The Data Controller of your personal data is Leasys S.p.A. (hereinafter the "Controller" and/or "Leasys"), with registered office in Turin, C.so Orbassano 367, VAT number 06714021000.
1) HOW WE PROCESS AND COLLECT YOUR DATA
Your personal data are processed and used for the purposes of research, evaluation and recruitment of personnel.
Processing will be carried out in compliance with the applicable law and regulations in force, on the basis of the provided information and in a fair and transparent manner; by collecting a minimum set of Data for the purposes set out above, in a precise and up-to-date manner; pursuant to the provisions of the Italian and European law and regulations.
The Data Controller applies appropriate and up-to-date security measures in order to prevent your Data from being lost, used or accidentally accessed in an unauthorised manner, altered or disclosed. The Data Controller will inform in case of awareness of breach of Personal Data events.
The Data will be collected: directly from the Data Subject; from third parties that the Data Controller uses for recruitment procedures; from other third parties that have collected them directly from the Data Subject.
The processing of data for each of the abovementioned purposes will take place using automated and telematics methods, and, in particular, by ordinary or electronic mail, and in paper form.
2) TYPE OF DATA PROCESSED
Personal information included in CVs, in cover letters or in letters received from the data subject during the assessment interviews will be collected, stored and processed. Only common data will be collected; therefore, the candidate will not be required to indicate data qualified as particular pursuant to art. 9 of the European Regulation no. 2016/679, except in the case in which such data must be known due to the working relationship that shall be established or also through pre-employment visits, in order to assess the working capacity for health reasons, or the membership of the data subject to protected categories.
3) NATURE OF DATA AND CONSENT
The data required for the purposes above mentioned are optional and subject to the will of the candidate who decides to submit his/her Curriculum Vitae (CV). With regard to the personal subsequently and possibly requested by the Data Controller, any refusal to provide them shall make impossible to proceed with the verification of the pre-requirements necessary for the employment, and therefore, with the possible establishment of the working relationship with the Data Controller.
Consent to the collection of the Data in the CV is not necessary (art. 9 letter b of the Reg. no. 2016/679), as the processing concerns data included in CVs, that are spontaneously transmitted by the data subjects for the purposes of the possible establishment of an employment/collaboration relationship for which consent is excluded.
The data collected will not be disclosed. The data may be communicated to third parties identified and appointed as Data Processors pursuant to Articles 28 et seq. of Reg. 2016/679 if necessary for the purposes above mentioned (e.g. recruitment and assessment companies); in addition, the data may be communicated to other companies in the Group to which Leasys belongs, in order to join in selection procedures.
The data will not be transferred by us to a third country outside the EU or to an international organization, except in exceptional and strictly necessary cases.
If necessary, for technical or operational reasons, the same data may be processed in countries outside the European Economic Union, provided that an adequate level of protection is guaranteed, for which a specific adequacy decision of the European Commission is in force. Any other transfer of personal data outside the European Economic Area, in the absence of an adequacy decision by the European Commission, will only be possible if adequate contractual guarantees, including standard data protection clauses, are provided by the Data controllers and Data Processors involved. The transfer of data to third countries outside the European Economic Union, in the absence of an adequacy decision or other appropriate measures as described above, will only be carried out if strictly necessary and in the cases provided for by the GDPR and will be processed in your interest.
5) DATA RETENTION PERIOD
The Data will only be processed as strictly necessary to carry out the procedures for the research, evaluation and recruitment of personnel, unless the data is necessary for legal defence.
6) CONTACTS OF THE DATA PROTECTION OFFICER
For any direct contact - formal and urgent, other than the exercise of the rights provided for in the following paragraph - you may contact the Data Protection Officer at the following contact details:
- Email: dataprotection-italia@leasys.com;
- Traditional mail: Leasys S.p.A., Corso Orbassano n. 367 - 10137 Torino, by writing “To the attention of the Data Protection Officer”.
7) EXERCISE OF DATA SUBJECTS’ RIGHTS
In relation to the personal data processing listed above, you may ask:
- confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data, as well as the origin of said data, the purposes and methods of processing and the logics applied in case of processing performed with use of electronic instruments;
- to update, integrate, correct, delete or transform into anonymous form your personal data;
- to limit or oppose to the processing of your personal data;
- to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (right to data portability);
- ask to certify that such operations have been notified to the individuals to whom they were communicated or disseminated.
You have the right to exercise your rights by contacting the Customer of Leasys S.p.A. at the following addresses:
The Data Controller will reply to your requests within 30 (thirty) days from reception, extended to 60 (sixty) days taking complexity and number into account; after these terms, you are entitled to submit a complaint to the Personal Data Protection Supervisor in the forms and according to the methods stated in the law in force.
