CANDIDATES PRIVACY NOTICE
Dear Candidate,
In your capacity as the data subject, i.e., the person to whom the personal data provided by you and better specified below (hereinafter referred to as "Personal Data") refer, the company Fassa UK Ltd with registered office in Fassa House - Ashchurch Business Centre, Alexandra Way, Ashchurch - Tewkesbury GL20 8TD (United Kingdom), VAT Registration No GB 186 5447 69, as data controller (hereinafter referred to as the "Company" or the "Data Controller"), provides you with the following information pursuant to Article 13 of the UK GDPR (i.e. the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) and to Article 13 of Regulation (EU) 2016/679 (the "GDPR").
- WHAT PERSONAL DATA MAY BE COLLECTED
The Personal Data collected relates to the information contained in the Curriculum Vitae. In addition, information may also be collected from a check of your references (if done) such as membership in some institution, academic background, work history, and other relevant information in order to determine your suitability as a candidate, including by contacting individuals you may have indicated as references, as well as your previous employers. In addition to this, information and images may be collected from your profile on professional social networks, in databases, web logs or publicly accessible media archives, notes taken during interviews, and comments from other individuals such as references that may be made during the selection process. Personal Data may be updated based on publicly available information and/or collected from third parties and/or directly from you.
The Personal Data that will be acquired will not relate to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or information relating to health or sexual life or sexual orientation (hereinafter "Special categories of data"), unless they are characteristics that affect the manner in which the work activity is carried out, or are an essential and determining requirement for the performance of the same. In this case, the Company will process the Special categories of data within the limits of what is provided for by the applicable laws and the orders issued by the ICO and other competent data protection authorities in accordance with the UK GDPR and GDPR.
Personal Data and Special Categories of Personal Data jointly are hereinafter referred to as "Data".
The Company will process, for purposes inherent to the fulfillment of administrative, accounting and tax obligations related to the selection of personnel, the Data of Your family members (such as, for example, the first and last name, relationship, date of birth provided by You, in order to prove or not the possible existence of ties of kinship or affinity with individuals who hold public office), to whom this information applies, in addition to You and insofar as relevant. It is your responsibility to communicate the contents of this notice to your family members under the UK GDPR and GDPR.
- FOR WHAT PURPOSES PERSONAL DATA MAY BE USED
- The collection and processing of your Data are necessary for the execution of pre-contractual measures and are carried out for purposes related or instrumental to the performance of the Company's recruitment and selection activities.
Basis for processing: execution of pre-contractual measures taken at your request pursuant to art. 6, first paragraph letter b) of the GDPR and the UK GDPR.
The provision of Personal Data for this purpose is compulsory as failure to do so will make it impossible for the Company to initiate the recruitment and selection process and to establish any working relationship with you.
- The Company will process your Personal Data to verify that what you have disclosed is true. For this activity, the Company may also process public information, contained in professional social network profiles, databases, web registries, or publicly accessible multimedia archives.
It should be noted that such processing will be limited to information related to professional aptitude for the job and, in any case, limited to what is strictly necessary for the work to be carried out by the candidates.
Basis for processing: the legitimate interest of the Company pursuant to art. 6, first paragraph, letter f) of the GDPR and the UK GDPR to ensure the proper conduct of the recruitment and selection process.
- Your Data will be processed for purposes related to obligations under laws, regulations or European legislation, provisions/requests of authorities empowered to do so by law and/or supervisory and control bodies.
Basis for processing: fulfilment of a legal obligation to which the Company is subject pursuant to art. 6, first paragraph letter c) of the GDPR and the UK GDPR. The provision of the aforementioned data for this purpose is compulsory since, without it, the Company will find itself unable to fulfill specific legal obligations and consequently to initiate the process of recruitment and selection of personnel and establish any employment relationship with you.
- Lastly, your Personal Data may be processed for purposes related to the need to defend rights in the course of judicial, administrative or extrajudicial proceedings and in the context of disputes that have arisen in connection with the Company's recruitment and selection process.
In addition, your Personal Data may be processed by the Company to sue or make claims against you or third parties.
Basis for processing: the legitimate interest of the Company in the protection of its rights pursuant to art. 6, first paragraph, letter f) of the GDPR and the UK GDPR. In this case, you are not required to provide new and specific data, as the Company will pursue this additional purpose, where necessary, by processing the Personal Data collected for the above purposes deemed compatible with the law.
- HOW WE KEEP PERSONAL DATA SECURE, WHERE WE KEEP IT AND FOR HOW LONG
The processing of your Data will be based on the principles of correctness, lawfulness and transparency and may also be carried out through automated methods designed to store, manage and transmit them. The processing will be carried out by means of instruments suitable to guarantee security and confidentiality also through the use of procedures suitable to avoid the risk of loss, unauthorized access, illicit use and diffusion.
In order to carry out some of the processing activities of your Personal Data, the Company may communicate them to Companies belonging to the Fassa Group, located in countries that do not belong to the United Kingdom (UK) or the European Economic Area (EEA) (hereinafter the "Third Countries").
In particular, the Company informs you that Personal Data may be transferred between Italy and the UK, the lawfulness of such transfer is, in any case, guaranteed through the means provided by the GDPR and the UK GDPR.
These external parties will process your Personal Data either as autonomous data controllers or as data processors, duly appointed by the Company in accordance with data protection regulations (depending on their role in relation to the processing).
You may write to the Data Controller at any time, using the contact details below, asking who are the entities to whom Personal Data is disclosed, as well as to receive a copy of the safeguards adopted for the transfer.
Your Data will be kept only for the period necessary for recruitment purposes (for a specific position or even for future positions of potential interest). The Company provides for a periodic review of the Data and the possibility of being able to delete it if it is no longer needed for the intended purposes.
In any case, your Personal Data will be kept in the Company's databases for a period of time not exceeding 10 years, from the date of acquisition by the Company, or equal to the period of your employment relationship. After this retention period has expired, the Data will be deleted or anonymized.
With particular reference to requests from the authority or the execution of legal obligations, or in the case of judicial protection of our rights, referred to in sub-paragraphs C) and D), the Data will be retained for the time necessary to process the request or to pursue the protection of rights.
- WHOM CAN WE SHARE PERSONAL DATA WITH
Your Data may be accessed by duly authorized employees of the Company, as well as external suppliers, appointed as necessary as data processors, who provide support for the delivery of services.
You may contact the Company in the manner provided in the "Contact Us" section if you wish to request to view the list of data processors and other parties to whom we disclose data.
- YOUR DATA PROTECTION RIGHTS AND YOUR RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY
You are entitled to obtain from the Company, subject to the existence of the legal prerequisite underlying your request:
- access to your personal data pursuant to art. 15 of the UK GDPR and the GDPR;
- the rectification of your data personal data held by the Company ad deemed inaccurate, pursuant to art. 16 of the UK GDPR and the GDPR;
- the deletion of personal data, which the Company is no longer entitled to process, pursuant to art. 17 of the UK GDPR and the GDPR;
- the restriction of the processing of your personal data pursuant to art. 18 of the UK GDPR and the GDPR;
- the copying of personal data provided by you to the Company, in a structured, commonly used and machine-readable format and the transmission of such personal data to another data controller, (so-called portability) pursuant to art. 20 of the UK GDPR and the GDPR.
Right to object: in addition to the rights listed above, you have the right to object at any time, for reasons related to your particular situation, to the processing of your Personal Data by the Company in pursuit of its legitimate interest. The request for objection should be addressed to the following address: data.protection@fassabortolo.it or, in hard copy, by registered letter with return receipt addressed to the following address: Fassa UK Ltd with registered office in Fassa House - Ashchurch Business Centre, Alexandra Way, Ashchurch - Tewkesbury GL20 8TD (United Kingdom).
Should you exercise any of the above rights, it will be the Company's responsibility to verify that you are entitled to exercise them and you will be acknowledged, as a rule, within one month. You will be able to exercise your rights by using the Company's contact details given in paragraph 6 below.
If you believe that the processing of your Personal Data is in violation of the provisions of the applicable data protection regulations, you have the right to lodge a complaint with the relevant Data Protection Authority, using the references available on the website of the UK Information Commissioner’s Office www.ico.org.uk or on the website of the Italian Garante per la Protezione dei Dati Personali www.garanteprivacy.it, or to take appropriate legal action.
- CONTACTS
The contact details of the Company, as data controller, are as follows:
Fassa UK Ltd, registered office in Fassa House - Ashchurch Business Centre, Alexandra Way, Ashchurch - Tewkesbury GL20 8TD (United Kingdom), VAT Registration No GB 186 5447 69, email fassa@fassabortolo.com, Ph. +44 (0)1684.212272.
