Privacy policy for job applications

(pursuant to art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/16 (=GDPR))
PIUSI S.p.A. – with registered office in via Pacinotti n. 16/A, 46029 Suzzara (MN), Italy, VAT No. 01869920205 (hereinafter “Controller”), in its capacity as Data Controller, advises you, in accordance with the Italian legislation in force and art. 13 and 14 of EU Regulation no. 2016/679 (hereinafter “GDPR”), that the personal data you have provided will be processed with the following methods and purposes:

1. Data subject to processing:

The object of the processing will be the identification and contact data (e.g. name, surname, address, telephone number, e-mail, etc. ...), hereinafter referred to as "personal data" or even simply "data", which you communicated to the Data Controller by filling out the online form located on the company website at the address www.piusi.com with the aim of applying for open positions within the company or in any case to submit your curriculum vitae.

2. Purpose of processing and consent of data subject

2.1 Pursuant to art. 6 of EU Reg. 2016/679, your personal data will be processed solely for the following purposes:

• Contact you to arrange an interview or in any case to communicate with you through the sending of correspondence;
  
• Fulfilling the obligations envisaged by law, by a regulation, by EU regulations or by an order from the Authority;
  
• Exercising the rights of the Controller, for example the right to defence before the courts;
• 2.2 Only upon the acquisition of your express consent, given in writing while filling in the forms online, the sensitive data that you communicate will also be processed for the following purposes:
• Verify your right to a specific legal benefit based on your membership of a protected category because of your state of health.
  

Data processing and storage methods

3.1 Your personal data will be processed through the operations indicated in art. 4 of the Italian Privacy Code and art. 4 no. 2) of the GDPR and specifically: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data will be processed both on paper and electronically and/or automatically.

3.2 The Controller will process your personal data for the time necessary to fulfil the purposes referred to in art. 2 of this information and in any case for no more than 10 years from the communication of your data. After such date all data will be erased or anonymised.

Access to data

Your data may be made accessible for the purposes referred to in art. 2.1 and 2.2:
To employees and partners of the Controller, in their capacity as processors and/or internal processing supervisors and/or system administrators;
To third-party companies or other third parties (purely by way of example: banks, professional firms, notaries, lawyers, consultants, self-employed persons, insurance company staff, etc.) who perform outsourced activity on behalf of the Controller, in their capacity as external processing supervisors;

To companies controlled by and/or connected to the Controller.

Communication of data

5.1 Your data may be communicated for the purposes referred to in art. 2.1 to Supervisory Bodies (such as IVASS), Judicial Authorities, insurance companies for the provision of insurance services, as well as those subjects to whom communication is compulsory by law for the performance of the aforesaid purposes. These subjects will process the data in their capacity as autonomous data controllers.

5.2 Your data will not be distributed.

Data transfer

Your personal data will be stored on servers located within the European Union. It is in any case understood that the Controller, should it be necessary, shall be entitled to move the servers outside the EU as well. In this case, the Controller assures as of now that the transfer of data outside the EU shall take place in accordance with the provision of applicable laws, subject to the stipulation of the standard contractual clauses envisaged by the European Commission.

Nature of data provision and consequences of refusing to respond

7.1 The provision of data for the purposes referred to in art. 2.1 is mandatory. In your absence, we will not be able to use your details to get in touch with you and you will not be able to complete the online application process.

7.2 The provision of data for the purposes referred to in art. 2.2 is instead optional. You can therefore decide not to give any data or to deny subsequently the possibility to process the data already provided: in this case, you will not be able to exploit the benefits of the law related to the state of health for which the law establishes the inclusion in a protected category.
Rights of the data subject

8.1 In your capacity as data subject, you have the rights guaranteed by existing Italian legislation and by art. 15 of the GDPR, and specifically the rights to:

Obtain confirmation of whether personal data which concerns you exists or not, even if not yet registered, and the communication of this data in an intelligible form.

To obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the case of identifying details of the data controller, processors and appointed representative in accordance with article 5, paragraph 2, Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom personal data may be communicated to or who may become aware of them in their capacity as appointed representative in the territory of the State, or responsible or appointed parties.
Obtain: a) the updating, amendment or, where interested, completion of the data; b) the deletion, anonymisation or blocking of data processed unlawfully, including that which does not have to be kept for the purposes for which the data had been collected or subsequently processed; c) the declaration that the operations, including the contents, referred to in letters a) and b) were brought to the awareness of those to whom the data was disclosed or distributed unless this proves to be impossible or would involve the employment of methods that are clearly out of proportion to the right protected;

Object to, fully or in part: a) the processing of the personal data that concerns you for legitimate reasons, even if relevant to the purposes for which they were collected; b) the processing of personal data that concerns you for the purposes of sending advertising or direct sales material or to complete market research or commercial communication, through the use of automated calling systems without the intervention of an operator through e-mail and/or through traditional marketing methods employing telephone and or post. We hereby state that the right to object of the data subject, presented in the previous point b), for direct marketing purposes through automated methods extends to traditional methods and that there is still the possibility for the data subject to exercise their right to object also only in part. Consequently, the data subject can decide to receive only communications through traditional methods or only automated communication or neither of the two types of communication.

8.2 Where applicable, they also have the rights referred to in art. 16–21 of the GDPR (Rights to rectification, right to be forgotten, right to limit processing, right to data portability, right to object) as well as the right to lodge a complaint with the Data Protection Authority.

Method of exercising rights

You may at any time exercise the rights referred to in the preceding point 8 by sending: A registered mail with return receipt to PIUSI S.P.A., via Pacinotti no. 16/A, 46029 Suzzara (MN), An e-mail to the address marketing@piusi.com which must be followed within the following 48 hours by registered mail with return receipt to the address indicated above.

Data Controller and contact details

The Data Controller is PIUSI S.P.A. with registered office in via Pacinotti no. 16/A, Tel. +39 0376-534561 - Fax +39 0376-536393 - E-mail marketing@piusi.com

The updated list of data supervisors and processors is held at the registered office of the Data Controller.