Skip to content Skip to footer
Innovate with us
Innovate with us

APPLICANT PRIVACY NOTICE, PURSUANT TO ART. 13 GDPR, RELATING TO THE STAFF-SELECTION SURVEY

Pursuant to and for the purposes of Art. 13 of EU Regulation No. 2016/679 (hereinafter the “GDPR”) on the protection of natural persons with regard to the processing of personal data, Lascaux S.r.l. (hereinafter also the “Controller”) hereby informs you about the means and purposes of the processing of your personal data.

I. Lascaux S.r.l. (VAT and Tax code: 01805480512), with registered office in Arezzo, Via Calamandrei No. 129, determines the means and purposes of the processing together with its subsidiary and associated company Lift-D (VAT and Tax code: 02162380519). The up-to-date list of processors and persons authorised to carry out the processing is kept at the Controller’s premises.

II. The processing of your personal data will be carried out within the staff-selection process and the management of your application, with the aim of assessing:

  • the technical skills you have acquired over the course of your professional career;
  • your contractual situation (including your current employment position and your expectations for the new professional opportunity), for the purposes of establishing a possible employment relationship.

The processing of your personal data will concern:

  • Identification and contact data (for example, first and last name, date of birth, e-mail address, telephone number, etc.);
  • Professional and educational data (for example, job title, employment history and information on previous jobs, professional skills and licences);
  • Images (for example, the photo on your curriculum vitae);
  • Preferences (for example, your areas of interest);
  • Data concerning health (for example, information set out in the CV or provided for positions reserved for protected categories, in compliance with statutory obligations).

The legal basis for the processing of your personal data is the need to carry out pre-contractual/contractual measures to which you are a party, pursuant to Art. 6(1)(b) of the GDPR, as well as compliance with statutory obligations (Art. 6(1)(c) GDPR), where applicable.

The processing of your personal data will also take place through the completion of a survey (hereinafter the “Survey”) carried out via the LimeSurvey platform. In addition, we may use artificial intelligence (AI) systems to assist our staff in handling high volumes of applications; in any event, all decisions concerning the applicant will be taken exclusively by our staff, without any automated decision-making.

Your personal data will be processed solely by the parties involved in the selection and assessment process, who are specifically authorised and bound by confidentiality.

  1. In pursuit of the purposes set out above, your data may be disclosed to the following categories of recipient:
  • Lift-D S.r.l., within the scope of the joint-controllership agreement for the processing of personal data;
  • Service providers, within the scope of their tasks in connection with the staff-selection process;
  • Competent authorities, for the fulfilment of statutory obligations or upon request by public bodies.

2. Your personal data will be processed within the territory of the European Union and will not be disseminated. However, should it be necessary to transfer your personal data outside the EU, the Controller will ensure compliance with the applicable legal provisions, by means of the European Commission’s adequacy decisions, appropriate contractual safeguards or specific derogations provided for by the GDPR.

3. The processing of your personal data will be carried out by means of the operations indicated in Art. 4(2) GDPR – with or without the aid of computer systems – and specifically: collection, recording, organisation, structuring, updating, storage, adaptation or alteration, extraction and analysis, consultation, use, disclosure by transmission, comparison, interconnection, restriction, erasure or destruction. The Controller ensures the security of the processing through technical and organisational measures appropriate pursuant to Art. 32 GDPR, in order to protect the data against unauthorised access, loss or unlawful disclosure.

4. Your personal data will be stored for a maximum period of 2 years from the time of collection, after which it will be erased or anonymised, except where further statutory obligations require longer storage.

5. The provision of your personal data is optional, but failure to provide it will make it impossible to take part in the staff-selection process.

6. You are entitled to exercise the rights set out in Arts. 15-21 of the GDPR, and in particular:

  • Right of access: to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, to obtain related information concerning, in particular: the purposes of the processing, the categories of personal data processed, the storage period, and the recipients to whom the data may be disclosed (Article 15, GDPR);
  • Right to rectification: to obtain, without undue delay, the rectification of inaccurate personal data concerning you and the completion of incomplete data (Article 16, GDPR);
  • Right to erasure: to request, without undue delay, the erasure of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR);
  • Right to restriction: to require the Controller to restrict the processing, in the cases established by the GDPR (Article 18, GDPR);
  • Right to data portability: to receive, in a structured, commonly used and machine-readable format, the personal data concerning you that you have provided to the Controller, and to have that data transmitted to another controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR);
  • Right to object: to object to the processing of personal data concerning you, unless there are legitimate grounds for the Controller to continue the processing (Article 21, GDPR);
  • Right to lodge a complaint with the supervisory authority: to lodge a complaint with the Italian Data Protection Authority (information and contact details at the website www.garanteprivacy.it).

7. At any time you may exercise the rights referred to in point 6) by sending a specific request to the following contact details: Human Resources Office of Lascaux S.r.l., Via P. Calamandrei 129, 52100 Arezzo, or by writing an e-mail to: [email protected].

Close
Close