Privacy Policy for Candidates

INFORMATION ON THE PROCESSING OF PERSONAL DATA

This information is provided to individuals pursuant to Articles 13-14 of GDPR 679/16 – “European Regulation on the Protection of Personal Data”.

Identity of the Data Controller
The Data Controller for the processing of personal data is VIR HR Human Resources S.r.l, with registered office at Via Parini 1 – 21047 Saronno (VA)

Data Source
The personal data processed are those voluntarily provided by the data subject (candidate) when sending their curriculum vitae and during selection interviews. Data resulting from any candidate assessments carried out as part of the selection process are also processed.

Purpose of Processing
Personal data are processed exclusively for personnel selection activities (activities for which VIR HR Human Resources S.r.l holds Authorization No. 13215/2007 from the Ministry of Labor and Social Security) aimed at evaluating the qualifications, experiences, and skills of the candidate in relation to a job position.
The legal basis for processing is the express consent of the data subject (candidate).

Data Recipients
The personal data processed by the Data Controller will not be disseminated, meaning that it will not be made known to unspecified subjects, in any possible form, including making it available or simple consultation. However, they may be communicated to the Data Controller’s employees and to some external parties who collaborate with them.

In particular, based on the roles and job duties performed, some employees have been authorized to process personal data, within the limits of their competencies and in accordance with the instructions given to them by the Data Controller.

Furthermore, the collected data may be sent to our Client companies within the scope of the above-mentioned purposes.

Finally, they may be communicated to subjects entitled to access them by virtue of legal provisions, regulations, and EU regulations.

Data Transfer
The Data Controller does not transfer personal data to third countries or international organizations. However, it reserves the right to use cloud services; in which case, service providers will be selected from those who provide adequate guarantees, as required by Art. 46 GDPR 679/16.

Data Retention
The Data Controller retains and processes personal data for the time necessary to fulfill the indicated purposes. Subsequently, personal data will be stored, and not further processed, for a period of ten years from their receipt.

Rights of the Data Subject
With reference to Articles 15 – right of access, 16 – right of rectification, 17 – right to erasure, 18 – right to restriction of processing, 20 – right to data portability, 21 – right to object, 22 right to object to automated decision-making of GDPR 679/16, the data subject exercises their rights by writing to the Data Controller at the address above, or by email to [email protected], specifying the object of their request, the right they intend to exercise, and attaching a photocopy of an identity document that proves the legitimacy of the request.

Withdrawal of Consent

With reference to Art. 6 of GDPR 679/16, the data subject can withdraw any consent given at any time.

However, the processing that is the subject of this information notice is lawful and permitted, even in the absence of consent, as it is necessary for the execution of measures adopted at the implicit request of the data subject (the evaluation and selection of the application).

Lodging a Complaint
The data subject has the right to lodge a complaint with the supervisory authority of their country of residence.

Refusal to Provide Data
The data subject may refuse to provide their personal data to the Data Controller.

However, providing personal data is necessary for proper and efficient management of the processing purpose. Failure to provide such data will therefore result in the inability to proceed with the evaluation and selection of the application.

Automated Decision-Making Processes
The Data Controller does not carry out processing on the data of individuals that consists of automated decision-making processes.