PRIVACY NOTICE PURSUANT TO ARTICLES 13-14 OF EU REGULATION 2016/679 FOR CANDIDATES

We inform you that the personal data you provide or have provided to the Polifibra 2011 S.p.A. through registration on the website (http://www.pf-polifibra.com/lavora-con-noi/ or during an interview with company personnel will be processed fairly, lawfully, and transparently in full compliance with EU Regulation 2016/679 (GDPR), as well as security obligations, protecting your privacy and your rights.

Data Controller

The Data Controller is Polifibra 2011 S.p.A, with registered office at Via Fabio Filzi, 81 20864 – Agrate Brianza (MB), to which you have sent your application for a specific open position.

To exercise your rights or obtain further information regarding the processing of your personal data, you may contact the Data Controller at the following email address: info@pf-polifibra.com

Nature of the Data Processed

The personal data processed include contact details, identification data, and professional information, including any photograph in the CV, as well as any special categories of personal data (e.g., information on protected categories). Failure to provide such data may prevent the Data Controller from processing your application.

Purposes and Legal Basis of Processing

We inform you that your personal data will be processed for the following purposes:

  1. Collection of candidate data for personnel recruitment purposes;
  2. Gathering information required to establish an employment relationship with the Data Controller;
  3. Storing CVs for future recruitment needs.

 

The legal basis for processing your personal data in order to manage your application is the necessity to execute your request to participate in the recruitment and selection process and to assess your application, including your work capacity and suitability for the role.

Your data may also be processed to comply with legal obligations applicable to the Data Controller.

Data Retention Period

The CV and personal data provided by you will be stored in anticipation of future recruitment needs and for a maximum period of 24 months from the initial evaluation of your application. After this period, your data will be deleted.

Processing Methods

Processing is also carried out using electronic or other automated tools and paper-based instruments. The processing will be carried out by automated and/or manual methods and tools, using technical and organizational measures designed to ensure a level of security appropriate to the risk.

Disclosure of Personal Data

In order to carry out the purposes described, your personal data may be communicated to employees, assimilated personnel and collaborators of the Company who act as authorized processors.

The Data Controller may entrust the search and selection of personnel or related activities to third parties, who may act as independent data processors or data controllers, to whom it may transfer your data or your Curriculum Vitae.

Data Subject Rights

The data controller pays particular attention to the protection of your data and informs you of your rights under the Regulation, which you can exercise in accordance with the terms of the GDPR:

  • Article 15 – Right of Access: The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data relating to him are being processed;
  • Article 16 – Right of Rectification: “The data subject shall have the right to obtain from the controller the rectification of inaccurate personal data concerning him or her without undue delay. Having regard to the purposes of the processing, the data subject shall have the right to obtain the completion of incomplete personal data, including by means of a supplementary statement”;
  • Article 17 – Right to Erasure (“Right to be Forgotten”): “the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall be obliged to erase the personal data without undue delay”;
  • Article 18 – Right to Restriction of Processing: In the specific cases defined by the Regulation, “the data subject shall have the right to obtain from the controller the restriction of processing”;
  • Article 20 – Right to Data Portability: In the cases provided for in the Regulation, “The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to a data controller in a structured, commonly used and machine-readable format and to have that data communicated to another data controller without hindrance by the data controller to whom he or she has provided the data”;
  • Article 21 – Right to Object: “The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her under Article 6(1)(e) or (f), including profiling on the basis of those provisions. The controller shall refrain from further processing the personal data unless he establishes the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims”;
  • Article 22 – Right Not to Be Subject to Automated Decision-Making: 2The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way”;
  • Article 7 – Right to Withdraw Consent: Data subjects have the right to withdraw their consent at any time.

 

The aforementioned rights may be exercised by contacting the Data Controller at the address indicated in point 1 above.

You also have the right to lodge a complaint regarding the processing of your personal data with the competent Garante authority (references of the Italian Data Protection Authority: garante@gpdp.it.