Made in Evolve S.r.l., with registered office in San Damaso (MO) 41126, Via Rosalba Carriera no. 26, Tax Code and VAT no. 03497200364, acting as Data Controller (hereinafter also simply referred to as the “Controller”), informs you of the purposes and methods with which your data are processed pursuant to Articles 12–13 of EU Regulation no. 2016/679 (hereinafter “GDPR”, i.e. General Data Protection Regulation).
1. PURPOSES AND METHODS OF PROCESSING
Your personal data, freely provided and acquired by us in connection with the activity carried out, are processed lawfully and fairly for the following purposes:
a) during the pre-employment phase for the search and selection of internal positions and management of interviews;
b) management of the employment or collaboration relationship with regard to contractual, social security, insurance and tax aspects, and for all purposes required by law.
The processed data (which may be of a common, identifying, sensitive or judicial nature) are updated, relevant, complete and not excessive with respect to the purposes listed above for which they are collected and subsequently processed.
The processing of your personal data is carried out by means of the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) GDPR, namely: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval or consultation, use, disclosure, comparison or interconnection, erasure or destruction, analysis and protection of data.
Your personal data are subject to both paper-based and electronic processing.
2. LEGAL BASIS OF THE PROCESSING
a) In the event of sending your CV or submitting it at our premises for the purpose of applying for potential job positions, the legal basis consists of the consent deemed implicit with the submission of a spontaneous application or for active selections and, by reference, in labour law (Art. 9, para. 2, letter b), GDPR). It is recommended not to include in your CV “special” and/or sensitive data (e.g. relating to health status, political opinions, sexual life, etc.), unless strictly necessary pursuant to law for the purposes of selection and evaluation of the CV (e.g. membership of protected categories without further details).
b) In the event of hiring or entering into a collaboration agreement, the legal basis is founded on the performance of the contract itself and on the necessity to comply with legal obligations relating to personnel management, labour law, administrative, tax, social security and social protection requirements. All of this therefore falls within the scope of labour law and related disciplines, pursuant to the exception under Art. 9, para. 2, letter b), GDPR.
3. LEGITIMATE INTERESTS PURSUED BY THE DATA CONTROLLER
The legitimate interest of the Data Controller consists in compliance with legal obligations in the fields of labour law and social security, administration and taxation.
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
In addition to internal use by the Data Controller with reference to authorized subjects, your personal data, for the sole purpose of fulfilling the obligations provided for, may be communicated to the following subjects: a) companies, collaborators, consultants or self-employed professionals; b) Public Authorities; c) Insurance companies; d) Funds or schemes, including private ones, for social security and assistance.
The dissemination of data is not envisaged.
5. INTENTION OF THE CONTROLLER TO TRANSFER PERSONAL DATA
The Data Controller will not transfer your personal data to a third country or to an international organization.
6. DATA RETENTION PERIOD
Your data are used for the activities provided for in the relevant agreement and stored for a period following the termination of the assignment, service or contract, as follows in relation to statutory limitation periods for control or the exercise, lapse or limitation of rights of the parties:
a) one year for data of candidates for internal positions who have not yet been included in the company workforce;
b) ten years for data resulting from the management of employment relationships and related obligations.
Once this retention period has elapsed, your data will be deleted or destroyed or transformed into anonymous form, unless otherwise indicated by the data subject in the exercise of their rights.
7. RIGHTS OF THE DATA SUBJECT
In your capacity as a data subject, you have the rights under Art. 15 GDPR, namely the right to:
-obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and their communication in an intelligible form;
-obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identification details of the Data Controller, the processor and the representative designated pursuant to Art. 5, paragraph 2; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative within the State, processors or persons in charge;
-obtain: a) the updating, rectification or, where interested, integration of the data; b) the erasure, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, including their contents, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared to the protected right;
-object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purposes of sending advertising material or direct sales or for carrying out market research or commercial communication;
-withdraw consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal and to lodge a complaint with a supervisory authority.
In particular, the data subject may at any time request from the Data Controller access to personal data and rectification or erasure thereof, or restriction of processing concerning them, or object to their processing, as well as the right to data portability.
These rights may be exercised by writing to Made in Evolve S.r.l. in one of the following ways:
• by post (ordinary or registered mail with return receipt) to Via Rosalba Carriera no. 26 – 41126 S. Damaso (MO);
• by email to hello@madeinevolve.com
8. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL
If you have decided to apply to work in our Company or have become part of the Team, the provision of data becomes necessary and mandatory in order to manage the underlying interest.
In the event of refusal, it will therefore be impossible to establish employment or collaboration relationships.
9. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
There is no automated decision-making process.
Made in Evolve S.r.l., with registered office in San Damaso (MO) 41126, Via Rosalba Carriera no. 26, Tax Code and VAT no. 03497200364, acting as Data Controller (hereinafter also simply referred to as the “Controller”), informs you of the purposes and methods with which your data are processed pursuant to Articles 12–13 of EU Regulation no. 2016/679 (hereinafter “GDPR”, i.e. General Data Protection Regulation).
1. PURPOSES AND METHODS OF PROCESSING
Your personal data, freely provided and acquired by us in connection with the activity carried out, are processed lawfully and fairly for the following purposes:
a) during the pre-employment phase for the search and selection of internal positions and management of interviews;
b) management of the employment or collaboration relationship with regard to contractual, social security, insurance and tax aspects, and for all purposes required by law.
The processed data (which may be of a common, identifying, sensitive or judicial nature) are updated, relevant, complete and not excessive with respect to the purposes listed above for which they are collected and subsequently processed.
The processing of your personal data is carried out by means of the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) GDPR, namely: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval or selection, consultation, use, disclosure, comparison or interconnection, erasure or destruction, analysis and protection of data.
Your personal data are subject to both paper-based and electronic processing.
2. LEGAL BASIS OF THE PROCESSING
a) In the event of sending your CV or submitting it at our premises for the purpose of applying for potential job positions, the legal basis consists of the consent deemed implicit with the submission of a spontaneous application or for active selections and, by reference, in labour law (Art. 9, para. 2, letter b), GDPR). It is recommended not to include in your CV “special” and/or sensitive data (e.g. relating to health status, political opinions, sexual life, etc.), unless strictly necessary pursuant to law for the purposes of selection and evaluation of the CV (e.g. membership of protected categories without further details).
b) In the event of hiring or entering into a collaboration agreement, the legal basis is founded on the performance of the contract itself and on the necessity to comply with legal obligations relating to personnel management, labour law, administrative, tax, social security and social protection requirements. All of this therefore falls within the scope of labour law and related disciplines, pursuant to the exception under Art. 9, para. 2, letter b), GDPR.
3. LEGITIMATE INTERESTS PURSUED BY THE DATA CONTROLLER
The legitimate interest of the Data Controller consists in compliance with legal obligations in the fields of labour law and social security, administration and taxation.
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
In addition to internal use by the Data Controller with reference to authorized subjects, your personal data, for the sole purpose of fulfilling the obligations provided for, may be communicated to the following subjects: a) companies, collaborators, consultants or self-employed professionals; b) Public Authorities; c) Insurance companies; d) Funds or schemes, including private ones, for social security and assistance.
The dissemination of data is not envisaged.
5. INTENTION OF THE CONTROLLER TO TRANSFER PERSONAL DATA
The Data Controller will not transfer your personal data to a third country or to an international organization.
6. DATA RETENTION PERIOD
Your data are used for the activities provided for in the relevant agreement and stored for a period following the termination of the assignment, service or contract, as follows in relation to statutory limitation periods for control or the exercise, lapse or limitation of rights of the parties:
a) one year for data of candidates for internal positions who have not yet been included in the company workforce;
b) ten years for data resulting from the management of employment relationships and related obligations.
Once this retention period has elapsed, your data will be deleted or destroyed or transformed into anonymous form, unless otherwise indicated by the data subject in the exercise of their rights.
7. RIGHTS OF THE DATA SUBJECT
In your capacity as a data subject, you have the rights under Art. 15 GDPR, namely the right to:
-obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and their communication in an intelligible form;
-obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identification details of the Data Controller, the processor and the representative designated pursuant to Art. 5, paragraph 2; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative within the State, processors or persons in charge;
-obtain: a) the updating, rectification or, where interested, integration of the data; b) the erasure, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, including their contents, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared to the protected right;
-object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purposes of sending advertising material or direct sales or for carrying out market research or commercial communication;
-withdraw consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal and to lodge a complaint with a supervisory authority.
In particular, the data subject may at any time request from the Data Controller access to personal data and rectification or erasure thereof, or restriction of processing concerning them, or object to their processing, as well as the right to data portability.
These rights may be exercised by writing to Made in Evolve S.r.l. in one of the following ways:
• by post (ordinary or registered mail with return receipt) to Via Rosalba Carriera no. 26 – 41126 S. Damaso (MO);
• by email to hello@madeinevolve.com
8. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL
If you have decided to apply to work in our Company or have become part of the Team, the provision of data becomes necessary and mandatory in order to manage the underlying interest.
In the event of refusal, it will therefore be impossible to establish employment or collaboration relationships.
9. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
There is no automated decision-making process.