PRIVACY POLICY FOR PERSONNEL SEARCH AND SELECTION

GDPR - EU REGULATION NO. 2016/679

Pursuant to articles 13 - 14 of EU Regulation no. 2016/679 (hereinafter "GDPR 2016/679"), laying down provisions for the protection of persons and other subjects regarding the processing of personal data, we inform you that the personal data you provide to EOLIANN S.R.L. SOCIETA' BENEFIT, VAT NUMBER: 12457140965 WITH REGISTERED OFFICE IN Via Luigi Cagnola, 6 – 20145 Milan (MI),  in the person of the legal representative pro tempore Mr.  CARNICELLI ROBERTO, will be processed in compliance with the  aforementioned legislation and the confidentiality obligations to  which EOLIANN S.R.L. SOCIETA' BENEFIT is bound  , which will come into possession of it. The following is hereby informed:

1. Data Controller.

The data controller is EOLIANN S.R.L. SOCIETA' BENEFIT, VAT NUMBER: 12457140965 WITH REGISTERED OFFICE IN Via Luigi Cagnola, 6 – 20145 Milan (MI).

2. Type and purpose of data processing.

Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not recorded in a database, such as collection, recording, organisation, structuring, storage, processing, selection, blocking, adaptation or modification,  extraction, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

By way of example and not exhaustively, the data processed are the following: Tax code and other personal identification numbers; Name, address or other personally identifiable information; Work (current, previous employment, resume, etc.); Education and culture; Professional quality certificates; Contact details (telephone number, e-mail, etc.); Province of residence; Declared profession; Topics of interest; Sex m/f; Fitness for work.

The processing of your personal data is aimed at the search and selection of personnel by EOLIANN S.R.L. SOCIETA' BENEFIT  The personal data you provide  to EOLIANN S.R.L. SOCIETA' BENEFIT may be processed without your express consent (Article 6 letter b), e) GDPR), to exercise the rights of the Data Controller, for example the right to defence in court or fulfil the obligations established by law,  by a regulation, by Community legislation or by an order of the Authority (such as in the field of anti-money laundering).

3. Methods of processing, place  and storage of data.

The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

The treatment will be carried out in an automated and / or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679, by persons specifically appointed and in compliance with the provisions of art. 29 GDPR 2016/ 679.

The place of processing of your personal data is the headquarters of the Data Controller and any other place where you and the Data Controller are geolocated.

In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed and, in any case, no later than 10 years from the date of commencement of the processing referred to in point 2.

4. Provision of data and refusal to provide data.

The provision of personal data is strictly necessary for the purposes of carrying out the contractual  activities referred to in point 2. Any refusal by the interested party to provide personal data will make it impossible to fulfil the contractual services referred to in point 2.

5. Legal bases of processing and legitimate interest.

The legal basis – condition of lawfulness for which EOLIANN S.R.L. SOCIETA' BENEFIT lawfully processes your personal data for research and selection of personnel is constituted, pursuant to art. 6 paragraph 1 letter a) GDPR 2016/679 by your consent expressed specifically at the bottom of this information, or expressed specifically in digital electronic form.

• This consent is valid until the written revocation to be sent by registered letter with acknowledgment of receipt, or by e-mail
• to the regular e-mail address: info@eoliann.com
• The legal basis – condition of lawfulness for which EOLIANN S.R.L. SOCIETA' BENEFIT lawfully processes your particular personal data, for purposes of research and selection of personnel by EOLIANN S.R.L. SOCIETA' BENEFIT is constituted pursuant to art. 9 paragraph 2 letter. a) GDPR 2016/679 from your consent expressed specifically at the bottom of this information.
• This consent is valid until the written revocation to be sent by registered letter with return receipt, or by e-mail to the ordinary e-mail address: info@eoliann.com
• The legal basis – condition of lawfulness for which EOLIANN S.R.L. SOCIETA' BENEFIT, without your express consent, can use  the common personal  data that you provide us, is constituted by the legitimate interest of the Data Controller to exercise its rights, for example the right to defence in court (Article 6 paragraph 1 letter f) GDPR 2016/679).
• The legal basis – condition of lawfulness for which EOLIANN S.R.L. SOCIETA' BENEFIT, WITHOUT YOUR EXPRESS CONSENT, CAN USE THE COMMON PERSONAL DATA  THAT YOU PROVIDE US, IS CONSTITUTED BY THE NEED TO FULFILL THE OBLIGATIONS ESTABLISHED BY LAW, BY A REGULATION, BY COMMUNITY LEGISLATION OR BY AN ORDER OF THE Authority (such as in the field of anti-money laundering) to which the Data Controller is subject (Article 6 paragraph 1 letter c) GDPR 2016/679).

6. Communication of data.

Without the need for express consent (pursuant to Article 6 letter b) and c) GDPR), the Data Controller may communicate the personal data provided by you to Supervisory Bodies,   Judicial Authorities, as  well as to   those subjects to whom communication is mandatory by law for  the fulfilment  of the purposes requested.

These subjects will process the data in their capacity as independent data controllers  .

The processing of data will also take place for the purposes provided for by current    anti-money laundering legislation.  Your personal data may be communicated to:

• providers of other services, acting as  data processors ;
• persons in charge and / or authorized.

The complete list of data processors can be provided by the Data Controller by sending a written request  to the e-mail address: info@eoliann.com

7. Dissemination of data.

your personal data are not subject to disclosure.

8. Transfer of data abroad.

Your personal data provided by you are not transferred to countries outside the European Union or the European Economic Area (so-called European Economic Area). Third countries).

9. Rights of the interested party.

At any time, pursuant to articles 15 to 22 of EU Regulation no. 2016/679, you may exercise, the right to:

request confirmation of the existence or otherwise of personal data;

• obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;

obtain the correction and cancellation of data;

obtain the limitation of processing;

• obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without hindrance;

oppose the processing at any time and also in the case of processing for direct marketing purposes;

oppose an automated decision-making process relating to individuals, including profiling.

• ask the data controller for access to personal data and the correction or cancellation of the same or the limitation of the processing concerning him or to oppose their processing, in addition to the right to data portability;

• withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

lodge a complaint with a supervisory authority.

10. Special categories of personal data.

Pursuant to articles 9 and 10 of EU Regulation no. 2016/679 EOLIANN S.R.L. SOCIETA' BENEFIT does not process on your behalf data that can be qualified as "special categories of personal data", i.e. those data that reveal " racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person,  data relating to the sexual life or sexual orientation of the person".

Pursuant to articles 9 and 10 of EU Regulation no. 2016/679, EOLIANN S.R.L. SOCIETA'  BENEFIT processes on your behalf data that can be qualified as "special categories of personal data", i.e., those data relating to health, in particular the attestation of your suitability for work.

11. Existence of an automated decision-making process, including profiling.

EOLIANN S.R.L. SOCIETA' BENEFIT does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4 of EU Regulation no. 2016/679. You can exercise your rights with a  written request sent to  EOLIANN S.R.L. SOCIETA' BENEFIT, with registered office in Via Luigi Cagnola, 6 – 20145 Milan (MI), or by PEC to the e-mail address: eoliannsrl@legalmail.it

The Data Controller - EOLIANN S.R.L. SOCIETA' BENEFIT

Information updated to 16 February 2023