*Information pursuant to EU Regulation No.2016/679 of the European Parliament and of the Council of April 27, 2016 (so-called GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as pursuant to Legislative Decree 196/2003 and ss. mm. ii.
Data controller
The data controller is Studio Errigo Consulenti del Lavoro Associati with headquarters in Bologna, Via Rivani n.83.
Contacts: PEC info@pec.studioerrigo.it e-mail privacy@studioerrigo.it
Purposes of data processing
The processing of data, including sensitive data – special categories of personal data, acquired is carried out in order to respond to requests received by Studio Errigo. The data will also be processed in order to comply with and fulfill the obligations incumbent on Studio Errigo provided for by national and EU legislation, as well as to meet requests from the Authorities.
Methods of data processing and storage
The processing is based on the principles of fairness, lawfulness, transparency and protection of the confidentiality and rights of the user. The data collected are pertinent and limited to what is strictly necessary in relation to the purposes of processing stated above.
The aforementioned data will be processed for as long as necessary to achieve the purposes for which they were collected and retained for as long as Studio Errigo is subject to storage obligations for purposes required by law or regulation. With reference to the receipt of resumes of potential Candidates, data retention is limited to the maximum period of six months.
The processing may be carried out by means of both paper and electronic tools, including portable devices, and the collected data recorded and kept on databases located in Italy. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. It is important that users ensure that their electronic devices are equipped with appropriate software for the protection of network transmission of both incoming and outgoing data (by way of example, up-to-date antivirus systems) and that the Internet service provider has taken appropriate measures for the security of network data transmission.
Legal basis for processing
Studio Errigo processes personal data lawfully, upon the occurrence of one of the following conditions:
- processing necessary for the performance of a contract or following up the user’s requests (management and response, c.v. analysis and possible establishment of the candidate evaluation and selection process);
- processing necessary to fulfill a legal obligation incumbent on Studio Errigo;
- processing based on the express consent of the data subject.
Data communication
The data may be communicated: to staff, collaborators and consultants specifically authorized by Studio Errigo, to third parties that the Data Controller uses to provide the requested services, as well as to the competent Authorities to enable the Data Controller to ascertain, exercise or defend a right in court and/or for other reasons related
to the protection of the rights and freedoms of others. These parties are obliged to use the data in accordance with legal requirements.
Data profiling and dissemination
Personal data are not subject to dissemination or any automated decision-making process, including profiling.
Rights of the data subject
Without prejudice to the limitations provided for in Articles 2-undecies and 2-duodecies of Legislative Decree 196/2003, at any time, the data subject under Articles 15 et seq. of the GDPR has the right to obtain access (Art.15), rectification (Art.16), portability (Art.20) and deletion of data (Art.17), restriction (Art.18) and opposition to processing (Art.21).
In particular, he/she has – among others – the right to:
- obtain from the data controller confirmation as to whether or not personal data concerning him are being processed and, if so, to obtain access to such data and related information as well as their communication in intelligible form;
- obtain the updating, rectification of inaccurate data or, when interested, the integration of incomplete data also by providing a supplementary declaration,
- obtain information on the portability of the data, i.e. receive them in a structured format in common use and readable by automatic device and transmit them to another data controller without hindrance;
- obtain the deletion of data concerning him/her without undue delay upon the occurrence of the prerequisites set forth in Art.17;
- obtain the restriction of data concerning him/her upon the occurrence of the prerequisites set forth in art.18;
- object at any time on grounds relating to his or her particular situation, to the processing of personal data concerning him or her under Article 6(1)(e) or (f), including profiling on the basis of these provisions. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling insofar as it is related to such direct marketing.
Furthermore, pursuant to Article 7 of the GDPR, if the processing is based on consent, the data subject has the right to revoke his or her consent at any time, without prejudice to the lawfulness of the processing based on the consent given before revocation.
Pursuant to Article 77 of the GDPR and Article 141 of Legislative Decree 196/2003, the data subject also has the right to lodge a complaint with the Supervisory Authority (Data Protection Authority – www.garanteprivacy.it).
Minors
The Controller does not intentionally collect personal information referring to minors. In the event that information about minors is unintentionally recorded, the Owner will promptly delete it upon request of users.