Privacy notice under articles 13-14 of Regulation (EU) 2016/679 (General Data Protection Regulation)
Data subjects: job candidates.
LIODRY FOODS S.P.A. as Data Controller of the subject’s personal data, pursuant to and for the purposes of EU Regulation 2016/679 hereinafter ‘GDPR’, hereby informs that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on principles of lawfulness, fairness, transparency and protection of data subject’s privacy and rights.
Personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations provided for therein.
Furthermore, the Data Controller may be made aware of special categories of personal data and in detail: trade union membership, sensitive data related to any statement by the candidate declaring that they belong to the protected categories provided for by law 68/99, general and sensitive personal data possibly contained in email messages, medical condition. The processing of personal data for these special categories of personal data is carried out in compliance with art. 9 of the GDPR.
Purpose and legal basis of the processing: in particular, personal data will be processed for the following purposes related to the implementation of measures deriving from contractual or pre-contractual duties:
selection procedures for personnel recruitment.
Processing methods. Personal data will be processed in the following ways:
digital processing (PC-based);
manual processing (paper-based records)
Data processing shall comply with the methods set out in articles 6, 32 of the GDPR and through the adoption of the appropriate security measures provided for.
Data will be processed exclusively by personnel expressly authorised by the Data Controller and, in particular, by the following categories of authorised personnel:
personnel management.
Communication: data may be communicated to third parties for the correct management of the relation and in particular to the following categories of Recipients including all duly appointed Data Processors:
consultants and freelancers, including in association.
Dissemination: personal data will not be disseminated in any way
Retention period. We hereby inform that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of personal data:
Shall not exceed the period of time necessary for candidate evaluation and in any case 12 months from the first contract.
Data Controller: the Data Controller, pursuant to legislation in force, is LIODRY FOODS S.P.A. (Via E. Mattei n. 8/a , 42043 GATTATICO (RE), P. IVA01898550353, to be reached at the following addresses: e-mail info@liodryfoods.com, phone 0522908725 in the person of its pro tempore legal representative.
The Data subject shall have the right to obtain from the Controller the erasure (right to be forgotten), restriction, updating, rectification, portability, objection to the processing of personal data, as well as in general to exercise all the rights provided for by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
Regulation EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 –
Data subject’s rights
1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, even in case data have not been registered yet, and, where that is the case, communications or data in an intelligible form, and the possibility to lodge a complaint with a supervisory authority.
2. The data subject shall have the right to obtain:
a. the source of subject’s data;
b. purposes and methods of data processing;
c. details on the logics applied in case of data processing through electronic devices;
d. IDs of the Controller, processors, and appointed Representative pursuant to article 5, paragraph 2;
e. the indication of subjects or subject categories to whom personal data can be disclosed or who may receive such data as appointed representatives within the State territory, of persons in charge or appointed individuals.
3. The data subject shall have the right to obtain:
a. updating, rectification or, whenever required, integration of personal data;
b. erasure, anonymisation or blocking of data unlawfully processed, including data for which retention is not required for the purposes for which it was collected and then processed;
c. a statement that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their contents, of those to whom the data have been communicated or disseminated, except when such fulfilment proves impossible or involves the use of means manifestly disproportionate to the right protected;
d. data portability.
4. The data subject shall have the right to object, in all or in part:
a. on legitimate grounds, to the processing of personal data concerning him or her, although consistent with the purposes of the data collection;
b. to processing of personal data concerning him or her for marketing purposes, direct sale, market survey or commercial communication.
