INFORMATION ON THE PROCESSING OF PERSONAL DATA
Information on the Processing of Personal Data pursuant to Articles 13 and 14 of EU Regulation 679/2016 (GDPR)
The Zenita Group brand is owned by Maticmind S.p.A.. The processing of personal data is managed by Maticmind S.p.A. in its capacity as Data Controller (hereinafter "Controller"), for processing falling within its domain of competence or deriving from the management and control of the personnel selection process, pursuant to Articles 13 and 14 of Regulation (EU) 679/2016 (hereinafter, "Regulation") informs you that, as a Data Subject (hereinafter, "Data Subject"), the data you provide and acquired by Maticmind will be processed lawfully and fairly, in accordance with the provisions of the Regulation and in general compliance with the confidentiality obligations that inspire all the Company's activities.
The interested party is hereby informed that the information acquired may be processed by Maticmind itself or by one or more companies belonging to the Zenita Group.
1 REFERENCES AND CONTACT DETAILS OF THE DATA CONTROLLER AND THE DPO
Data Controller: Maticmind S.p.A (also on behalf of Zenita Group companies). Registered office: Centro MAC6 Via Bracco 6, 20159 Milan (MI), Italy. Email: info@maticmind.it privacy@maticmind.it
Tel: +39 0227426456
Fax: +39 022500370
DPO (Data Protection Officer): email: dpo@maticmind.it
2 PURPOSE AND METHODS OF DATA PROCESSING
The processing carried out by the Data Controller is aimed at managing the personal data of users registered on Zenita Group websites.
Personal data is processed for the purpose of registering users on Zenita Group websites in accordance with principles of fairness and lawfulness and in such a way as to guarantee security and confidentiality.
The processing is carried out using both manual and computerized tools, and with organizational and processing methods strictly related to the purposes themselves and in any case in such a way as to guarantee the confidentiality, integrity, and availability of the data in compliance with the technical, organizational, physical, and logical measures provided for by current regulations and internal procedures.
Personal data processed electronically is stored at the Data Controller's data centers or in cloud systems located within the European Economic Area. Personal data processed non-electronically is stored at Maticmind offices or Zenita Group companies located in Italy.
In any case, it is understood that the Data Controller, if necessary, has the right to transfer personal data outside the EU. In this case, the Data Controller hereby guarantees that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the EU.
3 TYPES OF DATA PROCESSED
The personal data processed for the purposes described above relate to the CV submitted and are strictly relevant and limited to the evaluation of the candidate within the selection process as a whole. By way of example, but not limited to, the following will be collected:
§ Username;
§ first and last name;
§ telephone numbers and email addresses.
4 LEGAL BASIS FOR PROCESSING AND MANDATORY OR OPTIONAL NATURE OF DATA PROVISION
The processing of personal data for the purposes described above is based on the consent of the data subject (Article 6, paragraph 1, letter a) of the Regulation).
Consent to the provision of personal data by the data subject is optional. Any refusal to provide such data and to consent to its processing will make it impossible for the Data Controller to manage registration on Zenita Group websites.
5 DURATION OF TREATMENT
The data collected for the purposes described above will be stored by the Data Controller for the period strictly necessary to achieve those purposes.
However, the Data Controller may continue to store such data for a period not exceeding 5 years, in any case in compliance with current legislation.
6 PARTIES TO WHOM THE DATA MAY BE DISCLOSED AND SCOPE OF DISCLOSURE
Personal data related to the purposes pursued and described above will not be disclosed, but may be communicated to employees and collaborators of the Data Controller who are responsible for processing, as well as to Zenita Group companies involved in the selection process.
Such data may also be disclosed to third parties who perform activities on behalf of the Data Controller as external data processors and in compliance with the provisions of the Regulation.
7 RIGHTS OF THE DATA SUBJECT
The data subject has the right to exercise the rights referred to in Articles 15 to 21 of the Regulation, in particular:
1) obtain confirmation of the existence or otherwise of personal data concerning him/her, as well as the logic and purposes on which the processing is based;
2) obtain the deletion, transformation into anonymous form, or blocking of data processed in violation of the law;
3) obtain the updating, rectification of inaccurate data or, if interested, the integration of incomplete data or the restriction of data use;
4) obtain certification that the operations referred to in points 2) and 3) have been brought to the attention of those to whom the data have been communicated or disseminated, except in the case where this proves impossible or involves a use of means manifestly disproportionate to the protected right;
5) object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
6) receive personal data concerning him/her, which he/she has provided to a Data Controller, in a structured, commonly used and machine-readable format and transmit those data to another Data Controller, as well as obtain the direct transmission of data from one Data Controller to another, if technically feasible (data portability);
7) withdraw consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal;
8) lodge a complaint with a supervisory authority.
The Data Subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her is being processed. The Data Controller shall provide a copy of the personal data undergoing processing; where the Data Subject requests further copies, the Data Controller may charge a reasonable fee based on administrative costs.
In addition to the rights listed above, the Data Subject, in accordance with Articles 77 and 79 of the Regulation, has the right to lodge a complaint with the Data Protection Authority in the event that
believe that your data is being processed in a manner that does not comply with current legislation, or to take legal action before the competent courts.
8 EXERCISE OF RIGHTS
The Data Subject may exercise the above rights or obtain further information about the Company's use of their personal data. To exercise their rights, the Data Subject may contact the Data Controller and/or the DPO; see Section 1 References and Contact Details of the Data Controller and DPO.
9 NOTIFICATION TO THE DATA SUBJECT
Pursuant to Provision no. 146/2019 of the Italian Data Protection Authority containing the "Requirements relating to the processing of special categories of data," communications to the Data Subject relating to data belonging to these categories will be made using forms of communication, including electronic forms, tailored to the Data Subject or their representative, including through authorized personnel. If this data is transmitted using paper documents, the transmission shall take place in a sealed envelope, with proof of receipt by means of a signature.
In the event of a personal data breach (Data Breach) and if such breach is likely to present a high risk to the rights and freedoms of natural persons, the Data Controller shall communicate this to the Data Subject without undue delay, in accordance with Art. 34 of the Regulation. Such communication is not required if the Data Controller has implemented adequate technical and organizational protection measures or if the communication would require disproportionate effort.