PRIVACY NOTICE ON PERSONAL DATA PROCESSING
If you are interested in joining our company, you may submit your CV through our website, be it for a position advertised on our website or as a speculative application.
To assess your application, we (as controller) will need to process the personal data you provide in your CV or that we otherwise request (e.g., details of your academic background and work experience, and your contact details, birthdate, and salary).
This notice thus explains how we process personal data, in accordance with the GDPR (General Data Protection Regulation (EU) 2016/679).
Controller – Finchimica S.p.A.
Head office: Via Lazio 13, 25025 Manerbio (Brescia)
VAT no.: 00573160983
Certified email: firstname.lastname@example.org
Purpose, legal basis and nature of providing personal data
The personal data is necessary to enable us to assess your suitability for a position with us (i.e., pre-contractual measures).
Your data may be transferred to/shared with the service providers (who act as data processors) that administer psychometric tests/interviews on our behalf to enable us to assess the suitability of candidates. They will collect only the data strictly necessary to assess whether your profile is in line with the requirements of the related position.
Special categories of personal data
If the personal data you provide includes special categories of data (e.g., that a candidate belongs to a protected category of workers), only with your consent will the data be processed. If necessitated by the position in question, the data may be processed to carry out an occupational health test to assess your fitness to work under EU or national/Italian law.
Methods of processing and data retention period
Rest assured that your data will be processed in compliance with the principles of correctness, lawfulness and transparency. We have appropriate security, technical and organisational measures in place that ensure a level of security appropriate to the risk of unauthorised access to, and accidental or unlawful destruction, loss, alteration and unauthorised disclosure of, personal data transmitted, stored or otherwise processed.
Personal data is processed manually or electronically using automated tools that ensure the security and confidentiality of the data.
Data is stored only for as long as strictly necessary for the purposes listed above within the limits of the law. If your profile does not match the needs of the position in question, your data will be stored for a maximum of 24 months from receipt or, if you update your data, from the latest update. This is to allow you to be considered for other positions that become available. If instead you would like your data to be removed, just send a request by email email@example.com or by registered post with return receipt to our head office (detailed in section 1 above).
Data dissemination, sharing and communication
Your data will not be transferred abroad or disseminated.
Only our trained personnel and the service providers who administer psychometric tests/interviews on our behalf will process your data.
Please see the next section to understand how you can exercise your right to know who we may communicate your data to.
Your rights (as a data subject)
You have the following rights, as applicable.
|Right of access
(Art. 15 of the GDPR)
|You have the right to obtain confirmation of the existence or non-existence of personal data concerning you and, if so: (a) to access the data and the related information; and (b) to be informed of the purposes of the processing, the categories of personal data concerned, and the identity of the individuals or categories of individuals to whom your personal data may be sent.|
|Right to rectification:
(Art. 16 of the GDPR)
|You have the right to have personal data concerning you corrected and incomplete data completed without due delay.|
|Right to erasure (right to be forgotten)
(Art. 17 of the GDPR)
|You have the right to have personal data concerning you erased without undue delay (we are obliged to erase personal data without undue delay in the cases listed under Art. 17 of the GDPR).|
|Right to restriction of processing
(Art. 18 of the GDPR)
|You have the right to have the processing of your personal data restricted in the cases listed under Art. 18 of the GDPR.|
|Right to data portability
(Art. 20 of the GDPR)
|You have the right to receive the personal data concerning you in our possession in a structured format commonly used and readable on electronic devices and to have the data transmitted to another controller without hindrance by us in the cases listed under Art. 20 of the GDPR.|
|Right to object to the processing performed based on point (e) or (f) of Art. 6(1) of the GDPR
(Art. 21 of the GDPR)
|You have the right to object to the processing of personal data concerning you at any time for reasons regarding your particular situation based on Art. 6(1), point (e) or (f), of the GDPR.|
The complete text of the articles of the GDPR governing your rights is available here:
If you consent to our processing your personal data (as requested below), you may revoke your consent at any time. Doing so will in no way affect the lawfulness of the processing carried out on the basis of your consent until revoked.
To exercise your rights listed above, please send a request by email to firstname.lastname@example.org or by registered post with return receipt to our head office (detailed under section 1 above).
If you believe the processing of personal data concerning you infringes the GDPR, you have the right to file a complaint with the Italian Data Protection Authority and/or other competent supervisory authorities.
Consent to the processing of data
As explained in section 3 above, your consent is required for processing special categories of data, which as explained in the section above, you may revoke at any time.
Please therefore read the declaration below and, if you wish to consent, tick the box.
 I.e., personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data or biometric data to uniquely identify an individual, and data concerning an individual’s state of health or sexual orientation (as listed under Art. 9, para.1, of the GDPR).
 In accordance with Art. 9, point h, of the GDPR.
 Under Arts. 6, 7 and 9 of the GDPR.