PRIVACY POLICY FOR CANDIDATES' PERSONAL DATA
pursuant to Article 13 of EU Regulation 2016/679


DATA CONTROLLER AND CONTACT DETAILS
TEKNE S.R.L.  is the Data Controller of the personal data processed.
The registered office is in in Contrada San Matteo 42, 66030 Poggiofiorito (CH). For all privacy matters, please contact the following email address: privacy@tekne.it ovvero il recapito telefonico tel. +390871938820.
The Company Website has the following address: https://www.tekne.it


DESCRIPTION OF THE PROCESSING AND CATEGORIES OF DATA SUBJECTS
TEKNE S.R.L.  informs you that it may process your personal data for personnel pre-selection and selection activities, through CV analysis and interviews.
In particular, the persons concerned by the processing activities are natural persons who send their Curriculum Vitae either spontaneously or to apply for open positions. Collection takes place through spontaneous CV submission, through a website or recruitment agencies.
Candidates are asked not to include any special or judicial data in their CVs that are not strictly necessary, otherwise, they cannot be processed. CVs sent spontaneously will, if considered of no interest, be destroyed and not stored; otherwise, however, the candidate will be promptly contacted regarding the request to store the curriculum vitae on electronic/paper supports and will also be provided with this Privacy Policy.


TYPES OF DATA COLLECTED AND ORIGIN OF THE DATA
Personal data processed: Name, address or other personal identification, Declared profession, Professional quality certificates, Tax code and other personal identification numbers, Photo, Residential address, E-mail address, Education and culture, Job (current, previous occupation, curriculum vitae, etc.),
The data is partly collected from the Data Subject and partly collected from third parties.

PURPOSES OF DATA PROCESSING

  1. manage the assessment of your CV;
  2. planning and managing selection interviews also in interactive or group mode;
  3. preparing recruitment documents.

LEGAL BASIS
For purposes 1, 2, 3: Processing is necessary for the performance of a contract to which the Data Subject is party or for the performance of pre-contractual measures taken at the request of the Data Subject.
If the candidate spontaneously includes in his/her CV the fact that he/she belongs to protected categories, the prerequisite for processing such "special" data, if any, is that the data are provided directly by the Data Subject. Their processing may be provided in order to fulfil the obligations and exercise the specific rights of the Data Controller or of the Data Subject in th field of employment and social security law and social protection.


RECIPIENTS AND CATEGORIES OF RECIPIENTS
The personal data processed by the Data Controller will not be disclosed.
The data may be communicated to external parties who collaborate with TEKNE S.R.L., as Data Processors, or other parties involved in the company (administrative, legal and system administrator personnel, Employment placement bodies, training institutions, consultants).
Data may be communicated to the subjects entitled to access them under the provisions of the law, regulations, Community regulations. In order to comply with legal obligations or to ascertain responsibility in the event of computer crimes against the Website, the data may be communicated to, or allocated to, third parties.
The updated list of the Data Processors can always be requested from the Data Controller.
This is without prejudice to the obligation of TEKNE S.R.L.  to communicate data to Public Authorities on specific request.


TRANSFER ABROAD
The data are processed at the Data Controller's operational headquarters and in any other place where the parties involved in the processing are located, therefore the Data Controller does not transfer this personal data to third countries or international organisations.
However, the Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 of the GDPR 2016/679. The equivalent levels of protection adopted for the processing of the personal data of the Data Controller's employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided will be applied.


DURATION OF PROCESSING
The processing will last no longer than is necessary for the purposes for which the data were collected, and will be kept for a maximum of 36 months from the date on which the data were provided.


METHODS AND NATURE OF PROVISION
The data are collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles of lawfulness and provisions of Article 5, paragraph 1 of the GDPR.
Personal data processing is carried out by means of manual, computerised and telematic tools with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality.
The provision of data for the aforementioned purposes is entirely optional. Any refusal by the Data Subject to provide personal data, the lack of consent or its revocation for one or more purposes, will make it impossible to use the services related to them.
The Data Subject may refuse to provide the Data Controller. Any refusal to communicate data will make it impossible to provide all or part of the requested services.

RIGHTS OF THE DATA SUBJECTS
In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data regarding the exercise of the rights of Data Subjects (Articles 15 to 22), with regard to the processing operations covered by this Privacy Policy, as Data Subjects, users may exercise certain rights with reference to the data processed by the Data Controller.
In particular, the Data Subject has the right to:

  • Revoke consent at any time
  • Oppose the processing of their data
  • Access to their own Data
  • Verification and rectification
  • Restriction of processing
  • Deletion or removal of their personal data
  • Portability

Furthermore, the Data Subject has the right to lodge a complaint with the competent Data Protection Supervisory Authority or take legal action if he/she considers that the processing operations concerning him/her are in breach of the GDPR, pursuant to Article 77 of the GDPR.
The data subject may revoke consent at any time.
How to exercise your rights
If you wish to request further information on the processing of your personal data or to exercise your rights, you may do so in writing also to privacy@privacy.it using the "Exercise of Personal Data Protection Rights Form" too. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.


AUTOMATED DECISIONS
The Data Controller does not, under any circumstances, carry out processing operations consisting of automated decision-making processes with regard to the processing operations indicated.


CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users by email and on the Website. The Data Controller will collect the consent of the Data Subject again, if necessary.

Last modified: 09/01/2022