Careers

INFORMATION NOTICE REGARDING THE PROCESSING OF CANDIDATES
PERSONAL DATA IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”)

DATA CONTROLLER

FATA SpA
SS 24 km 12 Pianezza (TO), Italy

DATA PROCESSOR

Company name: Danieli & C. Officine Meccaniche S.p.A.
Via Nazionale n. 41, 33042 Buttrio (UD), Italy

DATA PROTECTION OFFICER (DPO)

dpo@danieli.com

TYPES OF PERSONAL DATA PROCESSED

PERSONAL DATA PROCESSED

By way of example but not limited to: forename, surname, date and place of birth, residence, e-mail address and telephone numbers, qualifications, work experience and any other information in CVs and/or forms completed during interview and application phases.

SPECIAL CATEGORIES OF PERSONAL DATA PROCESSED

Data regarding, by way of example but not limited to, health (such as Candidates belonging to “Categorie protette”) that may be contained in CVs or other documentation sent to the Company.

PERSONAL DATA SOURCE AND CATEGORIES OF PERSONAL DATA CONCERNED

Data are collected from the data subject (i.e. directly supplied by you) or from head hunting companies or who provide recruiting services, Universities or High School institution or employment centers.

---

Here below the applicable discipline for each processing purpose with indication of the legal basis and data retention period.

DATA PROCESSING PURPOSES

Purposes connected to or instrumental in sourcing and selecting candidates.

LEGAL BASIS FOR PROCESSING DATA

Implementation of pre-contractual measures adopted on candidate request.

DATA RETENTION PERIOD

Retained for the duration of selection activities then deleted once these are completed unless retained for a longer period with candidate's authorisation (see below).

---

DATA PROCESSING PURPOSES

To verify, through specialist companies as well, that the information provided is true based on publicly available information (including professional social network profiles, databases, web logs or multimedia archives accessible to the public). In accordance with WP29 Opinion on Data Processing at Work, processing is limited to information relating to professional position at work, in order to assess specific risks relating to candidate work activities only, in as unobtrusive a manner as possible, by adopting any necessary measures to ensure balance between the legitimate interests of employers as data controllers, and their rights and fundamental freedoms.

LEGAL BASIS FOR PROCESSING DATA

Legitimate interest.

DATA RETENTION PERIOD

Retained for the duration of selection activities then deleted once these are completed.

---

DATA PROCESSING PURPOSES

Retained for 2 years for future selection processes if the candidate has not been successful upon your request, to be expressed with expression of will at the foot of this Notice.

If the candidate decides not to give permission for data to be retained for future selection processes and processing of personal data, this will exclude candidates from future selection processes only, and not the current selection process.

LEGAL BASIS FOR PROCESSING DATA

Consent.

DATA RETENTION PERIOD

2 years after completion of the selection process.

---

DATA PROCESSING PURPOSES

If necessary to ascertain, exercise and/or safeguard Company rights in legal proceedings.

LEGAL BASIS FOR PROCESSING DATA

Legitimate interest.

DATA RETENTION PERIOD

Duration of the dispute until completion of the terms of implementation outlined in legal remedies.

---

ONCE THE AFOREMENTIONED RETENTION PERIOD HAS LAPSED THE DATA WILL BE DESTROYED OR MADE ANONYMOUS COMPATIBLY WITH TECHNICAL ERASURE AND BACKUP PROCEDURES.

DATA PROVISION

Compulsory for sourcing and selecting personnel. A refusal to provide the data makes these activities impossible and means the candidate cannot be considered for the role.

DATA RECIPIENTS

Data may be communicated to parties acting as independent data controllers or processed on behalf of the Company by parties appointed as data processors, who are provided with suitable operating instructions.

PARTIES AUTHORIZED TO PROCESS DATA

Data may be processed by employees in company departments who are responsible for carrying out the activities outlined above and have been authorized to process the data and received suitable operating instructions.

PERSONAL DATA TRANSFERS OUTSIDE THE EU

Data may be transferred abroad to non-European countries in which the Company has set up subsidiaries. The transfer is occasional and necessary for the execution of pre-contractual measures of work with the interested parties and therefore admitted under art. 49.1, lett. b) of the GDPR.

DATA SUBJECTS’ RIGHTS - COMPLAINT TO THE SUPERVISORY BODY

By contacting the Legal Office via e-mail sent to dataprotection@danieli.com,, data subjects can ask the controller for access to personal data, or the correction or deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 of the GDPR. Furthermore, in the case where processing is based on consent or a contract and carried out with automated tools, data subjects have the right to receive the personal data in a structured, commonly used and machine-readable format, and to transmit the data to another data controller without obstruction. Data subjects have the right to withdraw consent at any time, and object to processing carried out to pursue the legitimate interests of the controller. Data subjects have the right to lodge a complaint to the competent Supervisory Authority.

INFORMATION NOTICE ACKNOWLEDGEMENT AND DECLARATION OF CONSENT

I hereby confirm I have received and read the information on the privacy of candidate data and I hereby authorise the retention of my data for 24 months so my CV can be considered in future selection processes carried out by FATA S.p.A., in the knowledge that, without authorisation, my data will only be processed for the selection process in progress and then deleted, and this authorisation can be withdrawn at any time.