We inform you that, pursuant to EU Regulation 2016/679 (hereinafter: “Regulation”), your personal data, collected for the purposes of managing your employment or collaboration with CWS srl with registered office in Piazzola San Giuseppe n.6, Vicenza (VI), tax code and VAT number 01906190242, will be processed by the same company, as Data Controller.
The Data Controller will process the data that fall under the definitions set out in Articles 4 and 9 of the Regulation collected during the management of your employment or collaboration relationship, including, by way of example but not limited to, your name, surname, mobile phone number, state of health (certificates for illness, accident, and the like), membership of a trade union (for example, deductions for trade union contributions); membership of a political party (for example, permits for public office), religious beliefs (for example, enjoyment of religious holidays), possibly, personal data relating to criminal convictions or crimes: hereinafter collectively referred to as “Personal Data”.
In relation to data processed for purposes of occupational medicine, it should be noted, from now on, that such data are processed under the responsibility of a professional subject to the obligation of professional secrecy and that the data concerning the state of health will be processed in the performance of the obligations under Legislative Decree no. 81/2008 and other provisions on hygiene and safety, by the competent doctor, as an independent data controller. The only judgments relating to suitability for work will be communicated by the competent doctor to the employer.
The processing of personal data, even special (former sensitive data), provided at the time of recruitment, is intended solely for the establishment and management of the employment relationship, for the management of tax, social security and insurance data, as well as for the compliance with occupational safety and for what established by laws, contracts and company regulations.
In particular, your Personal Data will be processed without your specific consent on the basis of the provisions of article 9 of the Regulation ([...] the data processing is necessary to fulfil the obligations and exercise the specific rights of the data controller or data subject in relation to labour law, social security and social protection, to the extent that it is authorized by Union law or the law of the Member States or by a collective agreement in accordance with the law of the Member States, in the presence of appropriate safeguards for the fundamental rights and interests of the data subject) and of the pro tempore authorization in force from the Data Protection Supervisor, for the following purposes:
The legal basis for the processing operations referred to in letters d), e) and f) is your express consent.
Your Personal Data will not be disclosed and can only be shared with:
The Data Controller does not transfer your Personal Data outside the European Economic Area. Only in the event of needs strictly related to the performance of your work duties (e.g. travel), some of your personal data may be disclosed to bodies and companies in third countries, always in compliance with the rules set out in Chapter V of Reg. 679/2016 and in particular pursuant to article 49 paragraph 1.
In relation to the aforementioned purposes, the Data Processing is carried out by means of manual, computer and telematic tools with logic strictly related to the purposes and, in any case, in such a way as to ensure the security, confidentiality and availability of the Data, in addition to compliance with specific obligations under the law. The Data will be processed in accordance with the principles of lawfulness, correctness, relevance and not excessive, in accordance with the provisions of the legislation on the protection of personal data. The processing will be carried out by formally appointed and adequately trained personnel.
Your Personal Data will be kept for the time necessary to manage the employment or collaboration relationship. The Company may retain Data after the termination of the contractual relationship to comply with regulatory and/or post-contractual obligations and/or to protect your legitimate interests; In particular, the Data relating to the payment of your emoluments provided for by law will be kept for a period of five years after the end of the employment relationship (except for the receipt of acts interrupting the prescription or the existence of the conditions for the suspension of the prescription; or, in any case, for the different period provided for by law for the proof of the fulfilment of legal or fiscal obligations or that necessary in order to allow the Company to eventually protect its rights in the courts, administrative offices or in any case before a Public Authority). Subsequently, once the aforementioned reasons for processing no longer apply, the Data will be deleted, destroyed or simply kept anonymously.
As a data subject, you may at any time exercise your rights under Article 7 of the Privacy Code and Article 15 of the GDPR, namely the rights to:
The exercise of your rights can be done by sending a request by:
Date of update: 20.11.2018