We inform you, pursuant to art. 13 of Legislative Decree 196/03 "Personal Data Protection Code", that the personal data you provide or otherwise acquired as part of the professional services requested or offered to Paolo Medeghini, will be processed in accordance with the principles of correctness, lawfulness and transparency. Paolo Medeghini, as *Processor*, also guarantees that the processing will take place with the utmost protection of your confidentiality and rights.
Processing of personal data means the collection, recording, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion and destruction of data even if not registered in databases.
*PURPOSE AND METHODS OF PROCESSING*
In general, the processing of this data is necessary in order to:
pursue corporate objectives and exercise control over them
ensure the efficiency of Paolo Medeghini's processes
manage and oversee the maintenance of the Information System
Specifically:
*PERSONAL DATA OF COMMON AND SENSITIVE NATURE OF EMPLOYEE AND COLLABORATOR PERSONNEL, *in accordance with the current Guarantor's Authorization on the management of labor relations, are processed for:
to establish, manage and extinguish the employment relationship,
to fulfill specific obligations or to perform specific tasks provided for by EU legislation, laws, regulations or collective agreements, including company agreements, in particular for the purposes of establishing, managing and extinguishing the employment relationship, as well as the recognition of benefits, the application of regulations on social security and assistance, including supplementary assistance, or on hygiene and safety at work or population, as well as on tax, trade union, health protection, public order and safety;
even outside the cases referred to in the preceding point, in accordance with the law and for specific and legitimate purposes, for the purpose of keeping accounts or the payment of salaries, allowances, bonuses, other emoluments, gifts or ancillary benefits;
to pursue purposes of safeguarding the life or physical safety of the person concerned or a third party;
to assert or defend a right even by a third party in judicial proceedings, as well as in administrative proceedings or in arbitration and conciliation procedures in the cases provided for by laws, Community legislation, regulations or collective agreements, provided that the data are processed exclusively for such purposes and for the period strictly necessary for their pursuit. Where the data are capable of revealing the state of health and sex life, the right to be asserted or defended must be of equal rank to that of the person concerned, i.e. consisting of a right of personality or another fundamental and inviolable right or freedom;
to exercise the right of access to administrative documents, in accordance with the provisions of the relevant laws and regulations;
to ensure equal opportunities in employment;
to pursue specific and legitimate purposes identified by the statutes of associations, organizations, federations or confederations representing categories of employers or by collective agreements, regarding union assistance to employers.
*Common or sensitive information related to job-seeking personnel* is processed to:
manage the recruitment process
* PERSONAL DATA OF COMMON NATURE and where necessary the SENSITIVE DATA OF CUSTOMER COMPANY'S EMPLOYEE PERSONNEL* are processed to:
schedule and manage the existing job order and related contractual obligations
manage marketing and commercial activities, including the sending of the newsletter, subject to the consent of the data subject
* PERSONAL DATA OF COMMON AND SEMISENSIBLE NATURE of natural persons acting on behalf of CONTRACTORS* is processed for:
scheduling and management of the outstanding order and related contractual obligations.
The data will be processed using procedures and tools suitable to guarantee their security, relevance, completeness and non-excessiveness as well as confidentiality and will also be carried out using electronic tools suitable to store, manage and transmit the data. Paolo Medeghini adopts to protect the data involved in the processing, the due security measures specifically described in the current Programmatic Document for the processing of personal data.
*DURATION OF THE PROCESSING*
The processing will have a duration not exceeding that necessary for the purposes for which the data were collected and in accordance with the terms of the law. Please note that the Curricula collected for search and selection management, if considered suitable and of interest to the company, will be kept in Paolo Medeghini's databases for a maximum of 5 years from the date of delivery. However, if the interested party considers, for any reason, that the purpose of the processing has been exhausted, he/she must give written notice to Paolo Medeghini's head office, which will proceed to the immediate deletion of the information, if it does not contravene the law.
*SHARING, COMMUNICATION and ENVIRONMENTS OF DISCLOSURE OF YOUR PERSONAL DATA*
Personal data processed by Paolo Medeghini within the scope of its activities, may be shared with:
employees and collaborators of the Company *charged with the processing* and/or also
authorized third party companies as autonomous *"controllers "*, except when they have been designated by Paolo Medeghini "*responsible*"for the processing of their specific competence
The names of individuals to whom the personal data you provide may be disclosed are listed in an updated list available as an attachment to our DPS, which can be viewed upon specific request.
In addition, Paolo Medeghini, in order to execute legal obligations, or otherwise with prior explicit consent, may share personal data with the following entities or institutions:
Public Entities (INPS - INAIL - Provincial Directorate of Labor - Financial Offices - Tax Offices, etc.);
Enterprises - Patronage - Public and private Social Security Institutions and Bodies;
public health facilities for the purpose of fulfilling obligations regarding hygiene and safety at work;
credit institutions for payment management.
*RIGHTS OF THE INTERESTED PARTY*
The processing of data, indispensable for the proper management of the services commissioned, may also be carried out with the aid of electronic or otherwise automated means and may consist of any operation and set of operations among those indicated in Art. 4, paragraph 1 letter a), of the above-mentioned Legislative Decree.
We also remind you that the provision of data is optional, however, any refusal to provide us in whole or in part, your personal data may result in the non-execution or partial execution of the services granted.
In relation to the aforementioned processing you may exercise your rights under Art. 7 of the Code on the Protection of Personal Data, below:
*Article 7 - "Right of access to personal data and other rights" -*
The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and its communication in an intelligible form.
The data subject has the right to obtain an indication of:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in the event of processing carried out with the aid of electronic instruments;
d) the identification details of the data controller, data processors and the representative designated pursuant to article 5, paragraph 2;
e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing.
The interested party has the right to obtain:
a) the updating, rectification or, when interested, the integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
The data subject has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
b) to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication.
To exercise your rights under Article 7 of the Decree, you may contact the owner, in writing or verbally with an interval of not less than 90 days.
If the request is verbal, it can only be granted if it concerns:
origin of personal data, place and method of collection
purposes and methods of processing
methods and logic of processing with electronic/informatic and telematic tools
identification details of the owner and manager
subjects and/or categories of subjects to whom the personal data may be communicated or by whom they may be known
If the request is in writing, it must be submitted by registered letter with return receipt, fax or e-mail to the holder's registered office:
Paolo Medeghini
Via dei Ridelli 98/B,
25085 Gavardo (BS)
paolo.medeghini@pec.it
It is possible to request from the holder, a "STATEMENT OF ATTESTATION" suitable for certifying that the requests made have actually been resolved and brought to the attention of those to whom the data had previously been disseminated and communicated.
As a data subject, you may also delegate a third person with a copy of the power of attorney or of the power of attorney signed in the presence of an appointee or signed and presented together with an unauthenticated photostatic copy of an identification document of the data subject. If your request will be made as a legal person, it may be submitted by the natural person entitled under the respective statutes or ordinances.
It is also possible to request information on behalf of a deceased person only if it is shown that you have a personal interest or make the interests of the deceased or for family reasons worthy of protection. The holder is required to respond to the request within 15 days from the date of submission or 30 days if the response is problematic, in any case by the 15th day you will be notified in writing of the reasons for the delay.
LIST OF STATE AID RECEIVED LAW 124:2017 AND SUCC. AMENDMENTS