PRIVACY NOTICE FOR JOB APPLICANTS
Privacy Notice on the Processing of Personal Data
(Article 13 of Regulation (EU) 2016/679 – General Data Protection Regulation – GDPR)
Data Controller
Baumann Srl
Via Palesega, 1 – 37010 Cavaion Veronese (VR), Italy
VAT No. 00224750232
(hereinafter referred to as the "Company" or the "Data Controller").
Definition of Data
For the purposes of this Privacy Notice, "Data" means, by way of example and without limitation, first name, last name, digital images, video recordings, place and date of birth, residence, email address and telephone contact details, educational qualifications, work experience, and any additional personal data included in the curriculum vitae (CV) or entered into the "Submit CV" section of the "Work with Us" or "Careers" application available on the Baumann Srl website (so-called "ordinary" personal data).
The term also includes special categories of personal data (so-called "sensitive" data), such as data revealing an individual's health status (for example, membership of protected categories under applicable legislation), where such information is contained in the CV or in any additional documentation submitted to the Company.
1. Purposes and Legal Basis of Processing – Data Retention Period
Your personal data will be processed for purposes related or instrumental to the recruitment and selection of candidates.
The legal basis for this processing is the implementation of pre-contractual measures taken at your request (Article 6(1)(b) GDPR).
The Data Controller will retain your personal data for 36 months so that your application may also be considered for future recruitment opportunities.
By submitting your personal data to the Data Controller, you may apply both for a specific vacancy and submit a spontaneous application for any position that may become available within the Company.
Your application may therefore be considered for any professional opportunity that the Company believes best matches your qualifications, skills, and experience.
If you expressly object to the retention of your personal data for 36 months, by exercising your rights as described in Section 6 below, your personal data will be processed solely for the ongoing recruitment process and will subsequently be deleted.
2. Categories of Personal Data Processed for Recruitment Purposes
The Company may process the following categories of personal data:
- Ordinary personal data: identification data, contact details, administrative and accounting information, photographs, and video recordings.
- Special categories of personal data: information relating to registration on protected employment lists pursuant to Article 18 of Italian Law No. 68/1999.
3. Mandatory Nature of Data Provision
The provision of personal data is mandatory for the purposes of the recruitment and selection process.
Failure to provide the requested personal data will make it impossible for the Company to evaluate your application.
4. Recipients of Personal Data
Your personal data may be disclosed to entities acting as independent data controllers or processed, on behalf of the Company, by parties appointed as data processors who receive appropriate operational instructions.
Such parties mainly include companies engaged by the Data Controller to carry out recruitment, candidate sourcing, and candidate assessment activities.
5. Authorized Persons
Your personal data may be processed by employees of the Company's departments responsible for carrying out the purposes described above.
Such employees have been expressly authorized to process personal data and have received appropriate operating instructions.
6. Your Rights as a Data Subject – Right to Lodge a Complaint
By contacting the Company, you may exercise the rights granted under the GDPR, including the right to:
- access your personal data;
- request the erasure of your personal data;
- request the rectification or completion of inaccurate or incomplete personal data;
- request the restriction of processing in the cases provided for under Article 18 GDPR;
- object to the processing where it is based on the Company's legitimate interests;
- where processing is based on consent or on a contract and carried out by automated means, receive your personal data in a structured, commonly used and machine-readable format and, where technically feasible, have such data transmitted to another data controller without hindrance;
- where applicable under Article 22 GDPR, not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise your rights, you may send an email to baumann@pec.it.
You also have the right to lodge a complaint with the competent supervisory authority in the EU Member State where you habitually reside, work, or where the alleged infringement occurred.
7. Storage of Personal Data and Transfers to Countries Outside the European Union
Personal data will be stored and processed within the European Union.
Should it become necessary, for the purposes described above, to transfer personal data to countries outside the European Union, the Data Controller will implement the appropriate safeguards required under applicable data protection legislation for such transfers.
