This document concerns the privacy policies on personal data processed by Dr. Francesca Caneva, with registered office in Cornedo Vicentino (VI), Via Neri Bergamino n. 59, as Data Controller (hereinafter the Controller or Recruiter) who manages the Internet website: www.fransysconsulting.com
The text describes, in accordance with the General Regulation for the Protection of Personal Data in the EU 2016/679 (also called RGDP or GDPR), the procedures for managing the processing of personal data of users and visitors to the site as well as the processing of personal data carried out by the Controller who can be contacted using the following e-mail address: privacy@fransysconsulting.com
The information shown here is not valid for other websites that may be consulted through the links on the site, for which the Data Controller is not liable.
Information on data processing. The Data Controller uses the following information as required by Article 12 of the GDPR as a measure to provide the interested party with the information referred to in Article 13 of the GDPR and the communications referred to in Articles from 15 to 22 and 34 GDPR relating to the processing of the data provided, this information is to be understood as general, provided to all those who interact with the site. The Data Controller informs the interested users that the personal data provided by contacting the Data Controller will be processed in accordance with the provisions of the GDPR and the privacy code as amended by Italian Legislative Decree No. 101/2013. The processing is carried out based on the lawfulness conditions provided for in Article 6 of the GDPR, i.e. for the purposes inherent to the relationship established with the Controller, therefore, its legal basis as required pursuant to Article 13 lett. c) GDPR finds justification in the reasons for which the relationship with the Controller is established and in this case:
- in relation to navigation on this Site (navigation data)
- Personal data sent through the contact form
Navigation Data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This data is used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Personal data. Personal data sent through the contact form, including those contained in the CV, that is any information concerning an identified or identifiable natural person.
Purpose and legal basis of the processing. With regard to navigation, the purpose is to allow browsing of the site, while with reference to personal data sent through the form, to satisfy the requests of the candidates and client companies that commission the recruiter for the selection. The legal basis for:
- manage the selection procedure for the ad that is answered or to find a correspondence in the event of a spontaneous application, it can be found in art. 6, par 1, lett. b) de GDPR as required by art. 111-bis Privacy Code; Again in accordance with this last article of the law, it is specified that within the limits of the purposes referred to in Article 6, paragraph 1, letter b) of the GDPR, consent to the processing of personal data contained in the curricula is not due, except in the case in which the data must be sent to a non-EU country that is neither compliant nor adequate or covered by a specific reason for the exclusion of consent, in the latter case it will be requested.
- to manage the selection procedure on behalf of the employer or other type of supplier who seeks advice in the research and evaluation of the candidates according to the purpose indicated in the art. 6, par.1, lett. b) i.e. the execution of a contract, the same data will also be used pursuant to the same article and paragraph lett. c) or comply with legal obligation of the data controller (for example, billing);
- legitimate interest pursuant to art. 6, apr.1, lett. f), that is, to occasionally communicate their own promotional initiatives or legislative updates.
Treatment modalities. The processing of data will be carried out in paper and/or electronic form by persons specifically authorized to process it, it is also specified that no processing is carried out based on automated decision-making processes. The provision of data is optional, however, failure to provide it could render the performance impossible. Some navigation data (on this point, see our cookies policy) are, instead, acquired automatically by the system. The processing of the data provided to the Data Controller will include: management, organization, use, storage, creation of the database, processing throughout the EU and outside the EU (countries included in the cases pursuant to Article 45 and 46 GDPR) and the carrying out of statistics, the communication to the partners with whom the initiatives will be developed – subjects who will be appointed external managers pursuant to art. 28 GDPR, including on line matching platform between offer and demand of working position, or co-Controllers in the event that personal data will be communicated to them. The treatment will also include the communication of future initiatives, the sending of promotional material as well as the use to promote conferences and meetings. It should also be remembered that the processing of data connected to the web services offered by the site hosted by companies located in Italy whose name will be communicated upon reasoned request, is carried out only by collaborators and authorized third parties in the case of occasional maintenance operations or our manager.
Candidate Data. In relation to the data that the user provides or directly sends his curriculum vitae (from here on only CV) or by completing our application form available directly on the site in the area dedicated to the open positions we inform you that in our title of Controller of data processing we will use the data indicated in the form or in the CV sent to us to verify the correspondence with the ideal candidate we are looking for, we also specify that pursuant to art. 111 bis of Legislative Decree 101/2018 for this type of processing, the information referred to in article 13 GDPR will be provided to the first contact following the sending of the CV. We also inform you that the data marked in the acquisition form by asterisk will be mandatory for the purpose of taking into consideration your job application in relation to the open position while you are not obliged to provide further data. However, if you provide data in a partial or incorrect manner it may be impossible to evaluate it for the required job position.
Rights of interested parties (data subject). The Data Controller also notifies that the rights to rectify pursuant to Article 16 of the GDPR, the right to be forgotten pursuant to Article 17 of the GDPR, the right to limit the treatment pursuant to Article 18 of the GDPR and the right of access to the personal data provided and to all the data are guaranteed as listed under art. 15-22 GDPR. Interested parties are also entitled to:
- Ask the data controller for access to personal data and the correction or cancellation of the same or the limitation of the processing that concerns them or
- To oppose their treatment;
- Data portability pursuant to Article 20 GDPR where technical feasible;
- If the processing is based on Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a) to withdraw the consent at any time without jeopardizing the lawfulness of the processing based on the consent given before revocation;
- Make a complaint to a supervisory authority;
To exercise the rights listed above or for more information, simply send an e-mail to the following e-mail address privacy@fransysconsulting.com indicating in the subject: “exercise of the rights ex GDPR” and inserting the right in the body of the e-mail you want to exercise, as well as your name, surname and email address where you want to receive the response from the Controller. The Holder, once processed as received, will send the relevant confirmation in the terms indicated by Article 12 GDPR.
The Controller in specific situations adopts specific information accompanied by the relevant consents to be given in order to allow the processing of data. Furthermore, the Controller informs that if he intends to further process personal data for a purpose other than that for which they were collected, before such further processing it will provide the interested party with information regarding this different purpose and any other pertinent information, gathering, in the specific case, consent.
Storage of your data. we inform you that your data collected during the selection phase will be cancelled as soon as it becomes clear that no job offer will be formulated or that the latter will not be accepted by you. In the case of CVs sent spontaneously, regardless of an open position, we inform you that the CV will be kept, if it is of interest to us, for 2 years, otherwise cancelled within 6 months from its receipt. We also inform all our candidates that the Data Controller will be able to verify the social profile of the aspiring subject in the case in which this had a different nature from the uniquely private one and / or was strictly personal.
Cookies. A Cookie is a small text file that is deposited by a website on the hard disk of the user’s device, so the cookies uniquely identify the browser of the browser. Cookies do not damage your computer and do not contain viruses. Cookies are used to streamline the analysis of web traffic or to indicate when a specific site is visited and allow Web applications to send information to individual users.
Only the user can decide to manually delete the cookies from his device or provide for automatic deletion at the closing of the installed browser.
For more information, please visit our cookies policy.
Copyright. All the contents of this site are protected by the provisions of the law concerning copyright, intellectual property. Even partial reproduction in any form is prohibited. However, the Controller does not grant any license on copyright, patents or any other intellectual property right
Liability. Data Controller does not assume any responsibility towards site surfers regarding the content of the published information (accuracy and completeness of the information provided) or the use that third parties can make of it. The material and information on the site are subject to changes or updates by the Controller without prior notice.
Application of the legislation. Data Controller regularly updates this information and in general its compliance with the Privacy Policy, adapting them with the new provisions issued. For any questions or concerns regarding this Privacy Policy, you can contact us at any time by writing to: privacy@fransysconsulting.com
Complaints. We will respond to users who send formal written questions and/or complaints to this address privacy@fransysconsulting.com to investigate the reported problem. We are committed to cooperating with the competent authorities to resolve any complaints regarding the processing of personal data that are not directly resolved between the Controller and the individual private parties.