Information to the Interested Party (CURRICULUM)
Pursuant to Art. 13 of EU Regulation 2016/679 of 27/04/2016
Pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter referred to as GDPR (General Data Protection Regulation), EXACT LAB S.r.l., with registered office in Via Crispi, 56 – 34142 Trieste as the owner of the processing of personal data, informs you about the following:
Data controller
The data controller is EXACT LAB S.r.l., with registered office at Via Crispi, 56 – 34142 Trieste.
Purpose of Processing
We inform you that personal data (including special categories of data and personal data relating to criminal convictions) contained in the Curriculum Vitae and other communications you have sent us will be processed (with or without the aid of electronic means) for purposes related to recruiting and staff selection.
Compulsory or optional nature of providing data and consequences of refusal to provide personal data
The legal basis of the processing is the consent from the Data Subject, expressed by ticking the appropriate box and clicking the “Submit” button. Therefore, your refusal, even partial, to provide consent would make it impossible for the owner to establish and manage the requested service.
Methods of data processing
The processing of personal data is carried out by means of the operations indicated in Art. 4 No. 2) GDPR, for the purposes mentioned above, whether on paper or computer, by means of electronic or otherwise automated tools, in compliance with the regulations in force in particular on confidentiality and security and in accordance with the principles of fairness, lawfulness and transparency and protection of the rights of the person concerned.
Processing is carried out directly by the owner’s organization, its managers and/or appointees.
Communication and Outreach
Only persons authorized to process data and persons who process data on behalf of the Data Controller who have been appointed as Data Processors may access your personal data. These subjects are also bound to secrecy and confidentiality on the basis of special internal regulations. The data will not be subject to communication to third parties, nor will it be disseminated.
Period of retention of personal data
With regard to the storage of the data processed under the terms indicated above, given that according to the principles of necessity, relevance and nonexcessiveness, the storage periods of the different types of personal data that may be processed must be identified taking into account each of the purposes concretely pursued, we inform you that resumes will be stored for two years from the date of receipt. Once this period is reached, they will be destroyed or deleted.
Data Transfer
Personal data are stored on servers located within the European Union. It is in any case understood that the Data Controller, should it become necessary, will be entitled to move the servers outside the EU as well. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
Rights of the interested party
The Controller informs you that you, as a data subject, have the right to request:
- Access to personal data and information (Article 15 of the GDPR);
- rectification or cancellation of the same (Articles 16 and 17 of the GDPR);
- The limitation of the processing of personal data (Article 18 of the GDPR).
You, finally, will be able to:
- To object to the processing of personal data under the conditions and within the limits of Article 21 of the GDPR;
- Exercise the right to data portability (Art. 20 GDPR).
Regarding processing operations based on consent (pursuant to Articles 6(1)(a) and 9(2)(a) of the GDPR), we inform you that you have the right to revoke such consent at any time (without affecting the lawfulness of processing based on consent given prior to revocation).
Finally, please note that you, as a Data Subject, if you believe that the processing that concerns you violates the Regulations, you have the right to lodge a complaint with a supervisory authority (Data Protection Authority or other authority that may be competent) pursuant to Article 77 et seq. of the GDPR.
To exercise your rights under Article 15 of the GDPR or for questions or information regarding the processing of your data and the security measures taken, you may in any case forward your request to our company at the following address:
EXACT LAB S.r.l.
registered office Via Crispi, 56 – 34142 Trieste
Phone number: 040 9719258
E-mail: amministrazione@exact-lab.it
