Data Protection Notice pursuant to Art. 13 GDPR for the collection of CVs
The Company Giorgio Armani S.p.A. ("Company") informs you that the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, namely the General Data Protection Regulation (hereinafter the "GDPR"), provides for natural persons' data protection. Under the referred Regulation the processing of Your personal data will be carried out in accordance with principles of lawfulness, fairness, transparency and of protection of Your confidentiality and Your rights. This document constitutes the Data Protection Notice to be provided according to Art. 13 GDPR to those who apply on our website or send their CV via email, website or any other channel.
Source of personal data
The personal data are provided by you, when you send us your CV or when you register and apply through our online systems, or, where applicable, can be collected through third parties, such as recruiting companies, previous employers or other references.
Your personal data is collected and processed for the purposes of evaluation of CV and recruitment process.
We collect personal data such as your name, surname, contact information (address, phone number, mobile number), information on your previous work experience and education. We may also process special categories of personal data, such as data related to your health, applicability of laws on protected categories, judicial data only when required by the applicable collective agreements. As part of the recruitment process we may verify the information you provided (e.g. your education and professional experience, references, etc). If you provide us with information related to third parties (e.g. reference persons, previous employers, family members) you will need to make sure to comply with the applicable laws, so, for example, you will need to inform the third parties of the purpose for which you share their information with us.
Legal basis for the processing
The Company bases the collection, processing and use of your personal data on the following legal bases:
- legitimate interest of the Company, in verifying the information provided.
- performance of pre-contractual measures on the candidate's request (e.g. management of his/her application to our recruitment process)
- compliance with legal requirement, in particular with regards to labour laws.
Methods of processing
Data processing is carried out by both electronic and manual means according to logics and procedures which are strictly related and functional to the purposes of processing specified above.
Processing activity is carried out by means such as collection, registration, organization, storage, consultation, processing, modification, selection, mining, comparison, use, interconnection, blocking, communication, cancellation and erasure of data.
Your personal data will be kept for the period of time necessary to carry out the recruitment process and, if successful, for the entire duration of the employment relationship. In any case, your personal data will be kept in our databases for a maximum period of 12 months from your application on our systems or form the last update of your application or CV. If, at any time, you feel the purpose for the processing on our part has finished, because no longer necessary or useful, please inform us of this circumstance in order to provide for the immediate erasure of your data.
Nature of the provision of data
The provision of your personal data is compulsory to participate in the recruitment process and to comply with legal obligations. Failure to provide your personal data will make it impossible to take part in the recruitment process.
The processing of personal data is carried out by the controller's employees, duly authorized to carry out the processing (e.g. employees in the HR department and in the departments interested by the recruitment process), to the extent necessary. Your personal data are also communicated to our service providers, e.g. providers of technical and organizational services that are functional to the aforementioned purposes - for example for the management of our website - in their capacity as data processors. We communicate only the data necessary to perform their services, and they act according to our specific instructions.
Your personal data may be shared with third parties when the sharing is required by applicable laws and regulations with respect to legitimate third parties, such as authorities and public bodies for their respective institutional purposes; professionals, also in associated form; credit institutions or in case of extraordinary operations (e.g. mergers, acquisitions, transfer of business, etc.) with respect to the acquiring or acquired companies. Your personal data will not be disseminated.
If data recipients or data processors are located outside the EU, in countries that do not provide an adequate level of protection of personal data, the Company will take all necessary measures to ensure that data transfer outside the EU is adequately protected (e.g. through the implementation of EU Standard Contractual Clauses).
Rights of the data subject
You can contact the Company at any time, using the details below, to request an updated list of data processors (e.g. our service providers), and of the subjects to whom your data are communicated. You can contact us to exercise your rights, as indicated by art. 15 and ff. of the GDPR: obtain confirmation as to whether or not personal data concerning you are being processed, to verify the content, source, accuracy, request that personal data be completed or updated, or to obtain the rectification, the erasure, anonymization, request data portability, restriction of the processing, object to processing for legitimate reasons. You have also the right to lodge a complaint with the supervisory authority and you can contact the supervisory authority when the exercise of your rights is subject to limitation. The Data Controller and the Data Protection Officer The controller is Giorgio Armani S.p.A., with legal office in Milan, Via Borgonuovo 11, 20122 (MI) email: firstname.lastname@example.org. The Data Protection Officer, Head of the Data Protection Department, Roedl&Partner, Largo Donegani 2, Milan, can be reached at the following email address: email@example.com.