Personal Data Processing Policy
Personal Data Processing Policy
Information and express statement of consent to personal data processing for interviewees
This is to inform you that, pursuant to Articles 12 and 13 of EU Regulation 2016/679 on "Protection of individuals with regard to the processing of personal data and the free movement of such data" (hereinafter the Regulation), within the context of the selection process commenced with the Fondazione Human Technopole, hereinafter referred to as "HT", the above-mentioned Foundation manages a series of personal data related to you.
1. Identity and contact details of the Data Controller
The Data Controller of your personal data is the Fondazione Human Technopole, based in Via Cristina Belgioioso s.n.c., - 20157, Milan (Italy).
2. Purposes of data processing
The processing of your personal data by HT will take place for the purpose of managing the selection process commenced. In particular, the processing of personal data is carried out for the assessment of suitability of the professional profile.
Once the selection process has been completed, the data will be stored exclusively for precautionary purposes for the management of any litigation related to the selection process and the protection of HT’s rights.
3. Purposes related to the processing of special categories of personal data
For what concerns, on the other side, special categories of personal data, if included in the Curriculum Vitae or obtained during the selection process, for example those related to state of health, in accordance with the provisions of Article 9 of the Regulation, the data processing can be carried out only if you give your consent to their processing for purposes related to selection process and preliminary recruitment.
4. Legal basis of data processing
The legal basis of data processing consists of:
Articles 6, letter b) of Regulation, the data processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures taken upon his/her request.
With specific reference to the aforementioned special categories of personal data, Article 9, letter a) of this Regulation, the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject.
With reference to the conservation after the end of the selection process, Article 6, paragraph 1, lett. f), the necessity of the pursuit of the legitimate interest of HT, concerning the protection of its rights and its involvement in any actions or proceedings related to the selection.
5. Processing Method
Your data will be processed by computer and paper support, following the rules on protection of personal data, including those related to data security.
6. Categories of recipients of personal data
The data you have provided may be disclosed to public and private entities relevant to the purposes mentioned above.
The communication of personal data is carried out on the basis of the obligations provided by law.
Your data may be communicated to persons appointed by HT as External Data Processors for purposes strictly related to the management of the selection process. Your personal data could also be disclosed to the Fondazione Istituto Italiano di Tecnologia, hereinafter referred to as “IIT”, as actuating Institution of the Human Technopole’s Project and to the Company Inera S.r.L. (IIT’s supplier, that is in charge of the hosting services that is providing one virtual Server; of the aforementioned Server installation, configuration and maintenance services; of the website’s maintenance’s service; the technical help-desk and the back-up/restore services). Furthermore, the HT’s obligation to communicate data to the Judicial Authority remains in place, whenever, in this regard, a specific request is sent.
7. Data storage
The storage of your personal data will take place in compliance with the security measures used by HT on data protection, and access to them will be allowed only to the staff involved and duly appointed to process data.
Your data will be stored at HT’s premises and at the hosting infrastructure made available by Inera S.r.L., consisting of a virtual Server located in Germany. Your data will not be transferred outside the EU.
Considering that the communication of your data has been made with exclusive reference to a specific position, the collected data will be eliminated from any IT and / or paper support, with the exception made for the conservation set out in the following period, once the present selection process has been completed, unless otherwise indicated by you.
Following this event, in order to protect HT's rights, the data will be stored - so as to be accessible only if necessary - for a period of time corresponding to the limitation period of rights that you may have against HT. This period, usually corresponding to 5-year for selection processes, may vary according to the type of data and the possible intervention of interruptions or suspensions of the prescription itself.
8. Rights of the data subject
You may exercise the rights provided in Article 13, letter b) and in Articles 15, 16, 17, 18 and 20 of the Regulation at any time by contacting the Data Controller, Phone no. +39/02 30247001.
In particular, as data subject, you can request:
1. access to your personal data, as provided in Article 15 of the Regulation;
2. correction of your personal data, as provided in Article 16 of the Regulation;
3. cancellation of your personal data ("right to be forgotten"), as provided in Article 17 of the Regulation;
4. restriction of personal data processing, as provided in Article 18 of the Regulation.
Furthermore, we inform you that you can object to the processing of data at any time, pursuant to Article 21 of the Regulations, in case one of the situations mentioned in Article 6, paragraph 1, letters e) and f) of the same Regulation occurs.
9. Consent and withdrawal
You can withdraw your consent at any time by contacting the Data Controller.
10. Complaint to the Supervisory Authority
Finally, pursuant to Article 77 of the Regulation, we remind you that you have the right to submit a complaint to the Supervisory Authority (Protection Authority for Personal Data Processing), if you believe that your data processing infringes the provisions of the Regulation.
11. Nature of the processing and obligation of providing data
The data required are necessary (even in fulfilment of obligations coming from legal rules) to selection process related to the eventual recruitment. Failure to provide these data may result in conclusion of the selection process and the exclusion from the selection process.
12. Existence of automated decision-making processes in the data treatment
It is specified that for processing of the above data there is NOT any type of automated decision-making process, pursuant to Article 22 of the Regulation.
The undersigned, after receiving the above information and being aware of the rights set out in Article 13, letter b) and Articles 15, 16, 17, 18 and 20 of the Regulation,
- Gives his/her consent
to the processing of his/her special categories of personal data as mentioned in point 3 of the information.