General Data Protection Regulation (GDPR)
Pursuant to and for the purposes of the GDPR, STUANI S.p.A., Settimo Milanese (MI) (hereinafter, the “Company” or the “Controller”), hereby provides you with this information notice regarding the processing of your “Personal Data” as defined in the Regulation.
1. Sources of Personal Data, Purposes of Processing and Legal Basis
The Personal Data you voluntarily supply via the “Contacts” section will be processed exclusively for:
a) Assessing your profile so that your application may be submitted to STUANI S.p.A. for personnel search and selection.
Legal basis: performance of pre-contractual steps.
b) Performing statistical analyses, for STUANI S.p.A.’s internal use, on the applications collected.
Legal basis: the Company’s legitimate interest in verifying the effectiveness of its recruitment campaigns aimed at identifying suitable candidates (itgovernance.eu, ico.org.uk).
2. Special Categories of Data
The Company may process special categories of data—e.g. information on your state of health—only where required by law (such as data on membership of protected categories). Any other special (e.g. medical) data or judicial data not needed for recruitment that appear in your CV or are otherwise provided will be erased immediately and not processed.
3. Methods of Processing
Processing may be carried out with or without electronic, automated, IT or telematic means, strictly in line with the purposes set out above and always ensuring data security and confidentiality.
4. Provision of Data
Providing the data is optional; refusal will simply prevent your data from being considered in the selection process. Data marked with an asterisk* in the form are mandatory; failure to provide them will make it impossible for the Company to carry out the selection procedure.
5. Disclosure of Data
Apart from disclosures required by law, your data may be communicated to:
- Labour consultants
- Tax consultants
- Personnel-management staff
Authorised Company HR personnel, external recruitment agencies and the website provider—each appointed as a “Processor”—may also access the data for the purposes set out above. A complete list of such Processors is available on request.
6. Retention Period
Data will be stored for three years, after which they will be erased. Shortly before expiry, the Company will ask whether you wish to remain in its database for a further six months to receive notice of new job opportunities. Your data will be retained for another three years only with your consent.
7. Data Controller
The Controller is STUANI S.p.A., Settimo Milanese (MI). You may contact the Company at the above address or at stuani@stuani.com to exercise your GDPR rights. The Data Protection Officer can be reached at the same address. An up-to-date list of Processors is available at the Company’s registered office.
8. Your Rights under the GDPR
Subject to the Regulation’s conditions, you may exercise the following rights:
- Access to your personal data (Art. 15 GDPR) (gdpr-info.eu);
- Portability – to receive a copy of the data you provided (Art. 20 GDPR) (gdpr-info.eu);
- Rectification of inaccurate data (Art. 16 GDPR) (gdpr-info.eu);
- Erasure of data where no legal ground for processing remains (Art. 17 GDPR) (gdpr-info.eu);
- Withdrawal of consent where processing is based on consent or concerns direct marketing (Art. 7 GDPR) (gdpr-info.eu);
- Restriction of processing while a complaint is investigated (Art. 18 GDPR) (gdpr-info.eu);
- Objection where processing is based on legitimate interest or carried out in the public interest/exercise of official authority (Art. 21 GDPR) (gdpr-info.eu).
The Company will respond promptly to questions or complaints about your personal data, in accordance with applicable law. For further concerns, contact stuani@stuani.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) via www.garanteprivacy.it (gdpr-info.eu).