Source: https://people.elica.com/en/privacy-policy-gdpr.html
Timestamp: 2019-02-18 13:27:23
Document Index: 616844143

Matched Legal Cases: ['Art. 13', 'Art. 37', 'Art. 6', 'Art. 12', 'art. 20', 'art. 5', 'Art. 5']

Elica S.p.A., based in Via Ermanno Casoli n° 2 - 60044 Fabriano (AN) – Italia, C.F.REG.IMP. AN 00096570429 - SOC. CAP. 12,664,560 Euro, fully paid up Telephone +39 0732 610 1, Fax +39 0732 610 249, e-mail: elicaspa@sicurezzapostale.it (“ELICA”) may handle your personal data; therefore, as per the terms of aArt. 13 of European Regulation No. 679 of 2016 (the "Privacy Regulation" or GDPR) We hereby provide you with the following information.
The Data Controller is ELICA. The Data Protection Officer (pursuant to Art. 37 of GDPR) can be contacted at the following e-mail address: privacy@elica.com ("DPO"). The updated list of processing managers can be requested by e-mail from the processing controller at the following address: privacy@elica.com, or by contacting in Elica in writing at the addresses indicated.
3. Purpose and methods of processing
Your data will be processed in order to sign up to the site http://people.elica.com/, which contains offers of employment, the possibility to submit spontaneous applications, or for applying to specific positions advertised on the site. Your personal details are processed within the normal scope of personnel selection by the controller, in order to evaluate if your application can be transformed into an actual position of employment / work opportunity. Your photograph may be included in the company candidate management and personnel selection system (optional). Your data will be kept by the Controller for the period of time strictly necessary in relation to the purpose expressed above, subject to the need to keep it for a longer period in compliance with the legislation, including accounting legislation, in force. Your data will be processed in Italy and, in any case, within the EU.
4. Methods of processing and scope of disclosure
In relation to this purpose, the processing of personal data is carried out by persons specifically appointed, authorised and instructed in the processing, as well as by external parties (for example, personnel selection companies, external consultants for the processing of pay and contribution data, etc..), who may assume the status of independent Data Controllers or be appointed in writing as Data Processors; in any case, the processing will be carried out using manual, computer and telematic tools, with logics closely related to the purposes and in any case in order to ensure the confidentiality and security of personal data and in full and absolute compliance with current legislation in the area. Your data will be processed in Italy and, in any case, within the EU. Your data in particular will be included in a website, available at http://people.elica.com/, managed by a dedicated, proprietary technological system.
5. Required and Optional nature of supplying data and consequences of not giving consent and legal basis for processing.
With reference to the purposes described above, the supply of personal data is required, as without it it would not be possible to examine applications and create a position of employment/work placement with the interested party. The legal basis for processing is therefore for the analysis of the possibility of establishing a professional relationship / work placement with the interested party and their own request (pursuant to Art. 6, Comma 1, Letter b) of GDPR. It should be noted that with regards to selection activity, with your specific consent, Elica may process personal data that the Privacy Regulation classified as "special" as they could be used to detect, for example, a general state of health or specific conditions (e.g. physical issues, allergies, protected category status and level of disability) for the purposes of evaluating suitability for certain roles or the possibility of the interested party being employed where having protected category status. The giving of such consent is optional, but if such data is not supplied and consent is not given, selection for certain roles will be impossible, as mentioned specifically, when having protected category status. Again, with your specific consent and with reference to the selection activities, the Data Controller may further acquire and manage, among your personal data, one or more photographs to attach to your information acquired on the basis of application management, any interviews for personnel selection.
6. Who and for what reason we may share your personal data.
For the purposes of processing indicated above, and entirely within the limits of those purposes, your personal data may be shared, within Italy or the rest of the EU:
(i) with all parties involved with recruiting activities with a view to stipulating employment / work contract, nominated and instructed by writing and within the law by the Controller according to the methods provided for by company job descriptions;
(ii) to external consultants called to carry out the aforementioned activities, if not explicitly named as Processing Managers.
The parties indicated above, with whom your personal data will or may be shared (in so much as not designated as Data Processors), will handle your personal data as Data Controllers pursuant to the law, in complete autonomy, as third parties to processing carried out by Elica. A detailed and constantly updated list of these subjects, with an indication of their respective offices, is always available at the registered office of Elica S.p.A. Specifically, your data may be handled by Tonidigrigio S.r.l., Piazza della Repubblica 5 - 60035 Jesi (AN), VAT No. 02273060422, who may have access as processing managers. The data collected may be distributed electronically, including via the internet. Your personal data will not be published.
Articles 15 onwards of GDPR give the subject the right to obtain, using the methods established by Art. 12 of EU Regulation 2016/679:
confirmation of the existence or otherwise of personal data concerning him, even if not yet recorded, and their communication in intelligible form;
the indication of the origin of personal data, the purposes and methods of processing, the logic applied in the event of processing with the aid of electronic instruments and the identification data of the controller;
the updating, rectification, supplementation, cancellation, anonymization or freezing of data processed unlawfully - including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed -, certification that such operations have been notified, including as regards their content, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves an effort manifestly disproportionate to the protected right.
to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of collection;
to object, in whole or in part, to the processing of personal data concerning him for purposes of sending advertising materials or direct selling or for carrying out market research or commercial communication;
to lodge a complaint with the Guarantor for the protection of personal data in the cases provided for by the GDPR, by contacting the Guarantor for the protection of personal data, Piazza Venezia 11 - 00187 Rome. Website www.gpdp.it - www.garanteprivacy.it E-mail: garante@gpdp.it Fax: (+39) 06.69677.3785 Switchboard: (+39) 06.69677.1
to the portability of personal data within the limits set out in art. 20 of the Privacy Policy.
For a detailed and constantly updated list of the parties that may receive your personal data and to exercise your rights under Articles 15 onwards of GDPR, you may contact Elica S.p.A. as Data Controller using the contact details in point 1) and/or the DPO by sending a written request to the address in point 2)
Through the Website your data are processed in compliance with the applicable law and using appropriate security measures in compliance with the legislation in force also pursuant to art. 5 and 32 of the Privacy Regulation. In this regard, we confirm that suitable safety measures have been adopted to prevent access by unauthorised parties, theft, disclosure, unauthorised modification or destruction of the subject's data.
In compliance with Art. 5 Letter e) of GDPR, personal data for the purposes indicated will be kept for the time required to carry out said purposes, and in any case for a period no longer than 12 months from the last on-line update of your Curriculum Vitae.