Candidate Privacy Notice

Information pursuant to Article 13 of EU Regulation 2016/679 (GDPR)

Dear Candidate,
Industree Hub s.r.l. hereby provides the information required under Article 13 of EU Regulation 2016/679 (GDPR) concerning the processing of the personal data you submit by completing this form.

Should an employment or collaboration agreement be entered into, you will receive a further privacy notice regarding the processing of your personal data.

 

1. Identity and contact details of the Data Controller

The Data Controller, also referred to as the “Controller”, is Industree Hub S.r.l., represented by its legal representative pro tempore, VAT no. 02909990356, with registered office at Via Benedetto Croce no. 15, 42123 Reggio Emilia, Italy.

The Controller may be contacted at the above address or via the following details:
Email: privacy@industree.it
Certified email (PEC): industreehub@pec.industree.it

 

2. Data Protection Officer (DPO)

The Controller has appointed Piramis S.r.l. as Data Protection Officer.
Contact details are as follows:
Email: dpo@easygdpr.it
Tel.: +39 030 9658901

 

3. Purpose of processing

The personal data you provide by completing the form available on the Company’s website will be processed, including by electronic and IT means, for the purpose of evaluating your application within the personnel selection process.

Specifically, the data will be used to assess whether your skills and qualifications match the positions sought by the Company.

 

4. Legal basis for processing

The legal basis for processing your personal data for the purposes outlined above is the pre-contractual phase connected to the personnel selection process carried out by the Company, pursuant to Article 6(1)(b) of the GDPR.

 

5. Consequences of failure to provide personal data

Failure to provide the requested personal data will make it impossible for you to participate in the Company’s selection process.

 

6. Data retention period

Personal data will be processed for the time strictly necessary to complete the selection process, quantified as 12 (twelve) months from the date of collection.

In the event of hiring or execution of a collaboration agreement, the data contained in your CV or in other documents submitted through this form will be retained for the entire duration of the employment or collaboration relationship.

 

7. Data recipients

Your personal data may be accessed by Company employees who are authorised to process such data. Each authorised person is specifically identified, trained, and operates in accordance with precise instructions provided by the Company regarding the purposes and methods of processing.

Your data may also be accessed by the company responsible for the assistance and maintenance of the Controller’s IT systems. This entity is appointed as a data processor pursuant to Article 28 of EU Regulation 2016/679, strictly for these purposes.

The complete and constantly updated list of appointed data processors is available upon request by contacting the Controller at privacy@industree.it.

 

8. Rights of the Data Subject

The Controller informs you that, as a Data Subject, you have the rights set out in Articles 15 et seq. of EU Regulation 2016/679, within the limits established by the Regulation. These include the right to:

  • obtain information about the processing of your personal data, including the categories of data processed, the purposes of processing, the retention period, and the recipients of the data (right of access);

  • obtain the rectification or completion of inaccurate personal data concerning you (right to rectification);

  • obtain the erasure of your personal data in the following cases:
    i. the data are no longer necessary for the purposes for which they were collected;
    ii. you have withdrawn your consent, where processing is based on consent;
    iii. you have objected to the processing and there is no overriding legitimate interest of the Controller;
    iv. the processing is unlawful.

    Data may nonetheless be lawfully retained where necessary to comply with a legal obligation or to establish, exercise, or defend a legal claim (right to erasure);

  • obtain the restriction of processing in the following cases:
    i. you contest the accuracy of the data, for the time necessary for verification;
    ii. the processing is unlawful and you oppose erasure;
    iii. the data are required for the establishment, exercise, or defence of a legal claim;
    iv. you have objected to processing, pending verification of the Controller’s legitimate grounds (right to restriction);

  • object at any time to the processing of your personal data (right to object);

  • receive your personal data in a commonly used, machine-readable, and interoperable format, where processing is based on a contract or consent, and request the transfer of such data to another controller where technically feasible (right to data portability).

These rights may be exercised by contacting the Controller via email at privacy@industree.it.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. In such cases, you have the right to request human intervention, express your point of view, and contest the decision.

 

9. Right to lodge a complaint

If you believe that the processing of your personal data by the Controller violates EU Regulation 2016/679, you have the right to lodge a complaint with the Italian Data Protection Authority, pursuant to Article 77 of the GDPR.

Complaints may be submitted by email to garante@gpdp.it or by post to the Garante per la protezione dei dati personali, Piazza Venezia 11, Scala B, 00187 Rome, Italy. You also have the right to seek judicial remedies pursuant to Article 79 of the GDPR.

 

The Data Controller