INFORMATION REGARDING THE PROCESSING OF CANDIDATES’ DATA

Pursuant to Articles 13 and 14 of EU Regulation 2016/679

  1. DATA CONTROLLER AND CONTACT INFORMATION
    The Data Controller is F.C.R. Industrie S.r.l.
    Registered Office: Corso Vittorio Emanuele II, 15 – Milan (MI) – Administrative Office: Via Tonale 18 – Vittuone (MI)
    Company Contacts: Email fcrindustrie@fcr.it – ​​Telephone +39 02 9031 0245; Privacy Officer: privacy.ind@fcr.it

  2. PROCESSED DATA, PURPOSES AND LEGAL BASES

    Processed dataPurpose Legal basis
    General data
    This includes, but is not limited to, name, surname, place and date of birth, residence, telephone number, educational qualifications, work experience, and any other information you may have included in your CV

    Special categories of data
    Your CV may contain data that indirectly reveals your racial or ethnic origin.     		Search and selection of personnel with a view to a potential employment relationship.Art. 6, paragraph 1, letter b) GDPR
    Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the data subject’s request prior to entering into a contract.

    Art. 9, paragraph 2, letter b) GDPR
    Processing is necessary for the performance of obligations and the exercise of specific rights in the field of employment law.
    Special Data
    Results of the pre-employment medical examination performed by the Company Physician or ATS    		Verify whether the candidate who has passed the selection process is suitable for the role that would be assigned to him/her upon hiring. Art. 9, paragraph 2, letter h), paragraph 3, GDPR
    The processing is necessary for preventive medicine purposes to assess the employee’s working capacity, under the responsibility of the professional subject to professional secrecy

    Legislative Decree 81/08, art. 41, paragraph 9 – Law 203/24
    Special Data
    Data relating to membership in protected categories    		Where necessary and relevant, to evaluate your application for job positions subject to the provisions on targeted placement*Article 6, paragraph 1, letter b) GDPR
    Obligations arising from Law 68/99 on the hiring of protected categories

    Article 6, paragraph 1, letter c) GDPR
    Processing is necessary for compliance with a legal obligation to which the data controller is subject

    Article 9, paragraph 2, letter b) GDPR
    Other
    Professional information and data relating to the candidate recruitment and evaluation process    		Demonstrate compliance with the principles of transparency, impartiality, and non-discrimination in the selection process.

    Verify that the information you provide corresponds to what you declared, limited to professional information only.    		Art.6, co.1, lett. f) GDPR
    Il trattamento è necessario per il perseguimento del legittimo interesse del titolare del trattamento e di terzi
    *In the absence of such a case and in the absence of the conditions set forth in Article 9 of the GDPR, such data will not be taken into consideration and will be immediately deleted

  3. SOURCES
    The data will be collected directly from the interested party or through employment agencies

  4. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO PROVIDE IT
    The provision of data and its processing are necessary for the execution of personnel search and selection activities; failure to provide them or their insufficient provision could, however, make it impossible for the data controller to carry out the selection process

  5. METHODS OF DATA PROCESSING AND STORAGE
    Data processing will be carried out using manual and/or automated and computerized systems to store, manage, and transmit the data, with logic strictly related to the purposes indicated in point 2. Resume files that are irrelevant or of no interest will be immediately deleted or destroyed. Resume files of interest and data relating to the candidate evaluation process will be retained for a maximum period of 12 months, after which they will be deleted or destroyed

  6. SCOPE OF COMMUNICATION
    Personal data will be communicated exclusively to the extent strictly necessary to achieve the purposes indicated above, in compliance with applicable legislation and/or on the basis of contractual agreements, to the following categories of recipients:
    • Internal personnel authorized to process data for the following activities:
      • Conducting interviews
      • Internal audits aimed at maintaining and improving the quality management system compliant with ISO 9001
    • Providers of services related to and/or consequent to the agreed services, who act as Data Processors, such as:
      • Companies responsible for the maintenance of information systems, software, and hardware
      • Professional firms or consultants in the fields of labor law or HR, who collaborate in managing the selection process
    • Third parties acting as Independent Data Controllers, such as:
      • Employment agencies (pursuant to Article 4 of Legislative Decree 276/2003), when they directly receive and process candidate data for intermediation purposes
      • Public authorities or entities Social security/welfare benefits, if processing is necessary to fulfill regulatory obligations (e.g., INPS, INAIL, Labor Inspectorate, Employment Center)

        The updated list of entities designated as Data Processors pursuant to Article 28 of the GDPR is available at the Data Controller’s registered office and may be requested by written request

  7. DATA DISCLOSURE
    In the context of managing the employment relationship, no disclosure of data concerning the data subject is envisaged

  8. AUTOMATED PROCESSES AND PROFILING
    Personal data are not subject to any fully automated decision-making process, including profiling

  9. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
    There are no voluntary transfers of data to third countries; Any transfer of personal data outside the European Union will only occur to entities that guarantee an adequate level of data protection and/or to countries for which the competent authorities have issued an adequacy decision, and to entities that have provided adequate guarantees regarding the processing of personal data through appropriate regulatory/contractual instruments

  10. RIGHTS OF THE DATA SUBJECT
    Within the limits of applicable legislation, pursuant to Articles 15-18 and 20-21 of EU Regulation 2016/679 and in relation to the purposes of the processing, you have the right to:
    • obtain confirmation of the existence or otherwise of personal data concerning you, regardless of their being already recorded, and communication of such data in an intelligible form.
    • to obtain information on: the source of the personal data; the purposes and methods of the processing; the logic applied in the event of processing carried out with the aid of electronic means; the identification details of the data controller and any data processors; of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as data controllers or persons in charge.
    • to obtain: a) the updating, rectification, or, where interested therein, the integration of the data; b) the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such compliance proves impossible or involves a manifestly disproportionate effort compared with the right being protected.
    • to object, in whole or in part: for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; to the processing of data for personal data concerning you for the purpose of sending advertising or direct selling materials or for market research or commercial communications
    • data portability, meaning to receive the personal data concerning you in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another data controller without hindrance
Requests should be sent to the Data Controller at the address specified in section one by sending an email to: privacy.ind@fcr.it
Furthermore, you have the right to lodge a complaint with a supervisory authority (in Italy, the Italian Data Protection Authority: www.garanteprivacy.it)