Pursuant to art. 13 of EU Regulation no. 2016/679 (hereinafter, "GDPR"), of the national reference legislation, the Joint Data Controllers inform you that the personal data provided through the application will be processed in the manner and for the following purposes.
RINA S.p.A., with registered office in Genoa (GE), via Corsica 12, Italy, Tax Code and VAT number 03794120109, as well as the company / companies of RINA Group (hereinafter the "Joint Controllers", pursuant to art. 26 GDPR) whose open positions are published on the web site or in any case by which you can be hired, can be reached through the contacts indicated on the website www.rina.org. The Data Protection Officer may be contacted to the e-mail address rina.dpo@rina.org.
The Joint Controllers will process your personal data (hereinafter also "data") identifying, contact, relating to the current job position etc., additional data and information contained in the CV or other documents uploaded in the appropriate sections, as well as the data collected by completing the Job Application, or that will be requested during the interviews, including: information on your current job position and salary received, salary expected to perceive, any references you wish to communicate, the existence of any conflicts of interest you may have in relation to the job position for which you are applying, as well as information regarding the position of public official you may have held in the last three years. The Joint Controllers will also process your personal data collected through the submission to the data subject of personal (non-psychological) and cognitive logic tests.
The data subject is requested not to include particular data in the relative CVs, such as data suitable for revealing the state of health, racial and ethnic origin, religious beliefs, political opinions, sex life, and judicial data. In the event of entering particular data, such data will be immediately eliminated, except in the case of data instrumental to the evaluation of the candidacy (for example belonging to protected categories pursuant to Law No. 68/99 regarding the placement of the disabled, in relation to which it is specified not to indicate any pathology but only to be in possession of these requirements).
It should be noted that your personal data may be processed as part of the management of whistleblowing reports. Rina Group companies have adopted a platform for receiving and managing whistleblowing reports which can be found at the following link https://www.rina.org/it/about-us/whistleblowing-reports, where it will also be possible to view of the updated privacy notice, as well as the related procedure.
The Joint Data Controllers will process your personal data communicated for the only purpose of personnel selection and recruitment. The forwarding of the application and any information related to it is entirely voluntary and optional, but failure to provide the requested data will preclude the possibility of evaluating your profile for the purpose of a possible recruitment. It should be noted that it will not be possible to forward your application, send your CV and complete the Job Application in the absence of confirmation that you have read this privacy notice. The legal basis of the aforementioned processing can be found in the art. 6, par. 1, lit. b) GDPR, as the processing of personal data is necessary for the execution of a contract of which the data subject is a part or for the execution of pre-contractual measures adopted at the request of the same. The legal basis can also be found in the art. 6, par. 1, lit. f) GDPR, given that the collection of the above information is necessary for the pursuit of the legitimate interest of the Joint Controllers with reference to their organizational and production needs, also with reference to compliance with the law (in particular, see art. 53, co 16-ter, of Legislative Decree no. 165/2001). It is in the interest of the Joint Controllers that their employees operate with impartiality, independence and in the absence of conflicts of interest. If the data subject provides particular data strictly functional to the evaluation of the candidacy, the legal basis can be found in the art. 9, par. 2, lit. b) GDPR, given that the processing is necessary to fulfill the obligations and exercise the specific rights of the Joint Data Controllers or of the Data Subject in the field of labor law and social security and social protection.
Your personal data will be processed by the Joint Controllers pursuant to art. 5 of the GDPR and in compliance with the principles of lawfulness, correctness and transparency.
The processing of your personal data is carried out through the following operations: collection, registration, organization, structuring, profiling, conservation, consultation, adaptation or modification, use, communication, extraction, comparison, interconnection, limitation, deletion and destruction of data. Your personal data will be processed in paper and electronic way subjected to both paper and electronic processing and with tools which, through the activity of data collection and processing of the same carried out through an algorithm and artificial intelligence, contribute to pursuing personnel selection and recruitment purposes without however generating processes automated decision making.
Your personal data will be kept for a period of time not exceeding that strictly necessary to evaluate your candidacy for the purpose of possible inclusion in the workforce and, in any case, for a period of time not exceeding 24 months from collection. after which they will be eliminated both from the computer systems and from any paper archives, unless you expressly wish not to delete them before the expiry of the 24 months, which will make the terms start running again.
In any case, the adoption of every technical and organizational measure adequate to guarantee the security of personal data pursuant to the GDPR is ensured.
Your personal data will be communicated to the subjects appointed as data processors pursuant to art. 28 of the GDPR and to those designated authorized subjects pursuant to art. 29 of the GDPR who need to process them for the performance of the duties and functions entrusted to them. You have the option of requesting the list of data processors by contacting the DPO at rina.dpo@rina.org.
In particular, your personal data may be communicated for the purposes referred to in point 3 to the following recipients:
- to the external entities that manages the online platform for the personnel search and selection process;
- to subjects who may be contacted for the purpose of verifying the truthfulness of the information you provide (for example, schools and universities, previous employers, etc.)
- to any third party involved in personnel selection and establishment of the contractual relationship.
Your personal data may also be communicated to public subjects, for the fulfillment of legal obligations or to satisfy requests from the judicial or public security authorities.
Personal data is stored on servers located within the European Union. It is understood that your personal data may be transferred to companies both inside and outside the Group, also based in non-EU countries. In these cases, the transfer of non-EU data will take place in compliance with the applicable legal provisions, also through the provision of Standard Contractual Clauses issued by the European Commission and the adoption of Binding Corporate Rules for intra-group transfers.
The provision of data and related processing for the purposes indicated in art. 2.a is necessary in order to guarantee the Controller’s services you have requested, and for implementing the contract and any pre-contractual obligations. The legal basis of the afore mentioned processing can be found in art. 6, par. 1, b) GDPR. Any refusal will make it impossible for the Joint Controllers to provide the services covered by the contract.
Providing data for the purposes indicated in art. 2.b, on the other hand, is not mandatory. You may, therefore, decide not to provide any data or subsequently refuse processing of data already provided. The legal basis of the afore mentioned treatment can be found in art. 6, par. 1, a) GDPR, the only consequence of such refusal will be that receiving newsletters, commercial communications, and advertising materials related to the services offered by the Joint Controllers will not be possible. However, you will continue to have the right to the services indicated in art. 2.a.
As Data Subject, you may exercise the following rights at any time:
a) Right of access to personal data (art. 15 GDPR): you may obtain confirmation of the existence or otherwise of processing of your personal data, as well as obtain a copy of the aforementioned data;
b) Right to rectification (art. 16 GDPR): you may obtain, without unjustified delay, the rectification of your inaccurate personal data and the integration of incomplete personal data or deletion;
c) Right to erasure (art. 17 GDPR): you may obtain from the Joint Controllers the deletion, without unjustified delay, of the your personal data, in the cases provided for by the GDPR;
d) Right to restriction of processing (art. 18 GDPR): you may obtain from the Joint Controllers the limitation of processing, in the cases provided for by the GDPR;
e) Right to data portability (art. 20 GDPR): you may receive, in structured format, in common use and readable by an automatic device, your personal data, provided by the Joint Controllers and you may obtain that the same are transmitted to another controller without impediments, in the cases provided for by the GDPR;
f) Right to object (art. 21 GDPR): object at any time to the processing of your personal data, for reasons related to your particular situation;
g) Right to lodge a complaint with a supervisory authority (art. 77 GDPR): make a claim with the appropriate Authorities pursuant to Art. 77 GDPR.
The Joint Controllers have appointed a Data Protection Officer, who can be contacted for all questions relating to the processing of your personal data and the exercise of the related rights.
Therefore, you may contact the Data Protection Officer at any time by sending an e-mail to rina.dpo@rina.org.