GENERAL DATA PROTECTION REGULATION
Subject: Information provided for the processing of data of the interested parties in accordance with the EU Regulation 2016/679 on the protection of personal data (General Data Protection Regulation, GDPR).
1 – Data controller
F.lli Barile S.p.A. with registered office in Via CortiliFavale, 15 - 70038 Terlizzi (BA), VAT 04804670729 (hereinafter "Data controller"),informs you in accordance with the EU Regulation no. 2016/679 "General Data Protection Regulation" (hereinafter "Regulation") that the personal data you provide will be treated in a lawful, transparent and fair manner.
2 - Contact for the exercise of the rights of the interested party
The interested party can contact the Data Controller, for the exercise of his rights, as defined in par. 10, by sending a written communication to the following email address:
privacy@fbarile.it
The Data controller, in the person of the pro-tempore Data Processor and / or his designated employee, is required to respond to the requests of the interested party without undue delay and / or at the latest within a month.
The Data Controller, in the person of the pro-tempore Data Processor and/ or its appointed representative, is required to respond to the requests of the interested party without unjustified delay and/ or at the latest within a month.
3 – Voluntary or compulsory consent. Processing of specific data in the Curricula.
We inform you that the provision of data is necessary for the purposes indicated in point 5 and it is not mandatory to obtain any consent.
Please include in the curriculum vitae, or provide us with, only the data necessary to evaluate your professional profile and do not include – where not strictly necessary (in relation to legal obligations) – data revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, unions, associations or organizations of religious, philosophical or political nature, as well as personal data revealing information about state of health and sexual life.
In case of curriculum vitaerequested by F.lli Barile (and not voluntarilysubmitted by the interested party) and / or if it is essential for you to include data of particular nature(e.g. data revealingthe state of health for job positions with quotas reserved by law to a certain categories of workers), we invite you, at the time of sending – by means of the communication channels provided – to express a separate and specific consent (additional to that provided for the processing of data of CVs requested by F.ll Barile) to the processing of data of particular nature eventually present in the CV, or specifying in the CV the formula "After having read the appropriate information to pursuant to art. 13 of Legislative Decree 196/2003 and art. 13 of Regulation 679/2016 and the purposes specified therein, I consent to the processing and communication of my personal data of particular nature contained in the CV pursuant to Article 9, paragraph 2, letter (a) of the Regulation (consent of the concerned)"or expressing consent according to the procedure provided by F.lli Barile (also on websites, where applicable).
In case of curriculum vitaerequested by F.lli Barile (and not voluntarilysubmitted by the interested party)
any data of particular nature included in the CV (especially relative to health, religious beliefs and political opinions) will be immediately deleted in lack of the before mentioned written declaration of consent of the interested party.
The processing of data revealing the state of health of the candidates' family members or cohabitants is allowed only with the written consent of the interested parties where aimed at recognizing a specific benefit in favour of the candidate,in particular with the aim of compulsory employment or the recognition of a qualification deriving from invalidity, infirmity, war or from reasons of service. In these circumstances, we invite you to acquire the specific consent of the interested parties before sending the curriculum vitae, since F.lli Barile - otherwise – will have to delete the relative information.
4 -Object of the treatment
The Data Controller processes the personal data (hereinafter "data") provided by the interested party, such as identification data, as below: name, surname, age, address, telephone number, e-mail and / or Pec address, qualification and information relative tothe professional career.
5 - Purpose of the treatment
The data of the candidates collected by the Data Controller are processed for the purposes of selecting, evaluating and researchingprofessionals to be included in the organizational structure.
6 - Duration of the treatment and data storage
Regardless of whether or not contractual relationships are established with the Data Controller, we inform you that your personal data will be stored for a maximum of 12 months from receipt, and will subsequently be deleted, unless otherwise indicated by you. During this period, you have the right to request the Data Controller to integrate or update your personal data contained in the CV.
7 - Processing methods
The data processing, carried out through procedures compliant with EU Regulation 2016/679, is constituted and organized through the collection, registration, organization, consultation, processing, selection, comparison, use, interconnection, cancellation and destruction.
The data contained in the CVs sent will be processed with the support of paper, IT or telematic means (including the transformation of paper CVs into electronic files by scanning).
The data is not subject to profiling.
8 - Categories of subjects to whom the data could be communicated
The personal data processed by the Data Controller will not be disclosed and will not be given to indeterminate subjects, in any possible form, including that of making them available or simple accessible for consultation. Instead, they may be communicated to the Data Controller's employees, to some external subjects who collaborate with them, to the Data Controllers of other companies attributable to the Data Controller, but just for the same purposes.
They may, moreover, be communicated, within the strictly necessary limits, to subjects who for the purpose of issuing orders or requests for information and quotes must provide goods and / or services. Finally, they may be communicated to subjects entitled to access them in accordance of legal provisions, national or community regulations. In particular, based on the position and the job duties performed, some workers have been legitimized to process personal data, within the limits of their competences and in accordance with the instructions given to them by the Data Controller.
9 - Declarations of the candidate
With the submission of your curriculum vitae you implicitly certify:
a. that all the information entered is true;
b. to have communicated all the relevant information that could concern your application for the requested position;
c. to be aware that if you have communicated false or misleading information that led to the establishment of an employment relationship, the latter could be terminated for this reason;
d. to have provided the information exclusively for the purposes of evaluations aimed at establishing the suitability for the vacancy for which an application has been made;
e. to be aware that by submitting the application, the subsequent and eventual obtainment of employment will be subjected to the satisfaction of the requirements and results needed by the employer relating to possible controls that may be required regarding the qualifications previously acquired.
10 – Rights of the interested party
The interested party who has provided the data, in accordance to the principle of transparency, has the right to:
a) obtain, from the Data Controller, the confirmation of the existence or not of personal data concerning him/her;
b) obtain the communication of data in a clear and intelligible form;
c) obtain the indication:
I. of the origin of personal data;
II. of the purposes and methods of data processing;
III. of the logic applied in case of data processing carried out with the aid of electronic means;
VI. of the identity of the Data Controller or of the person responsible for the processing of data;
V. of the subject / s to whom the data can be communicated and / or who can learn about it as appointed representative of the State, manager or appointee.
d) obtain the updating, correction and / or supplementation, if there is interest, of the data provided;
e) obtain the cancellation, transformation into anonymous form or block of data processed in violation of the law, including those which the conservation is not needed for the purposes for which the data was collected or subsequently processed;
f) obtain the declaration that certifies that the operations of updating, correction and cancellation of the data, as already defined in the previous points, have been brought to the attention, also as what regards their content, of those to whom the data have been communicated, except in the case where this fulfillment proves impossible or involves the use of means clearly disproportionate compared to the protected right;
g) obtain the limitation of the processing of the data provided;
h) lodge a complaint to a Control Authority.
The deadline for the response to the interested party is, for all exercisable rights, of 1 (one) month extendable up to 3 (three) months in cases of particular complexity. The Data Controller is however obliged to provide feedback to the interested party, in written form, within 1 (one) month, even in case of refusal, in a concise, transparent and easily accessible manner and witha simple and clear language.
The exercise of rights may entail the burden of a contribution to be paid by the interested party related to the difficulties, for the Data controller, of following up on requests according to the available resources.
These rights may be limited by a national or community rule or regulation, when actual and concrete prejudice may result from the exercise of these rights.
11 – Data subject's right to data portability
The interested party can obtain from the Data Controller, upon request and by means of a structured format of common use and readable by automatic device, the processed personal data, if handled by automated means. The interested party may also request the Data Controller, if technically possible, to transfer the same data to another Data Controller.
12 - Changes subsequent to today's report
The Data Controller can supplement this report if corrections or changes are made by national or community legislation. In such circumstances, the Data Controller is obliged to inform the interested party with suitable means in order to protect his/her rights.