PRIVACY POLICY FOR CANDIDATES
Dear Sir/Madam,
This notice is provided pursuant to Articles 13 and 20 of Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”) to explain the processing of your personal data that you provide or have provided by completing an online form on this website to apply for a job position within the organization of MATEC INDUSTRIES S.R.L.
1. Data Controller, Data Processing Manager and Data Protection Officer:
The Data Controller is MATEC INDUSTRIES S.R.L., with registered office at Via Corso Venezia, 36 – 20121 Milan (MI), VAT no. 12495500964 (hereinafter referred to as “MATEC“). MATEC has appointed a DPO in the person of Avv. Gianluca Craia, who can be contacted at the e-mail address dpo@matecindustries.com.
2. Purpose of processing:
The personal data that will be required and processed are necessary for the proper evaluation of your job profile in order to submit a job offer to you or not.
In particular, your data will be used for:
1. evaluation of your curriculum vitae, job interviews and general recruiting activities with reference to job openings within our organization;
2. notifying you of any job opportunities that we believe may be of interest to you.
3. Special categories of personal data that may be required:
You will be required to provide personal data such as: name, surname, age, gender, residence, personal e-mail, telephone number, other addresses and/or contact details, educational and professional experience.
You will also be required to send or upload your CV.
4. Nature of provision:
We would like to clarify that the provision of your personal data is mandatory in order to evaluate your profile. Failure to provide such data will result in the impossibility of evaluating your profile in order to establish an employment relationship with you, so failure to provide them will result in the impossibility of entering our staff. Unlike the above, the provision of any sensitive data is not mandatory for the purpose of processing, so we invite you to delete them from your CV or to give your consent to their processing.
5. Legal basis of processing and request for consent:
The legal basis for processing depends on the purpose.
With regard to purpose no. 1, it is Matec’s legitimate interest in carrying out pre-contractual measures (in particular, aimed at hiring you within our organization, subject to evaluation of your CV).
As regards purpose no. 2, the basis is the consent you have freely given.
In this sense, after reading this notice, you may or may not consent to the proposed processing in a separate section for purpose 2.
We remind you that giving or not giving your consent to the processing of your personal data will prevent Matec from contacting you in the event of job openings that we believe are compatible with your profile.
6. Processing methods and retention period:
Processing will be carried out in automated and/or manual form, in compliance with the security measures referred to in Article 32 of the GDPR, by specifically appointed persons, in compliance with the provisions of Article 29 of the GDPR. We inform you that, in compliance with the principles of lawfulness, limitation of purpose and data minimization, pursuant to Article 5 of the GDPR, the retention period of your personal data is established in a period not exceeding [90 days], a term that we consider appropriate to carry out an assessment of your profile. After the aforementioned [90 days], your data will be deleted and, if you wish to apply again for a position within our staff, you will need to provide your data again. It is understood that if you give your consent to the processing of your data for purpose no. 2, we will keep your data for 12 months.
7. Communication and dissemination area:
The data collected will not be disclosed or communicated without your explicit consent, except for:
– Communications necessary for the evaluation of the candidate (e.g. to personnel selection professionals who collaborate with Matec).
8. Transfer of personal data:
The personal data of candidates will be processed by the Data Controller mainly within the territory of the European Union.
However, if job openings in Italy are not momentarily open or available to accept the application for eventual hire, the Controller, when it is deemed appropriate, may transfer the data collected to a third country or to an international organization among the foreign subsidiaries of Matec.
In particular, the foreign countries concerned are:
– Brazil;
– United States;
– India;
– Turkey;
– Australia;
– United Kingdom.
Pursuant to Articles 45, 46 and 49 of the GDPR, the data that will be transferred to the countries listed above are those contained in the Curriculum Vitae that Matec spontaneously receives in the form provided in the “Work with us” section and that it sends to its affiliates, so that candidates can be evaluated on open positions in one or more of the affiliates belonging to one of the above-mentioned countries.
Please note that the cross-border transfer of data takes place in compliance with EU Regulation 679/2016 (“GDPR”). Specifically, all necessary precautions are taken in order to ensure the fullest protection of personal data by basing such transfer:
a. on adequacy decisions of the receiving third countries expressed by the European Commission, pursuant to Article 45 of the Regulation;
b. on adequate guarantees expressed by the third-party recipient pursuant to Article 46 of the Regulation;
c. on the adoption of corporate binding rules.
The precautions referred to in point a. are applied for Australia, the United Kingdom and the United States as they are included in the list of third-party addressees of adequacy decisions.
The precautions referred to in points b. and c. above are applied for India, Brazil and Turkey as these countries have not been deemed adequate by the European Commission; therefore, the Data Controller has created special corporate binding rules that are adopted by all its subsidiaries and are intended to facilitate the flow of information within the subsidiaries that have offices both inside and outside the Union.
9. Data subject’s rights:
At any time, pursuant to Articles 15 to 22 of the GDPR, you may exercise the right to:
1. ask for confirmation of the existence or not of personal data;
2. obtain information about the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be communicated, and, where possible, the storage period;
3. obtain rectification and deletion of data;
4. obtain the limitation of processing;
5. obtain the portability of data, i.e. receive them from MATEC in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
6. object to processing, including in the case of processing for direct marketing purposes;
7. revoke the consent given for the processing of the data provided;
8. object to an automated decision-making process relating to natural persons, including profiling;
9. lodge a complaint with the Privacy Authority or other competent supervisory authority.
You are reminded that since the processing of your data is based on Article 6(1)(a) or Article 9(2)(a) of EU Regulation 2016/679, you have the right to revoke your consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.
You may exercise your rights by sending a written request to MATEC INDUSTRIES S.R.L., to the postal address of the registered office or to the e-mail address privacy@matecindustries.com.