PRIVACY NOTICE FOR CANDIDATES

 

 

PRIVACY NOTICE FOR CANDIDATES

Pursuant to and for the purposes of art. 13 of Regulation 2016/679 of the European Parliament (hereinafter, the “GDPR”), relating to the protection of natural persons with regard to the processing of personal data, Frette S.r.l., as data controller, informs you that it will process the personal data provided by you in accordance with the provisions of the legislation on the protection of personal data.

1. Data controller and external data processors

The Data Controller is Frette S.r.l. with registered office in via Borgazzi, 23, 20900 Monza (MB).

The updated list of data processors and persons authorized to process data is kept at the registered office of the Data Controller.

2. Type of data processed and nature of the provision

The data is collected, before the start or during a selection, through the spontaneous sending of the CV carried out directly by the interested party.

In general, the processing will concern exclusively the following personal data:

name and surname, date of birth, tax code, registered residence, telephone number, email address or PEC, previous work experience, educational qualifications..

The provision of personal data by the interested party for the purposes described in the information is optional. Failure to provide, in whole or in part, the data, or an inaccurate or untruthful provision could determine the impossibility for the Data Controller to proceed with the selection phase or to contact the interested party if he/she should need profiles compatible with those of the interested party, as these are indispensable for the aforementioned purposes.

3. Purposes of the processing

The collection and processing of the data will have the following purposes:

- to allow the Data Controller to manage in all its phases, up to the possible signing of the contract, the selection of personnel that may be necessary or appropriate in relation to a specific professional figure;

- allow the Data Controller to create and manage its own archive in order to manage future needs for competent professional figures based on the activities carried out by the Data Controller.

4. Legal basis of the processing

Given that sending CVs to the Data Controller occurs on a voluntary basis by the candidate, the legal basis of the processing is "the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract" (Art. 6, letter b, GDPR). The processing is therefore lawful.

5. Recipients of personal data

Personal data may be communicated to the Data Controller's employees authorized to process the data and to some external parties, appointed as external data processors in the presence of the requirements set out in art. 28 of the GDPR, who collaborate with them, such as, for example:

• IT and Platform service provider; system administrators; Frette North America Inc.

 

6. Methods of processing

Personal data are processed using electronic tools subject to specific security measures, adopted, applied and documented as required by current legislation. The personnel authorized to process the data are appointed in writing by the Data Controller and receive specific training regarding the applicable legislation. External parties to whom processing of personal data, or parts thereof, is entrusted are designated as external data processors pursuant to article 28 of the GDPR, and are therefore bound to apply the technical and organisational measures contained in the GDPR.

The Data Controller does not carry out any processing consisting of automated decision-making processes on the data of those who spontaneously, or following a personnel search, send their CV.

7. Transfer of personal data to third countries

The Data Controller transfers personal data to third country (USA). The transfer to US takes place on the ground of standard contractual clauses adopted by the EU Commission under Art. 46 of GDPR.

If the Data Controllers needs to transfer personal data collected to another third country, the transfer will take place on the basis of an adequacy decision adopted by the EU Commission under Art. 45 of GDPR or, in the absence of a decision, on the basis of appropriate safeguards under Art. 46 of GDPR.

8. Storage time

The Data Controller stores and processes personal data for the time necessary to fulfill the purposes indicated. In particular, all the data mentioned so far will be stored for a period not exceeding twelve months or, if later, the period during which the job offer is open.

9. Rights of the Interested Party

You may, at any time, exercise the rights referred to in Articles 15 and ss. of GDPR:

a) right of access to personal data;

b) right to obtain rectification or erasure of the same or limitation of processing;

c) right to object to processing;

d) right to data portability;

e) right to withdraw consent, where applicable (withdrawal of consent does not affect the lawfulness of processing based on consent given before withdrawal);

f) right to lodge a complaint with the supervisory Authority (.

The aforementioned rights may be exercised by sending a communication to Frette S.r.l. Via Borgazzi, 23, 20900 Monza (MB), or by fax to +39 039 6046365, or by email to: customerservice@frette.com.

 (Frette S.r.l.)