Pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter the “GDPR”), Ecospray Technologies S.r.l. (hereinafter “Ecospray” or the “Controller”) hereby informs you that your personal data (hereinafter the “Data”), conferred by you or, on an occasional basis, collected from third parties (such as, merely by way of example, companies operating in staff searches and recruitment), will be processed in compliance with the provisions of the GDPR, of Italian Legislative Decree no. 196/2003 as subsequently amended and supplemented (hereinafter the “Privacy Legislation”), of Italian Law no. 300/1970 and in accordance with the following disclosure, as well as with all provisions issued by the Data Protection Authority, as applicable over time.
The Data Controller is Ecospray Technologies S.r.l., with registered office at Via Ricotti, 5 – 27058 Voghera (PV), tel. +39 0131 854611, e-mail: firstname.lastname@example.org. The updated list of any data processors is available at the office of the Data Controller.
The Data processed as per this disclosure comes under the following categories of personal data:
If the Curriculum Vitae (hereinafter the “CV”) obtained by the Controller should in any case contain data coming under these categories or other types of data (e.g. the applicant’s photograph), where it is impossible to separate the data in order to assess professional aptitude, the Controller will process such but only if the applicant has given due consent to such.
Data will be processed to verify the basis for hiring and/or starting a collaboration, to manage the selection procedures of collaborators and employees and to contact you using the contact data you supplied in order to schedule any interviews as may be necessary.
The data you supplied is collected and processed in connection with the specific search and selection process for which it was transmitted, as well as to assure future employment opportunities. Data processing for this purpose does not require your consent in accordance with Art. 6, letter b) of the GDPR insofar as it is necessary to execute the pre-contractual measures adopted on the request of the data subject and in connection with the data contained in the CV submitted spontaneously to potentially establish a contract of employment/collaboration.
This processing is also supported by the legal basis envisaged by Art. 6, paragraph 1, letter f) of the GDPR, in accordance with which, over time, the Controller may have a legitimate interest in performing such processing, even without your consent.
Your Data is processed using both paper and computerized means through the collection, recording, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication erasure and destruction of the Data.
The conferral of the Data for the purposes of this disclosure may take place following the receipt, by post, e-mail, direct delivery, web form or any other means of communication, of information about work experience and education of the applicant, given on the CV.
CVs may be received following spontaneous submission or in response to a staff search and selection notice. Additional personal data may be collected subsequently from the data subject during the personal interview as part of the selection process.
Conferral of the Data for the purpose of this disclosure is optional. However, failure to confer such would make it impossible to verify the basis for hiring and/or starting a collaboration and, therefore, to establish a contract of employment with the Controller.
Data may be made accessible, disclosed or communicated to the following subjects, who will be appointed by the Controller, as applicable, as processors, in charge of processing or system administrators:
The Data collected will not be disseminated.
The Data will be circulated within EU Member States. Data may also be disclosed to subsidiaries of the group of which the Controller is a member, or to companies with which the Controller entertains commercial relations, situated in countries outside the European Union. To ensure a suitable level of protection of the Personal Data, transfers will take place following adequacy decisions approved by the European Commission or the adoption of Standard Contractual Clauses prepared by the European Commission.
In the absence of an adequacy decision or appropriate safeguards pursuant to Art. 46 of the GDPR, the transfer will only be made if it is necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject’s request; (Art. 49, paragraph 1, letter b).
Data will be stored in the management systems used by the Controller for three years following collection. Once this deadline has passed, your data will be erased.
If the selection process should be successful, your Data will be processed by the Controller in the manner indicated in the privacy disclosure prepared for employees and collaborators.
Data subjects have the rights set out in Articles 15 to 20 of the GDPR. In accordance with these provisions, each data subject has the right:
In the above cases, where necessary, the Controller will notify the third parties to whom your personal data is disclosed or any exercise of rights by you, with the exception of specific cases (e.g. when such fulfillment proves to be impossible or entails a manifestly disproportionate use of means with respect to the right protected).
You can exercise the above rights at any time: