Eustema S.p.A. is aware of the fundamental importance of protecting the Personal Data of its Suppliers, thereby providing that the processing of Personal Data is carried out in full compliance with the protections and rights recognized by the EU Regulation 2016/679 (hereinafter “GDPR”).

This policy explains in detail who we are and and the purposes of the use your data, which you submitted by spontaneous application or following a recruitment process by Eustema.

WHO WILL PROCESS MY DATA?

The Data Controller of the personal data provided through the website www.eustema.it is Eustema S.p.A. (hereinafter referred to as “Eustema” or the “Company”) with registered office in Rome at via Carlo Mirabello nr. 7,
TAX and VAT no. 05982771007 contactable at the e-mail address: “privacy@eustema.it “. The Data Controller has appointed a Data privacy Officer (DPO) available at the following e-mail address: “dpo_privacy@eustema.it “. The Data Controller, for some treatments, will be supported by the company EUforLEGAL S.r.l. with registered office in Rome at Via Carlo Mirabello nr. 7,
TAX CODE and VAT NUMBER no. 15957891003 , which will act as Joint Data Controller. The Joint Data Controllers EUforLEGAL S.r.l. and Eustema S.p.A. have indeed stipulated a co-ownership agreement concerning the data processing according to art. 26 of the GDPR.
An extract of the co-ownership agreement is available upon request by sending an e-mail to the address privacy@eustema.it

WHY DO YOU NEED MY DATA?

Your data will be processed by the Owner and/or the Co-owner only for purposes related to the management of the contractual or training relationship (internship).

Your Personal Data will be processed for:
carry out a research and selection of personnel for the purpose of the possible establishment of a working relationship or training for any positions other than those for which you have applied spontaneously; management of applications, any acquisition, with your consent, referrals from subjects you mentioned; purposes related to the establishment, management and termination of the contractual relationship and training; compliance with legal obligations and regulations, management of disputes.
To allow the Owner and/or the Co-owner to create and manage their own archive of data, obtained during previous selections of personnel or sent spontaneously by candidates, in order to manage future needs of competent professional figures.
The purposes referred to in points a) and b) are linked one another: the conferment of data and consequently any consent, cannot be made only in relation to one of them.

The Owner and the Co-owner will process the data:

because it is necessary for the pre-contractual or contractual fulfilments referred to in point 1 (e.g. preparation and execution of the work contract);
because it is necessary in order to fulfil the legal obligations, indicated in point 1 to which we are subject (e.g. accounting obligations, payroll, social security, etc.) or to comply with orders and requirements imposed on the Data Controller and/or Co-Processor by judicial authorities, supervisory bodies (Article 6, letter c, GDPR);
to exercise the rights of the Owner and/or the Co-owner, particularly that of defence in court.
It follows that the provision of Personal Data is mandatory for the aforementioned purposes.

Any partial or total failure to provide the Data will result in the partial or total impossibility of achieving such purposes. The spontaneous sending, by any means, of the Data on your part will be considered as explicit consent to the processing .

We will not use your personal data for purposes other than those described in this statement, unless previously informed and, where necessary, obtaining your consent.

The legal basis for the processing is Your consent (Article 6, letter a, GDPR).

WHAT DATA WILL YOU PROCESS?

For the above-mentioned purposes, we will only process the personal data included in the curriculum vitae, concerning common data such as, for example: name and surname, tax code, domicile, e-mail or PEC address, telephone and fax numbers, qualifications, role and/or company classification, etc..

Should you have decided to apply for a particular job offer and/or provide us with special data in accordance with art.9 of the GDPR (e.g. health data, judicial data, trade union membership, etc.), the Data Controller and/or Co-owner will have to process and collect data for which the law requires your consent. In this case we inform you that such data will be processed exclusively for the purposes indicated in paragraph 1.

Should you send us particular data, even without consent, the spontaneous transmission of data by you will be considered as an expression of your valid consent to the treatments.

HOW DO YOU COLLECT MY DATA?

Your Data is collected, prior to the start of or during a selection, by:

the spontaneous sending of Your CV through: a) a web page made available by Eustema and expressly dedicated to the purpose (section “Join us”); b) electronic mail; c) fax; d) mail; e) other tools eventually made available by Eustema; within the consultation of specialized databases, in which you have spontaneously deposited your curriculum for the purpose of consultation by potentially interested companies.

Where personal data were received in response to your spontaneous submission of the curriculum or collected from third parties, the information referred to in this statement will be provided at the time of registration of data.

HOW WILL YOU USE MY DATA?

The Company’s purpose is the protection of your data and their treatment is based on principles of correctness, lawfulness and transparency. The Data will be treated in archives and paper supports or with the help of digital supports, informatic and telematic tools. However, the logical and physical security and, in general, the confidentiality of your personal data will be guaranteed.

HOW LONG WILL YOU KEEP MY DATA?

For the purposes referred to in point 1 as part of the search and selection activities, as well as the management of applications, Your data will be processed by internal resources of the offices of the Owner and/or the Co-owner, adequately prepared, who act as personnel authorized to process the Data. Your Data may, in addition, be shared with external parties such as Professionals, Public Bodies, Auditing or Supervisory Bodies in order to fulfill obligations arising from the law, regulations, EU rules or for aspects concerning the management and execution of the contractual relationship.

Your personal data will not be disclosed to unspecified parties. Access to the archived data may be made only by public authorities, in the cases and modalities provided for by the laws in force, in case of legal disputes.

For all the purposes stated in this policy, Your data will not be communicated outside the European Union. Should it be necessary in the future to transfer data outside the European Union, the Data Controllers undertake to comply with the provisions of Chapter V of the GDPR and to do what is necessary to ensure adequate levels of protection and safeguarding of personal data.

WILL YOU SHARE MY INFORMATION WITH OTHERS?

For the purposes referred to in paragraph 1, as part of the activities of research and selection, and management of applications, your data will be processed by internal resources of the offices of the Owner and / or the Owner or, in some cases, of Softjam S.p.A., a wholly-owned subsidiary of the Joint-owner Eustema S.p.A, adequately trained, acting as authorized personnel to the treatment of data. In addition, your data may be shared with external parties including professionals, public bodies, auditing or supervisory bodies, in order to comply with obligations deriving from the law, regulations, EU legislation or for aspects concerning the management and execution of the contractual relationship.

Your personal data will not be disclosed or will not be made known to unspecified persons. Access to the archived Data shall only be allowed to public authorities, in the cases and modalities provided for by the laws in force, in case of legal disputes.

For all the purposes indicated in this informative report, Your Data will not be communicated outside the European Union. Should it be necessary in the future to transfer data outside the European Union, the Joint Data Controllers undertake to comply with the provisions of Chapter V of the GDPR and to do what is necessary to ensure adequate levels of protection and safeguarding of Personal Data.

WHAT ARE MY RIGHTS?

At any time, you will have the right to request:

access to Your personal data and receive confirmation as to whether or not any personal data concerning You is being processed and, if so, obtain information relating, in particular, to: the purposes of the processing, categories of personal data processed, the period of storage, recipients to whom they may be communicated (Article 15, GDPR);

their rectification in case of inaccuracy of the same obtaining, without undue delay, the rectification of inaccurate personal data and the integration of incomplete ones (Article 16, GDPR);

the deletion, without undue delay, of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR);

the limitation of their processing in the cases established by the GDPR (Article 18, GDPR);

the right to object to the processing of Your personal data, unless there are legitimate reasons for the Controller and/or the Joint Controller to continue the processing (Article 21, GDPR);

the right to lodge a complaint with the National Supervisory Authority (Information and contact details at www.garanteprivacy.it).

You will be able to exercise Your rights by sending an e-mail request to “privacy@eustema.it ” and we will take care of Your request to ensure the effective exercise of Your rights.

CAN I WITHDRAW MY CONSENT?

Yes, you may revoke your consent at any time, but this may not

affect the lawfulness of the processing based on the consent given before the revocation

affect further processing of the same data based on other legal bases (for example, contractual obligations or legal obligations to which the Owner is subject).