Candidate privacy policy
Candidate information pursuant to Article 13 of the EU Regulation 2016/679
Contacts
The Data Controller is Casa E. Mirafiore & Fontanafredda s.r.l. with registered office at Via Alba 15, 12050 Serralunga d’Alba, VAT number 01197120528, registered with the Cuneo business registry and with the C.C.I.A.A. of Cuneo – REA CN-265953, in the person of the legal representative pro tempore, (hereinafter “Data Controller”), e-mail privacy@fontanafredda.it
The company has appointed a Data Protection Officer; e-mail: privacy@fontanafredda.it.
Data collected
The Data Controller may collect and process the following personal data when recruiting personnel:
- candidate identification data (first name, last name, place and date of birth, picture included in CV);
- contact data (residential address, e-mail, telephone);
- data related to educational background;
- data related to work experience; – special categories of data entered in the CV by the candidate (by way of example but not limited to, information concerning health, racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership in parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature). It should be noted that the Data Controller does not process special categories of data unless they are strictly necessary for the work purpose (e.g., in the case of a protected category). Therefore, such special data will not be considered for the purpose of the application, unless prior and appropriate declaration of explicit consent by the candidate. If not strictly necessary for the application, you are asked not to enter them.
Purpose of processing and legal basis
The Controller may collect and process the candidate’s personal data:
- in order to assess the consistency of the candidate’s profile with the job position and possible recruitment for the role for which the application was made. The legal basis for the processing can be found in the execution of pre-contractual measures between the Controller and the data subject. (pursuant to Art. 6.1(b) GDPR);
- in order to fulfill obligations required by law by a regulation, by EU legislation or by an order of the Authority (e.g.: to provide for health and safety in the workplace, ex art. 6.1, lett. c) GDPR);
- in the legitimate interest of the employer (e.g.: safety, asset protection, exercise of defense – ex art. 6.1(f) GDPR);
- with explicit consent – art 6.1(a) of the GDPR, for roles that may become available in the future, this consent is optional.
The candidate may withdraw consent at any time.
The occurrence of the processing of personal data of third parties indicated on the resume by the candidate is possible. On this point, the candidate guarantees as of now that such processing is based on an appropriate legal basis of the EU Regulation 2016/679.
Regarding the newsletter activity in case you have authorized the sending, please consult the information on the website.
Mode of processing and storage of personal data
Personal data are processed both on paper and electronically (servers, databases, application software etc.).
Personal data will be processed and stored, from their receipt, in accordance with the principles of proportionality and necessity and for the time strictly necessary for the pursuit of the purposes indicated above. Unless otherwise specified by law which provides for different periods, candidates’ CVs will be kept for a maximum period of two years, at the end of which period the data will be permanently deleted.
The Controller does not carry out any processing based solely on automated decisions, including profiling, that produces legal effects concerning or significantly affecting the candidate. Personal data are also not processed for marketing purposes (e.g., sending commercial promotional communications).
Categories of data recipients
Authorised internal parties
Personal data may be accessed by employees/collaborators who assist the Owner in the selection process. These individuals have been informed and trained on the importance of compliance with the principles and rules regarding the processing of personal data.
External Data Processors
The Owner may disclose the data subject’s information to any external natural or legal persons it outsources for personnel selection.
If the supplier accesses the data, it will do so while complying with applicable data protection regulations and the instructions given by the Controller. The Controller does not disclose personal information to other third parties without the consent of the data subject, unless required to do so by law or by an Authority.
Transferral of data to countries outside the EU
The data subject’s data is not transferred abroad and to countries outside the EU or to an international organization.
Data subject’s rights
The data subject may assert his/her rights as expressed in Articles 15 et seq. of EU Regulation 2016/679, by contacting the Data Controller, by writing an email to privacy@fontanafredda.it or by sending a registered letter with return receipt to Casa E. Mirafiore & Fontanafredda S.r.l., Via Alba, 15 – 12050 Serralunga d’Alba (Cn), Italy. The data subject has the right, at any time, to ask the Data Controller for access to his/her personal data, rectification, cancellation, limitation of processing. In addition, in the cases provided for, he/she has the right to object, at any time, to the processing of data (including automated processing, e.g., profiling), as well as to revoke the consent given without prejudice to the lawfulness of the processing based on the consent given previously. The data subject has the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) and/or other competent Supervisory Authority under the Regulations. The data subject has the right to the portability of his/her data, in which case the Data Controller will provide in a structured, commonly used and machine-readable format the personal data concerning the data subject.
The policy may be amended and updated. Any updates will be posted on this page.