PERSONAL DATA TREATMENT INFORMATION NOTE, PURSUANT TO ART. 13 EU REG. 2016/679
Your personal data submitted by filling out the online application fields, and those obtained from the resume you submitted, shall be processed by the Controller in compliance with technical and organizational measures suitable to the processing risk, and, in particular, in compliance with the provisions set forth by art. 32 of the GDPR.
In particular, the personal data collected (hereinafter “Data”) shall include:
– personal and contact details requested in the free application procedure (e.g. first and last name, date of birth, phone, email address, gender, domicile);
– identification data and any other information you included in your resume or submitted during the recruitment process (e.g. picture, experience acquired, education);
Purpose of the processing and legal basis
The personal data collected can be processed by the Data Controller:
a) for recruitment purposes;
b) for employment or cooperation-related purposes.
For the purposes described in point a), your consent is required to process the data.
For the purposes described in point b), your consent is not required, because it’s based on a contract.
Processing procedures and retention time
Processing can be carried out on paper and/or on electronic or automatized means, and it can include any operation pursuant to art. 4, point 2, of the GDPR, except for diffusion.
To pursue the purposes described in point a), the data collected and contained in your resume will be retained for the period necessary for its treatment.
To pursue the purposes described in point b), in case of hiring, the data may be preserved for the time required to fulfill all contractual and regulatory obligations.
Communication and diffusion
The personal data collected may be notified to departments or offices other than those you submitted your initial application for, including departments or offices where STAM S.p.A. or one of its connected companies carry out their activities, currently and in the future. Furthermore, the data submitted by you for the aforementioned purposes may be disclosed to recruiting agencies appointed by the Data Controller that, in any case, guarantee the adoption of likewise safety and confidentiality criteria. Your personal data may be disclosed to other people authorized to process them by the Controller (e.g. HR department staff) and specifically instructed on this matter. Your data shall not be diffused in any way.
Data subject’s rights
As data subject, under the conditions laid down, you may exercise the rights set forth by articles 15 and following of the GDPR at any time, including the right to access, edit, cancel, restrict the processing, oppose, and the right to data portability, by sending a notification to: firstname.lastname@example.org
Furthermore, you have the right to submit claims against the Data Protection Authority.
You state that the personal data you submitted are true and correct and that you did not voluntarily omit any information relevant for the purpose of the recruitment. Any inaccurate data may render your application non-assessable.