Privacy Information Document For Candidates
ITALCARRELLI S.p.A., in the person of its legal representative pro tempore, VAT no. 02442470247, registered office in Chiampo (Italy), in Via Monte Rosa 9, as the data controller, (hereinafter referred to as “Data Controller”),
in accordance with the Regulation (EU) 2016/679 related to the protection of natural persons with regard to the processing of personal data (hereinafter referred to as “GDPR”), that your data will be processed in compliance with the aforementioned legislation and in the manner and for the purposes specified below:
1 – SUBJECT OF THE PROCESSING AND NATURE OF THE DATA
ITALCARRELLI S.p.A. will proceed with the processing of the personal data which you have voluntarily entered while filling in the self-application form on the company website, located under the section “Career opportunities”. Through this form you will have the possibility of filling in pre-set fields concerning your personal data, telephone numbers and e-mail addresses, as well attaching and sending your curriculum vitae.
Your personal data are, therefore, acquired and processed in order to assess the possible interest in the establishment of a future contractual relationship, the content of which will be determined later.
The processing may also concern special categories of personal data, pursuant to Art. 9 of the GDPR, such as, for example, the health data strictly necessary for recruitment purposes or for assigning the subject to certain protected categories.
The processing of any special categories of data will be carried out in accordance with the requirements of Art. 9 para. 2 letter a) of GDPR, i.e. subject to your explicit consent and in accordance with the pro tempore authorisations in force regarding the protection of personal data. In this regard, we kindly invite you not to transmit this type of information unless it is strictly necessary for the purposes of your application; otherwise, should you decide to provide it, you will be asked to give your consent in accordance with the current legislation on the protection of personal data.
If you do not give explicit consent to the processing of particular categories of your personal data by the Data Controller, your application cannot be considered.
We would also like to inform you that the optional, explicit and voluntary transmission of documents, certificates, reference letters and curricula involves the subsequent acquisition of personal data. The transmission of such information may potentially result, among other things, in the accidental processing by the Data Controller of personal data related to third parties. In relation to this hypothesis, you become the autonomous data controller, therefore bearing all the obligations and responsibilities specified by the law. In this sense, you undertake to indemnify and exempt the Data Controller from any dispute, claim, request for compensation for damage caused by processing, etc., presented by the third parties whose personal data have been processed as a consequence of sending your application in violation of the applicable data protection regulations.
With particular reference to the personal data of third parties provided and/or processed by you, you undertake to guarantee from now on – assuming all the related responsibilities – that this particular case of processing is established by a suitable legal basis pursuant to art. 6 of the GDPR which legitimizes the processing of the information in question.
2 – PURPOSE OF THE DATA PROCESSING
Your personal data are processed, for the following purposes, according to the legal basis of reference.
2.1 Execution of pre-contractual measures (Article 6(b) of the GDPR).
The Data Controller will process the personal data received only for purposes of personnel selection and for the evaluation of the candidate’s profile in relation to the open positions, as well as for the possible establishment of the subsequent employment relationship. The processing of the candidates’ personal data which is present in the curricula, within the limits of the purposes identified above, does not require explicit consent, in accordance with Article 6, letter b) of the Regulation, as well as in virtue of what is clarified by Article 111-bis of Italian Legislative Decree no. 196/2003 and subsequent amendment by Italian Legislative Decree no. 101/2018.
3 – RECIPIENTS, OR CATEGORIES OF RECIPIENTS, OF THE DATA
During the management of your data, the latter may come to the knowledge of third-party recipients. More precisely, the data may be communicated to recipients belonging to the following categories:
• Professionals and consultants in legal, tax and labour matters;
• Employment agencies;
• Competent authorities for the fulfilment of legal obligations and/or provisions dictated by public bodies (Inland Revenue Agencies, etc.);
• External parties who, even occasionally, manage / support / assist the Owner with the administration of the computer system and telecommunication networks (including the electronic mail).
The subjects belonging to the above categories perform the function of Data Processor, or operate in total autonomy as separate Data Controllers. The list of any data processors is constantly updated and available at the registered office of the Data Controller.
4 – METHOD OF DATA PROCESSING
Data will be processed both with manual and/or computerized and telematic tools, as well as with organization and processing logics strictly related to the aforementioned purposes and, in any case, in such a way as to guarantee the security, integrity, availability and confidentiality of the personal data.
In compliance with the provisions of art. 5 paragraph 1 letter e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the time required for the achievement of the purposes for which the personal data are being processed.
The company’s IT and organisational system guarantees full compliance with the security measures suitable for preserving your data.
Should the selection process be successful, your personal data will be processed by the Data Controller according to the methods indicated in the Privacy Information Document prepared for employees and collaborators.
5 – PROVISION OF THE DATA
The provision of your personal data for the processing purposes specified in point 2.1 is absolutely optional, but failure to provide them, or providing them partially or inexactly, may make it impossible to consider your application as part of any staff selection and assessment procedure.
6 – DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANISATION
The personal data provided shall not be transferred outside the European Union.
7 – DATA RETENTION PERIOD
The personal data shall be kept for a maximum period of 2 years or for the period established by the legislation or measures issued by the Supervisory Authority.
8 – RIGHTS OF THE DATA SUBJECT
You may exercise your rights, as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, and in particular, you may, at any time:
o access your personal data;
o obtain their rectification, or erasure, or the restriction of their processing;
o oppose the processing; the portability of data;
o withdraw consent: the withdrawal of consent shall not affect the lawfulness of the processing based on the consent given before the withdrawal of consent.
To exercise your rights, send a request to the Data Controller, to the following contacts:
ITALCARRELLI S.p.A., Via Monte Rosa 9, 36072 Chiampo, Vicenza
+39 0444 623393
Finally, we remind you that you always have the right to lodge a complaint with the Supervisory Authority (Data Protection Authority), pursuant to art. 77 of the GDPR, if you believe that the processing of your data is contrary to the legislation in force.