Elica S.p.A., as Data Controller, pursuant to article 13 of the GDPR, provides you, as a data subject, with information regarding the processing of personal data (hereinafter referred to as "Data") collected following your registration to the Reserved Area in the "Candidates" section of the www.people.elica.com website, (hereinafter referred to as " Web Site") and contained in your CV and/or cover letter

DATA CONTROLLER

Elica S.p.A.

Via Ermanno Casoli, no.2, 60044 Fabriano (AN)

PEC: [email protected]

Phone: +39-07326101

(hereinafter referred to as “Company” or “Data Controller”)

DATA PROTECTION OFFICER (DPO)

DPO can be contacted at: [email protected]

PERSONAL DATA PROCESSED 

Data includes, but is not limited to:

·       Personal data, such as first name, last name, place and date of birth, marital status, driving license, country, Linkedin profile;

·       Contact data, such as address, postal code, e-mail address, telephone number;

·       Data entered by you in the curriculum vitae and / or in the cover letter, such as education, qualification, work experience;

Special categories of data - so-called "sensitive" data - i.e. data that may reveal your state of health (such as membership of protected categories) contained in your curriculum vitae or any other document submitted to the Company.

PURPOSES OF DATA PROCESSING. LEGAL BASIS OF DATA PROCESSING. DATA RETENTION PERIOD

a) Purposes connected with the registration to the Reserved Area in the "Candidates" section of the Web Site, and necessary for carrying out candidate recruitment and selection process.

The legal basis for data processing is the implementation of pre-contractual or contractual measures, in which the data subject is a party, pursuant to Art. 6.1 lett. b) of GDPR.

Legitimate interest of the Data Controller, pursuant to art. 6.1 lett. f) of GDPR, as regards the retention of Data also for future recruitment and selection activities.

The entire duration of the recruitment and selection process, and for a further twelve (12) months from the last online update of the curriculum vitae by the data subject, without prejudice to the latter’s right to oppose.

b) Fulfilment of obligations and exercise of the Company or the data subject’s rights specified in applicable legislation on labour law and social security and social protection, or in collective agreements, as well as any provisions prescribed by relevant authorities and supervisory and control bodies.

Fulfilment of legal obligations the Company is required to adhere to, as pursuant to Article 6.1(c) of the GDPR, and, with regard to "sensitive" data, in accordance with Article 9.2(b) of GDPR.

The entire duration of the recruitment and selection process and for a further 12 months.

c) Ascertain, exercise and / or defend the rights of Data Controller in a Court of Law, should it be deemed necessary.

The legal basis for data processing is the legitimate interest of the Data Controller, as pursuant to Article 6.1(f) of GDPR.

Data shall be processed for the whole duration of any litigation and within the enforceability term of appeals.

PROVISION OF DATA

The provision of data is necessary for recruitment and selection activities; therefore, refusal to provide such data would make it impossible to carry out such activities and to consider your application.

SUBJECTS AUTHORIZED TO DATA PROCESSING

Data may be processed by the employees of the company departments responsible for pursuing the above-mentioned purposes, who have been expressly authorised to do so and who have received adequate operating instructions.

DATA RECIPIENTS

Data may be communicated to third parties operating as independent data controllers such as bodies, authorities and companies that perform staff recruitment and selection activities or processed by third parties, on behalf of the Company and designated as data processors , which provide the Company with services related to the purposes of the underlying document, upon receiving precise operating instructions such as, but not limited to: accounting, tax and insurance obligations, (e.g. the supplier of management software used by the Company in its business processes), and other companies of the Group.

TRANSFER OF PERSONAL DATA TO EXTRA- EUROPEAN UNION COUNTRIES

Data shall not be transferred to third countries and/or international organisations which are not within the European Union.

RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY

The data subject may exercise the rights in Articles 15-22 of GDPR and, in particular, may request access to their own Data, as well as deletion, amendment of inaccurate Data, integration of incomplete Data, limitation of data processing in the cases provided for by Article 18[1] GDPR.

Furthermore, should data processing be based on a consent or contract and performed by automated tools, the data subject has the right to receive the Data in a structured, commonly used and machine-readable format, and, if technically possible, to transmit it to another Controller without any hindrance.

The data subject is entitled to oppose to the processing of their Data at any time, in a simple manner and free of charge, for reasons concerning a specific situation in the case of legitimate interest of the Data Controller.

Such rights may be exercised by sending an email to the Data Controller at: [email protected] .

Should data subjects intend to exercise their rights, then the Company may ask them to identify before handling their request.

The data subject may lodge a complaint with the competent supervisory authority (Art. 77 GDPR) and take legal action (Art. 79 GDPR), as well.

[1] Pursuant to Article 18 of the GDPR, the data subject is entitled to obtain a limitation of data processing from the data controller, in one of the following cases:

(a) the data subject disputes the accuracy of personal data, for the period necessary to the controller to verify accuracy of such personal data;

(b) data processing is unlawful and the data subject opposes the cancellation of personal data and instead requests to limit the use of the same;

(c) although the data controller no longer needs the personal data for processing purposes, such personal data is necessary to the data subject to ascertain, exercise or defend one of their rights in a Court of Law;

(d) the data subject opposed data processing pursuant to Article 21(1), pending the verification as to whether the legitimate grounds of the data controller prevail over those of the data subject.

Should data processing be limited as pursuant to paragraph 1, such personal data shall, except for storage, only be processed with the consent of the data subject or to ascertain, exercise or defend one of their rights in a Court of Law or to protect the rights of another natural or legal person or for reasons of substantial public interest of the European Union or of a Member State.

A data subject who obtained a limitation in data processing pursuant to paragraph 1, shall be informed by the data controller before such limitation is canceled.