DATA CONTROLLER

SICIM S.P.A., via Consolatico Superiore 96/98 - 43011 Busseto PR – VAT no. IT00143470342

Tel. +39 0524 930211

Fax +39 0524 930082

E-mail: [email protected]

PERSONAL DATA PROCESSED

The Data Controller will process the personal data you have provided by filling in the form and registering on the website. These are:

·       ‘Common' data: data relating to the use of the platform, personal, contact, domicile, professional data and data on education, including photos where these are voluntarily provided, as well as any other information that may be necessary for your employment such as, for example, your identity card and/or passport.

·       Special categories of personal data: data relating to your health.

In general, the Controller does not process special categories of personal data. You may be asked for such data only if they are strictly necessary for your employment or for the establishment of the collaboration relationship, for example, to assess your suitability to carry out a task or to verify the existence of the conditions for your expatriation, if your work must be carried out in foreign countries.  

In particular, during the selection process, you may be asked to provide us with your vaccination record, but only where this is necessary to comply with current obligations regarding health and safety in the workplace (Legislative Decree 81/2008). This information may be processed by the employer in collaboration with the Competent Doctor.

With regard to the conduct of pre-employment medical examinations, the Data Controller shall process only the information contained in the certificate of suitability issued by the Competent Doctor.

PURPOSES OF PROCESSING

Your ‘common’ personal data are processed for the purposes of:

·       managing registration and use of the platform;

·       personnel assessment and selection

·       verifying the prerequisites for your possible employment or for the establishment of a collaboration relationship.

Your ‘special’ data may be processed only if strictly related to the establishment of a working/collaboration relationship, in order to

·       obtain the issue of visas necessary for your expatriation to foreign countries, where necessary for your employment;

·       comply with obligations relating to health and safety in the workplace to which the Controller is subject.

LEGAL BASIS OF PROCESSING

The processing of your ‘common’ data is lawful on the basis of the execution of pre-contractual measures taken at your request and to your benefit (art. 6, par. 1, lett. b GDPR).

Any processing of your ‘special’ data is lawful on the basis of existing obligations in the field of labour law (art.9.2 lett. b GDPR).

PROVISION OF DATA

The provision of your data is optional. In any case, failure to provide your data will make it impossible to consider your application in any personnel selection and assessment procedure and, therefore, to proceed with your employment.

DATA RECIPIENTS

The data may be communicated to external companies and consultants used by the Controller to carry out certain stages of the selection process, such as

·       recruitment companies that may carry out the interview and selection phase of the candidate on behalf of SICIM;

·       suppliers of management software used to manage the selection process;

·       medical centres for pre-employment visits.

Your data may be communicated to other companies of the SICIM Group, also located in countries outside the EEA, which may need to evaluate your professional profile, also for the fulfilment of local law obligations. Furthermore, SICIM may also be required to send your CV to clients who request particular professional profiles from SICIM for personal evaluation.

Your data may also be communicated to the competent doctor because of the fulfilment of obligations regarding health and safety in the workplace.

These external parties are either independent data controllers or have been appointed as data processors pursuant to Article 28 of the GDPR.

The list of Data Processors is available at the Data Controller's registered office and can be requested by e-mail from [email protected].

If you decide to register on the website via social login (Linkedin), we recommend that you view Linkedin's Privacy Policy, available at the following link https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv .

RETENTION PERIOD

Your data will be stored by the Data Controller for ten (10) years from the time they are collected or from the time your application is updated, without prejudice to the possible establishment of the employment and/or collaboration relationship. This retention period is deemed appropriate due to the Company's particular business sector and the consequent need for the Data Controller to identify highly specialised professional profiles. For these reasons, your profile may also be of interest to the Company in the future. Once this period has elapsed, the data collected will be deleted or processed in anonymous form.

You can revise, correct or delete your personal information at any time: to do this, simply access your private area, go to the "Personal Settings" area and make the changes you consider appropriate and/or update the version of your curriculum vitae on the portal or, if you wish, delete your data.

TRANSFER OF DATA TO COUNTRIES OUTSIDE THE EEA

As part of the Controller's activities, your data is generally processed within the EU. However, should this become necessary, the Data Controller will be entitled to transfer your data to countries outside the EEA, ensuring that the transfer will take place in compliance with Articles 44 et seq. of the Regulation and with the applicable legal provisions and, if necessary, entering into agreements that guarantee an adequate level of protection.

PROCESSING BASED ON AUTOMATED DECISION-MAKING PROCESSES

The Controller does not process personal data based on automated decision-making processes, including profiling.

YOUR RIGHTS

As data subject you can exercise the following rights: 

·       Right to access your personal data;

·       Right to have your personal data rectified, supplemented, erased and to restrict processing under certain conditions;

·       Right to receive your personal data provided to the data controller in a structured and commonly used format, and to transmit it to a different data controller;

·       Right to object to the processing of your personal data;

·       Right not to be subject to an automated decision-making process;

·       The right to receive notice in the event of a serious breach of your data;

·       The right to lodge a complaint with a supervisory authority.

Requests may be made without formality to the Data Controller, also through an authorised person or by e-mail to [email protected]. The Data Controller shall respond to the request to exercise of your rights without delay, in any case within thirty (30) days of receipt of the request.

COMPLAINTS

If you wish to lodge a complaint about the way in which your personal data is processed by the Controller or about the handling of a complaint you have lodged, you have the right to lodge a complaint directly with the competent Supervisory Authorities.