INFORMATION FOR CANDIDATES
INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to and for the purposes of Articles 13 and 14 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), Sentinel CH. S.p.A., with registered office in Milan, Via Robert Koch 2, CF and VAT number 07118040158, in its capacity as Data Controller, hereby provides the following information regarding the methods and purposes of processing of personal data communicated by potential candidates or by the recruiting companies used by Sentinel for the selection of personnel.
- Data collection
Sentinel CH. S.p.A. collects and stores CV sent directly by candidates, spontaneously or in response to an advertisement published by Sentinel, or sent by recruiting companies used by Sentinel for personnel selection.
- Data subject to Processing
The collection by Sentinel CH. S.p.A. of candidate data concerns exclusively so-called common personal data, such as name, surname, address, telephone number, e-mail, professional profile and possibly photo (hereinafter, “personal data” or also “data”).
Sentinel will not process personal data that can be classified as “special” pursuant to articles 9 et seq. of European Regulation 2016/679 except for those communicated by the interested party, where strictly necessary for the establishment of the employment relationship and the fulfillment of legal obligations by Sentinel.
If the Curriculum Vitae of which Sentinel CH. S.p.A. comes into possession, also contains particular data such as, for example, health status or data suitable for revealing the ethnic origin of the interested party or the membership of the same to protected categories, the Data Controller will process exclusively the data relevant for the purposes of evaluating the professional aptitude of the candidate and the existence of any specific hiring duties, to the extent that the acquisition of such information is strictly indispensable for the establishment of the employment relationship and the fulfillment of legal obligations.
In any case, both in the presence of spontaneous applications and in the presence of responses to specific announcements, the data processing by Sentinel CH. S.p.A. will take place in compliance with the purposes and methods of processing provided for in this information on data processing.
Sentinel CH. S.p.A. reserves the right to keep in its archive only the profiles that it deems interesting.
- Legal basis and purpose of the processing
The personal data of the interested parties are processed as necessary for the execution of pre-contractual measures adopted at your request (art. 6, paragraph 1 letter b) GDPR), for the sole purpose of evaluating the applications for a possible hiring at our Company.
In the event of failure to provide data, your application cannot be fully evaluated.
In the curriculum vitae or during the interview, data belonging to particular categories pursuant to art. 9 of the GDPR may also be highlighted, and therefore acquired (such as those from which racial and ethnic origin, religious, philosophical or other beliefs, membership of trade unions, state of health, disability or membership of protected categories; the assumption of political offices can be deduced). Such Special data, where necessary for the purposes of hiring the candidate in accordance with the law, are processed pursuant to art. 9 letter b) of the GDPR.
Failure to submit this data may prevent Sentinel Ch S.p.A. from fully evaluating your application.
- Methods of processing
The personal data of the interested parties will be processed both manually and with the aid of computerised means, in compliance with the protection of the security and confidentiality of the data itself.
- Duration of treatment
The processing will last no longer than is necessary for the purposes for which the data were collected. In any case, they will be deleted within 24 months from the date of their collection or even earlier, upon express request of the interested party.
In any case, the Data Controller reserves the right to destroy the Curricula or any document containing personal data, deemed not compliant with the purposes referred to in art. 3 above.
- Access to data.
The data of the interested parties may be made accessible, only for the purposes referred to in art. 3 above, to employees and collaborators of the Data Controller in Italy and abroad, in their capacity as external data processors and/or managers and/or system administrators.
- Data dissemination
. The personal data transmitted by interested candidates will not be disclosed.
- . Data transfer.
The personal data transmitted by interested candidates will not be transferred to other parties and will be stored on servers owned by Sentinel CH. S.p.A., located in Milan, within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
- Nature of the provision of data and consequences of failure to provide data
The provision of data and the release of consent to processing for the purposes referred to in art. 3 above is strictly necessary to achieve the purposes described above. Failure to provide data will make it impossible for Sentinel CH. S.p.A. to consider the application in any personnel selection and evaluation procedure.
- Rights of the interested party
In relation to the purposes of the processing, the interested party is recognized as having the right to exercise the rights provided for by articles 15 and following of the GDPR, in particular the right to:
- access, or to obtain confirmation of the existence or otherwise of personal data concerning you, to know their origin, as well as the logic and purposes on which the processing is based, the recipients or categories of recipients to whom the data may be communicated, the determination of the retention period if it is possible to define it;
- rectification of inaccurate data;
- cancellation (so-called right to be forgotten), in the event that the data is no longer necessary for the purposes of collection, or in the event that the interested party has revoked consent to the processing (where such consent is provided as optional or there is no other legal basis for the processing);
- limitation, the right to obtain from the Data Controller the limitation of access to personal data by all subjects who have a service contract or an employment contract with the Data Controller. In any case, the Data Controller guarantees access to your particular and judicial personal data to a limited number of people in order to guarantee the security, integrity and correctness of the aforementioned data;
- portability, the right to receive personal data concerning the data subject in a structured, commonly used and machine-readable format, with the possibility of transmitting them to another Data Controller. This right does not apply to non-automated processing (for example, paper archives or registers); furthermore, only data processed with the consent of the data subject and only if the data were provided by the data subject are subject to portability;
- opposition, i.e. the right to object to processing for reasons relating to your particular situation;
- complaint to be sent to the Guarantor for the Protection of Personal Data, Piazza Venezia 11 – 00187 Rome (protocollo@gpdp.it, protocollo@pec.gpdp.it, telephone + 39 06 69677.1; fax + 39 06 69677.3785).
Furthermore, pursuant to art. 7, paragraph 3 of the GDPR, the right to withdraw consent at any time is recognized; the withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.
- How to exercise your rights
The interested party may at any time exercise his/her rights, as per point 10 above, by sending:
– a registered letter with return receipt to Sentinel CH. S.p.A., with registered office in Milan, Via Robert Koch n. 2.
– an e-mail to sentinel@pec.sentinel.it
- Owner, managers and persons in charge
The Data Controller is Sentinel CH. S.p.A. with registered office in Milan, Via Robert Koch n. 2.
The updated list of the categories of data controllers and processors is kept at the registered office of the Data Controller.
Sentinel CH. S.p.A.
Privacy Implementation Manager