INFORMATION TO CANDIDATES PURSUANT TO ARTICLES 13 and 14 OF REGULATION (EU) 2016/679 (“GDPR”)

Dear Candidate,

Kedos S.r.l. provides you, pursuant to Articles 13 and 14 of European Regulation No. 2016/679 on the protection of individuals with regard to the processing of personal data (henceforth “GDPR”), some information to follow up on the request of the interested party and, more specifically, to proceed with the verification of the conditions for the recruitment and / or start of a collaboration.

DATA CONTROLLER

Kedos S.r.l.
Via Chiavari 5/E,
43125 Parma (PR),
Tel.: 0521/995811
privacy@kedos-srl.it

DATA PROTECTION OFFICER (“DPO”)
E-mail: dpo@kedos-srl.it

PERSONAL DATA PROCESSED
Personal data held by Kedos S.r.l., Data Controller, include:

COMMON DATA
Name, Surname, place and date of birth, tax code or VAT number, marital status, citizenship, residence and/or domicile, e-mail address and telephone contacts, educational qualification, work experience and any other data you have entered in your curriculum vitae and/or included in the questionnaire that will be submitted to you during the interview.

SPECIAL CATEGORIES OF DATA (former known as “sensitive data”)
Data that may reveal, by way of example, the health condition of the subject (such as belonging to protected categories of workers) included in the curriculum or in any other documentation submitted to the Company.

DATA SOURCE
The data are collected from the subject concerned and therefore directly provided by you (including through publication on professional social network profiles), by headhunting companies or companies providing recruitment services.

PURPOSE OF PROCESSING – LEGAL BASIS – PERIOD OF DATA RETENTION
Personal data are processed within the normal activity of Kedos S.r.l., and for the following purposes:

  1. Your data are collected and processed in order to carry out the activities related to the search and selection of candidates.
    Legal basis of the processing:execution of pre-contractual measures taken at your request;
    Period of data retention: the entire duration of the selection activity and, upon termination of the same, for the time necessary to be cancelled manually, subject to any further storage you have authorized
  1. Your data is also processed for the purpose of verifying that the data provided is true by using public information (including professional social network profiles, databases, web registries or publicly accessible multimedia archives).
    Legal basis of the processing: legitimate interest of the Data Controller to verify the professional aptitude of the candidate;
    Period of data retention: the entire duration of the selection activity and, upon termination of the same, for the time necessary to be cancelled manually.
  1. 3. Subject to your explicit consent, your data will be kept by the Company for 24 months, for possible future selections promoted by the Company, in the event that the present application is unsuccessful. Should you decide not to take advantage of this additional service and therefore not to authorize the storage of your data for future selections, this will not preclude your profile from being taken into consideration for the current selection, but will only prevent your application from being taken into consideration for any future selections.
    Legal basis of the processing: consent;
    Period of data retention: 24 months from the end of the selection process.
  1. If your application is successful, your data are processed by the Company in order to fulfil the obligations and exercise the rights provided for by the applicable legislation on labour law and social security and social protection, or by collective agreements, as well as provisions issued by authorities empowered to do so and by supervisory and control bodies.
    Legal basis of the processing:need to fulfill legal obligations to which the Company is subject in compliance, as regards “sensitive” data, with the provisions of art. 9.2, letter b);
    Data retention period: 10 years after termination of the contractual relationship.
  1. If necessary, to ascertain, exercise and/or defend the Company’s rights in a court of law
    Legal basis of the processing: legitimate interest of the Company to defend itself in court;
    Period of data retention:for the entire duration of the litigation, until the time limit for appeals is exhausted, for the time necessary to be manually cancelled.

After the above-mentioned retention periods have elapsed, personal data will be destroyed, deleted or made anonymous, compatibly with the technical procedures of deletion and backup.

NATURE OF CONFERMENT
 The conferment of data is mandatory for the activity of research and selection of personnel. Refusal to provide the data does not allow us to carry out this activity and will not allow your application to be taken into consideration.

AUTHORIZED SUBJECTS AND RECIPIENTS OF DATA
 The Data may be processed by the employees of the Company departments responsible for pursuing the above-mentioned purposes, who have been expressly authorisedto do so and have received adequate operating instructions from the Data Controller.

The data may be communicated to subjects operating as Data Controllers, including, by way of example but not limited to, Authorities and supervisory and control bodies.

The data may be processed, on behalf of the Data Controller, by persons designated as data processors, including, in particular:

  1. Companies that the Data Controller may use for the purposes of selecting, recruiting and evaluating candidates;
  2. Companies or professionals that provide support for the implementation and maintenance of the Company’s information system and applications;
  3. Companies that provide electronic storage services for administrative documents.

RIGHTS OF THE DATA PROVIDER UNDER ARTICLE 7 AND CHAPTER III OF GDPR (ART. 15-23)
In relation to the processing of your personal data, you may request from the Data Controller:

  • Access to the data concerning you (art. 15 GDPR);
  • Data rectification and integration (art. 16 GDPR);
  • The cancellation of the data (art. 17 GDPR);
  • Limitation of treatment (art. 17 GDPR);
  • Oppose data treatment in the hypothesis of legitimate interest of the Data Controller (art. 21 GDPR);
  • The receipt of data in a structured, commonly used and machine-readable format the data, as well as, if technically feasible, to transmit them to another Data Controller without hindrance (“right to data portability”, art. 20 GDPR);
  • To revoke at any time the consent given. (art. 7 GDPR).

We also remind you of your right to file a complaint with the competent supervisory authority (art. 13 GDPR).

These rights may be exercised by sending a written communication to the address indicated below or an e-mail to: privacy@kedos-srl.it.

 

Information updated on 12/06/2020

Loading...