Information pursuant to Art. 13 of EU Regulation No. 679/2016 (Data Policy)

Pursuant to Article 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR) and the applicable national legislation, we hereby inform you of the following:

1) Data Controller and Personal Data Protection Officer:

Your personal data are used by the Company Resolvo S.r.l, with registered office in Via di Novoli 91/S, 50127 Florence (P. IVA 05925020488). In addition, in the management of your data, the Company’s employees may be aware of this data and have been authorised in writing and provided with specific instructions regarding its processing.

2) Purpose of data processing:

Your data will be processed for the evaluation of your candidacy for the position for which you have been proposed. Data collection can take place through unsolicited sending to our Company – by the interested party – of personal information and information related to your professional experience, by mail, e-mail, hand, or through registration on the Company’s website. Data will be processed in both electronic and paper format for the following purposes: recruitment and hiring of personnel.

3) Legal basis

The legal basis for the processing of the data is: the execution of pre-contractual measures taken at the request of the data subject pursuant to art. 6 paragraph 1 letter b) of the European Regulation (EU) 2016/679, as recalled by art. art. 111 bis d.lgs. 101/2018.

The provision of the data referred to in point 2) of this policy is necessary to carry out activities related to recruitment of personnel. Failure to provide this data will make it impossible for the Company to consider the application as part of the recruitment process.

4) Data storage

Personal data, processed for the purposes indicated above, will be kept for the period necessary for the evaluation of the application and no longer than 1 year from receipt of the request. This retention period is necessary since the recruitment process applies to a field that requires specific experience not readily available on the market.

5) Data Profiling and Dissemination

Personal data are not subject to disclosure to third parties, unless specifically consented to by the data subject and for the purposes set out in point 2) of this policy. They are not subject to dissemination nor to any fully automated decision-making process, including profiling.

6) Rights of the interested party

Pursuant to European Regulation 679/2016 (GDPR) and to national legislation in force, the data subject may, in the manner and within the limits provided for by the legislation in force, exercise the following rights:

• to request confirmation of the existence of personal data concerning him/her; to be informed of the origin of his/her personal data; to receive intelligible communication about the logic, methods and purposes of the processing of his/her personal data; to request that the Data Controller provides access to his/her personal data and to information relating to them (right of access of the data subject – Article 15 of Regulation 679/2016);
• to request the updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary to achieve the purposes for which they were collected (right of rectification and erasure – Articles 16 and 17 of Regulation 679/2016), the cancellation (right to be forgotten) of personal data concerning him/her (upon the occurrence of one of the conditions specified in Article 17(1) GDPR, and in accordance with the exceptions provided in paragraph 3 of the same article);
• to restrict and/or to object to the processing of data relating to him/her (Article 18 of Regulation 679/2016) in the event of inaccuracy of the data, unlawfulness of the processing, prior objection to processing by the data subject;
• to request and obtain from the Controller personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (Art. 19 of Regulation 679/2016);
• to object at any time to the processing of his/her personal data in the event of special situations concerning him/her (objection, Art. 21 GDPR);
• to revoke consent at any time (Art. 7(3) GDPR), limited to cases where processing is based on his/her consent, as set out here and for one or more specific purposes concerning common personal data (e.g. date / place of birth or place of residence) or special categories of data (e.g. data revealing racial origin, political opinions, religious beliefs, state of health or sex life). Data processing based on consent and carried out prior to the revocation of consent is, however, still lawful;
• to file a complaint with a supervisory authority for Data Protection Authority.

The exercise of the above rights may be exercised by written communication to be sent by email to the address of the Data Controller: postacert@pec.resolvo.eu