PRIVACY POLICY – CANDIDATES AREA – SELECTION OF STAFF
Information notices pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
WHY THIS INFORMATION
1. WHO IS THE DATA CONTROLLER? HOW TO CONTACT?
The Data Controller is PharmaSuisse Laboratories S.p.A., with registered office in Via Michelangelo Buonarroti 35, 20145 – Milano, in the person of its Legal Representative, who you can contact for any information by phone +39 0229003915, e-mail privacy@pharmasuisse.it.
2. PROCESSED PERSONAL DATA
Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Special Category of Personal data (in case): personal data suitable for revealing racial or ethnic origin and data relating to the health of the person and on the basis of Laws on mandatory hiring (e.g. protected categories and mandatory hiring as per applicable regulations).
3. PURPOSES, LEGAL BASIS, DATA RETENTION, NATURE OF DATA PROVISION
| PURPOSES | LEGAL BASIS | DATA RETENTION | NATURE OF DATA PROVISIONS |
| A) Selection of staff, carrying out the research and selection of staff for the purpose of establishing an employment relationship following the spontaneous sending of a curriculum vitae and recontact by the Data Controller; storage of personal data also for any future selections; interviews and any video-interviews (data processing including image / audio).
|
Data processing is necessary for the execution of pre-contractual measures also adopted at the request of the Data Subject Art. 6, par. 1, lett. b) GDPRGeneral authorization n. 1 of the Supervisory Authority and Laws on mandatory hiring. |
Maximum 24 months | The provision of personal data is necessary to process the data for selections.
Failure to provide the necessary personal data will make it impossible to apply.
|
| B) Management of your requests and requests from other Data Subject, pursuant to art. 15 and following of the GDPR (rights of the interested party). | Data processing is necessary to fulfill a legal obligation of the Data controller (C45) Art. 6, par. 1, lett. c) GDPR |
5 years from the closing of the request, except for disputes.
|
The provision of personal data is mandatory, as it is essential to execute legal obligations.
|
4. TO WHOM WILL THE PERSONAL DATA BE COMMUNICATED? DATA RECIPIENTS
The data will not be disclosed.
The personal data provided, also based on the purposes envisaged in specific areas, will be communicated to recipients, who will process the data as processors (Article 28 of the GDPR), as persons acting under the authority of the Controller and Processor (Article 29 of the GDPR) or autonomous Data Controllers, for the purposes listed above. Precisely, the data will be communicated to:
– subjects that provide services for the management of the information system and communication networks (including e-mail and platforms / software);
– studies or companies in the context of assistance and consultancy relationships;
– any third parties and labor consultants and companies for the purpose of personnel selection;
– Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.
The list of Data Processors is available by writing to privacy@pharmasuisse.it or at the other addresses indicated above.
5. WILL THE DATA BE TRANSFERRED TO NON-EEA COUNTRIES?
Personal data will not be transferred to non-EEA countries. In particular, it is specified that the data will be stored in Italy for the hosting, management, development and maintenance of the site. All third parties to whom the data may be disclosed are based in Italy.
6. IS THERE AN AUTOMATED PROCESS?
Personal data will be processed in a traditional manual, electronic and automated manner. Fully automated decision-making processes are not carried out.
7. DATA SUBJECT’S RIGHTS
You may exercise your rights pursuant to article 15 et seq. of the GDPR, contacting the Data Controller at privacy@pharmasuisse.it. In particular, you have the right, at any time, to request the Data Controller to access your personal data (art. 15), to amend (art. 16), to delete your data (art. 17) or limit their processing (art. 18). The Data Controller informs (art. 19) each of the recipients to whom the personal data have been transmitted any corrections or cancellations or limitations of the processing carried out. The Data Controller informs the Data Subject of these recipients under request.
In the cases provided for, you have the right to the portability of your data (art. 20) and in this case they will be provided to you in a structured format, commonly used and readable, by an automatic device.
Furthermore, you have the right to object, at any time, to processing of your personal data pursuant to art. 6(1)-point (f) GDPR (Data Controller’s legitimate interest).
In the event that you believe that the processing of personal data carried out by the Data Controller is in violation of the provisions of Regulation (EU) 2016/679, you have the right to lodge a complaint to the Supervisory Authority or to appeal the judge.
8. CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to amend, update, supplement or remove parts of this Privacy Policy. For your convenience, when we post changes, we will revise the “last update” date of the Privacy Policy.
Update: 2023/06/05
