Recruitment information
SUBJECT: Information pursuant to and for the purposes of articles 13 and 14 of the EU GDPR 2016/679 and the national legislation in force relating to the protection of the processing of personal data.
With this information RELAX SRL provides the interested party with the information referred to in Articles 13 and 14 of the GDPR 2016/679 regarding the processing of personal data concerning him.
Data Controller.
The Data Controller is RELAX SRL, with headquarters in Via Leonardo da Vinci, 2A – 30020 Torre di Mosto (VE).
Purpose and legal basis of the processing.
The collection and processing of personal data are carried out in order to conduct:
- the management of E-recruitment, and in particular of the curriculum vitae sent through the contact on the site for the sole purpose of responding to the requests sent to us and for the purpose of evaluating the profile for the possible establishment of an employment relationship o professional collaboration (processing necessary for the execution of pre-contractual measures adopted at the request of the interested party pursuant to art.6 par. let. b) GDPR 2016/679);
Please note that no particular categories of data (so-called sensitive data) or data relating to criminal convictions and offenses should be present in the curriculum, unless they are necessary for the establishment of the employment relationship in accordance with current legislation on job placement. ; with regard to data relating to the health of workers with disabilities, in application of Law 12 March 1999, n. 68 “Rules for the right to work of the disabled”, it is specified not to indicate any pathology, but to indicate only the possession of the requisites. Any different particular categories of data indicated by you will not be taken into consideration, nor in any case processed, for the evaluation of the profile.
The collection and recording of data will take place in compliance with the principles set out in art. 5 GDPR 2016/679, that is: for specific, explicit and legitimate purposes and in a manner compatible with these purposes, in the context of the processing necessary for the operation of the business; exactly and if necessary with the appropriate updates. So that they are relevant, complete and not excessive in relation to the collection purposes; so that their conservation is functional to the period of time necessary for the purpose for which they were collected and subsequently processed according to the GDPR 2016/679 and to the national legislation in force.
Personal data may be processed with the aid of both paper and electronic tools, or in any case suitable for recording and storing the data, and in any case in such a way as to guarantee its security and protect the maximum confidentiality of the data subject. Specific security measures will be observed to prevent data loss, illicit or incorrect use and unauthorized access in full compliance with art. 32 of the GDPR 2016/679 and of the national legislation in force.
Mandatory or optional nature of providing data and consequences of a refusal to provide it.
The provision of data is not mandatory, but optional; however, any refusal to provide them in whole or in part may result in the impossibility of responding to the requests of the interested party and / or proceeding with the assessment of his professional profile.
Data communication.
Without prejudice to compliance with current regulations and in particular with the principles set out in art. 5 GDPR 2016/679, the data collected and processed may be communicated, exclusively for the pursuit of the purposes mentioned in this statement, to:
- Companies belonging to the same business group;
- Professionals and consultants, consulting firms, companies operating in the personnel selection sector, public employment agencies, public and private training bodies;
- In particular, subjects who carry out treatments on behalf of the Data Controller as managers pursuant to art. 28 GDPR 2016/679, such as, by way of example and not limited to: professionals and / or companies appointed to carry out consultancy activities in the field of labor law, technical-IT. The complete and updated list of Managers is available to those entitled to do so upon request at the headquarters of the Data Controller;
- Subjects authorized to access data by current legislation and / or to whom data must be communicated in compliance with legal obligations.
Personal data may be processed by employees and collaborators assigned to the competent offices of the Data Controller, explicitly authorized for processing on the basis of art. 29 of the GDPR 2016/679 and the national legislation in force.
Transfer of data abroad.
Personal data may be communicated and / or transmitted abroad only for the pursuit of the purposes referred to in this information, or for exclusively technical reasons related to the structure of the company Information System and / or the application of technical and organizational security measures. deemed suitable by the Data Controller (Article 32 GDPR 2016/679), and exclusively in compliance with articles 44 s.s. of the GDPR 2016/679.
Data retention times.
The data will be stored in our archives even after the job interview, for the fulfillment of all possible obligations related to this activity, and, in any case, for a period of time not exceeding the achievement of the purposes for which they are treated (“conservation limitation principle” pursuant to art. 5 GDPR 2016/679). Specifically, the data will be kept by the Data Controller for a period from 24 to 60 months, depending on the professional profile, it being understood that the aspiring candidate will have to update and / or reconfirm the application every 3 months. , or in any case at the latest within 15 months depending on the professional profile; failing that, or in case of hiring, the data will be deleted. In relation to the specific limitation periods provided for by the law, the data necessary for ascertaining, exercising or defending a right may be subject to longer retention times.
The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
Rights of the interested party.
The interested party may exercise the rights provided within the limits and under the conditions set out in Articles from 15 to 22 of the GDPR 2016/679. In particular, the GDPR 2016/679 assigns the following rights to the interested party:
- Right of access (Article 15 of the GDPR 2016/679);
- Right to rectify inaccurate personal data and right to integrate incomplete personal data (Article 16 of the GDPR 2016/679);
- Right to cancellation (Article 17 GDPR 2016/679);
- Right to limit the processing (Article 18 of the GDPR 2016/679);
- Right to request the recipients to whom any corrections or cancellations or limitations of processing have been communicated (Article 19 GDPR 2016/679);
- Right to data portability (Article 20 of the GDPR 2016/679);
- Right to object (Article 21 GDPR 2016/679);
- Right not to be subjected to a decision based solely on automated processing (Article 22 GDPR 2016/679).
In the event of signing any form of consent to the processing, it should be noted that the interested party can revoke it at any time, without prejudice to the mandatory obligations provided for by the legislation in force at the time of the revocation request, by contacting the Data Controller at the following address by e-mail: info@relaxsrl.com.
Right of Complaint.
The interested party who believes that the processing of personal data is in violation of the provisions of the GDPR 2016/679 has the right to lodge a complaint with the supervisory authority of the State of the European Union in which he habitually resides, works, or of the place in which the alleged violation has occurred, as required by art. 77 GDPR 2016/679, or to take the appropriate judicial offices.
Torre di Mosto, 11/11/2021
RELAX SRL