Privacy policy
in accordance with articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)

Dear Applicant,
Indicated below are the methods of processing the personal data provided by filling in the form present on the website – on the Company's “Work with Us” page, as defined below, either replying to an announcement or in the case of spontaneous application and sending the curriculum vitae (“CV”).

1. DATA CONTROLLER

The data controller is Burgo Group S.p.A., with registered office at Via Piave no. 1, Altavilla Vicentina (VI) (“Controller” or “Company”).

2. TYPE OF DATA PROCESSED

To examine your application, the Controller must process some personal data, such as, for example:

Please include in the CV only the data necessary to assess the profile and abstain from indicating particular categories of data, such as those relating to health condition, religious beliefs or political opinions.

3. SOURCE OF THE PERSONAL DATA

The Company could also collect the personal data for the assessment of possible recruitment by other companies specialised in searching and selecting personnel on behalf of third parties or directly from publicly accessible sources (LinkedIn).

4. PURPOSES, LEGAL BASIS AND NATURE OF THE PROVISION

 

Purposes of processing

Legal basis

Nature of provision

A

Assessment of the profile for the purposes of recruitment.

This purpose includes all the activities connected with or instrumental to the performance of searching for and selecting applicants, including searches and processing deriving from the use of social networks of a professional nature.

  • Performance of precontractual measures at the request of the data subject (art. 6.1 lett. (b) GDPR)
  • Legitimate interest for the data collected from publicly accessible sources (e.g., social networks of a professional nature) (art. 6.1 lett. (f) GDPR).

Obligatory.

Non-conferment may preclude assessment of the application.

B

Assessment of applications in the scope of targeted placement.

This purpose includes the processing of the personal data and of those belonging to particular categories aimed at assessing applications in the scope of targeted placement.

  • Performance of precontractual measures at the request of the data subject (art. 6.1 lett. (b) GDPR)
  • Compliance with legal obligations (art. 6.1 lett. (c) GDPR).
  • Fulfil the obligations and exercise the specific rights of the data controller or of the data subject in the field of employment and social security and social protection law (art. 6.1. lett. (c) and art. 9.2 lett. (b) GDPR).

Obligatory.

Non-conferment may preclude effective assessment of the application for the purposes of targeted placement.

C

Where applicable, ascertain, exercise or defend the rights of the Controller out of court and/or in court.

  • Legitimate interest (art. 6.1 lett.( f) and art. 9.2, lett. (f) GDPR).

Obligatory.

Non-conferment may preclude assessment of the application and the exercise of the controller’s rights.

D

Communication of the data to companies belonging to the Group, to assess the possibility of collaboration or recruitment at the same, or specifically requested by you.

  • Performance of precontractual measures at the request of the data subject (art. 6.1 lett. (b) GDPR)

Optional.

Non-conferment may preclude assessment of the application at other group companies.

5. CONSERVATION OF THE PERSONAL DATA

Your personal data will be conserved for a maximum period of 24 months starting from the date of receiving the CV, or from that of the last update of the same communicated to us by you, subject to your option to request their cancellation at any time.

In the case of processing of the personal data for the exercise of a right in court, the personal data will be conserved for the entire duration of the dispute and until expiry of the terms for lodging an appeal.

6. RECIPIENTS OF THE PERSONAL DATA

The personal data may be communicated to the following parties:

In addition, the employees, designated as subjects that act under the authority of the Data Controller under art. 29 of the GDPR or as System Administrators may become aware of your personal data.

7. TRANSFERS TO THIRD COUNTRIES

The Controller does not intend to transfer the personal data to third countries. All the processing is performed in the European Union.

8. AUTOMATED DECISION-MAKING PROCESSES

The Controller does not intend to use automated decision-making processes.

9. RIGHTS OF THE DATA SUBJECT

In your capacity as data subject, you have the right to revoke the consent given at any time and to obtain from the Company access to the personal data. You may also ask the Company to correct or delete them. In addition, you have the right to obtain the limitation of the processing of the personal data that regard you, as well as the right to the portability of these data.

In addition to the above, you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data performed under the terms of art. 6, paragraph 1, letters e) or f), including profiling based on these provisions, as provided for in art. 21 of the GDPR.

Lastly, you have the right to complain to a supervisory authority or take appropriate legal proceedings, if you believe that the processing that regards you breaches the GDPR.

To exercise each of your rights, you may contact the Controller addressing a communication to the registered office of Burgo Group S.p.A., at Via Piave no. 1, Altavilla Vicentina (VI), or sending an email to the address privacy@burgo.com.