Candidate Data Policy
Identity and contact data of the Data Controller
Calzaturificio S.C.A.R.P.A. S.P.A., henceforth “SCARPA” or “Data Controller”, with head offices at 1 Via Enrico Fermi, Asolo (TV) 31011, which can be contacted via email at info@scarpa.net, and certified email (PEC) at calzaturificioscarpaspa@legalmail.it or via telephone at +39 0423 5284.
Data categories and their sources
SCARPA processes general personal data (e.g. personal information, contact information, data related to business, employment, education and culture, and image data) and specific personal data (e.g., health data). This information may be collected from the data subject directly and/or from third parties (e.g. staffing agencies, employment agencies).
Purpose and legal basis
A. Management of the search and selection phases: personal data are processed for all needs related to fact-finding about promising candidates.
B. Legal defence: the Data Controller may need to process personal data for the management of disputes and litigation, in or out of court.
|
Purpose |
Legal basis (general data) |
Legal basis (specific data) |
|
A. |
Completion of pre-contractual activities. |
Fulfilment of labour law obligations. |
|
B. |
Legitimate interest of the Data Controller to establish, exercise or defend a right. |
Establish, exercise or defend a right. |
Storage of data
|
Purpose |
Duration of storage |
|
A. |
24 months from collection. |
|
B. |
10 years from the definitive resolution of the dispute. |
Nature of the data transfer and consequences of refusal
|
Purpose |
Nature |
Consequences |
|
A. |
Necessary |
Inability of the applicant to apply for the job and for the Data Controller to manage the hiring process. |
|
B. |
Necessary |
Inability to manage disputes. |
Scope of disclosure
Data are processed by internal staff members who have been authorized to carry out specific tasks, and shared externally according to the following rules
|
Purpose |
External recipient categories |
|
A. |
Occupational physician, professional consultant, staffing and recruitment agencies, employment agencies. |
|
B. |
Law firms; Judicial authorities. |
Because data are processed with methods that include the use of computerized tools, they may also be accessed by individuals who provide assistance/maintenance for said systems.
Data transfers to third countries or international organizations
The Data Controller does not transfer personal data outside of the European Economic Area.
Rights of the Data Subject
The individual to whom the personal data refers to has the following rights:
Access: data subjects can find out whether or not their personal data are being processed and, where that is the case, access the personal data and obtain a copy.
Rectification: the data subject can request that their personal data be updated, corrected (if inaccurate) and completed (if incomplete).
Erasure: data subjects can obtain the erasure of their personal data when certain conditions are met (for more information, contact the Data Controller).
Restriction: data subjects can request that their data are marked so as to limit their future processing, when certain conditions are met (for more information, contact the Data Controller).
Objection: it is possible, on grounds relating to one’s individual situation, to object to the processing of personal data when said processing is necessary for the purposes of legitimate interests or for the completion of a task in the public interest or connected to the exercise of public powers vested in the Data Controller.
Portability: data subjects can receive, in a structured format, the personal data provided to the Data Controller and request that said data be transmitted to another data controller when the processing is based on consent or on a contract and is carried out by automated means.
Withdrawal of consent: it is possible to withdraw consent for the purposes for which it was requested, without prejudice to the lawfulness of the processing carried out before withdrawal.
The concrete rights which can be exercised relative to personal data processing which has been carried out are:
|
Purpose |
Right |
||||||
|
|
Access |
Rectification |
Erasure |
Restriction |
Objection |
Portability |
Withdrawal |
|
A. |
X |
X |
X |
X |
|
|
|
|
B. |
X |
X |
X |
X |
X |
|
|
To exercise the aforementioned rights, please fill in the form found at the following link:https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to privacy@scarpa.net. Data subjects can use that same email address to learn more about the information listed herein (e.g., the “balancing test” for legitimate interests or the list of data processors).
It is possible to submit a complaint to the Data Authority. In Italy, that authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali)
