Privacy policy CV

DISCLOSURE ART. 13 OF THE EUROPEAN REGULATION n. 2016/679
(General Data Protection Regulation)

1. Data Controller
The data controller is Oesse Srl (VAT number 00632300935), with registered office in Porcia, via Maestri del Lavoro 81/83, www.oesse.com. The Data Controller provides the interested party with information on the purposes and methods of processing personal data collected in the Curriculum Vitae.

2. Methods of processing personal data
Personal data (personal data, telephone number, email, etc.) are processed on computer media with the aid of computerized or automated tools in compliance with the minimum security measures to guarantee the integrity, security and confidentiality of the data.

3. Purpose of the processing
The Data Controller will process your personal data for the purposes of selecting, evaluating and searching for personnel for your organizational structure.
The legal basis of the treatment can be found in the art. 6 p.1 lett. f) GDPR “the processing is necessary for the pursuit of a legitimate interest of the data controller or a third party”; the nature of the provision is optional, in case of failure to send, the holder will not be able to proceed with the evaluation of the candidate’s profile. The consent of the interested party is expressed by the completely voluntary provision of the CV by email, fax or in the dedicated section on the website.
The collection of data takes place by sending by post, fax, e-mail, hand letter, special form on the website, social network or with direct delivery during the selection and interview, by the interested parties, of information relating to own professional experience in the form of a Curriculum Vitae (“CV”).
The sending of your CV by the interested party may represent:

• A spontaneous application;
• The response to specific announcements of search and selection of personnel published in any media, on its website or on third-party websites.

The collection concerns only common personal data, including one’s own photograph in support of the professional profile, which will be subject to processing within the limits strictly pertinent to the obligations, tasks and purposes referred to in this art. 3. Therefore, the data subject must not disclose qualifiable data as particular data pursuant to Regulation 2016/679 or sensitive. In the event that such data are also contained in the CV, the Data Controller will only process the data relevant for evaluating the professional attitude, to the extent that the acquisition of such information is strictly necessary for the establishment of the collaboration relationship / work.
The data controller kindly asks the candidates to indicate in their CVs the consent to the processing of the data.

4. Recipients or category of recipients of personal data
The personal data you have provided, for the purposes described above, may be brought to the attention of employees and / or collaborators of the Data Controller and communicated to the following subjects:

1. Third-party companies that may be appointed by the Data Controller to carry out the obligations assumed by the latter for the implementation of the treatments envisaged by the purposes referred to in art. 3;
2. All the subjects (including the Public Authorities) who have the right to access the data pursuant to legislative or administrative provisions;
3. Third party companies that provide essential support services to the processing and have direct or indirect access to your data;
4. Third-party companies appointed by the Data Controller for the processing of data required by the purposes referred to in art. 3.

All the collaborators or suppliers used by the Data Controller for the processing of your personal data have been appropriately and legally authorized and responsible for the methods and the purposes of the treatments assigned to them and will act in compliance with and in accordance with this information.
The personal data provided by you and subsequently processed in connection with the management of the service are not subject to disclosure.

5. Data retention times
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case, for no more than 12 months from collection for the purposes indicated, after which the owner or an appointed person will delete the CV or make the data pseudonyms.6.

6. Exercise of rights by the interested party
Pursuant to articles 13, paragraph 2, letters b) and d), 15, 18, 19 and 21 GDPR informs the interested party that he has the right to:

1. Access to personal data: obtain confirmation or not that data is being processed concerning you and, in this case, access to the following information: the purposes, the categories of data, the recipients, the storage period, the right to lodge a complaint with a supervisory authority, the right to request the rectification or cancellation or limitation of the processing or opposition to the processing itself as well as the existence of an automated decision-making process;
2. Request for rectification or cancellation of the same or limitation of the treatments that concern you; “limitation” means the marking of data stored with the aim of limiting its processing in the future;
3. Opposition to processing: oppose for reasons connected to your particular situation to the processing of data for the execution of a task of public interest or for the pursuit of a legitimate interest of the Data Controller;
4. Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive the data concerning you in a structured format, commonly used and readable by an automatic device; in particular, the data will be provided to you by the Data Controller in .xml format;
5. Withdrawal of consent for processing for marketing purposes, both direct and indirect, market research and profiling; the exercise of this right does not in any way prejudice the lawfulness of the processing carried out before the revocation;
6. Propose a complaint pursuant to art. 77 RGPD to the competent supervisory authority based on your habitual residence, place of work or place of violation of your rights; for Italy, the Guarantor for the protection of personal data is competent, and can be contacted through the contact details indicated on the website http://www.garanteprivacy.it.

The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in art. 1 of this statement.
Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and the number of requests can this term be extended by a further 2 (two) months.

The exercise of rights is not subject to any form restrictions and is free. The e-mail address for exercising the rights is gdpr@oesse.com.