INFORMATION NOTICE REGARDING THE PROCESSING OF CANDIDATES
PERSONAL DATA IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”)
DATA CONTROLLER
FATA SpA
SS 24 km 12 Pianezza (TO), Italy
DATA PROCESSOR
Company name: Danieli & C. Officine Meccaniche S.p.A.
Via Nazionale n. 41, 33042 Buttrio (UD), Italy
DATA PROTECTION OFFICER (DPO)
dpo@danieli.com
TYPES OF PERSONAL DATA PROCESSED
PERSONAL DATA PROCESSED
By way of example but not limited to: forename, surname, date and place of birth, residence, e-mail address and telephone numbers,
qualifications, work experience and any other information in CVs and/or forms completed during interview and application phases.
SPECIAL CATEGORIES OF PERSONAL DATA PROCESSED
Data regarding, by way of example but not limited to, health (such as Candidates belonging to “Categorie protette”) that may be
contained in CVs or other documentation sent to the Company.
PERSONAL DATA SOURCE AND CATEGORIES OF PERSONAL DATA CONCERNED
Data are collected from the data subject (i.e. directly supplied by you) or from head hunting companies or who provide recruiting
services, Universities or High School institution or employment centers.
Here below the applicable discipline for each processing purpose with indication of the legal basis and data retention period.
DATA PROCESSING PURPOSES
Purposes connected to or instrumental in sourcing and selecting candidates.
LEGAL BASIS FOR PROCESSING DATA
Implementation of pre-contractual measures adopted on candidate request.
DATA RETENTION PERIOD
Retained for the duration of selection activities then deleted once these are completed unless retained for a longer period
with candidate's authorisation (see below).
DATA PROCESSING PURPOSES
To verify, through specialist companies as well, that the information provided is true based on publicly available information
(including professional social network profiles, databases, web logs or multimedia archives accessible to the public).
In accordance with WP29 Opinion on Data Processing at Work, processing is limited to information relating to professional
position at work, in order to assess specific risks relating to candidate work activities only, in as unobtrusive a manner as
possible, by adopting any necessary measures to ensure balance between the legitimate interests of employers as data controllers,
and their rights and fundamental freedoms.
LEGAL BASIS FOR PROCESSING DATA
Legitimate interest.
DATA RETENTION PERIOD
Retained for the duration of selection activities then deleted once these are completed.
DATA PROCESSING PURPOSES
Retained for 2 years for future selection processes if the candidate has not been successful upon your request, to be expressed
with expression of will at the foot of this Notice.
If the candidate decides not to give permission for data to be retained for future selection processes and processing of personal data,
this will exclude candidates from future selection processes only, and not the current selection process.
LEGAL BASIS FOR PROCESSING DATA
Consent.
DATA RETENTION PERIOD
2 years after completion of the selection process.
DATA PROCESSING PURPOSES
If necessary to ascertain, exercise and/or safeguard Company rights in legal proceedings.
LEGAL BASIS FOR PROCESSING DATA
Legitimate interest.
DATA RETENTION PERIOD
Duration of the dispute until completion of the terms of implementation outlined in legal remedies.
ONCE THE AFOREMENTIONED RETENTION PERIOD HAS LAPSED THE DATA WILL BE DESTROYED OR MADE ANONYMOUS COMPATIBLY WITH TECHNICAL ERASURE
AND BACKUP PROCEDURES.
DATA PROVISION
Compulsory for sourcing and selecting personnel. A refusal to provide the data makes these activities impossible and means the
candidate cannot be considered for the role.
DATA RECIPIENTS
Data may be communicated to parties acting as independent data controllers or processed on behalf of the Company by parties appointed
as data processors, who are provided with suitable operating instructions.
PARTIES AUTHORIZED TO PROCESS DATA
Data may be processed by employees in company departments who are responsible for carrying out the activities outlined above and have
been authorized to process the data and received suitable operating instructions.
PERSONAL DATA TRANSFERS OUTSIDE THE EU
Data may be transferred abroad to non-European countries in which the Company has set up subsidiaries. The transfer is occasional and
necessary for the execution of pre-contractual measures of work with the interested parties and therefore admitted under art. 49.1, lett. b)
of the GDPR.
DATA SUBJECTS’ RIGHTS - COMPLAINT TO THE SUPERVISORY BODY
By contacting the Legal Office via e-mail sent to dataprotection@danieli.com,, data subjects can ask the controller for access to personal
data, or the correction or deletion of personal data, and also have the right to restrict processing of the data in the cases set out in
article 18 of the GDPR.
Furthermore, in the case where processing is based on consent or a contract and carried out with automated tools, data subjects have the right
to receive the personal data in a structured, commonly used and machine-readable format, and to transmit the data to another data controller
without obstruction.
Data subjects have the right to withdraw consent at any time, and object to processing carried out to pursue the legitimate interests of the
controller.
Data subjects have the right to lodge a complaint to the competent Supervisory Authority.
INFORMATION NOTICE ACKNOWLEDGEMENT AND DECLARATION OF CONSENT
I hereby confirm I have received and read the information on the privacy of candidate data and I hereby authorise the retention of
my data for 24 months so my CV can be considered in future selection processes carried out by FATA S.p.A., in the knowledge that,
without authorisation, my data will only be processed for the selection process in progress and then deleted, and this authorisation
can be withdrawn at any time.
By clicking the opt-in button on the Site you consent to permit us to process your personal data for the purposes set forth in this Privacy Policy