Information on the processing of personal data relating to Curriculum Vitae
ESI srl , with registered office in Albisola Superiore (SV), Corso Ferrari, 74/6, (PIVA 11264680155, CF 01099380105) as Data Controller is required, pursuant to the Regulations 2016/679, to provide you with appropriate information in relation to personal data relating to your curriculum vitae that you have decided to spontaneously provide.
Notwithstanding that this information does not constitute a commitment or promise of future employment, we inform you of the following:
1. The purpose of data processing
The processing of personal data is aimed exclusively at personnel selection and evaluation activities as well as at any professional recruitment or collaboration in any capacity.
2. Treatment of particular personal data
Any “particular” data as defined pursuant to art. 9 par. 1 of EU Regulation 2016/679, i.e. data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person, spontaneously provided by you, will not be processed in the absence of an express written declaration that consents ESI srl to the relative treatment.
3. Processing methods
The processing of personal data will be carried out in compliance with the confidentiality obligations, national and European Union regulations through the operation or set of operations, indicated by art. 4 par. 1 n. 2 of EU Regulation 2016/679 and applied to data or sets of personal data such as: the collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, comparison or interconnection, limitation, deletion or destruction.
The data processing operations may be carried out by analogue-paper means or with the support of computerized, electronic or in any case automated means.
4. Data communication
4.1.Personal data may also be communicated to the persons in charge of processing designated by the Data Controller, by means of a written deed with which they will be authorized to process personal data under the direct authority of the Data Controller.
4.2. Personal data are not subject to disclosure or to any fully automated decision-making process including profiling.
4.3. The interested party may request information regarding the processing of their personal data by written communication to the Data Controller in the following ways:
– by registered letter with receipt of receipt addressed to: ESI SPA Albissola Marina (SV), in Via delle Industrie 1 (postcode 17012);
– by email to [email protected]
5. Rights of the interested party
Pursuant to Chapter III of EU Regulation 2016/679 art. from 15 to 22, under the conditions and in the manner specified therein, the interested party has the right:
(i) to ask the Data Controller for access to your personal data and information relating to them; the correction of inaccurate data or the integration of incomplete ones; the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in art.17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in art.18, paragraph 1 of the GDPR);
(ii)request and obtain from the Data Controller, in the hypothesis in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means, your personal data in a structured and readable format by automatic device, also for the purpose to communicate such data to another data controller (so-called right to the portability of personal data);
(iii) object at any time to the processing of your personal data in the event of particular situations concerning you;
(iv)withdraw consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data, or particular categories of data. The treatment based on consent and carried out prior to the revocation of the same retains, however, its lawfulness;
(v) to lodge a complaint with a supervisory authority (Authority for the protection of personal data).
6. Data retention period
All personal data will be kept for a period of time not exceeding the achievement of the purposes referred to in point 1 above.
ESI srl will carry out periodic checks, every 5 years, regarding the suitability of the curriculum vitae received, reserving for the outcome of the same, the deletion of personal data from its archives, whether paper or computerized, if they do not correspond to the professional profiles sought. from the company.
7. Data
Controller The data controller of your personal data is ESI srl with operational headquarters in Albissola Marina (SV), in Via delle Industrie 1 (CAP 17012), email [email protected] , which for the purposes of the law in question elects its domicile at the operational headquarters of the company.
The updated list of data processors and persons in charge of processing is kept at the Data Controller’s operational headquarters.
ESI srl
The Data Controller
EU Regulation 2016/679
Art. 15
(Right of access by the interested party)
1. The interested party has the right to obtain from the data controller confirmation that personal data is being processed or not. concern him and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations;
d) when possible, the retention period of the personal data envisaged or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
g) if the data are not collected from the data subject, all available information on their origin;
h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.
2. If personal data are transferred to a third country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to Article 46 relating to the transfer.
3.The data controller provides a copy of the personal data being processed. In case of further copies requested by the interested party, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 must not affect the rights and freedoms of others.
Art. 16
(Right of rectification)
The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17
(Right to cancellation “right to be forgotten”)
1. The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel without undue delay personal data, if one of the following reasons exists:
a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing ;
c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;
d) the personal data have been unlawfully processed;
e) the personal data must be deleted to fulfill a legal obligation under the law of the Union or of the Member State to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in article 8, paragraph 1.
2. The data controller, if he has made personal data public and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and the implementation costs, take reasonable measures, including technical ones, to inform the data controllers who are processing personal data of the request of the interested party to delete any link, copy or reproduction of his personal data.
3.Paragraphs 1 and 2 do not apply to the extent that the processing is necessary:
​​a) for the exercise of the right to freedom of expression and information;
b) for the fulfillment of a legal obligation that requires the processing provided for by the law of the Union or of the Member State to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority of which the data controller is invested;
c) for reasons of public interest in the field of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3);
d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right referred to in paragraph 1 is likely to render impossible or seriously prejudice the achievement of the objectives of this treatment;
e) for the assessment, exercise or defense of a right in court.
Art. 18
(Right to limitation of treatment)
1. The interested party has the right to obtain from the data controller the limitation of treatment when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
c) although the data controller no longer needs them for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
2.If the processing is limited pursuant to paragraph 1, such personal data are processed, except for storage, only with the consent of the interested party or for the ascertainment, exercise or defense of a right in court or for protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.
3. The interested party who has obtained the processing limitation pursuant to paragraph 1 is informed by the data controller before said limitation is revoked.
Art. 19
(Obligation to notify in case of rectification or cancellation of personal data or limitation of processing)
The data controller communicates to each of the recipients to whom the personal data have been transmitted any corrections or cancellations or limitations of the processing carried out pursuant to Article 16, Article 17, paragraph 1, and Article 18, except for this proves impossible or involves a disproportionate effort. The data controller informs the data subject of these recipients if the data subject requests it.
Art. 20
(Right to data portability)
1.The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom he provided them if:
a) the processing is based on consent pursuant to article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), or on a contract pursuant to article 6, paragraph 1, letter b); and
b) the processing is carried out by automated means.
2.In exercising their rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
3. The exercise of the right referred to in paragraph 1 of this article is without prejudice to art. 17. This right does not apply to the processing necessary for the performance of a task in the public interest or connected to the exercise of public authority vested in the data controller.
4. The right referred to in paragraph 1 must not affect the rights and freedoms of others.
Art. 21
(Right to object)
1.The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. The data controller refrains from further processing personal data unless he demonstrates the existence of compelling legitimate reasons for proceeding with the processing that prevail over the interests, rights and freedoms of the data subject or for ascertaining, exercising or the defense of a right in court.
2.If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him for these purposes, including profiling to the extent that it is connected to such direct marketing.
3. If the interested party objects to the processing for direct marketing purposes, the personal data are no longer processed for these purposes.
4. The right referred to in paragraphs 1 and 2 is explicitly brought to the attention of the interested party and is presented clearly and separately from any other information at the latest at the time of the first communication with the interested party.
5.In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, the interested party can exercise his right to object by automated means using specific techniques.
6. If personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1, the interested party, for reasons connected to his particular situation, has the right to object to the processing of personal data that concerns him, except if the processing is necessary for the performance of a task in the public interest.
