Information notice on Candidates’ Personal Data Protection

1. INTRODUCTION

COROB S.p.A., with registered office in Via dell’Agricoltura, 103 – 41038 S. Felice s/P. (MO), Italy (hereinafter, the “Company” or the “Data Controller”), as Data Controller that can be contacted at the email address privacy@corob.com, will process the personal data provided by the candidate for a job position (the “Candidate”) pursuant to Regulation (EU) 2016/679 on the protection of personal data (the “Data Protection Regulation”) and Legislative Decree 196/2003 as subsequently amended (the “Privacy Code”).

In accordance with Article 111-bis of the Privacy Code, if the Candidate has voluntarily submitted his or her curriculum vitae for the purpose of establishing an employment relationship, this information sheet is provided on the first useful contact after the sending of such curriculum vitae.

3. TYPES OF PERSONAL DATA SUBJECT TO PROCESSING

The Company collects the following categories of personal data:

• first and last name;
• curriculum vitae and cover letter;
• contact details;
• data on educational qualifications, languages known, work experience and extra-curricular experience, etc.
• place and date of birth, address of residence;
• marital status;
• driver’s license;
• belonging to protected categories;

The Candidate is requested not to provide any data other than those indicated above and, in any case, not to provide any health data or any other special category of personal data.

5. LEGAL GROUNDS FOR THE PROCESSING

In accordance with article 111-bis of the Privacy Code and Article 6(1)(b) of the Data Protection Regulation, the processing of Candidates’ personal data carried out for Assessment Purposes is necessary, given its vital role for the purpose of:

• establishing whether a Candidate may be employed in the cases provided for in Section 4(a) and (b);
• complying with the provisions of the applicable legislation as set out in Section 4(c).

Should a Candidate fail to provide the personal data necessary for the Assessment Purposes, it will not be possible for the Company to assess his/her professional profile and, consequently, to recruit him/her.

The processing of a Candidate’s personal data for the Legitimate Interest Purposes referred to in Section(4)(d) and (e) is carried out in accordance with Article 6(1)(f) of the Data Protection Regulation for the pursuit of the legitimate interest of the Company, which is equally balanced with the interest of the Candidate, as the processing of personal data is limited to what is strictly necessary for the exercise of the Company’s rights and for the performance of the required financial transactions.

Processing for the Legitimate Interest purposes is not mandatory and Candidates may object to such processing in the manner set out in Section 9 below, but if they do objects to such processing, their data may not be used for the Legitimate Interest purposes, except in the event that the Company proves the presence of compelling legitimate reasons or the exercise or defense of a right pursuant to Article 21 of the Data Protection Regulation.

7. DISCLOSURE OF PERSONAL DATA

For the Assessment Purposes, the personal data of Candidates may be disclosed to the following categories of recipients, located within the European Union: (a) third party providers of assistance and consultancy services for the Company active in the technological, IT, accounting, administrative, legal, insurance sectors (but not limited to those); (b) companies of the group to which the Company belongs, (c) persons and authorities for whom access to the Candidates’ personal data is expressly recognized by law, regulations, or measures issued by the competent authorities.

For the Legitimate Interest purposes mentioned above, the personal data of Candidates may be transferred to the following categories of recipients, located within the European Union: (a) potential purchasers of the Company and entities resulting from the merger or any other form of transformation concerning the Company; (b) competent authorities.

Aside from the cases mentioned above, Candidates’ personal data will not be disclosed or disseminated.

The above-mentioned recipients, depending on the circumstances, will process the personal data in their capacity as data controllers, data processors or persons in charge of processing. A complete list of the data processors is available, upon request, via the methods indicated in Section 9 below.

9. DATA PROTECTION RIGHTS OF CANDIDATES

Pursuant to Articles 15 et seq. of the Data Protection Regulation, Candidates have the right to:

a) obtain from the Company confirmation of the existence or non-existence of data concerning him/her and be informed about the content and source of the data, verify their accuracy and request their integration, updating or modification;

b) obtain the deletion, anonymization or blocking of any data processed in violation of applicable law;

c) object to the processing in whole or in part, for legitimate reasons, unless the Company has overriding legitimate reasons, or need to assert or defend a right in any legal proceedings; and

d) withdraw at any time consent to the processing of data (in relation to processing for which such consent may be required), without this in any way affecting the lawfulness of the processing based on the consent given before such withdrawal;

e) ask the Company to limit the processing of one’s personal data in the event that:

• the accuracy of the personal data is challenged, for the period necessary for the Company to verify the accuracy of such data;
• the processing is unlawful and one objects to the deletion of one’s personal data, asking that their use be restricted;
• although the Company no longer needs the data for the purposes of processing, the data are necessary to ascertain, exercise or defend a right in court; or
• the User has objected to the processing pursuant to Article 21(1), of the Data Protection Regulation, pending verification of the potential prevalence of the Company’s legitimate compelling reasons for continuing the processing.

f) request the deletion of Personal Data concerning them without undue delay;

g) obtain the portability of Personal Data concerning them; and

h) submit a complaint to the competent Supervisory Authority.

Under Article 2-terdecies of the Privacy Code, in the event of the Candidate’s death, the aforementioned rights relating to his/her personal data may be exercised by those who have an interest of their own, or act to protect the Candidate as his/her representative, or for family reasons worthy of protection. The Candidate may expressly forbid the exercise of any of the above rights by his/her successors by sending a written declaration to the Company to the e-mail address indicated above. Such declaration may be withdrawn or amended at a later stage in the same manner.

The Candidate may also submit a complaint to the Data Protection Supervisor (www.garanteprivacy.it).

The Candidate (or his or her successor, within the limits illustrated above) may exercise his or her rights regarding the protection of personal data at any time and free of charge by making a specific request to the e-mail address privacy@corob.com.

11. AMENDMENTS AND UPDATES

This Information Notice may be subject to amendments and integrations, also as a result of the applicability of the Data Protection Regulation and any subsequent regulatory changes and/or additions. Candidates may view the text of the constantly updated Information Notice on the website www.corob.com.