Energiaprima SRL (F.C./Vat No. 1657020705) company, with legal headquarters in Ripalimosani (CB) Via Luigi Iammarino no. 2, in the person of the pro tempore legal representative, as data controller, informs you, according to art. 13 Leg. Decree 196/2003 (afterwards “Privacy Code”) and to art. 12 EU Regulation no. 2016/679 (afterwards “GDPR”) that your data will be processed in the manner and for the purposes specified below.

Object of the Treatment

The Data Controller processes personal and identifying data (for example, name, surname, tax code, company name, address, phone number, email, CV, "personal data" or "data") provided by you.

Purposes of data processing

The processing is aimed at collecting and processing the data you have transmitted exclusively for the purpose of carrying out recruitment and personnel selection activities. Personal data may be processed using both paper and electronic archives (including portable devices) and will be handled in a manner strictly necessary to achieve the purposes mentioned above.

Legal basis of the processing

The Data Controller processes your personal data lawfully, where the processing:

• Is necessary to the conclusion and the execution of a contract of which you are a party or for the execution of pre-contractual measures adopted upon request;
• Is necessary to fulfil a legal obligation incumbent on the Data Controller;

Specific and distinct consent will be required (arts. 23 and 130 Privacy Code and art. 7 GDPR), for the following Marketing Purposes:

• To send you via e-mail, post and/or text message and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and measurement of the degree of satisfaction with the quality of the services;
• To send you by e-mail, mail and/or message and/or telephone contacts, commercial communications and/or promotional of third parties (for example, business partner, companies of assurance).

Method of Treatment

The processing of your personal data is conducted by the operations indicated in art. 4 of Privacy Code and art. no. 2 of GDPR and exact: detection, registration, organization, storage, consulting, processing, modification, selection, extrapolation, comparison, use, interconnection, block, communication, deletion, and disruption of data. Your personal data are subject to both paper and computer and/or automated processing.

Storage of data

Your personal data, object of the processing for the purposes abovementioned, will be stored for a period equal to the duration of the contract and subsequentially, for the time in which the Data Controller is subject to preserve obligations for tax purposes and/or for other purposes provided for by law or regulation.

Communication of data

Your data could be communicated to:

• Consultants, lawyers, business consultant, banking and insurance institutions which provide functional performance for the above-mentioned purposes;
• Individuals who process data in execution of specific legal obligations;
• Judicial or administrative authorities, for the fulfilment of legal obligations;

Access to data

Your data could be made accessible for the aforementioned purposes to employees and collaborators of Data Controller and to third companies or other subjects (as an indication, credit institutions, professional studies, consultants, insurance companies for the provision of insurance services, etc.)

Rights of the interested

The rights recognized by the GDPR include the following:

• Ask Data Controller to get access to your personal data and information relating to it; the ratification of the inserted incorrect personal data regarding you (upon the occurrence of one of the conditions indicated in art. 17, paragraph I of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (upon the occurrence of one of the hypothesis indicated in art. 18, paragraph I of GDPR);
• Ask and obtain from Data Controller – in the event that the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured format and readable from an automatic device, even in order to communicate such data to another data controller (so called right to the portability of personal data);
• Oppose in any moment to the processing of your personal data upon the occurrence of particular situations regarding you;
• Revoke the consent in any moment, limited to the cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example data and place of birth or of residence), or particular category of data (for example data which reveals your racial origin, your political opinion, your religious beliefs; state of health or sexual life). The processing based to your consent and carried out prior to the revocation of the same, however, retains its lawfulness;
• Suggest a complaint to a control authority (Authority for the protection of personal data www.garanteprivacy.it).