Information on the protection of personal data

updated to the New EU Regulation No. 679/2016 (GDPR) (and subsequent provisions of legislative adaptation to the Italian Law 196/2003 as per Legislative Decree 101/2018). Doc C10:1)

 

CANDIDATES

Pursuant to and in accordance with Article 13 of the European Regulation 2016/679 (General Data Protection Regulation, hereinafter "GDPR") and Legislative Decree 196/2003 as amended (Legislative Decree 101/2018), the company in the person of its pro-tempore legal representative, as the Data Controller (hereinafter "Data Controller"), informs of the following.

1. DATA CONTROLLER

The data controller is the company Cantiere Nautico Cranchi S.p.A. - Via Nazionale, 1319 - 23010 Piantedo (Italy) - Reference: [email protected] - Mr. Angelo Maroni - Direct +39 0342 015 023 website: www.cranchi.com

 

2. PURPOSE AND LEGAL BASIS FOR PROCESSING

The acquisition and processing of personal data voluntarily provided in connection with and as a result of the contract with clients or voluntarily provided to request information is necessary for the Owner to fulfill the requests of job applicants for job poiitions, to execute the contract itself, and to fulfill the related obligations under accounting and tax regulations.

Specifically, the purposes of processing are:

The legal basis legitimizing the processing of data for the purposes specified above is the performance of pre-contractual negotiations requested by the data subject is party (art. 6 no. 1 letter b) GDPR). In connection with the evaluation of the application, the Data Controller may also process special personal data pursuant to Article 9 GDPR, such as, but not limited to, those revealing state of health or religious beliefs or trade union membership.
The legal basis legitimizing the processing in this case is the specific and informed free consent of the data subjects (Art. 6 No. 1 letter a) of the GDPR).In case consent is not given, it will not be possible to evaluate the application.
Data subjects have the right to revoke their consent at any time, but processing carried out before revocation remains lawful. After revocation, the data controller will cease processing the data for which consent is required (Art. 7 No. 3 GDPR).

The legal basis legitimizing the processing of data for the purposes specified above is the fulfillment of legal obligations (Art. 6 No. 1 letter c) of the GDPR).

The legal basis legitimizing the processing of data for the purposes specified above is the legitimate interest of the Data Controller (Art. 6 No. 1 letter f) of the GDPR), which in this case is fairly balanced with the rights and freedoms of the data subjects.

The Controller may process special data ex art. 9 GDPR such as but not limited to: health status, membership in protected categories, disability, or union membership, etc.
The legal basis legitimizing the processing of data for the purposes specified above is the consent freely given by the data subject (Art. 6 No. 1 letter a) of the GDPR).

 

3. DATA PROCESSED AND MODE OF PROCESSING

The Controller processes the personal data of the data subject, such as:

Personal and identification data: (such as, for example, name, date of birth, place of birth, nationality, social security number, marital status, occupation, etc.);

Processing is carried out in both manual and computerized ways and with the support of paper, computer (management software, accounting, etc.) or otherwise automated and telematic means.

In any case, the processing of data is carried out with the adoption of all appropriate measures to ensure the security and confidentiality of personal data, in particular in compliance with the security measures referred to in Article 32 of European Regulation No. 2016/679 and in accordance with the principles of lawfulness, necessity and proportionality.

 

4. Data Retention

The Data Controller will retain personal data for as long as necessary to fulfill the purposes set forth in Paragraph 2 above, specifically for the duration of the selection process and for 3 years from the collection of the information.

Personal data may be retained until the expiration of the period of prescription and/or forfeiture of legal claims arising from the relationship between the Holder and the interested parties, and in the case of any litigation in progress, for as long as the litigation lasts, in order to allow the exercise of the Holder's right of defense in and out of court.

 

5. REPORTING AND TRANSMISSION OF DATA

Data are not subject to communication and dissemination to third parties, except for obligations arising from the law.

Personal data may be transmitted to, but not limited to:

 

6. TRANSFER OF DATA OUTSIDE THE EU

The Holder informs that it has no intention to make any data transfers to Third Countries nor to international organizations.

Any transfer of data subjects' data to countries located outside the European Union will, in any case, take place in accordance with the appropriate and adequate safeguards for the purposes of such transfer, pursuant to the applicable legislation and in particular Articles 45 and 46 of the Regulations.

 

7. RIGHTS OF DATA SUBJECTS (ART. 15 ET SEQ. OF THE GDPR)

In your capacity as a user of our services and recipient of our products you have the following rights:

-Right to access your data, obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in intelligible form; -obtain indication of: (a) the origin of the personal data; (b) the purposes and methods of processing; (c) the logic applied in the case of processing carried out with the aid of electronic instruments; (d) the identification details of the data controller, data processors and the data controller's representative and the persons authorized to process the data; and (e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, data processors or persons authorized to process the data; (Art. 15 GDPR).

 

8.WAYS OF EXERCISING RIGHTS

You may at any time exercise your rights by sending a request by email to the email address in paragraph 1. and you may also exercise your rights by contacting the Privacy Guarantor, with Headquarters in Piazza Venezia n. 11 - 00187 Rome, Telephone switchboard: (+39) 06.696771,Fax: (+39) 06.69677.3785. For general information you can send an e-mail to: [email protected] @pec.it