Under the provisions and effects of articles 13 and 14 of European Regulation 2016/679 (hereinafter GDPR) concerning the protection of personal data, the company CADICAGROUP S.R.L., owner of the website https://www.cadica.com (hereinafter, the “Website”), acting as Data Controller (hereinafter referred to as the “Controller”), hereby informs you that the data provided by you, or otherwise acquired, will be processed in compliance with the referenced regulations.
The processing of personal data will be carried out lawfully, fairly, and transparently towards the data subject.
By processing of personal data, we mean any operation or set of operations, performed with or without the aid of electronic tools, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure, and destruction of data, even if not recorded in a database.
The services eventually offered through the Website are reserved for individuals who have reached the age of eighteen. Therefore, the Controller does not collect personal data related to individuals under the age of 18. Upon request of the Users, the Controller will promptly delete all personal data inadvertently collected and related to individuals under the age of 18.
DATA CONTROLLER
The Data Controller is the aforementioned company CADICAGROUP S.R.L., with registered office in Carpi (MO), at Via Dell’Agricoltura n. 51/C, VAT number: 03508840364, PEC: cadica@legalmail.it, email: privacy@cadica.com, tel: +39 059/633030.
CATEGORY OF DATA PROCESSED:
The data subject to this processing are as follows:
a) identifying and contact personal data (name, surname, place and date of birth, tax code, telephone number, email address, educational qualifications, profile photos, IP address, log files) and all information autonomously inserted and contained within your curriculum vitae and related attachments (e.g., references from third parties);
b) further data, such as those pursuant to articles 9-10 GDPR (data defined by law as “special”, e.g., disabilities, health conditions), eventually and voluntarily inserted by you in the personnel search and selection form and/or in your curriculum vitae.
PURPOSE OF PROCESSING AND LEGAL BASIS:
EXPERIMENTATION OF PROCEDURES FOR PERSONNEL SELECTION (FORM PRESENT ON THE WEBSITE).
Your data will be processed in order to allow the completion of activities connected or instrumental to internal selection processes within the company, a necessary requirement for any hiring or for the start of any collaboration. Your data will also be processed in order to communicate the outcome of the selection procedure to you, by contacting you at the contact details provided within the form on the Website and/or curriculum vitae. The Controller reserves the possibility to conduct an interview with the selected candidate, both in person at the Controller’s offices and possibly online, via call, video call, or through the use of web platforms (e.g., teams, etc.), in this case the Controller will contact the selected candidate, at the email address provided by the candidate in their CV, in order to obtain their prior consent to conduct the interview via video call, call, or use of a web platform. The Controller will not make any recording of the interview. The processing of your data is necessary for pre-contractual purposes (Article 6 letter b of the GDPR), in conjunction with Article 88(1) GDPR and General Authorization No. 1/2016 of the Italian Data Protection Authority (Authorization for the processing of sensitive data in employment relationships – December 15, 2016) related to personnel selection processes originating from the receipt of your curriculum vitae.
Data recipients: the data collected for the indicated purpose may be communicated to those entrusted/authorized by the Controller, to data processors designated pursuant to Article 28 of EU Regulation 2016/679, to IT consultants/system administrators, to independent data controllers, and any joint controllers. The updated list of data processors and authorized persons for processing is kept at the Controller’s headquarters and you may access it at any time, upon specific request, to be sent to the addresses below.
Duration of processing: As for the personal data collected in relation to the collection of curriculum vitae, they will be kept for the time necessary to achieve the indicated purposes and in any case retained for a period not exceeding 24 months. At the end of the retention period, personal data will be deleted.
Failure to provide data: the provision of data is necessary for the pursuit of the above-mentioned purposes that the data subject is required to fulfill. Failure to provide data by the data subject will result in the impossibility to continue in the selection process.
Processing methods: the processing of data for the purposes described above takes place using electronic, computerized, or paper-based support in compliance with the confidentiality and security rules provided by the aforementioned regulations and other related regulations. They are also processed, on behalf of the Controller, by professionals and/or companies entrusted with technical, development, management, and administrative-accounting activities.
Transfer of data abroad: it may be necessary to transfer your data to group companies located outside the EU for specific purposes related to the management of the selection process. The transfer will take place only if the European Commission has confirmed an appropriate level of data protection in the third country or in the presence of appropriate data protection guarantees (e.g., standard EU contractual clauses for the transfer of data to third countries). The Controller reserves the possibility to use cloud services; in which case, service providers will be selected among those providing adequate guarantees, as provided for in Article 46 of Regulation EU 2016/679.
Automated decision-making processes: the data collected for the aforementioned purpose are not subject to automated decision-making processes (including profiling).
Rights of the data subject: under EU Regulation 2016/679, the data subject has the right to:
- access personal data to know (“reactive transparency”) the purposes of processing, the categories of personal data collected, the recipients of data communication, especially if recipients of third countries or international organizations, the envisaged retention period of the data (Article 15);
- obtain rectification (Article 16);
- right to obtain erasure of personal data, where they are no longer necessary in relation to the purposes for which they were collected and where there are no further legal retention needs (Article 17 GDPR);
- request restriction of processing (Article 18);
- request data portability (Article 20);
- right to object to processing for reasons related to your particular situation (Article 21 GDPR). In this case, we will refrain from further processing your data unless we demonstrate compelling legitimate grounds for the processing (e.g., for the defense of your rights in legal proceedings).
- not be subject to automated decision-making, including profiling (Article 22).
Finally, the data subject shall have the right to lodge a complaint with the Supervisory Authority pursuant to Article 13 parag. 2 lett. d) of the aforementioned regulation as well as pursuant to Article 77 of the regulation.
Exercise of rights: the data subject may exercise his/her rights at any time in accordance with Article 12 of EU Regulation 2016/679, by sending a registered letter with acknowledgment of receipt to: CADICAGROUP S.R.L., with registered office in Carpi (MO), at Via Dell’Agricoltura n. 51