personal data[1]. Such data, submitted by you to Altamira, through BPI’s website, including the information contained in your curriculum vitae and other categories of personal data, shall be processed[2] by our Company in capacity as Data Controller.

The Personal Data shall be processed lawfully, fairly and in a transparent manner, adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Therefore, in accordance with art. 13 of the Regulation, the Company shall supply you with the following information:

1.    Purposes of the processing. Your Personal Data shall be processed to evaluate your job application for a possible subsequent job interview. For this purpose of data processing, your consent is not required, as it is given following your intention to start a working relationship with the Company and therefore considered as precontractual activities.

2.    Modality of data processing. The data processing shall be carried out with the following modalities:

a.    On electronic and paper support

b.    By the Company in its capacity as Data Controller, through its employees in charge of evaluating applicants, who are dutifully trained and informed of the limits imposed by the Regulation on processing personal data;

c.    Using safety measures to ensure confidentiality of the personal data of the data subjects, and to avoid loss, destruction, modification or non-authorized access or divulgation of said personal data.

d.    Proceeding with the deletion of the personal data once the necessity for processing the data has ceased, or in any case within 2 years of your submitting your personal data, with exception of that data that must be conserved further for as much time as necessary per law request or in case of lawsuits.

3.    Nature of the conferment. The conferment of your personal data is elective, deriving solely from your free will.

4.    Area of communication. The Personal Data supplied shall not be circulated, but may be disclosed to, or otherwise processed on our behalf, by the following categories of recipients, regardless if they are nominated Data Processors:

a.    Platform of residence (Altamira) of the personal data, submitted by the job applicants

b.    Company’s consultants, who may be asked to evaluate the candidate

c.    Cloud platforms (box.com) and consulting platforms (pipedrive)

The updated list of said subjects may be requested to the Controller, in the modalities indicated in the following paragraph “Data Subject’s Rights”.

Personal data is not transferred outside the EU except for the management of certain purposes indicated in point 1), including the management of video communications, social media and cloud platforms. In the latter cases, the data are processed with adequate guarantees based on specific contractual clauses, pursuant to art. 46 of the GDPR..

5.    Controller. The Controller is BPI S.r.l. having its registered office in Torino, Cso Matteotti 12.

6.    Data Subject’s Rights. You may exercise your right to access your personal data in any moment, to request rectification, deletion in the cases provided for by the law, to limit the processing or to oppose the processing, as well as the right to data portability, by addressing said request to the Controller at the registered office address in art. 6. Or at the following certified electronic mail address [email protected]

7.    Transfers of personal data to a third country or an international organization. The personal data supplied by you is stored on software platforms with servers located inside the European union and outside, within the limitations and conditions of art. 44 et. seq. of the GDPR, specifically in the USA, third country that complies with the European Standard Contractual Clauses.

8.    Right to lodge a complaint. We inform you that if you believe that your personal data was processed in violation of the laws on data processing, you have the right to lodge a complaint with the Supervisor for Data Protection.

                                                                                                                            The Controller

                                                                                                                                 BPI S.r.l

[1] ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

[2] ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;