Reference regulation:
-EU Regulation No. 679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter EU Regulation); -Law No. 300 of May 20, 1970, as most recently updated with the amendments provided by Legislative Decree No. 185 of September 24, 2016 (hereinafter Workers’ Statute);
-Legislative Decree No. 81 of April 9, 2008, Consolidated Act on Occupational Health and Safety (hereinafter Act on Occupational Health and Safety);
-Authorization to process sensitive data in work relations of December 15, 2016, by the Authority for the Protection of Personal Data (hereinafter Authorization of the Authority for the Protection of Personal Data).
We wish to inform you that, after sending of your CV, in order to verify the possibility of transforming your application into an employment relationship/service provision in compliance with article 13 of the European Regulation No. 679 of 2016 (the “Privacy Regulation”), Unitec S.p.A., as potential employer/principal, collects and processes your personal data (as “Interested Party”) and possibly your family members’ personal data.
Please note that with reference to the selection activity, upon your specific consent, Unitec S.p.A. may process personal data that the Privacy Regulation defines as “special” in order to detect, for example, a general state of health or specific conditions (e.g. physical problems, allergies, member of a protected category and degree of disability) which are necessary to assess the suitability of the person for certain tasks or the possibility of being hired as member of a protected category.
1. Owner, Data Processors and Data Protection Officer.
The owner of personal data processing is Unitec S.p.A. (hereafter, the “Owner”), with registered office in Via Prov.le Cotignola, 20/9, 48022 Lugo RA - Italy, VAT No. 01090820398 email: unitec@unitec-group.com.
The updated list of Data Processors, if appointed, can be provided upon request of the Interested Party.
If a Data Protection Officer is appointed (according to article 37 of the Privacy Regulation), the identification data of the officer will be notified through their publication, by including this policy.
2. Purposes and methods of processing.
The personal data of the Interested Party are processed, as part of the usual personnel selection activities of the Owner, in order to verify the possibility of transforming your application into an employment relationship/service provision.
In relation to said purpose, processing of personal data is carried out by persons specifically appointed, authorized and trained in processing data according to article 28 and 29 of the Privacy Regulation, as well as by external parties (for example, personnel selection agencies, external consultants for the processing of compensation and contribution data, etc.), who may take on the role of independent data Owners or be designated in writing as Data Processors. In any case, processing will be carried out using manual, computerized and telematic tools, with logics strictly related to the purposes and in any case to ensure the confidentiality and security of personal data in full compliance with the current applicable legislation.
Your data will be kept by the Owner for the period of time strictly necessary for the above-mentioned purpose, without prejudice to the need to keep it for a longer period in compliance with the current regulation, including accounting regulation. Your data will be processed in Italy and, in any case, within the EU.
3. Mandatory or optional nature of data provision, consequences of refusal and processing legal basis.
With reference to the above-mentioned purposes, the provision of personal data is compulsory, as in its absence the possibility of establishing an employment relationship/service provision with the Interested Party could not be verified. Therefore, the legal basis of data processing is to verify the possibility of establishing an employment relationship/service provision of which the Interested Party is part and upon request of the Interested Party (according to article 6, paragraph 1, letter b) of the Privacy Regulation).
With reference to personal data processing that the Privacy Regulation defines as “special” in order to detect, for example, a general state of health or specific conditions (e.g. physical problems, allergies, member of a protected category and degree of disability) necessary to assess the suitability of the person for certain tasks or the possibility of being hired as member of a protected categories, the provision is optional. However, the failure to provide the data and the related consent results in the impossibility to be selected for those specific jobs for members of a protected category.
4. To whom and in what context we may send the personal data of the Interested Party.
With reference to the above-mentioned purposes and within the limits strictly pertinent to the same, your personal data will or may be disclosed to:
(i) all subjects involved in any way in the recruiting activity aimed at establishing an employment relationship/service provision, appointed and instructed in writing in accordance with the law by the Owner according to the procedures provided by the company’s job descriptions;
(ii) external consultants that carry out the aforementioned activity, unless they have been appointed in writing as Data Processors.
The aforementioned subjects, to whom your personal data will or may be disclosed to (as they have not been appointed in writing as Data Processors), shall process personal data as Data Owner according to current regulation, in complete autonomy, as they are not involved in the processing carried out by Unitec S.p.A. A detailed and constantly updated list of these subjects, with the indication of their offices, is always available at Unitec S.p.A. headquarters. Your personal data will not be disseminated.
5. Security measures.
Data processing is carried out in compliance with the modalities referred to in article 5 and following and article 32 and following of the Regulation, as well as measures of the Privacy Guarantor by adopting the technical and organizational measures to guarantee a level of security.
6. Processing duration.
In accordance with article 5 letter e) of the Regulation, personal data subject to processing will be kept for the time strictly necessary in relation to the above-mentioned purposes and, in any case, for a period not exceeding 12 months.
7. Further information.
Further information regarding processing and disclosing personal data supplied directly or otherwise acquired may be requested from the Human Resources Department. This policy does not exclude the possibility that further information may also be given orally to the Interested Party when collecting personal data.
Should the conditions referred to in article 77 of the European Regulation arise, the Interested Party may refer to the Guarantor for the protection of personal data. Here are the coordinates: Guarantor for the protection of personal data, Piazza di Monte Citorio, 121 - 00186 Rome - www.gpdp.it - www.garanteprivacy.it - Email: garante@gpdp.it - Fax: (+39) 06.69677.3785 - Phone number: (+39) 06.69677.1. It is understood that the Interested Party may intervene to apply what is defined by the following articles 15-18 EU Regulation 2016/679 and 21 of the same Regulation, in a manner established by article 12 of EU Regulation 2016/679. The updated list of Data Processors is available at the Human Resources Department and will be provided upon request of the Interest Party.