INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA
ACCORDING TO ART. 13 EU REGULATION 2016/679 - CANDIDATES
Creasens S.r.l. with sole shareholder (F.C. – VAT: 020407440037), with registered office in Gattico (NO, 28013, via Maggiate n. 22, according to art. 4, par. 1, letter c) and art. 24 EU Regulation 2016/679 (hereinafter GDPR) is holder of the personal data processing (hereinafter holder) and, in compliance with the obligations established by art. 13 GDPR, provides this informative report, which details the purposes and means of personal data processing related to the possible establishment of an employment relationship with the holder.
It is specified that for:
§ processing (ex art. 4, par. 1, nr. 2) GDPR) means, any operation or set of operations, performed with or without the help of automated processes and applied to personal data or set of personal data, such as collection, registration, organisation, structuring, preservation, adaptation or modification, extraction, consultation, use, communication by means of transmission, dissemination or any other available form, comparison or interconnection, restriction, erasure or destruction;
§ personal data (ex art. 4, par. 1, nr. 1) GDPR) means, any information regarding an identified or identifiable natural person (the concerned one); it considers the person who can be identified, directly or indirectly, with particular reference to an identifier, such as the name, identification number, location data, an online identifier or one or more characteristic elements of his/her physical, physiological, genetics, psychic, economic, cultural or social identity;
§ genetic data (ex art 4, par. 1, nr. 13) and art. 9 GDPR) means, personal data related to the inherited or acquired genetic characteristics of a natural person which provide unequivocal information regarding the physiology or health of said natural person, and which results in particular from the analysis of a biological sample of the natural person in question;
§ biometric data (ex art 4, par. 1, nr. 14) and art. 9 GDPR) means, personal data obtained from a specific technical processing related to the physical, physiological or behavioural characteristics of a natural person that allow or confirm unique identification, such as facial image or fingerprint data;
§ data related to health (ex art 4, par. 1, nr. 15) and art. 9 GDPR) means, personal data related to physical or mental health of a natural person, including the provision of health care services, which reveal information related to his or her state of health;
§ particular categories of personal data (ex art. 9 GDPR) suitable to reveal the racial or ethnic origin, political opinions, religious or philosophical convictions, trade union membership as well as the person's life and/or sexual orientation.
1. Processing holder and contact details
The processing holder, according to art. 24 of GDPR, that is to say, the one who determines the purposes and means of the processing, is Creasens S.r.l. with sole shareholder (F.C.– VAT: 020407440037), whose contact data are: registered office: Gattico (NO, 28013, via Maggiate n. 22 – Tel.: 0322 831681 - e-mail address: info@creasens.
2. Purpose of processing
The purposes of the processing of personal data, according to articles 4 and 9 GDPR, provided through the submission of the curriculum vitae, the completion of information sheets, aptitude tests and the sending of ID photos, are detailed below:
a) Recruitment and selection of personnel for the establishment of the employment or collaboration relationship;
b) Transmission to third parties for the establishment of the employment or collaboration relationship.
c) collection and use of the photographic image of the candidate in the curriculum vitae for the recruitment and selection of personnel for the establishment of the employment or collaboration relationship as well as for the transmission to third parties for the establishment of the employment relationship or cooperation.
3. Legal processing basis
The legal processing basis according to art. 6, par. 1, letter a) GDPR is the consent.
4. Provision of the data
Regarding the purposes referred to art. 2 of this informative report, the provision of personal data, pursuant to art. 4 and 9 GDPR, is necessary and is of optional nature; a possible refusal involves the objective impossibility for the holder to execute the selection and recruitment of personnel.
5. Processing mode
Personal data subject to processing for the purposes referred to art. 2 of this informative report, are processed on paper and/or with the support of information systems by people in charge, expressly designated by the holder, who are authorized for the processing of personal data and/or through third parties, according to logics strictly connected to the mentioned purposes. The data is stored in electronic archives and, in print format on paper, in order to guarantee the security and confidentiality of the data. The processing of personal data is performed in compliance with the principles underlying GDPR.
6. Recipients of personal data
Recipients of personal data, according to art. 4, par. 1, nr. 9) GDPR, means the natural or legal person, the service or other body that receives communications of personal data, whether or not they are third parties. … Public authorities that can receive communication of personal data in the context of a specific investigation in accordance to the Union or Member State Law are not considered recipients; the processing of such data by the mentioned public authorities is in compliance with the applicable data protection standards according to the purposes of the processing.
It should be pointed out that, related to the above mentioned purposes the candidate's personal data can be subject for communications to recipients according to the collaboration relationship with the holder or completion of legal obligations. These recipients are bound by the most absolute confidentiality regarding any information they can become aware of and the categories are indicated below.
- Authorities, public administrations, supervisory and control bodies for their institutional purposes.
- Associated companies, subjects, consultants, consulting firms, professional offices that collaborate with the holder to achieve the above mentioned purposes and to complete legal obligations.
- Subjects that provide services for the information system management of the holder.
- Professionals qualified for the purpose of study and resolution of possible legal and contractual problems.
- Banks or similar organisations.
- Health organisations.
7. Place of data processing
The data processing activity is performed within a member state of the European Union (EU) or within a member state of the European Economic Area (EEA).
8. Data dissemination and communication
Your personal data are subject to neither dissemination nor transfer.
Communication to third parties, different from the holder and the supervisors - internal or external to the holder's organisational structure - identified and appointed according to articles 24 and 28 GDPR, is provided where necessary.
Anyway, the processing by third parties will be carried out in compliance with the principles of correctness, proportionality and necessity, as well as in compliance with the laws in force.
9. Preservation times
The data will be preserved according to the principle of proportionality and in any case during the period necessary to carry out the purposes referred to in art. 2 of this informative report and not later than six months from receipt of the curriculum vitae.
10. Data security
The holder adopts technical and organisational measures for data protection in order to prevent their loss, illicit or incorrect use and unauthorised access.
11. Rights of the concerned party
It is informed that, according to art. 13, par. 2, letter b) GDPR, related to the processing of the personal data in question, in order to guarantee a correct and transparent processing the following rights can be exerted:
11.1. Right to information and access (ex art. 15 GDPR): in order to obtain information from the processing holder regarding the existence or not of your data processing as well as access to your personal data and information regarding the purposes of the processing, the recipients or categories of recipients who the data is transmitted to.
11.2. Right to rectification (ex art. 16 GDPR), to erasure (ex art. 17 GDPR) and to restriction (ex art. 18 GDPR): in order to require the processing holder to rectify and erase your personal data and processing restriction.
11.3. Right to portability (ex art. 20 GDPR): for the purpose to receive in a structured, commonly used and readable format your personal data send to the processing holder from an automatic device and the right to transmit such data to another holder, provided that this operation is technically feasible.
11.4. Right to object (ex art. 21 GDPR): for the purpose to object the processing of your data.
For the exercise of the rights referred to art. 13, par. 2, letter b) and e) GDPR, you can write to Creasens S.r.l. with sole shareholder (F.C.– VAT: 020407440037) with registered office in Gattico (NO), 28013, via Maggiate nr. 22, or to the following e-mail address: [email protected] or contact the holder at the following telephone number 0322 831681.
12. Right to complain or recourse
According to art. 13, par. 2, letter d) GDPR and art. 140 bis Legislative Decree nr. 196/2003, as amended by Legislative Decree nr. 101/2018, it also represents that if data processing violates the European Regulation or the Code regarding the protection of personal data, a complaint can be proposed to the Privacy Authority, pursuant to art. 77 GDPR or, alternatively, appeal to the judicial authority.
13. Consensus and right of withdrawal of the consent
According to articles 6 and 7 of GDPR the consensus for the processing of personal data is necessary, for the purpose referred to art. 2 of this informative report.
The consent is revocable at any time and without giving reasons, forwarding the declaration of withdrawal to the following e-mail address: [email protected]
Withdrawal of the consent does not affect the legality of the processing based on the same prior to the withdrawal.
I declare to have read and understood the Informative report pursuant to art. 13 GDPR
I allow the data processing for the purposes referred to art. 2 letter a), of this informative report.
I allow the data processing for the purposes referred to art. 2 letter b), of this informative report.
