Personal data processing policy in accordance with Article 13 of EU Regulation 2016/679
Pursuant to Article 13 of European Regulation 2016/679 on the protection of personal data (“Regulation”), and the applicable national legislation, Bonfanti Srl (hereinafter the “Company”), as data controller, informs you that your personal data collected when you send your CV or when you fill in the application form in the section of the corporate website “italgru.it/work-with-us” will be processed in compliance with the legal and contractual provisions in force for the purposes and in the manner set out below. When you send us your CV and/or fill in the online format to present your profile for an open job position or to leave us your CV for job positions that may be offered in the future, the Company collects and processes data such as your name, surname, date of birth, e-mail address, telephone contacts, residence, academic background, previous work experience, and any other data you voluntarily provide in your CV or in any attached cover letter. The data will be processed and stored on systems and in archives, including paper archives, managed by the Company, in accordance with the principles of correctness, fairness and transparency provided by the applicable personal data protection legislation, for the sole purpose of assessing your application for possible inclusion in the Company’s workforce. If your CV also contains third party details (e.g. contact persons for previous work experience), you must ensure that you have obtained the consent of that third party to be contacted by the Company for referencing purposes. In such cases you authorise the Company to contact these third parties for references and verification of the information received. The data will be processed while protecting your confidentiality and rights by adopting appropriate technical and organisational measures to ensure a level of security appropriate to the risk (such as the ability to restore access to data in the event of an incident, etc.). In some circumstances, as part of the selection process, the Company may carry out verification activities on the information provided (e.g. academic qualifications and previous employers) to verify your professional profile. Submitting your application and any related information is entirely spontaneous and optional for users of the website. If you decide to apply, you are free to provide the personal data you consider most appropriate for this purpose. However, if you fail to provide the personal data necessary to identify you (such as, for example, your personal details or your education, or those identified as mandatory by an asterisk next to the field to be filled in), the Company will not be able to assess your application, as such data are required for the Company to assess your application. Your consent is not required for the processing of the personal data contained in your CV, as the processing is limited to what is strictly necessary to respond to your request and to obtain information prior to the possible establishment of a contractual relationship, in accordance with Article 6.1 b) of the Regulation. The Company invites candidates not to include any personal data revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade-unionist nature in their CVs or otherwise communicate such data to the Company, as well as personal data revealing health or sex life (so-called special categories of personal data). Your personal data will be stored for a period of time not exceeding the time required to assess your application for possible inclusion in the Company’s workforce in relation to positions that are constantly opening up, in light of the characteristics of the particularly dynamic labour market in which Bonfanti Srl operates and on the basis of the type of skills and experience sought. In any case, based on the Company’s legitimate interest in identifying the most suitable profile for the positions that may open up from time to time, CVs may be stored for up to 10 years, after which they will be deleted, without prejudice to further storage obligations provided for by applicable legislation. You may update your data at any time or ask for them to be deleted. For the purposes indicated above, your data may be disclosed to: a) authorised and duly instructed Company personnel, also with regard to compliance with security measures and confidentiality obligations and, primarily, to the Human Resources and Organisation Department personnel and to the heads of the company departments responsible for the position for which your profile may be considered. Personal data will not be disseminated. In relation to the processing of data described herein, you may exercise the rights provided for by the Regulation (Articles 15-21), including: a) receive confirmation of the existence of your personal data and access to their content (rights of access); b) update, amend and/or correct your personal data (right of rectification); c) request the deletion or limitation of the processing of data processed in violation of the law including data for which storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to be forgotten and right to limitation); d) object to the processing where provided for by the Regulation (right to object); e) revoke consent, where given, without prejudice to the lawfulness of the processing based on the consent given before revocation; f) receive a copy of your data in electronic format and request that such data be transmitted to another data controller (right to data portability). To exercise these rights or to request further information on this policy, the data subject may contact the Data Protection Officer (DPO) by sending an e-mail to firstname.lastname@example.org, or by regular mail to the Company’s registered office at the addresses indicated. Moreover, the data subject may lodge a complaint with the Data Protection Authority should there be any violation of the personal data protection regulations. The Data Controller is Bonfanti Srl located in Ambivere (BG) 24030 – S.S. Briantea 4 and with registered office in Rome (RM) 00187 – Via Sistina 121, telephone 035.908911, in the person of the pro-tempore Legal Representative. The Data Protection Manager is available at email@example.com.