PRIVACY NOTICE FOR CANDIDATES
Pursuant to Article 13 of Regulation (EU) 2016/679
Dear Candidate,
in your quality as data subject, e.g., the natural person to whom personal data refer to provided by you and better specified below, (hereinafter the “Personal Data”), the company Industries S.p.A., with registered office in Milan (MI), via Stendhal 47, 20144, in its quality as data controller (hereinafter the “Company” or the “Data Controller”), wishes to inform you of the following, pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter the “GDPR”).
1. WHICH PERSONAL DATA CONCERNING YOU MAY BE COLLECTED
The Personal Data collected relates to the general information contained in your CV (hereinafter also referred to as “Users” or, in the singular, as “User”) that are collected surfing through the Site https://jobs.moncler.com/ (hereinafter also referred to as the “Site”).
In addition, the Company may also collect information resulting from the checking of your references (where carried out) such as membership of any institutions, academic records, employment history and any other information relevant in determining your suitability as a candidate, including by contacting the individuals you may have indicated as references and your previous employers. Information and photographs from your profile on professional social networks (if applicable), in databases, web records or publicly accessible multimedia archives, notes taken during interviews and comments from other people such as your referees, which might arise during the selection process, may also be collected. Personal Data may be updated based on publicly available information and/or information gathered from third parties, and/or directly from you.
The Personal Data collected does not concern racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or information relating to health status, sex life or sexual orientation (hereinafter referred to as “Special categories of personal data”), unless they are characteristics that affect the manner in which the work is carried out, or which constitute an essential and determining requirement for the purposes of carrying out the same. In this case, the Company shall process the Special categories of personal data within the limits of what is provided for by applicable laws and the measures issued by the Italian Data Protection Authority (art. 9, paragraph 2, letter b) and f) GDPR).
Personal Data and Special categories of personal data are hereinafter jointly referred to as “Data”.
2. FOR WHAT PURPOSES YOUR PERSONAL DATA CAN BE USED
Through the Site, the Company collects certain personal data relating to Users, either voluntarily provided by them or collected in the normal operation of the same, which are processed for the purposes described below.
Purpose of processing: To provide access to the reserved area of the Site with the relative operational management of the same and purposes strictly related to these. In order to create a profile that allows access to the reserved area made available on the Site, the Company collects certain personal data necessary to identify the User and allow the operational management of the Site itself.
Categories of data processed: Personal and contact data (name, surname, telephone number, mobile phone number, e-mail address, username and password); Data provided voluntarily by you (information you voluntarily provide on the Site); Navigation data (information on how you use the Site, open or forward our communications, including information collected through cookies, for more info on cookies please refer to Paragraph 3 below).
Legal Basis and provision: Performance of pre-contractual measures to which the User is a party (Art. 6 (1) (b) GDPR). The provision of data is necessary (except for the data provided voluntarily by you) because if it is not provided, the Company will not be able to provide registration on the Site and access to the reserved area.
Purpose of processing: Managing and responding to your requests for information. The Company processes your personal data in order to manage and respond to your requests for contact and/or information or for the possible establishment and execution of pre-contractual or contractual relations for the possible provision of the services requested.
Categories of data processed: Personal and contact data (name, surname, telephone number, mobile phone number, e-mail address); Data provided voluntarily by you (information you voluntarily provide on the Site in the form).
Legal Basis and provision: Performance of a contract to which the User is a party (Art. 6 (1) (b) GDPR);The provision of data is necessary (except for the data provided voluntarily by you) because without it the Company will not be able to handle your request and/or respond to you.
Purpose of processing: Verifying your Data. The Company will process your Data in order to verify if what you have communicated is is true.
Categories of data processed: For this purpose, the Company may also process public information contained in professional social network profiles, databases, web records or publicly accessible multimedia archives.Such processing will be limited to information related to professional aptitude for the job and, in any case, limited to what is strictly necessary for the work to be carried out by the candidates.
Legal Basis and provision: The legitimate interest of the Company pursuant to Article 6, first paragraph, letter f) of the GDPR to ensure the proper conduct of the process of research and selection of personnel.
Purpose of processing: Defending its rights. The Company may process personal data in order to defend its rights in the course of judicial, administrative or extrajudicial proceedings and in the context of disputes arising in connection with the services.
Categories of data processed: Personal data collected for purposes 1 to 3 will be processed as necessary.
Legal Basis and provision: The Legitimate interest in protecting its rights (art. 6 (1) (f) GDPR). A new and specific provision is not required as the Company will pursue this further purpose, where necessary, by processing the data collected for the above purposes.
Purpose of processing: Fulfilment of legal obligations. The Company may process personal data in order to fulfil its obligations under laws, regulations or Community legislation, or under provisions/requirements of authorities empowered to do so by law and/or supervisory and control bodies.
Categories of data processed: Personal data collected for purposes 1 to 3 will be processed as necessary.
Legal Basis and provision: Fulfilment of a legal obligation (art. 6 (1) (c) GDPR).The provision of personal data for this purpose is necessary as otherwise the Company will be unable to fulfil specific legal obligations.
3. COOKIES USED BY THE SITE
This Site uses technical cookies exclusively for the purpose of “carrying out the transmission of a communication on an electronic communications network, or insofar as this is strictly necessary to the provider of an information society service that has been explicitly requested by the contracting party or user to provide the said service.” (see Sec. 122, paragraph 1, of Legislative Decree 196/2003 the “Italian Privacy Code”).
The users’ previous consent is not required for the installation of any technical cookies.
Following for any technical cookies used by the Site, it is indicated name, purpose of use and duration:
Cookie name: Required Cookie "JSESSIONID".
Purpose: This cookie ensure identification during the session and it's required to use the website and can't be turned off.
Duration: “JSESSIONID” is placed on the visitor's device during the session and it requires website activation to function.
Any browsers allow to amend cookies’ settings, usually they can be found in “options” or “preferences” menu pof the user’s browser. You can find below some links which can be useful:
- Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies.
- Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=it.
- Safari: https://support.apple.com/it-it/guide/safari/sfri11471/mac.
It is possible to use the “Help” option in the browser for further information.
In case the use of technical cookies is blocked, the service offered to the users through the Site will be limited, influencing the experience of use of the same Site.
4. HOW WE KEEP PERSONAL DATA SECURE
The Company takes appropriate security measures to ensure the protection, security, integrity and accessibility of Users’ Data. The appropriate security measures are designed to prevent unauthorised access, disclosure, modification or destruction of personal data.
All personal data is held on the Company’s secure computer systems (or appropriately stored hard copies) or those of our suppliers, and it may be accessible and usable in accordance with our standards and security policies (or equivalent standards for our suppliers).
5. HOW LONG WE KEEP PERSONAL DATA
The Company retains the User’s Data only for as long as it is necessary to achieve the purposes for which it was collected or for any other related legitimate purpose.
Data that is no longer needed, or for which there is no longer a legal basis for its retention, will be irreversibly anonymized (and in this way preserved) or safely destroyed.
If the data processing serves several purposes, the data will be deleted or anonymised as soon as the retention period for the last purpose has expired.
In particular, under purposes nn. 1, 2, 3, the Data processed will only be stored for the time necessary for the purposes of personnel selection (for a specific position or for future positions which may be of potential interest). In any case, your Data will be stored on the Company’s Site for no longer than 12 months from when they have been collected by the Company or every time you acceded to the reserved area called “Career Opportunities” as we considered this action – which is not necessary to see the job posting – as your will and interest of update and renew your submission.
After such retention period, the Data will be erased or anonymized.
With particular reference to requests by the authorities or the execution of legal obligations under purposes 4 and 5, or in case of judicial protection of the Company’s rights, the Data will be kept for the time necessary to process the request or to pursue the protection of rights.
6. HOW WE KEEP YOUR PERSONAL DATA SAFE AND WHERE
Your Data will be processed in compliance with the principles of accuracy, lawfulness and transparency and may also be carried out using automated means that can memorise, manage and transmit such Data. Data will be processed using suitable tools that guarantee their security and confidentiality using procedures that prevent the risk of loss, unauthorised access, unlawful use and dissemination.
The Company informs you that your Data will be processed, for the purposes referred to in paragraph 2, exclusively within countries belonging to the European Union (EU) or the European Economic Area (EEA).
These external parties will process your Data either as independent data controllers or as data processors, duly appointed by the Company in accordance with data protection legislation (depending on their role in relation to the processing).
You may write to the Data Controller at any time, using the contact details set out below, asking which parties your Personal Data is being disclosed to, and to receive a copy of the safeguards adopted for the transfer.
7. WHO WE CAN SHARE YOUR PERSONAL DATA WITH
Your Data may be accessed by duly-authorised employees of the Company, as well as by external suppliers, appointed, if necessary, as data processors, who support the Company in providing services.
If you wish to view the list of data processors and of other entities we share Data with, please contact the Company as described in the paragraph “Contacts”.
8. YOUR PERSONAL DATA PROTECTION RIGHTS AND YOUR RIGHT TO LODGE A COMPLAINT TO THE SUPERVISORY AUTHORITY
You are entitled to obtain from the Company, subject to the existence of the legal basis underlying your request:
- The access to your Data, as provided for in Article 15 of the GDPR;
- The rectification or integration of your Data in the Company’s possession deemed to be inaccurate, as provided for by Article 16 of the GDPR;
- The erasure of your Data for which the Company has no longer any legal basis for processing, as provided for in Article 17 of the GDPR;
- The limitation of the way in which the Company processes your Data, if one of the cases provided for in Article 18 of the GDPR applies;
- The copy of the Data you have provided to the Company, in a structured, commonly-used and machine-readable format and the transmission of such Data to another data controller (so-called portability), as provided for in Article 20 of the GDPR.
Right of objection: in addition to the rights listed above, you also have the right to object at any time on reasons relating to your particular situation, to the processing of Data relating to you by the Company in pursuit of its legitimate interests. Your request to object should be addressed to the following address: privacy@moncler.com or, in paper format, by registered letter with acknowledgement of receipt addressed to the Company’s registered office.
In the event that you exercise any of the aforementioned rights, it will be the Company’s responsibility to verify that you are entitled to exercise them and you will be given a response usually within one month.
If you believe that the processing of your Data is in violation of the provisions of the applicable legislation on the protection of personal data, you have the right to lodge a complaint to the Italian Data Protection Authority, using the references available on the website www.garanteprivacy.it, or to take legal action.
9. CONTACTS
The contact details of the Company, in its capacity as Data Controller, are as follows:
Industries S.p.A., with registered office in Milan (MI), via Stendhal 47, 20144, Milan, Email hr@moncler.com,
Telephone: +39 02 422041 and +39 049 9323111 .
The Company employs a Data Protection Officer (also known as “DPO”) designated pursuant to Article 37 GDPR, who can be contacted at the following email address: dpo@moncler.com