INFORMATION ACT

- Data provided directly by the candidate -

Rossi S.p.A., with registered office in Modena, Via Emilia Ovest, no. 915 P. VAT 01855520365, as the Data Controller, informs you in accordance with Art. 13 EU Regulation no. 2016/679 - GDPR - that your data will be processed in the following manner and for the following purposes:

1. Object of Treatment

The Data Controller processes personal data, i.e. "identifying" data - for example: first name, last name, tax code, address, telephone, e-mail, etc. - as well as special ones - for example: data relating to health status, trade union membership, racial and ethnic origin, religious beliefs, political party membership, holding elected public office, etc. - as well as the photo of your person, which you may have communicated to the Data Controller on the occasion of your candidacy.

2. Purpose of processing.

Personal data will be processed in order to proceed with the verification of prerequisites for employment with the Data Controller Company.

3. Method of treatment.

The processing of personal data is carried out by means of the operations specified in Art. 4 n. 2) GDPR and specifically: collection, storage, consultation, communication, deletion and destruction of data.

Personal data are subject to both paper and electronic processing.

The Holder will process personal data for as long as necessary to verify the conditions for proceeding to employment and in any case will retain them for no longer than 24 months after their collection, including for the purpose of re-evaluating the application.

In any case, Processing will be based on the principles of fairness, lawfulness and transparency and will be carried out with the help of tools and procedures that avoid the risk of loss, unauthorized access, unlawful use and dissemination.

4. Data Access.

Personal data may be made accessible for the purposes of Art. 2 to the Trustees, employees and collaborators of the Owner in their capacity as authorized subjects of the processing.

5. Data transfer

Personal data are stored in paper files located at the Company's headquarters in Modena and on servers located within the European Union.

It is in any case understood that the Holder, should it become necessary, will be entitled to move servers and archives even outside the EU. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

6. Nature of data provision and consequences of refusal to respond

The provision of personal data for the purpose expressed in Art. 2 is mandatory and, therefore, without it we will not be able to evaluate your application.

7. Rights of the data subject

In connection with the processing of personal data you have the right:

-to be informed about: data and location of the Data Controller; the purposes and methods of processing; data and location of the Data Processor;

-to obtain, by the Owner or the Manager, without delay:

1) confirmation of the existence of the processing of personal data concerning him/her and communication in an intelligible form of the same data and their origin, as well as and the purposes on which the processing is based;

2) the deletion of personal data concerning him or her when: i) the data are no longer necessary in relation to the purposes for which they were collected, ii) consent has been withdrawn and there is no other legal basis for the processing, iii) the data have been processed in violation of the law, iv) the data subject has objected to the processing and there is no overriding legitimate reason for the processing v) the data controller is under a legal obligation to delete personal data;

3) updating, rectification or, if interested, integration of data;

4) certification that the operations referred to in numbers 2) and 3) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right;

- to object on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, pursuant to Art. 6(1)(e) or (f);

- to object to the processing of personal data concerning him or her for direct marketing purposes;

- To file a complaint with a supervisory authority;

- to receive in a structured, machine-readable format personal data concerning him or her and to transmit such data to another Data Controller without hindrance from the Data Controller to whom he or she originally provided them. When exercising their rights regarding data portability, the data subject has the right to obtain direct transmission of personal data from one Data Controller to another, if technically feasible;

- not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or is likely to affect him or her in a similar significant way.

The Controller shall provide a copy of the personal data being processed; in case of additional copies requested by the data subject, the Controller may charge a fee based on the actual administrative costs incurred.

8. Ways of exercising rights

You may exercise the above rights at any time by sending to the attention of the Data Controller:

- a registered letter with return receipt. To Rossi S.p.A., Modena, Via Emilia Ovest, no. 915;

mailto:[email protected] - an e-mail to [email protected];

- a PEC to [email protected].

9. Owner and Manager

The Data Controller is Rossi S.p.A., with registered office in Modena, Via Emilia Ovest, no. 915.

The updated list of Data Processors is kept at the registered office of the Data Controller.

10. Data Protection Officer

The Company has appointed as DPO (Data Protection Officer) Lawyer. Emanuela Arduini, who can be contacted at the following email address [email protected]

Rossi S.p.A.