Information on the processing of personal data of candidates
(According to the EU Regulation 2016/679 and the Privacy Code, as amended by the D. Legislative Decree 101/2018)
OLON S.p.A. with registered office Strada Rivoltana Km 6/7 -20090- Rodano (MI), which can be contacted by sending an email to the following email address Privacy@olonspa.it or a registered letter A/R to the above address, in its capacity as Data Controller informs pursuant to art. 13 and 14 of the EU Regulation no. 679/2016 (hereinafter “GDPR”) and the Privacy Code, as novated by Legislative Decree 101/2018, that personal data will be processed in the following ways and for the following purposes:
-
Purpose and Legal Basis of the Processing.
Personal data are processed for the purpose of processing screening, selection, and interviewing of individuals interested in applying to fill a job position within the organizational structure of the Writer.
The legal basis for the processing of personal data is to be found in Art. 6 para. 1 letter A), in that “the data subject has given his/her consent to the processing of personal data for one or more specific purposes”
-
Categories of data processed
The following categories of data will be processed for the purposes mentioned in the previous point:
– Biographical data;
– Contact data;
– Data included within the Curriculum Vitae;
– In the case of a positive assessment, data required to comply with specific obligations under the law or other binding regulations (e.g. occupational health and safety regulations;
-
Method of Processing
As the Data Controller, Olon S.p.A. guarantees high standards of security in relation to the processing of personal data, through the use of appropriate tools to ensure confidentiality. The processing of personal data is carried out by means of the operations indicated in Art. 4, para. 1, no. 2 GDPR.
The data are processed by the Data Controller using computer, telematic or paper methods, tools and procedures, which are strictly necessary to achieve the purposes described in point no. 1.
The Data Controller shall put in place physical, technical and organizational security measures pursuant to Article 32 GDPR to prevent data loss, unlawful or incorrect use and unauthorized access (Data Breach).
Specifically, the Data Controller puts in place the following technical and organizational security measures:
– Logical Access Management;
– Password composition policy;
– Network segregation and segmentation;
– Back-up policy.
-
Retention Period.
Personal data will be retained for a maximum period of 2 years, at the end of the term the data will be deleted.
-
Place of storage
The data will be stored at the Data Processing Center in Rodano.
-
Access to personal data and communication
Personal data may be accessible for the achievement of which the purposes set out above will be accessed by OLON S.p.A.’s employees within their respective functions duly appointed persons authorized to process the data in accordance with Art. 29 of the GDPR.
The data may be processed by third parties that the Company uses for the purpose of evaluation and selection of candidates. These parties will operate as autonomous Data Controllers or will be designated as Data Processors pursuant to Article 28 of the GDPR, giving them appropriate operational instructions.
-
Transfer of data abroad
Pursuant to current legislation, please note that data conferred with the aid of electronic or, in any case, automated, computerized, or paper-based instruments are not transferred and/or stored outside the European Union.
-
Rights of the data subject
The data subject has the rights provided for in Articles 15-21 of the GDPR i.e. rectification, cancellation, restriction of the processing of his/her personal data, access to the same, right to object and the right to lodge a complaint with the Data Protection Authority.
The above rights may be exercised by sending an email or registered letter A\R to the addresses indicated in the header of this letter.
-
Compulsory or optional nature of data provision and consequences of refusal to provide data.
The provision of data is optional as the data subject has given consent to the collection and subsequent processing of the same.
In the absence of consent, the data cannot be collected and subsequently processed for the achievement of the purposes referred to in point 1 of this document.
-
Consent Relative to the Processing of Personal Data
Having read the privacy policy I consent to the processing of my personal data, both common and sensitive, entered by me in the Form, to enable the evaluation of my application