Rottapharm Biotech Srl, Via Valosa di Sopra 9 – 20900 Monza (MB).
Tel. 039.90.66.001 e-mail email@example.com (“Rottapharm Biotech” or “Controller”)
Data Protection Officer Contact Details (“DPO”)
What categories of data do we process?
The processing of personal data include, by way of example but not limited to, name, surname, place and date of birth, tax code, residence, identity document number, gender, telephone contacts, education and CV data.
Candidates are advised not to provide special categories of data as referred to in Article 9 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation).
We inform candidates that any data belonging to special categories as indicated above, will be deleted immediately.
Why do we process your personal data and what is the legal basis ?
- Purposes of recruitment and selection
The legal basisapplicable to the processing is the execution of pre-contractual measures taken at Your request.
- To ascertain, exercise or defend the rights of the Controller in extra-judicial and/or judicial proceedings, where necessary.
The legal basisapplicable to the processing is the legitimate interest of the Controller
For how long do we retain your personal data ?
Two years after sending the CV.
Throughout the judicial and/or extrajudicial proceedings and/or enforcement actions, until the time limit for appeal has expired.
Once the above-mentioned retention period has elapsed, the data will be destroyed or made anonymous, compatibly with technical erasure and backup procedures.
Provision of personal data
The provision of Your personal data is necessary for sourcing and selecting personnel. If you refuse to provide such information and/or provide inaccurate and/or incomplete information, it will be impossible to carry out this activity.
Categories of recipients of personal data
Your data will be processed by employees and collaborators of the Controller who received adequate operating instructions and who are expressly authorized to the processing by the Controller.
Your personal data may also be communicate to third parties, independent data controllers, such as for example:
- subjects to whom the data must be communicated on the basis of an express legal provision.
- persons, companies, associations or professional firms.
The personal data may be process by external parties appointed by the Rottapharm Biotechby parties appointed as data processors, who are provided with suitable operating instructions, such as, by way of example:
- companies, including companies belonging to the same group, which the Controller uses for the selection, recruiting and evaluation of candidates.
- companies in charge of the maintenance/management of the website and the electronic and/or telematic tools used by the Controller.
The list of the recipients of the data is constantly update and can be found easily and free of charge by sending a written communication to the Controller at the address indicated above or an e-mail to the address firstname.lastname@example.org.
Transfer of data outside of the EU
Your personal data won’t be transferred to non-EU countries.
Rights of the data subject
In relation to the processing of personal data carried out by the Controller, the data subject may request the Data Controller to access the data concerning him/her, to erase data, to rectify inaccurate data, to integrate incomplete data, to restrict processing in the cases provided for by art. 18 GDPR, as well as to object to processing, for reasons related to his/her particular situation, in the cases of legitimate interest of the Controller.
Where processing is based on consent or contract and is carried out by automated means, the data subject shall have the right to receive his or her data in a structured, commonly used and machine-readable format and, where technically feasible, to transfer them to another controller without hindrance.
At any time, You may lodge a complaint with the Data Protection Authority, as well as seek other means of protection provided by applicable law.
You can exercise your rights, by sending a written communication to the Controller to the address above or an e-mail to email@example.com