INFORMATION ON THE PROTECTION OF PERSONAL DATA FOR APPLICATION

Reference standards:

-D.lgs. n. 196 of 30 June 2003, modified by Legislative Decree. n. 101 of 10 August 2018, Code regarding the protection of personal data (hereinafter the “Privacy Code”);

– EU regulation no. 679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of personal data (hereinafter the “Privacy Regulation”)

***

We wish to inform you that, following the sending of your curriculum vitae, in order to verify the possibility of transforming your application into an employment relationship, the writer collects and processes your personal data (as “Interested”) and possibly personal data of Your family members, who will be processed in compliance with current legislation on the processing of personal data.

The Privacy Regulation defines personal data: “any information concerning an identified or identifiable natural person; the natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or to one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social “.

The Privacy Regulation defines in art. 9 the “particular categories of data“, that is, those that reveal, for example, racial or ethnic origin, membership of a political party or the ownership of elected public offices, religious or philosophical beliefs, membership of a trade union, relating to life or sexual orientation, or data suitable for detecting, for example, a general state of health (absences due to illness, maternity, accident or compulsory start-up) whether or not he is suitable for certain tasks.

The processing of personal data means the performance of “any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization , structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction “.

  1. Owner, Data Processing Managers and Data Protection Officer.

The Data Controller of personal data is RBR Immobiliare S.r.l. (hereinafter the “Controller“), with registered office in 40121 Bologna, Via Indipendenza n. 69, VAT number 02551301209, email privacy@bottegaportici.it .

The updated list of data processors, where designated, can be provided upon request by the interested party.

If appointed, the identification data of the Data Protection Officer will be disclosed by publication on the websites.

  1. Purposes and methods of processing.

Your personal data are directly provided by you by registering on the appropriate recruiting platform in order to allow you to create your professional profile and to transmit your curriculum vitae spontaneously or for the purpose of applying for specific ongoing research.

Furthermore, your personal data are processed in order to evaluate your application, to contact you for a possible interview of a professional nature and to carry out any further activity necessary for the completion of the selection operations aimed at any recruitment or any relationship of collaboration with the Company, in compliance with the principle of equality between candidates and candidates which imposes the prohibition of discrimination between the two sexes pursuant to Legislative Decree no.198, 11 April 2006 (Code of Equal Opportunities between men and women ), as amended by Legislative Decree no. 5, January 25, 2010 and by law no. 183, November 4, 2010.

In this case, the Data Controller will process your personal data in order to execute the pre-contractual measures adopted at your request and aimed at the possible establishment of an employment or collaboration relationship with the writer; your consent is therefore not required.

It should be noted that the Company does not require, in the fields of registration and creation of the professional profile, the provision of personal data attributable to the particular categories of data referred to in art. 9 of the EU Regulation; therefore, in the event of any indication, in your curriculum vitae, of such personal data, we inform you that we will have to delete your curriculum vitae.

Subject to your specific consent, the Data Controller may acquire and manage, among your personal data, one or more photographic images to be used in the company management program of the personnel office.

The processing of such personal data takes place in compliance with the methods and limits defined by current legislation on the processing of personal data.

Please note that consent to the processing of personal data can be revoked at any time; the withdrawal of consent does not affect the lawfulness of the processing carried out before that time.

In relation to this purpose, the processing of personal data takes place by persons specifically designated and instructed in the processing pursuant to art. 2-quaterdecies of the Privacy Code and art. 28 and 29 of the Privacy Regulation, as well as through external subjects (for example, personnel selection companies, external consultants for the processing of salary and contribution data, etc.), who can assume the qualification of autonomous Data Controllers or be designated in writing as Data Processors; in any case, the processing will be carried out using manual, IT and telematic tools, with logic strictly related to the purposes and in any case in order to guarantee the confidentiality and security of personal data and in full and absolute compliance with current legislation on the subject.

Your data will be kept by the Data Controller for the period of time strictly necessary in relation to the aforementioned purpose, without prejudice to the need for storage for a longer period in compliance with the legislation, including accounting, in force.

Your data will be processed in Italy and, in any case, within the EU.

  1. Nature of the provision of data, consequences of any refusal and legal basis of the processing .

With reference to the aforementioned purposes, the provision of personal data is mandatory, as in its absence it would not be possible to establish a working relationship with the interested party.

With reference to the photographic image / s, however, the conferment is purely optional; failing that, the image / s will not be able to be acquired and used in the company management program of the personnel office, but this will not make it impossible to establish and manage the employment relationship.

The legal basis of the processing is, therefore, the verification of the possibility of establishing an employment relationship of which the interested party is a party and at the request of the same (pursuant to Article 6, paragraph 1, letter b) of the Privacy Regulation); instead, for the conferment of the photographic image (s) it is the explicit consent of him (pursuant to art. 6, paragraph 1, letter a) of the Privacy Regulation). In the absence of your express consent, the image / s will not be able to be acquired and used in the company management program of the personnel office, but this will not make it impossible to establish and manage the employment relationship.

  1. To whom and in what area we can transmit the personal data of the interested party.

In relation to the purposes of the processing indicated above, and within the limits strictly relevant to them, your personal data will or may be disclosed, in Italy, or in any case within the EU:

(i) to all persons involved in any capacity in the recruiting activity aimed at the stipulation of an employment relationship, appointed and instructed in writing in accordance with the law by the Data Controller in the manner provided for by the company job descriptions;

(ii) to external consultants called upon to carry out the aforementioned activity, if not designated in writing as Data Processors.

The aforementioned subjects, to whom your personal data will or may be communicated (as they have not been designated in writing as Data Processors), will process the personal data as Data Controllers in accordance with current legislation, in full autonomy, being unrelated. to the treatment performed by the Data Controller. A detailed and constantly updated list of these subjects, with the indication of their respective offices, is always available at the headquarters of the Data Controller.

Your personal data will not be disseminated.

  1. The rights of the interested party.

It is understood that, in any case and at any time, you may request the Data Controller to exercise the access rights of your personal data, as required by art. 15 of the Privacy Regulation, and the rights provided for by art. 16, 17, 18, 21 of the Privacy Regulation regarding rectification, cancellation, limitation of processing and the right to object, in the manner established by art. 2-undecies of the Privacy Code and art. 12 of the Privacy Regulation.

  1. Right to lodge a complaint pursuant to art. 77 of the Privacy Regulation

If our Company does not provide you with a reply within the time limits provided for by the law or the response to the exercise of your rights is not suitable, you can lodge a complaint with the Guarantor for the protection of personal data, at the following coordinates: website www.gpdp.it or www.garanteprivacy.it , email garante@gpdp.it , fax (+39) 06.69677.3785, telephone switchboard (+39) 06.69677.1.

  1. Security measures.

Each processing takes place through the adoption of appropriate technical and organizational measures to ensure a level of security appropriate to the risk in compliance with the procedures set out in Articles 5 et seq. and 32 et seq. of the Regulations, as well as the related provisions of the Privacy Guarantor.

In this regard, we confirm, among other things, the adoption of appropriate security measures aimed at preventing unauthorized access, theft, disclosure, modification or unauthorized destruction of the data of the interested party.

  1. Duration of treatment

In accordance with art. 5 lett. e) of the Regulation, the personal data being processed will be kept for the time strictly necessary in relation to the aforementioned purposes and, in any case, for a period not exceeding 12 months.

The owner

RBR Immobiliare S.r.l.