Please select country and language.
Harita
EN
MENU

Terms of Use

Policy on personal data handling for the candidates (“Policy”), made according to Arts. 13 and 14 of the (EU) Regulation 2016/679 (“GDPR”)

1. Treatment Owner and Data Protection Officer

The treatment holder, which you will be able to contact to enforce your rights (according to art. 7 and par. III of GDPR 679:2016) is KASTAMONU ITALIA SPA with operational office at Via Romea, 27 – CODIGORO (FE), in the person of their own interim legal representative 

To exercise your rights, listed in the next article 7, as well as for any other inquiry relating to the rights and/or this Policy, you may contact the Owner at the following addresses:

  • telephone: 0533-666000
  • email:  : hr-italia@kastamonu.it or via pec kastamonuitaliaspa@pec.it.

2. Personal data processed

For the purposes shown in the next article 3, the Owner will process your personal data, directly provided by you, also through dedicated areas on the website of the Owner, or collected by third parties (e.g. temporary employment agencies, social networks or other recruiting portals) like, for example:

  • personal details and contact data;
  • data relating to your school certificate and professional qualification;
  • data relating to your civil status and familiar situation;
  • financial data (e.g. your income);
  • special type data, according to art. 9 GDPR, if entered by you in your curriculum vitae (for example, if you belong to protected categories). 

3. Purpose and legal base of the treatment

Personal data will be handled by the Owner while performing the personnel selection process, including, but not limited to, the receipt and registration of your curriculum vitae within the Owner's databases, the evaluation of the information contained within your curriculum vitae in order to determine your potential suitability for the establishment of a work relationship with the Owner, the organization of interviews, and the connected requirements.

The legal basis for the treatment of your data is the performance of pre-contractual activities at the request of the interested party, pursuant to art. 6, paragraph 1, letter (b), of the GDPR; therefore, your consent is not necessary to authorize the treatment.

Your special type personal data according to art. 9 GDPR, if you entered them spontaneously in your curriculum vitae, shall only be treated by the Owner where it is strictly necessary for the personnel selection process and, in any case, after your prior explicit consent pursuant to art. 9, paragraph 2, letter a) of the GDPR.

4. Nature of the conferment, data retention period and processing methods

For the purpose of the foregoing article 3, conferring your personal data of a common nature is compulsory; your rejection to confer such data will result in the inability to evaluate your application by the Owner during the selection process.

Failure to confer your special data or failure to give the express consent for its treatment will prevent the Owner from considering and evaluating these data in relation to the personnel selection process.

For the purposes of the previous paragraph 3, your personal data will be retained for 6 months from the end of the selection process, except in the case of establishing an employment/collaboration relationship, with subsequent storage for the time related to it.

The treatment is carried out in compliance with what required by GDPR, based on the principles of correctness, lawfulness and transparency, and for the protection of your rights described therein. Personal data is processed by means of information technology, telematic tools and/or paper, as well as by using security measures to ensure the personal data confidentiality and prevent undue access by unauthorized persons.

The Holder does not make an automated decision-making process on your personal data, including profiling referred to in article 22, paragraphs 1 and 4 of the GDPR.

5. Data communication

In pursuit of the purposes described in the previous article 3, the personal data processed will be known by employees, assimilated staff and the Owner's collaborators, and those will operate as individuals authorized to handle personal data.

In addition, your personal data may be processed by third parties belonging, as an example, to the following categories:

  • service providers for the management of information systems;
  • legal services and consultation providers;
  • personnel selection agencies;
  • other service providers;
  • companies that are part of the Group to which the Owner belongs, with the purpose to perform the instrumental or supporting activities connected to those of the Owner.

Subjects belonging to the above categories operate, in some cases, as treatment managers specifically appointed by the Owner in accordance with the article 28 GDPR, in other cases in total autonomy as distinct owners of the treatment, being understood that, in this last case, the communication of your personal data to such autonomous owners is intended solely for the pursuance of the purposes of the preceding article 3.

The complete and updated list of subjects to whom your personal data may be communicated may be requested contacting the Owner at the address indicated in the article 1 of the Policy.

Your personal data will not be disseminated.

6. Transferring personal data outside the European Union

Your personal data may be transferred abroad, at our parent company Kastamonu Entegre headquarters, located in Turkey, for the purposes described below:

  • Personnel selection;
  • Management of in-house accesses for security purposes;
  • Corporate communications.

The same purposes are expressed in the “Data transfer agreement”, which ensures the compliance of the data transfer with the prescriptions of the arts. 44 and following of the UE REG 2016/679.

7. Rights of the data subjects

In relation to the treatments described in this Policy, as the concerned subject, you may, at the conditions provided by GDPR, exercise the rights granted in the arts.15 – 21 of the GDPR, and in particular:

  • right of access: the right to obtain confirmation whether or not personal data processing regarding you is in progress, and in this case to obtain access to your personal data – including a copy of them – and the communication, among other things, of the information described in the art. 15 of GDPR;
  • right of rectification: right to obtain, without undue delay, the rectification of inaccurate personal data regarding yourself and/or the integration of incomplete personal data pursuant to art. 16 of GDPR;
  • right of erasure (right to be forgotten): right to obtain, without undue delay, the deletion of personal data regarding yourself, in the cases indicated by the art. 17 of GDPR; the right of erasure does not apply to the extent that the treatment is required for fulfilling a legal obligation or for the execution of a task carried out in the public interest or for the evaluation, exercise or defense of a right in judicial proceedings;
  • right of treatment restriction: right to obtain the restriction of treatment, in the cases indicated in the art. 18 of GDPR;
  • right to data portability: right to receive, in a structured and common use format, legible by an automatic device, your personal data provided to the Owner and the right to send it to another owner without any hindrances, if the processing is made according to the consent and is carried out by automated means, according to the art. 20 of GDPR. Furthermore, the right to obtain that your personal data is transmitted directly by the Owner to another owner if this is technically possible;
  • right to object: right to object to the processing of your personal data, unless legitimate reasons exist for the Owner to continue the processing, pursuant to the art. 21 of the GDPR;
  • right to withdraw the consent at any time without prejudice to the lawfulness of the treatment based on consent given prior to revocation;
  • right to lodge a complaint to the Data Protection Officer, Piazza Venezia n. 11, 00187, Roma (RM).