Privacy Notice for the Collection of Curriculum Vitae

Purpose of Processing and Legal Basis

The data collected from candidates is used for the purposes of personnel selection, evaluation, and recruitment for the company’s organizational structure. The legal basis for processing can be found in Art. 6, paragraph 1, letter f) of the GDPR: “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.” Providing data is optional; if you do not send your CV, the Controller will not be able to evaluate your profile. Consent is expressed by the voluntary submission of the CV via email, fax, or through the dedicated section on the website.

Processing Methods

Personal data will be collected either directly from the data subject or from third parties and will be processed by the Controller and duly authorized personnel trained for the proper fulfillment of the purposes indicated above.
Processing will be carried out both manually and using electronic means by authorized individuals, in compliance with protective measures—organizational and procedural—that ensure integrity, availability, and confidentiality.
Data will not be disclosed or transferred outside the territory of the European Union.
The Controller does not use automated processes, including profiling, to achieve the purposes outlined in this notice.

Data Retention Period

Personal data will be retained for the period strictly necessary to fulfill the purposes mentioned above and, in any case, no longer than two years, unless the data subject requests earlier deletion.

Scope of Communication and Disclosure

Within the processing activities, without prejudice to communications and disclosures required by law or contract, the data you voluntarily provide through the website will be stored electronically in the site’s database on the hosting server and protected with adequate security measures against risks of loss, destruction, and unauthorized access.
Authorized personnel of the Controller will have access to the data, as well as any technicians and/or consultants responsible for managing the website. Data may also be communicated to the following entities, in particular to companies or individuals performing activities strictly related and instrumental to the management and establishment of the employment relationship, such as:

• entities to whom communication is mandatory by law (e.g., INPS, INAIL),
• credit institutions,
• consultants and professionals, whether individual or associated,
• any insurance companies.

International Data Transfers

Personal data collected or produced (processed) in the context of the website will be stored in Italy.

Data Subject Rights

Regarding the processing of personal data, the data subject has the right:

1. to obtain confirmation of whether or not personal data concerning them exists, even if not yet recorded, and its communication in an intelligible form.
2. to obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with electronic tools; d) the identification details of the controller, processors, and the designated representative pursuant to Article 5, paragraph 2; e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of it as designated representatives in the State’s territory, processors, or authorized persons;
3. to obtain the updating, rectification, or, when interested, integration of the data.
4. to obtain the deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed.
5. to obtain certification that the operations referred to in the previous two paragraphs have been brought to the attention, including as regards their content, of those to whom the data was communicated or disclosed, except where this proves impossible or involves a manifestly disproportionate effort compared to the protected right.
6. under conditions specifically provided by law, to receive in a structured, commonly used, and machine-readable format the personal data concerning them provided to a controller and to transmit such data to another controller without hindrance from the controller to whom the data was provided, including by direct transmission (so-called right to data portability);
7. to lodge a complaint with the Data Protection Authority.
8. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of collection; b) to the processing of personal data concerning them for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.

To exercise the above rights, the data subject may send a simple written request to ELITE S.r.l., Via Fornaci 4, Fontaniva (PD), e-mail: privacy@elite-it.com.

The list of Data Processors is available from the Controller upon request by the data subject.