ADVISORY NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13-14 OF EU REGULATION 2016/679

Individuals involved: candidates to be considered for the establishment of a work relationship.

RGB BAMBOO S.r.l. as Data controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679, hereinafter ‘GDPR’, hereby informs you that the aforementioned legislation envisages the protection of parties concerned with respect to the processing of personal data and that this processing will be based on the principles of propriety, lawfulness, transparency and protection of your privacy and your rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulations and the confidentiality obligations included therein.

Subject to your consent, your personal data may also be used for the following purposes:

• selection of staff for the establishment of a work relationship.

The provision of data is optional for you, with regard to the aforementioned purposes, and should you refuse to have it processed, this will not compromise the continuation of the relationship or the accuracy of the processing itself.

Processing methods

Your personal data may be processed in the following ways:

• processing by means of computers;
• manual processing by means of paper archives.

Each processing operation is carried out in compliance with the procedures pursuant to articles 6. 32 of the GDPR and through the adoption of the appropriate security measures required.

Your data will only be processed by personnel expressly authorised by the Data controller and, in particular, by the following categories of employees:

• Individuals expressly appointed by the Data controller.

Comunication: Your data may be communicated to external individuals for proper management of the relationship and, in particular, to the following categories of Recipients, among whom all the duly appointed Data Processors:

• work intermediation agencies;
• third parties used for assessing candidates for the job.

Distribution: Your personal data will not be distributed in any way.

Retention Period

We inform you that, in compliance with the principles of lawfulness, limitation of purposes and minimisation of data, pursuant to art. 5 of the GDPR, the retention period for your personal data is:

• two years from the moment in which the data was collected.

Data Controller: The Data Controller responsible for data processing, in compliance with the Law, is RGB BAMBOO S.R.L. (VIA I MAGGIO 27/E, 46051 S. Giorgio Bigarello (MN); email: info@rgb-bamboo.it; telephone: 0376270752; VAT number: 02097490201) in the person of its acting legal representative.

You have the right to obtain the following from the data controller: cancellation (right to be forgotten), limitation, updating, correction, portability and opposition to the processing of personal data concerning you and, in general, you can exercise all the rights envisaged by articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.

You can also view the updated version of this advisory notice at any time by connecting to the following internet address: https://www.privacylab.it/informativa.php?09565307487.

EU Regulation 2016/679: Articles. 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Party Concerned

1. The party concerned has the right to obtain confirmation of the existence or non-existence of personal data concerning him, even if not yet recorded, as well as their communication in an intelligible form and the possibility of filing a complaint to the supervisory Authority.

2. The party concerned has the right to obtain indications regarding:

1. the origin of the personal data;
2. the purposes and methods of the data processing;
3. the logic applied in the case of data processing carried out with the aid of electronic tools;
4. details identifying the data controller, persons in charge and representative designated pursuant to article 5, paragraph 2;
5. the individuals or categories of individuals to whom the personal data may be communicated or who may gain knowledge of the data as legal representative designated in the State territory, as persons in charge or persons appointed.

3. The party concerned has the right to obtain:

1. the updating, correction or, when he has an interest in doing so, integration of the data;
2. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data that does not require retention with regard to the purposes for which the data was collected or subsequently processed;
3. proof that the operations indicated in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data was communicated or distributed, except in the case in which the carrying out of this proves impossible or involves a clearly disproportionate use of resources compared to the right being protected;
4. portability of the data.

4. The party concerned has the right to oppose, in full or in part:

1. for legitimate reasons, the processing of personal data that concerns him, even if pertinent to the purpose of the data collection;
2. the processing of personal data that concerns him for purposes of sending advertising materials or direct sale or for carrying out market research or commercial communication.