Mod.: ICV – Updated 03/2023
The data controller is GRS srl, with registered office in Via Cavalieri di Vittorio Veneto 14 in Martellago (VE) and an operational headquarters in Via Chiesa Campocroce 4 – real estate unit 0/1 – 31021 Mogliano Veneto (TV), Tax Code and VAT number 04071710273 (hereinafter "Data Controller").
Information for candidates: "work with us"
This information is provided to those who, following a personnel search or a spontaneous application or in response to our job advertisement or during a job interview, send their curriculum vitae to the Data Controller through its website.
For any other information on the processing of personal data during navigation, it is suggested to read the privacy policy on the site.
Personal Data voluntarily provided by the user, including:
The data collected by the Data Controller through the sending of curriculum vitae, professional profile assessment interviews or reporting by third parties such as name, surname, place and date of birth, tax code, telephone number, postal address, educational qualification and other personal identification elements, sent in relation to any open positions or by spontaneous application, fall within the category of "personal data" pursuant to Article 4, paragraph 1 and paragraph 15 of the GDPR and will be processed exclusively for the purpose of carrying out an assessment of the professional aptitudes and skills of the candidates themselves, according to the open position and for which a selection procedure is in progress or for future needs for expansion of the company workforce.
With the exception of jobs reserved for protected categories, it will not be necessary to include particular data in the curriculum vitae (i.e. data revealing racial and ethnic nature, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations of a religious, philosophical, political or trade union nature, as well as data suitable for revealing the state of health and sex life).
The personal data of those who spontaneously or following a personnel search send their curriculum vitae are processed, in the ways and in the forms prescribed by the GDPR:
The collection and processing of data is carried out in order to allow the Data Controller to carry out the activities of research, selection and evaluation of personnel. The processing carried out for this purpose does not require the consent of the interested party, since it is necessary for the execution of pre-contractual measures adopted at the request of the interested party (Article 6, paragraph 1, letter B of the GDPR), except for the processing of particular categories of personal data that, where provided, may be processed by the Data Controller only with explicit consent. The Data will be processed by authorised personnel in accordance with Article 29 of the GDPR. The processing of Data for these purposes will take place in a computerised and manual manner, based on logical criteria that are compatible and functional to the purposes for which the Data were collected, in compliance with the rules of confidentiality and security provided for by law and internal company regulations.
The provision of personal data for the purposes indicated optional and voluntary.
The same is necessary to perfect the specific functionality present on the site to correctly send your application in order to participate in any personnel selection processes. In order to correctly submit your application, the candidate must give their consent to the processing, in the absence of which the candidate will not be able to send their data for personnel selection purposes.
In any case, even if the data subject has given consent to authorise the Data Controller to pursue all the purposes mentioned in the points above, he/she will remain free at any time to revoke it.
We inform you specifically and separately, as required by Article 21 of the Regulation, that the data subject has the right to oppose at any time the processing of their personal data for such purposes and that if the person opposes the processing for direct marketing purposes, personal data will no longer be able to be processed for these ends.
The personal data processed will not be disseminated but communicated to well-defined parties, such as the Data Controller's staff specifically authorised to process the data. On the basis of the roles and work duties performed, the staff is entitled to process the data within the limits of their skills and in accordance with the instructions given by the Data Controller. The same data may be disclosed to persons entitled to access it on the basis of provisions of law, regulations and legislation.
Specifically, the data can be used by third parties and/or companies that carry out instrumental activities on behalf of the Data Controller such as:
The aforementioned recipients, as the case may be, will process the data as data controllers, managers or persons in charge/authorised to process. Except in the cases indicated above, the data will not be circulated in any way.
The processing of data takes place through manual, electronic and computer tools with methods strictly related to the purposes for which the data are processed and in any case in compliance with the provisions of Article 32 of the GDPR on security measures.
Personal data are kept for the period necessary to achieve the specific purposes for which they are processed and in any case for a period not exceeding 6 months from receipt of the curriculum vitae, after which they will be automatically deleted and copies will not be kept.
Cases in which it is necessary to keep the data for a further period of time to defend or enforce a right or to comply with any legal obligations or orders of the Authorities are excluded from the above terms are.
The Data Controller does not transfer personal data to third countries or international organisations.
Each Data Subject shall have the right to access, rectify, delete (be forgotten), limit, receive the notification in the event of rectification, deletion or limitation, portability, opposition and not to be the subject of an automated individual decision, including profiling, pursuant to the Articles 15 to 22 of GDPR. These rights may be exercised in the forms and terms referred to in Article 12 of the GDPR, by written communication sent to the Data Controller (see point 10).
The Data Controller will respond as soon as possible from receipt of the request.
You can withdraw your consent, where applicable, at any time and/or exercise your rights by sending:
- a registered letter with return receipt to the Undersigned (see the address indicated on the letterhead);
- an email to info@grsnet.it.
Each Data Subject has the right to lodge a complaint pursuant to Art. 77 et seq. of the GDPR with a supervisory authority, which for the Italian State is identified as the Data Protection Authority. The forms, methods and terms for proposing complaints are provided for and governed by the national legislation in force. The complaint does not prejudice the administrative and jurisdictional actions, which for the Italian State may alternatively propose to the same the Data Protection Authority or to the competent Court.
Below we provide you with some information that needs to be brought to your attention, not only to comply with legal obligations, but also because transparency and fairness towards stakeholders is a fundamental part of our business.
Data Controller. The Data Controller of your personal data is GRS Srl, the company responsible for the lawful and correct use of your personal data and who can be contacted for information or queries at: telephone +39 041 4069438, email: info@grsnet.it.
DPO (Data Protection Officer). You may also contact the Data Protection Officer to obtain information, send requests about your data or to report service disruptions or other issues.
The Data Controller has appointed Mr Nicola Ghinello, who can be contacted as follows: telephone +39 348 3165267, email: nicola.ghinello@dpo-rpd.com.
Appointees/Authorised Persons. The updated list of the appointees/Authorised persons and the staff involved in data processing is kept at the Data Controller's registered offices.
Data controllers.
For the sake of brevity, the detailed list of these figures is available at our office and is at your disposal.
