According to articles 13 and 14 of EU Regulation no. 679/2016 (“GDPR”) and subsequent amendments, Gli Allori di Montalbano Srl with headquarters in via Nardini 11, 51035 San Baronto Lamporecchio (PT) VAT number 01013950470, as Data Controller (hereinafter “Data Controller”), provides the following information.
You are kindly asked to provide a CV with relevant information and details in order for us to screen your profile.
Your details will be processed as follows:
Purpose of the processing
Your data are processed to carry out the research and selection of candidates, including future selections, in relation to job openings and the evaluation of the submitted applications, as part of pre-contractual measures at the request of the interested party.
Treatment methods
The processing of personal data is carried out by means of the operations indicated in the art. 4 no. 2) GDPR.
Personal data will be filed for a maximum period of 36 months starting from the date of receipt of a CV, or from the date of the last update made by the applicant, without prejudice to the right to request its deletion at any time.
The Processing is carried out with electronic and manual systems according to the principles of correctness, lawfulness and transparency.
Data access
Personal data may be made accessible for the following purposes:
- to employees and collaborators of the Data Controller, in their capacity as data processors;
- to third-party companies or other subjects - by way of example: subjects who provide services for the management of the IT system; professionals in the field of assistance and consultancy relationships; private subjects directly involved in the performance of the service or entitled to know the data according to the law, in their capacity as external Data Processors.
Data communication
The data collected will not be disclosed; without the need for express consent - art. 6 lett. b) and c) GDPR - the Data Controller may communicate personal data, for the purposes referred to in the art. 2 a: Inspection Authorities, Judicial Authorities, as well as to those subjects to whom communication is mandatory by law and/or for the execution of the mandate. These subjects will process the data in their capacity as independent data controllers.
Data transfer
Personal data is filed in paper archives located at the Company's headquarters and on servers located within the European Union.
In any case, it is understood that the Owner, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
Rights of the interested party
We inform you that by sending a request to the e-mail address [email protected], you will be able to inquire about - where the conditions are met - the rights recognized by the Applicable Regulations including that of (i) obtaining confirmation whether or not a processing is in progress of your personal data. In this case, you are allowed to get your personal data - including a copy of the same - and communication, among others, of the following information: purposes of the processing, categories of personal data processed, third parties who have received/will receive your details, data retention period, (right of access - article 15 of the GDPR); (ii) obtain, without unjustified delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data (right of rectification - article 16 of the GDPR); (iii) obtain, without unjustified delay, the cancellation of personal data concerning you (right to cancellation - article 17 of the GDPR); (iv) obtain the limitation of processing (right to limitation of processing - article 18 of the GDPR); (v) receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you, transmit them to another owner without impediments and, where technically feasible, obtain that your personal data are transmitted directly by Prometeia to another owner, if the processing is based on consent and is carried out by automated means (right to data portability - article 20 of the GDPR); and (vi) lodge a complaint with the Guarantor Authority for the protection of personal data (www.garanteprivacy.it) or with the Judicial Authority.
