Deltatre SPA (hereinafter ”the Company”), based in Italy, at 41, via Francesco Millio 10141- Torino-, as Data Controller pays particular attention to the security and confidentiality of the personal data while carrying out its activities.
WHICH PERSONAL DATA MAY BE COLLECTED?
The following categories of personal data provided by You may be collected (the term “personal data” will refer to all the following categories, considered together):
- Personal contact details –name, e-mail address, telephone number
- Other Personal Details - Date of birth and Nationality
- Recruitment Information – information included in a CV upload by You on the platform
HOW IS THE PERSONAL DATA COLLECTED?
The Company collects and process personal data gathered by means of this platform, based on the existing contractual relation with You or with the purpose of establishing a contractual relation.
In particular, assuming You have complied with the obligations imposed by the applicable laws in term of data protection, personal data of Your employees and/or collaborators may be processed; such personal data will be processed pursuant to the purposes set forth in this privacy notice. If You provide personal data on behalf of one of your employees and/or collaborators, You must first ensure that they have read this Privacy Notice.
Should You provide personal data included in the CV by uploading those data on the platform, which Deltatre has access to, You must first ensure that You have complied with the obligations of the applicable laws.
The Company kindly ask You to help to keep personal data up-to-date by informing the Company of any changes.
FOR WHAT PURPOSES CAN PERSONAL DATA BE USED?
The Company may process the personal data provided by You, pursuant to at least one of the following purposes, based on the legal basis as described below:
a) Perform the contract
The Company may process personal data to perform the contract the Company has entered with You or to execute a contract with You.
Legal basis for the processing: performance of contractual/ pre-contractual obligations.
The provision of data is obligatory to enable the Company to set the contractual relation; in the absence of the data the Company will be unable to proceed.
b) Compliance with legally binding requests by the legal authorities to discharge obligations of law, regulations or provisions, or to protect a right in the Court
The Company may process personal data to comply with legally- binding requests, by the legal authorities to discharge obligations of law, regulations or provisions, or to protect a right in the Court.
Legal basis for the processing: legal obligations, to which the Company must comply.
The provision of data is obligatory since in the absence the Company will fail to comply with specific legal obligations.
HOW THE PERSONAL DATA ARE KEPT SAFE?
The Company has established a wide range of security measures to improve protection and keep the security, integrity and accessibility of personal data.
All personal data are stored on Company secure servers (or on secure paper copies) or on those of Company suppliers or commercial partners and may be accessed and used based on Company standards and security policies (or equivalent standards for Company suppliers or commercial partners).
HOW LONG PERSONAL DATA ARE STORED FOR?
The Company keeps the personal data only for the length of time necessary to achieve the purposes for which they were collected or for any other related and lawful purposes and for 10 years thereinafter.
When personal data are no longer required, or when there is no longer any legal precondition for keeping them, they will be irreversibly anonymized (and in such a way may be stored) or securely destroyed.
WHO CAN THE PERSONAL DATA SHARE WITH?
Personal data may be accessed by duly- authorized employees, other Group companies, and external suppliers who support the Company in providing services, as independent data controller or appointed, if necessary, as data processor as pursuant to the applicable data protection law (based on the role perform in connection to the processing).
Please contact the Company at [email protected] to see a list of the data processors or other entities to which the Company communicates data.
CONTACTS
The contact details for Deltatre, in its capacity as Data Controller, and the Data Protection Officer (DPO) are the following: [email protected] and [email protected].
Should You have any questions regarding processing of personal data, for any doubts and comments or for the exercise of the data subjects rights, please contact [email protected] and/or the DPO at [email protected].
PERSONAL DATA PROTECTION RIGHTS AND RIGHT TO FILE COMPLAINTS BEFORE THE SUPERVISORY AUTHORITIES
On certain conditions, You are entitled to request:
- to access to personal data;
- to obtain a copy of the personal data You have provided to the Company (‘portability’);
- the adjustment of data in the Company possession;
- the deletion of any data for which the legal precondition for processing no longer exists;
- the objection to the processing based on legitimate interest, on grounds relating to particular situation;
- the restriction of the processing.
The exercising of the above rights is subject to certain exceptions that are intended to safeguard the public interest (e.g. the prevention or identification of crimes) and the Company interests (e.g. maintaining professional secrecy). Should You wish to exercise any of the above rights, the Company will check that You are entitled to do so and will usually respond within one month.
Nevertheless, should You wish, You may forward Your complaints or reports to the authority responsible for data protection using the following contact details: Garante per la protezione dei dati personali - Email: [email protected] - Certified email address: [email protected] .