Privacy & Cookies Policy

Last Update: 01/04/2020

PRIVACY INFORMATION PURSUANT TO ART. 13 OF THE 2016/679 EU REGULATION
towards Candidates

Il “Holder of the Treatment”

Gamma Innovation S.p.A., pursuant to art. 4 of EU Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter: “EU Regulation”), is the Data Controller of personal data and in implementation of art. 13 of the EU Regulation (“Information to be provided if personal data are collected from the interested party”) provides the following information.

The same therefore informs you that the personal data acquired, also with reference to your application relating to professional insertion in our organization (by way of example but certainly not exhaustive: insertion as an employee / collaborator / intern / etc.), form object of treatment in compliance with the aforementioned legislation.

n relation to the aforementioned treatments, the Data Controller provides, among other things, the following information:

• For “personal data” (pursuant to art. 4 number 1 of EU Regulation 2016/679), any information concerning an identified or identifiable natural person (“interested party”); the natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social;
• For “processing” (pursuant to Article 4 number 2 of EU Regulation 2016/679), means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, the comparison or interconnection, limitation, deletion or destruction;

This treatment must be based on principles of correctness, lawfulness, transparency, protecting your privacy and your rights.

Personal Data Collected

The personal data collected are essentially related to:

• Identification data (name and surname, registered office address, telephone, fax, e-mail, fiscal data, etc.);
• Data relating to the legal relationships to be established (by way of example but certainly not exhaustive: subordinate work, VAT collaboration, internship, etc.). The same are provided by the interested party (in its broadest sense) directly;
• “Particular” data as suitable for detecting:
• the general state of health (for example belonging to a protected category);
• political opinions and religious or philosophical beliefs;
• trade union membership.

Identity and contact details of the Data Controller

Company Name: Gamma Innovation S.p.A.
Registered Office address: Centro Direzionale Milanofiori, Strada 4, Palazzo A6 – 20090 Assago (MI)
Phone number: 02 3654 3970
Email: privacy@gammainnovation.it

Purpose of the treatment

The purposes of the processing of personal data are as follows:

1. fulfillment of legal obligations related to the application and the possible activation of the professional placement referred to above (for example, verification of belonging to a protected category);
2. organizational management of the selection and evaluation of the candidate in its broadest sense;
3. any external professional collaborations to support the selection process;
4. activation of any legal relationship (for example, for possible employment as an employee).

The following table specifies the legal basis, the categories of data, the categories of personal data, and the relative retention period for each of the purposes identified above:

TABLE 1

 

*Categories of recipients

In relation to the purposes indicated, the data may be communicated to the following subjects and / or to the categories of subjects indicated below, or they may be communicated to companies and / or persons, in EU countries, who provide services, including external ones, on behalf of the Data Controller. Among these **, for greater clarity and by way of example but not limited to, their different types are indicated:

• Offices and internal functions of the owner himself;
• Gamma Group Companies;
• Customers and suppliers of the Owner;
• Consulting Companies;
• Professional Agencies;
• Occupational doctor;
• Competent authorities and / or public bodies for the fulfillment of legal obligations;
• IT Managed Services Companies;
• Control and supervisory bodies;
• Insurance entities;
• Labor consultants.

(**) the list of recipients / external managers with additional data useful for identification is available from the Data Controller of personal data.

Transfer of data to non-EU third countries

The Owner informs you that, using a service of Cloud data storage offered by third parties, for the provision of which the use of data centers located abroad is envisaged, transfers data to non-EU countries.

The aforementioned data storage service is offered by the Google Company. The latter, including Google LLC and its associated companies in the United States, has certified its adherence to the Privacy Shield, thus guaranteeing the adequacy of the security measures adopted to transfer data outside the Union. European Union and the European Economic Area (EEA).

The Data Controller also informs you that the Company providing the service has entered into, with the third parties to which it transfers personal data, Standard Contractual Clauses, pursuant to letter c) of point 2 of article 46 of the GDPR), which, incorporated in the contract stipulated with these parties, allow to ensure adequate protection of the data transfer carried out.

The Standard Contractual Clauses will be used to legitimize, pursuant to the GDPR, the transfer of data to those countries, which are located outside the European Union and the European Economic Area (EEA), which, in the compliance with the provisions of Article 46 of the GDPR, are not considered by the European Commission as countries that ensure an adequate level of protection of personal data.

In detail, the non-EU countries to which the data will be transferred in compliance with the provisions of art. 45 of the GDPR are the following: Canada, Japan.

In detail, the non-EU countries to which data will be transferred using the Standard Contractual Clauses are the following: United States, Chile, Taiwan, Singapore, India, Malaysia.

retention Period

See table 1 in column 4 (retention period).

Rights of the interested party

The interested party, in relation to the personal data covered by this information, has the right to exercise the rights provided for by the EU Regulation listed below:

• right of access of the interested party [art. 15 of the EU Regulation] (the possibility of being informed about the processing carried out on their Personal Data and possibly receiving a copy);
• right to rectify personal data [art. 16 of the EU Regulation] (the interested party has the right to rectify inaccurate personal data concerning him);
• right to cancel their Personal Data without undue delay (“right to be forgotten”) [art. 17 of the EU Regulation] (the interested party has, and will have, the right to have their data deleted);
• right to limit the processing of personal data in the cases provided for by art. 18 of the EU Regulation, including in the case of unlawful processing or dispute of the accuracy of the Personal Data by the interested party [art. 18 of the EU Regulation];
• right to data portability [art. 20 of the EU Regulation], the interested party may request their Personal Data in a structured format in order to transmit them to another owner, in the cases provided for by the same article;
• right to object to the processing of your Personal Data [art. 21 of the EU Regulation] (the interested party has, and will have, the right to object to the processing of their personal data);
• right not to be subjected to automated decision-making processes [art. 22 of the EU Regulation] (the interested party has, and will have, the right not to be subjected to a decision based solely on automated processing).

Further information about the rights of the interested party can be obtained on the company website or by asking the Owner for an integral extract of the aforementioned articles.

The aforementioned rights can be exercised as established by the Regulations by sending an e-mail to the address privacy@gammainnovation.it.

Gamma Innovation S.p.A., in compliance with art. 19 of the EU Regulation, proceeds to inform the recipients to whom the personal data have been communicated, about any corrections, cancellations or limitations of the processing requested, where this is possible.

If the processing purpose pursued by Gamma Innovation S.p.A. has consent as its legal basis, the interested party has the right to proceed, at any time, with the revocation by sending an e-mail to the address privacy@gammainnovation.it.

Pursuant to art. 7 of the EU Regulation, the withdrawal of consent does not affect the lawfulness of the processing based on the consent made prior to the withdrawal.

Right to lodge a complaint

If the interested party considers that his rights have been compromised, he has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, in the manner indicated by the same Authority: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.

Mandatory provision of personal data

We inform you that if the processing purposes have a legal or contractual (or even pre-contractual) obligation as their legal basis, the interested party must necessarily provide the requested data.

Otherwise, it will be impossible for the Data Controller to proceed with the pursuit of the specific processing purposes.

Automated decision-making processes

The Company does not make use of any automated decision-making process.

Processing methods

Personal data will be processed in paper, computerized and telematic form and inserted in the relevant databases (collaborator candidates, interns candidates, etc.) to which the employees expressly designated by the Data Controller as Data Processors and Appointees will be able to access, and therefore learn about them and carry out consultation, use, processing, comparison and any other appropriate operation, including automated, in compliance with the provisions of the law necessary to guarantee, among other things, the confidentiality and security of the data as well as accuracy, the updating and relevance of the data with respect to the declared purposes.

Changes and Updates

This information is valid from the date indicated in its header.

Gamma Innovation S.p.A. may make changes and / or additions to this information also as a consequence of any subsequent amendments and / or regulatory additions.