Pursuant to Article 13 of the European Regulation 2016/679 (hereinafter GDPR) concerning the protection of personal data, Barzanò & Zanardo S.p.A., in its capacity as Data Controller (hereinafter the ‘Controller‘), informs you that the data you provide will be processed in compliance with the aforementioned regulation.
The processing of personal data will be carried out lawfully, fairly, and transparently with respect to the data subject.
By processing of personal data, we mean any operation or set of operations, carried out with or without the aid of electronic tools, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, and destruction of data, even if not recorded in a database.
Data Controller
Barzanò & Zanardo S.p.A. (Tax Code: 05051840584 / VAT: 01347741009), represented by its legal representative pro tempore, with registered office at Via Piemonte 26, 00187 Rome, Italy.
Contact details:
– Email: privacy@barzano-zanardo.com
– PEC: b-zmilano@pec.barzano-zanardo.com
– Tel: +39 06 421771
Data Protection Officer (DPO)
Attorney Clementina Baroni (VAT 02001880356 – Tax Code BRNCMN73T50L826B), appointed as DPO, with registered office at Via Domenico Francesco Cecati, 1/1, 42123 Reggio Emilia (RE), Italy.
Contact details:
– Email: dpo@studiolegaleavvbaroni.it
– PEC: clementina.baroni@ordineavvocatireggioemilia.it
– Tel: +39 0522 506307
Categories of Data Processed
The following categories of data may be processed:
– Identifying personal data (name, surname, place and date of birth, tax code, phone number, email address, educational qualifications, any photo included in the CV, any driving license information), and any other data voluntarily included in your curriculum vitae and related attachments.
– Additional data, including those referred to in Article 9 GDPR (so-called ‘special categories of data,’ e.g., disability, health conditions), voluntarily included in the application form or in your curriculum vitae.
Purpose and Legal Basis of Processing
Your data will be processed for the purpose of managing activities related to or instrumental to internal personnel selection processes, as a necessary step prior to a possible employment contract or collaboration. Your data will also be processed to inform you of the outcome of the selection procedure, by contacting you using the details provided in the form or CV.
The processing is necessary for pre-contractual purposes (Art. 6(1)(b) GDPR), in conjunction with Art. 88(1) GDPR and the General Authorization No. 1/2016 of the Italian Data Protection Authority (authorization for processing sensitive data in employment relationships – December 15, 2016).
Data Recipients
The data may be communicated to individuals authorized by the Controller under Article 29 GDPR, processors designated under Article 28 GDPR, and IT/system administration consultants.
An updated list of processors and authorized persons is kept at the Controller’s registered office and can be accessed upon request.
Data Retention
Personal data collected in relation to CV submission will be stored for the time necessary to fulfill the purposes described and, in any case, for no longer than 24 months. At the end of this period, the data will be deleted.
Failure to Provide Data
Providing data is necessary for the purposes described above. Failure to do so will prevent continuation of the selection process.
Processing Methods
Data will be processed using electronic, IT, or paper-based tools in compliance with confidentiality and security rules established by the applicable regulations. They may also be processed, on behalf of the Controller, by professionals and/or companies providing technical, development, management, and administrative-accounting services.
Data Transfer Abroad
The data collected for the above purposes will not be transferred to non-EU countries. However, the Controller reserves the right to use cloud services; in such cases, providers will be chosen from those offering adequate guarantees as required by Art. 46 GDPR.
Automated Decision-Making
The data collected will not be subject to automated decision-making processes, including profiling.
Data Subject Rights
Under GDPR, you have the right to:
– Access your personal data (Art. 15);
– Request rectification (Art. 16);
– Request erasure when data are no longer necessary (Art. 17);
– Request restriction of processing (Art. 18);
– Request data portability (Art. 20);
– Object to processing for reasons related to your particular situation (Art. 21). In such cases, processing will cease unless legitimate overriding grounds are demonstrated (e.g., defense of rights in court);
– Not be subject to automated decision-making, including profiling (Art. 22).
Finally, you have the right to lodge a complaint with the Data Protection Authority (Art. 77 GDPR).
How to Exercise Your Rights
You may exercise your rights at any time, pursuant to Art. 12 GDPR, by contacting the company:
By registered letter to: Barzanò & Zanardo S.p.A., Via Piemonte 26, 00187 Rome, Italy.
Email: privacy@barzano-zanardo.com
PEC: b-zmilano@pec.barzano-zanardo.com
Or by contacting the DPO:
By registered letter to: Avv. Clementina Baroni, Via Domenico Francesco Cecati, 1/1, 42123 Reggio Emilia (RE), Italy.
Email: dpo@studiolegaleavvbaroni.it
PEC: clementina.baroni@ordineavvocatireggioemilia.it
