I authorise the processing of my personal data for personnel selection purposes as indicated in the privacy policy. Unless strictly necessary, we ask you not to disclose sensitive data (e.g. health status, racial and/or ethnic origin, trade union membership, religious beliefs).

The word “privacy policy” must be linked to the text below. A single box, not pre-ticked, which the user must be required to tick. A record must be kept of the date on which the information notice was read and that it was provided by the website and the IP address. Also set the data retention period

Do you consent to the communication of your data to group companies for personnel selection purposes as indicated in the information notice?

I consent to the processing I do not consent

Two boxes, not pre-ticked, which the user must tick. The date on which consent was given must be recorded, along with the website and IP address.

DATA SUBJECTS: Candidates to be considered for employment

DATA COLLECTION

Data is collected by means of information relating to professional experience being sent by the data subjects via the website. To facilitate the collection process, we invite data subjects to send the information by attaching a complete electronic CV in European format (if a photograph of the data subject is sent, please note that the image will not be used in any way). The CV sent must contain only common data, which will be processed within the limits strictly relevant to the obligations, tasks and purposes indicated below. Please note that unless strictly necessary, please do not provide any special categories of data (e.g. health status, racial and/or ethnic origin, etc.).

Gallery Holding S.p.A., as the Data Controller of your personal data pursuant to and for the purposes of Articles 13 and 14 of European Regulation 2016/679, hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be based on principles of correctness, lawfulness and transparency and the protection of your privacy and your rights. The information and personal data you provide or otherwise acquire in the context of using the website will be processed in accordance with the provisions of the above-mentioned legislation and the confidentiality obligations set out therein

PURPOSE OF THE PROCESSING

In particular, your data (name, surname, email address, information provided in your CV, etc.) will be processed for purposes related to the fulfilment of obligations in connection with the possible “establishment of a new employment relationship”. The legal basis for the processing is Article 6.1.b) of the GDPR.

 

METHOD OF PROCESSING

Your personal data will be processed manually, electronically and/or telematically and through the use of cookies (as indicated in the cookie policy available on the website) and by means of electronic computers using software systems managed by third parties.

All processing is carried out in accordance with the methods indicated in Articles 6 and 32 of the GDPR, with the adoption of the security measures provided for.

 

COMMUNICATION

Your data will be processed by personnel duly appointed by the Data Controller and, in particular, by the following categories of persons authorised to process personal data:

General Management and Personnel Office

Your personal data will be communicated to third parties, i.e. companies acting as independent Data Controllers or Data Processors, necessary for the proper management of the employment relationship, with a guarantee of protection of the rights of the data subject (e.g. external parties necessary for the performance of the existing relationship, such as companies providing hardware, software or cloud assistance services). The complete list can be requested by writing to the Data Controller’s contact details.

With your consent, your data may be disclosed to Group companies for personnel selection purposes.

 

DISSEMINATION

Your personal data will not be disseminated.

RETENTION PERIOD

We would like to point out that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the retention period for your personal data is set at 2 years from the date of receipt.

 

DATA CONTROLLER: The Data Controller is Gallery Holding S.p.A., with registered office in Via Roma, 183 – Fano (PU) – Tel. +39 0721 829052 – email info@galleryholdingspa.com in the person of its pro-tempore legal representative. The Data Controller has appointed a Data Protection Officer who can be contacted at dpo@galleryholdingspa.com.

You have the right to obtain from the Data Controller the erasure (right to be forgotten), the restriction, updating, rectification, portability, and opposition to the processing of personal data concerning you, as well as, in general, you may exercise all the rights provided for in Articles 15 et seq. of European Regulation 2016/679 by writing to info@galleryholdingspa.com or by contacting the Data Controller at the company addresses provided in this document. The data subject has the right to lodge a complaint with the Supervisory Authority

EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

1. The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and

their communication in intelligible form and the possibility of lodging a complaint with the Supervisory Authority

2. The data subject has the right to obtain information on:
3. a) the origin of the personal data;
4. b) the purposes and methods of processing;
5. c) the logic applied in the case of processing carried out with the aid of electronic instruments;
6. d) the identification details of the data controller, data processors and designated representative pursuant to Article 5, paragraph 2;
7. e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or persons authorised to process personal data.
8. The data subject has the right to obtain:
9. a) the updating, rectification or, where interested therein, integration of the data;
10. b) the erasure, anonymisation or blocking of data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed;
11. c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected;
12. d) the portability of the data.
13. The data subject has the right to object, in whole or in part:
14. a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
15. b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication