NOTICE TO CANDIDATES
PURSUANT TO ARTICLES. 13 AND 14 OF EU REGULATION 2016/679
Pursuant to Articles 13 and 14 of the EU Regulation No. 2016/679 on the protection of personal data (hereinafter the "GDPR" or the "Regulation"), Intrac S.p.A. (hereinafter the "Company" or the "Data Controller") informs you that the personal data relating to you (hereinafter the "data"), which have been provided directly by the Data Subject or collected from third parties, will be processed in compliance with the provisions of the Regulation and in accordance with the information below.
- DATA CONTROLLER
The Data Controller is Intrac S.p.A. (VAT no. 01085900296), with registered office in Rovigo (RO), Via Achille Grandi No. 24.
- PURPOSE AND LEGAL BASIS OF PROCESSING
Personal Data will be processed for the following purposes:
- collection of candidates' data for personnel search purposes and possible finalisation of a contract;
- archiving of curricula for future personnel recruitment needs;
The processing of the data contained in the curriculum you have spontaneously sent or made available for consultation through structures specialising in personnel recruitment does not require consent, pursuant to Article 111-bis of Legislative Decree 196/2003.
The data contained in the curriculum and collected during the interview will be processed for pre-contractual purposes pursuant to Art. 6 c.1 lett. b).
- DATA PROCESSING METHODS
The processing is carried out using IT tools and hard copy materials, in compliance with data confidentiality and security.
Personal data processed includes information contained in the curriculum vitae, the accompanying email, and any additional information you have voluntarily provided to better qualify your application (such as images, certificates, etc.).
Please note that, for the purposes referred to in point 2, data defined as "special" under Article 9 of the Regulation are not required. Should such data be voluntarily provided by the Data Subject, they will be processed in accordance with Article 9(2)(b).
The provision of data is optional; however, refusal to provide certain data may result in the impossibility of participating in the selection procedures or an incorrect assessment of your professional qualifications.
- DATA RETENTION PERIOD
The data will be processed for the time necessary to contact you, conduct the interview, and retain CVs for future personnel recruitment needs, for a maximum period of 24 months. After this period, your data will be deleted from the Data Controller's paper and digital archives, unless you update your CV.
- COMMUNICATION AND DISSEMINATION OF DATA
The data collected will be processed by trained and authorized personnel of the Data Controller, and under no circumstances will it be communicated, disclosed, assigned, or otherwise transferred to third parties for unlawful purposes, or, in any case, without providing appropriate information to the Data Subjects and obtaining their consent where required by law. Personal data will not be transferred abroad, to countries or international organizations outside the European Union, except in compliance with Chapter V of the GDPR. Your data may be managed by companies used by the Data Controller for selection, recruiting, and candidate evaluation purposes, which operate as autonomous Data Controllers.
- RIGHTS OF THE DATA SUBJECT
Articles 15-22 of the Regulation grant the data subject the exercise of the following rights:
- to request confirmation as to whether or not personal data concerning him/her exist (Art. 15 par. 1)
- to obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and when possible, the storage period (Art.15 par.1 lett a, c)
- obtain rectification and erasure of data (Art. 16 and 17)
- obtain the restriction of processing (Art. 18);
- obtain from the data controller information on the recipients to whom the personal data have been transmitted and any rectification or erasure or restriction of processing; (Art. 19)
- obtain the portability of data, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance (Art. 20)
- object to automated decision-making concerning natural persons, including profiling (Art. 21 and 22).
- EXERCISE OF DATA SUBJECTS' RIGHTS
The above rights are exercised by making a request to the Data Controller, either directly or through an authorized person, orally or by sending an email to privacy@intrac.it. The request is made freely and without formalities by the data subject.
The request will be responded to within 30 days. If necessary, considering the complexity and number of requests, this period may be extended by an additional two months.
In order to exercise his/her rights, the data subject may have recourse to non-profit bodies, organisations or associations whose statutory objectives are in the public interest and which are active in the field of the protection of the rights and freedoms of the data subject with regard to the protection of personal data, conferring, to this end, the appropriate mandate. The data subject may also be assisted by a trusted person.
In order to know their rights, lodge a complaint and be kept up-to-date on the legislation on the protection of persons with regard to the processing of personal data, the data subject may contact the Personal Data Protection Authority by consulting the website at http://www.garanteprivacy.it/.