Candidate disclosure in accordance with the General Data Protection Regulation (GDPR 2016/679) THE LANGUAGE GRID S.R.L., registered office at 32 Via Carducci in Milan, in the person of the current legal representative, Tel. 3497633507 - email:firstname.lastname@example.org - certified email: email@example.com as the Data Controller, has drafted this disclosure to provide you with the information required by the EU's General Data Protection Regulation no. 2016/679 (hereafter, also simply the "Regulation") on the use of your personal data (also simply the "Data"), including any data categorised as "special" under the Regulation (personal data revealing racial or ethnic origin, political opinions, religion or philosophical beliefs, trade union membership, and genetic data, data concerning health or data concerning sex life) about you that has been obtained from you prior to the commencement of any potential employment relationship.
1. PRINCIPLES FOR THE PROCESSING OF PERSONAL DATAThe Regulation established the rules that protect natural persons with regard to the processing of their personal data and the free movement of such data. It safeguards the fundamental freedoms and rights of natural persons, especially the right to the protection of personal data concerning them. Your data will only be collected insofar as this is compatible with the purposes set out below and any processing of such data will be done in accordance with the principles of lawfulness, fairness and transparency.
2. PURPOSES OF PROCESSING AND LEGAL GROUNDS Your personal data (potentially including any special or legal data) could be processed for the following purposes: a) Staff recruitment for the company; b) Assessment of professional skills and profiles, including ongoing professional education, definition of individual and career plans, performance assessment, participation in educational and refresher courses in Italy and abroad; c) Out-of-court and in-court dispute resolution.
At times, during recruitment, the Data Controller might collect and process data in special categories, particularly data that could reveal membership/involvement/inclusion in a protected category. The Regulation requires your specific consent for such processing. If we plan to use the personal data we have collected about you for a purpose that is incompatible with the purposes for which the personal data was originally collected or authorised, then we will inform you in advance. Your data will be processed directly by The Language Grid S.r.l. or by third-party service providers that have been expressly designed as Data Processors.
3. PROCESSING METHODS Data is processed by the Data Controller or Data Processors in accordance with Articles 4 to 6, GDPR, manually (drafting documents and hard copies) and using computerised methods and procedures, with electronic and automated devices, including automated calling, fax, email, SMS/MMS and other systems, but solely for the purposes for which it was collected. These same methods and procedures are also used when the data is communicated - in Italy or abroad - for the purposes above to other parties that have accepted to only process the data using the methods and procedures strictly necessary for the specific purposes outlined in this document and in compliance with the law. Personal data is not disseminated. The company agrees to the following when processing your data: - To ensure that your processed data is accurate and current, and to swiftly make any corrections and/or additions required by a data subject; - To use security measures to guarantee adequate data protection, taking into account the potential impact of processing on respect for your fundamental freedoms and rights; - To inform you about any personal data breaches in those cases, and according to the related timelines, established by law; - To ensure all processing complies with applicable law.
PERSONAL DATA MOVEMENT AND DISCLOSURE Your data might be accessed by The Language Grid S.r.l. employees who require your data to do their job or because of their position in the company. Likewise, it might be accessed by third parties that provide services for The Language Grid S.r.l. that have been expressly appointed as Data Processors. Your data might also be communicated: - Inside The Language Grid S.r.l.; - To consultants and/or freelance professionals to obtain opinions on the application of labour law for employment relationships and for activities intended to ensure the correctness of the employment relationship; to legal practices to manage disputes; - To service providers and professionals that provide document and workflow management services, including computerised services.
TRANSFER OF DATA ABROAD The company might send your data to companies outside of the European Union for the purposes set out in this disclosure. Nonetheless, any such transfer of data to countries outside the European Union will be done ensuring the appropriate, opportune safeguards are in place for such a transfer, as per applicable law, particularly Articles 45, 46 and 47 of the Regulation. You have the right to obtain a copy of the data held abroad and to receive details about the location in which the data is kept by making an express request to the Data Controller using the methods described in the section entitled "Contact Details" in this disclosure.
STORAGE PERIOD Except in cases where a person is hired, after 24 months from the record date, the Data Controller will review whether the data is still required for processing or can be erased. Prior to this date, you have the right, should you feel the purpose of the process has been fulfilled, to inform the Data Controller in writing, with the later taking immediate action to erase your personal data. Where an employment relationship is established through an employment agency, The Language Grid S.r.l. can, following the conclusion of such a relationship, store and use your information in an identifiable form for no longer than is required to achieve the purposes for which the data was processed, that is, to manage staff and comply with legal and contractual requirements.
EXERCISING RIGHTS According to the Regulation (Article 15 to 22), you have the right to exercise the following rights with the Data Controller: Right of Access: You have the right to access personal data about you that is being processed to verify if it is being processed in accordance with the law. Right to Rectification: You have the right to have any inaccurate or incomplete data about you updated to ensure such data is precise given the purposes of the processing. Right to Erasure: You have the right to ask the Data Controller to erase your data and to process it no further. Right to Restriction of Processing: You have the right to request that the Data Controller restricts the processing of your data. Right to Data Portability: You have the right to receive your data in a structured, commonly used and machine-readable format and the right to transmit the data to another data controller. Right to Object to Processing: You have the right to object to the processing of data in those instances established by the GDPR, at any time and without having to justify your decision. Right to Oppose Automated Individual Decision-Making Processes: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where the basis for processing is the granting of consent, pursuant to Article 7 of EU Regulation no. 2016/679, you can withdraw your consent at any time, without prejudice to the lawfulness of the processing done prior to such withdrawal of consent.
THE LANGUAGE GRID S.R.L.