Subject: Information on the processing of Curriculum Vitae pursuant to Art. 13 Reg. 2016/679/EU
We hereby inform you that your personal data are processed by our company. The processing is carried out in compliance with the criteria set out by the European regulation on the protection of personal data, Reg. 2016/679/EU, Legislative Decree 196/03 amended by Legislative Decree 101/18, and any other provision or authorization of the competent Authority related thereto. According to the indicated legislation, processing must be based on the principles of fairness, lawfulness, transparency, and protection of your privacy and rights.
1. The data controller is CACEFFO MARCO, sole proprietorship, represented by Mr. Marco Caceffo, with registered office at Strada Staffalo, 15 – 37066 Sommacampagna (VR), phone 045 24 29 197, e-mail info@agriturismoprincipeamedeo.it
2. The data collected about you are used for the purposes of selection, evaluation, and recruitment of personnel for our organizational structure.
The legal bases of processing can be found in art. 6 para. 1 letters a) the data subject has given consent to the processing of personal data for one or more specific purposes, b) processing is necessary for the performance of a contract or pre-contractual measures and f) GDPR processing is necessary for the legitimate interests pursued by the data controller or a third party; providing data is optional and in case of failure to send the CV, the controller cannot evaluate the candidate’s profile.
The data subject’s consent is expressed by voluntarily sending the CV via Email, Fax, or through the “Work with Us” section on the website.
3. Communication: the collected data may be communicated to external parties duly appointed who carry out activities on behalf of the data controller such as, by way of example: HR consultancy firms for profile evaluation and screening, labor consultants, etc. Personal data related to communication means (telephone, email, etc.) will be used by internal duly appointed persons.
No transfer of data to third countries outside the EU is foreseen and no dissemination (e.g. social networks, websites, etc.) is planned. The data controller does not use exclusively automated processes to achieve the purposes set out in this information and does not carry out profiling.
4. The data controller will process personal data for the time necessary to fulfill the above purposes and in any case not longer than 12/24 months from collection for the indicated purposes, after which the controller or a designated person will delete the CV or pseudonymize the data.
5. The data subject has the right to request from the data controller access to their personal data, correction, deletion, restriction of processing, opposition to processing, and the right to data portability.
Requests can be made by email, fax, or registered mail with the subject “request from the data subject” specifying the right to be exercised (deletion, correction, portability, erasure), together with a valid email/PEC address to receive the reply.
The data controller or any person appointed by them will satisfy the request within 30 days of receipt. If the reply is complex, the time may be extended by a further 30 days, with timely communication to the data subject.
If deemed appropriate, the data subject may file a complaint with the competent supervisory authority, corresponding to the national Data Protection Authority, located at Piazza Venezia, 11 – 00187 Rome, protocollo@gpdp.it.
