Privacy Policy regarding the collection of Curriculum Vitae for the employee selection process – Disclosure – Articles 13 and 14 of EU Regulation 2016/679

We inform you that pursuant to Articles 13 and 14 of the EU Regulation 2016/679(thus the “GDPR” – General Data Protection Policy as well), Art. 111 bis of the Italian Legislative Decree 196/2003 as amended by the Italian Legislative Decree 101/2018, and to any other law related to the protection of personal data and its free circulation (the “Regulation” follows), processing of data provided by you in your Curriculum Vitae, on our “Work with us” webpage, or on other recruiting tools(for example: Linkedin or web advertisements and newspapers), will be processed by the Controller for the sole purpose of procedure management and recruiting for our own Company and will be based upon principles of correctness, lawfulness and transparency and the safeguarding of your privacy and your rights as per Article 5. The Controller is OIC S.r.L., with headquarters in Florence, Viale Giacomo Matteotti 7, in the persons of the pro-tempore legal representative, domiciled at the company headquarters, and can be contacted at the above addresses or via email at: privacy@oic.it

Purposes

Your data will be processed only for the purposes of research, selection, evaluation and recruiting by the Controller’s HR Department, after a specific request from the candidate. All data processing, both manual and electronic, will be performed in accordance with the general principle of the UE Regulation 679/2076; the information tools used will ensure the privacy and security of the data.

Methods of processing

Data will be collected by the HR Department of the Controller via its “Work with us” website or by post, fax, email or handwritten letters, by collecting or sharing data through professional social networks (Linkedin for example), by individual web interviews (Skype for example) or directly from the candidate during live interviews, also in the form of Curriculum Vitae. The submission of one's CV by the interested party can represent:
a. A spontaneous application;
b. A response to a specific job posting / employee selection announcements published via any medium of communication, on the company’s website or on third-party websites.
The collection and processing of personal data pertains to contact details, images, including photography, along with the professional profile, as well as the categories of special data ex art. 9 of the GDPR (among which for example the data related to possible disability and / or belonging to "protected categories") transmitted and / or communicated by the interested parties. Such personal data will be processed within the limits strictly relevant to the obligations, tasks and purposes detailed above. In the case in which in the CV sent by the interested party contains information related to the particular categories of data referred to above, the Company will only process data relevant to the assessment of the professional application, in the limits in which the acquisition of such information is strictly indispensable for the purposes indicated above. All data will be treated correctly and transparently, both manually and with electronic and IT tools; the data will be placed in the specific files and/or electronic archives or in any other form of adequate support, and will be constantly monitored through adequate operation procedures and safeguard measures, as established under Art. 32 of the Regulation, for the purpose of guaranteeing the security and confidentiality of personal data in order to prevent loss of such data, unlawful or improper use or unauthorized access.

Legal Basis of processing and retention period

The legal basis of the processing of data provided by the candidates or collected as specified, is represented by your explicit consent to this processing. The candidates potential opposition to the data processing will result in the impossibility to consider the application of the candidate for anyprofessional selection. The data will be kept in the headquarters of the Controller for 24 months from acquisition in case it is not used for employee selection purposes. The Controller reserves the right to keep in its archives only the profiles of interest.

Disclosure Data and Process

Data will not be subject to circulation but can, besides being processed by individuals authorized by the Controllers, be communicated only for the above indicated purposes, to: External Processors, appointed by the Company in its capacity as Data Controller, that need access to the data to perform specific collaborative tasks on behalf of the Company, necessary or compulsory for the carrying out of the activity (for example companies specialized in finding personnel, etc.); subjects who will process the data as autonomous Controllers for the purposes described in this Disclosure and limited to what is required in order to meet the related legal obligations. An updated list of the Processors and persons authorized to process data can be consulted at the headquarters of the Controller.

3. Rights

As per Chapter III of the Regulation 679/2016, you can access the information that concerns you at any time and request corrections, updates and cancellations, if the data is incomplete, erroneous or collected against the law. In order to exercise these and other rights as specified under articles 15-22 of the GDPR you can write to the Controller at the above addresses or send an email to privacy@oic.it You have the right to oppose the processing of your data and to present a complaint to the Authority for the protection of personal data according to Art. 77 of the EU Regulation 2016/679.