The EU Regulation 679/2016 governs the processing of personal data relating to individuals.
In accordance with the mentioned Regulation, such processing will be based on the principles of fairness, lawfulness, transparency, and protection of your personal data and your fundamental rights and freedoms. The provided data will be processed by Innovery S.p.A, registered office Strada Quattro SNC, Pal. A6 c/o Centro Direzionale Milanofiori 20057 Assago (MI) Tax code 02556430987 VAT number 02556430987. Pec: amministrazione@cert.innovery.net.
Purpose of the processing
The personal data collected from the data subject or from third parties used by the Data Controller for the selection procedures are processed and used to fulfill the request of the data subject. Specifically, they are processed to assess the eligibility for employment and/or to initiate a collaboration.
Methods of data collection
The collection of personal data from the data subject may occur through various means of communication, such as postal mail, e-mail, direct delivery, web forms, or any other form of communication, in which the information regarding the candidate’s professional and educational experiences (Curriculum Vitae, hereinafter referred to as CV) is provided. The receipt of the CV may be a result of spontaneous submission or in response to a personnel search and job advertisement. Additional personal data may be subsequently collected from the data subject during the personal interview in the selection phase.
Providing personal data
The provision of data is optional and is at the discretion of the candidate to submit their curriculum vitae. Regarding the data subsequently and optionally requested by the Data Controller, failure to provide such data would result in the impossibility to assess the eligibility for employment and/or to initiate collaboration, and therefore, the establishment of an employment relationship with the Data Controller may not be possible.
Nature of personal data.
The collection will only involve common data, including the photograph accompanying the CV. Therefore, the candidate will not be required to provide so-called “special categories” of data, as defined in Article 9 of Regulation 679/2016, or sensitive data, as defined in Legislative Decree 196/2003 (for example, health status). The exception to this is when the data in question must be known for the purposes of the establishment of the employment relationship, with particular reference to the data subject’s potential belonging to protected categories and any pre-employment medical examinations.
Processing methods
The personal data collected through the aforementioned methods will be processed using both manual and electronic methods, ensuring the highest level of security to protect the rights and freedoms of the data subject. In particular, no automated decision-making processes will be carried out regarding the processed data.
Data retention period
The data will be processed for the duration necessary for contact and subsequent interviews. The CVs will be archived for future personnel recruitment needs. The CVs will be retained for a maximum of 12 months; after this period, they will be destroyed.
Communication and Transfer
The collected data are not subject to disclosure. The data may be communicated to third parties identified and named under articles 29 of the EU Regulation 679/2016 if necessary for the specified purposes (e.g., selection and assessment companies); furthermore, the data may be shared with other companies within the Group for participation in personnel selection processes. The provided personal data may be transferred outside the national territory, within the European Union or to third countries, for the purposes outlined in point 1), in compliance with applicable regulations.
Rights of the Data Subject
With regards to the aforementioned data, the data subject can exercise the rights provided by articles 15 (access), 16 (rectification), 17 (deletion), 18 (restriction), 20 (portability), and 21 (objection) as outlined in the EU Regulation 679/2016. If you wish to exercise your rights or withdraw your consent to the processing of your personal data, you can contact the Data Controller referred to in Article 1, while retaining the right to lodge a complaint with the Protection Authority, the Privacy Guarantor.
Data Controller and Data Processors
The data processing controller is the Company whose identifying details are described in the previous point 1). Additional identifying information has been communicated to the competent supervisory authorities and is available at the Company’s registered office. The complete list of current “data processors” is available by submitting a written request to the Data Controller.
These rights can be exercised by submitting a request to: INNOVERY S.p.A. – Strada 4, Pal. A6, snc c/o Centro Direzionale Milanofiori, 20057 – Assago (MI) e-mail address: privacy@innovery.net
