PRIVACY POLICY
INFORMATION NOTICE ON PERSONAL DATA PROCESSING
ACCORDING TO REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GENERAL DATA PROTECTION REGULATION - GDPR)
***
Pursuant to and for the purposes of the General Regulation on the Protection of Personal Data of the EU (GDPR 2016/679, article 13), we inform you that the personal data voluntarily provided by you via the online form on our website will be processed in compliance with the current legislation on personal data protection and, in any case, in accordance with the principles of fairness, lawfulness and confidentiality on which the Company's activity is based.
- In this regard, we would like to inform you that:
- as to personal data provided by filling in the form available on the section "Work with us" on the www.colorobbiaconsulting.it website, the Data Controller is Colorobbia Consulting S.r.l., with registered office at Via Pietramarina n. 53, 50053 Sovigliana, Vinci (Florence) Italy, VAT-Id. 03795100480;
- as to personal data provided by filling in the form available on the section "Work with us" on the www.industriebitossi.com website, the Data Controller is Industrie Bitossi S.p.A., with registered office at Via Pietramarina n. 53, 50053 Sovigliana, Vinci (Florence) Italy, VAT-Id. 03700310489
- as to personal data provided by filling in the form available on the section "Work with us" on the www.bitossihome.it website, the Data Controller is Bitossi Diffusione S.r.l., with registered office at Via Castellucci, 10, Montelupo Fiorentino 50056 Italy, VAT-Id. 01539030484
- as to personal data provided by filling in the form available on the dedicated section "Work with us" on the www.euritonline.com website, the Data Controller is Eurit S.r.l., with registered office at Località Buraccio n. 6, 57036 Porto Azzurro (LI) Italy, VAT-Id. 00206500498
- as to personal data provided by filling in the form available on the section "Work with us" on the www.mariterminal.it website, the Data Controller is è Mariter S.r.l.,with registered office at Via Pietramarina n. 53, 50053 Sovigliana, Vinci (Florence) Italy, VAT-Id. 04527160487
-
Your personal data may be processed in the manner and for the purposes set forth in Par. 1 "Purpose and Legal Basis of Processing".
In this context, we call upon you not to indicate in your Curriculum Vitae "special categories of Data" as defined by Article 9 of the DGPR, with the exception of those data that you deem to be absolutely essential to provide to the Company for an adequate assessment of your application.
Please note, in any case, that any special categories of Data you have voluntarily provided to the Company, by sending your Curriculum Vitae, may be processed only for the purposes hereinafter specified.
Processing of any special categories of data relating to your person shall in any case be subject to your explicit consent, to be given through the flag at the bottom of this privacy statement.
You are also kindly requested not to mention Data related to criminal convictions or offences related to your person, pursuant to art. 10 of the DGPR
1. Purpose and legal basis of processing
Any personal data provided by you through the online form available on our website such as, by way of example, your personal and contact details, information on your residence/domicile, data related to your education, information as to your previous work experience and salary, your Curriculum Vitae, may be processed for the following purposes:
a) personnel recruitment and/or selection;
b) to contact you and communicate with you in relation to recruitment and/or personnel selection.
Please be also aware that if you add a profile photo to the online form available on the website, the Company may use it for a better association to your name, always for purposes related to recruitment and/or selection of personnel.
The legal basis of the data processing is based on your consent to the processing of personal data.
2. Retention period of your Personal Data
Your Personal Data will be retained:
- for no longer than necessary, in relation to the purpose for which such data is processed;
- for no longer than necessary in relation to the fulfilment of regulatory obligations.
3. How we process your Personal Data
Data processing will take place through hardcopy and electronic means, by implementing appropriate security measures intended to protect against unauthorised access, loss or destruction, in compliance with the provisions set forth in Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the GDPR. The Data may be processed by third parties, both internal and external, specifically authorized and committed to confidentiality.
4. Framework for the free movement of Personal Data
Personal Data may be processed by third-party companies performing activities on behalf of the Data Controller, acting as external data processors (including, but not limited to: credit institutions, professional firms, suppliers/consultants who managing and/or participating in the management and/or maintenance of the electronic and/or telematic tools, insurance companies for the provision of insurance services, designated for the period strictly necessary for the optimal performance of this service).
Access to Personal Data is limited to those, within the company, needing said information in relation to their job or hierarchical position. The above-mentioned third parties will be properly trained in order to protect your personal data against an unauthorised or unlawful use and accidental loss or destruction. Pursuant to art. 6 letters b) and c) of the GDPR, the Data Controller may be legally obliged to disclose your Personal Data to supervisory bodies, judicial authorities and any other third party, if required to do so by law, without the Data Subject explicit consent.
5. Nature of Data processing
For the purposes specified in point (a) and (b) your Personal Data is strictly necessary.
Inaccurate and/or incomplete information and/or failure to provide the required Data could make it impossible for the Data Controller to:
a) perform personnel recruitment and/or selection activities;
b) to contact you and communicate with you in relation to personnel recruitment and/or selection activities.
6. Data disclosure
Your Data will not be disclosed to any undefined third parties.
7. Transfers of your Personal Data abroad.
Your Personal Data will not be transferred outside the European Union. It being understood, however, that the Controller, if necessary, shall be entitled to move server’s location in non-EU third countries. In this case, the Data Controller ensures from now on that the transfer of personal data outside the European Union will take place in accordance with provisions set forth in article 44 et seq. of the GDPR and with other applicable regulations, by stipulating, if required, related agreements for the purpose of ensuring an adequate level of protection.
8. Data Controller
In this respect, we would like to inform you that:
- as to personal data provided by filling in the form available on the section "Work with us" on the www.colorobbiaconsulting.it website, the Data Controller is Colorobbia Consulting S.r.l., with registered office at Via Pietramarina n. 53, 50053 Sovigliana, Vinci (Florence) Italy, VAT-Id. 03795100480;
- as to personal data provided by filling in the form available on the section "Work with us" on the www.industriebitossi.com website, the Data Controller is Industrie Bitossi S.p.A., with registered office at Via Pietramarina n. 53, 50053 Sovigliana, Vinci (Florence) Italy, VAT-Id. 03700310489
- as to personal data provided by filling in the form available on the section "Work with us" on the www.bitossihome.it website, the Data Controller is Bitossi Diffusione S.r.l., with registered office at Via Castellucci, 10, Montelupo Fiorentino 50056 Italy, VAT-Id. 01539030484
- as to personal data provided by filling in the form available on the dedicated section "Work with us" on the www.euritonline.com website, the Data Controller is Eurit S.r.l., with registered office at Località Buraccio n. 6, 57036 Porto Azzurro (LI) Italy, VAT-Id. 00206500498
- as to personal data provided by filling in the form available on the section "Work with us" on the www.mariterminal.it website, the Data Controller is è Mariter S.r.l.,with registered office at Via Pietramarina n. 53, 50053 Sovigliana, Vinci (Florence) Italy, VAT-Id. 04527160487
9. Rights of the Data Subject
The GDPR gives the Data Subject specific rights that help him/her be in control of his/her personal data, namely:
a) pursuant to art. 15, the data subject shall have the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, to obtain access to the personal data and the following information: i) the purposes of the processing ii) the categories of personal data concerned; iii) the recipients or categories of recipients to whom the Personal Data have been or will be disclosed, in particular recipients in third countries or international organizations; iv) where possible, the envisage period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; v) the existence of the right of the Data Subject to request from the Data Controller rectification or erasure of Personal Data or restriction of processing of personal data concerning the data subject or to object to such processing; vi) the right to lodge a complaint with a supervisory authority, pursuant to articles 77 ff. of the GDPR; vii) if the Data is not collected from the Data Subject, all information available on their origin; viii) the existence of automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4 of the GDPR, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisage consequences of such processing for the data subject; ix) where personal data are transferred to a third country or to an international organisation the right to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR relating to the transfer of Personal Data to a third country or an international organisation;
b) the Data Subject shall also have (where applicable) the possibility of exercising the rights pursuant to articles 16-21 of the GDPR (right to rectification, right to erasure, right to restriction of processing, right to Data portability, right to object).
The Data Controller undertakes to provide information on action taken on a request to the Data Subject within one month of receipt of the request. That period may be extended, where necessary, taking into account the complexity and number of the requests. In any case the Data Controller shall inform the Data Subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Information on the action taken on a request shall be provided in writing or by hardcopy or by electronic means.
10. How to exercise your rights
The Data Subject may at any time exercise the above-mentioned rights and ask for a copy of an updated list of the Data processors by sending an e-mail to the following addresses:
- [email protected] (for requests to be forwarded to the Data Controller Colorobbia Consulting S.r.l.);
- [email protected] (for requests to be forwarded to the Data Controller Industrie Bitossi S.p.A.);
- [email protected] (for requests to be forwarded to the Data Controller Bitossi Diffusione S.r.l.);
- [email protected] (for requests to be forwarded to the Data Controller Eurit S.r.l.)
- [email protected] (for requests to be forwarded to the Data Controller Mariter S.r.l.).
Data Protection Officer: [email protected]