Dear Candidate,
In accordance with Article 13 of Regulation (EU) 2016/679 (hereinafter "GDPR"), we inform you that your personal data (hereinafter, the "Data") will be processed by RevoSteel Building S.p.A. for the purpose of properly initiating and managing the recruitment process.
- Processed Personal Data
The Personal Data you have provided or received from personnel search agencies may include, by way of example and not limitation:- personal and contact details;
- data relating to your job position and professional career;
- data relating to health conditions;
- other personal data contained in the CV.
- Data Controller
The Data Controller is RevoSteel Building S.p.A., Via Fratelli Gabba, 3 20121 Milan (MI), who can be contacted for any matters relating to the processing of Personal Data at privacy@revosteelbuilding.com. - Purpose and Legal Basis for the Processing of Personal Data
The following table is intended to inform you of the purposes and reasons for which the Personal Data is processed by the Controller. For each purpose, the legal basis for the processing of Personal Data and the retention period or, at least, the criteria used to determine it are identified.
Purpose of Personal Data Processing Legal Basis and Retention Period of Personal Data Management of the recruitment process
Personal Data is processed in order to assess the application for positions within the Company, conduct general and/or technical interviews, verify the skills and suitability of the candidate for the desired role. This also includes contact with the candidate for updates regarding the selection process. During the selection process, data relating to potential membership of protected categories may also be processed.
The processing of Personal Data is aimed at executing pre-contractual measures adopted at the request of the data subject (pursuant to Art. 6(1)(b) of the GDPR); as for data relating to membership of protected categories, the legal basis for the processing is the fulfilment of obligations in labor law (Art. 9(2)(b) of the GDPR). Personal Data will be retained for the entire duration of the selection process and, where it results in the start of a working relationship, the CV will be retained for the entire duration of the employment relationship, along with additional employee documentation.
Retention of CV for future selections
If the selection process does not result in a working relationship (regardless of the nature of the contract), your CV, if deemed of interest, will be retained in order to contact you for future selection processes.
The processing of Personal Data is based on the legitimate interest of the Controller in organizing corporate resources (Art. 6(1)(f) GDPR). Personal Data will be retained for the entire duration of the selection process and for a maximum of 24 months from its conclusion.
- Mandatory or Optional Nature of Providing Data
The provision of personal data is optional, but failure to provide it will make it impossible for the Controller to assess the candidate for inclusion in the workforce. - Categories of Personal Data Recipients
Personal Data will be processed by personnel within the organization who are expressly authorized (pursuant to Art. 29 of the GDPR) and properly trained. Data will not be disseminated in any way. - Collection of Personal Data from Third Parties
The Controller may collect your personal data from third parties such as, in particular, recruitment and employment agencies; your data may also be transmitted to the Controller by educational and university institutions within the framework of collaborations established with these entities for the integration and/or training of new professionals. - Transfer of Personal Data to a Third Country
Your Data will not be transferred outside the European Union. Any transfers to third countries will be carried out in compliance with the provisions of Chapter V of the GDPR (e.g. adequacy decisions, standard contractual clauses). - Data Subject Rights
We inform you that current legislation, in particular Articles 15 et seq. of the GDPR, provides for several rights that you may freely and at no cost exercise towards us, listed below: Right of Access; Right to Rectification; Right to Erasure or “Right to be Forgotten”; Right to Restriction of Processing; Right to be Informed of Rectification or Erasure or Restriction of Processing; Right to Data Portability; Right to Object to Processing.
To exercise these rights, you may contact the Data Controller at the email address provided above.
If you believe that the processing of your personal data is in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Data Protection Authority (Art. 77 of the GDPR) or, alternatively, to take legal action before the appropriate courts (Art. 79 of the GDPR).