PRIVACY POLICY FOR CANDIDATES

(Art. 13 of European Regulation 679/2016)

We hereby inform you that under Article 13 of European Regulation (EU) 2016/679 (hereinafter the "GDPR") the personal data concerning yourself or your employees (hereinafter "Data") that will be provided by you when establishing a contractual relationship with Matteo Thun & Partners SRL (hereinafter the "Company") as our Client or otherwise obtained in the ordinary course of business of our Company may be submitted, in compliance with the above legislation, to the following Data Processing. 

Data controller and person responsible for the protection of personal data

The data controller is Matteo Thun & Partners SRL, in the person of its director and legal representative Mr. Boris Ulrich, with registered office in Milan (20100 - MI), Via A. Appiani 9. The controller can be contacted by email at the address: mtp@legalmail.it

The Company has appointed as Data Protection Officer Mrs. Ilaria Gambazza, who can be contacted by email at privacy@matteothun.com 

Purposes of Data Processing

The data will be processed with or without the aid of electronic technology and in any case by means which are suitable to ensure security and prevent unauthorised access to data and strictly necessary for the purposes set out below:

• purposes connected with and instrumental to the evaluation of your application for the collaboration or employment at our Company
• purposes connected with the performance of statutory obligations, regulations, national and European regulations and all provisions issued by authorities with appropriate statutory competences.

Our Company, on the occasion of the processing of your data, may also become aware of particular data, such as, for example, membership of a trade union, the membership political party, health status and membership in religious organizations. In this regard, we confirm that your particular data will be treated with the utmost confidentiality and in full compliance with the legal provisions and the provisions of the guarantor.

Legal basis of the processing

The Company will process your personal data or that of your employees lawfully, when such processing:

• is necessary for the evaluation of your application for the collaboration or employment at our Company 
• is based on express consent

Consequences of failure to provide personal data

The failure to provide personal data or authorization for the treatment will prevent the evaluation of your application.

Data retention

Your personal data or that of your employees, which will be processed for the purposes indicated above, will be kept for the duration of six months. Subsequently, you will receive a request from our Company for permission to hold your personal data for further six months, in case you will still want to submit for a new application. In any case, personal data will not be stored for more than two years from the profile creation.

Data communication

Your personal data may be communicated to:

1. persons, companies, associations or professional firms that provide services and activities of assistance and consultancy to our Company, with particular but not exclusive reference to labour matters;
2. persons whose right to process data is recognised by legal obligations
3. companies belonging to the reference Group of Matteo Thun & Partners S.r.l.
4. legal and administrative authorities in order to fulfil legal requirements 

The persons in the above categories will process the data for purposes related to the collaboration or employment, using appropriate security measures to protect such data. The list of persons to whom your data has been or may be disclosed is available to you and may be requested directly from the Person responsible for the above treatment.

Data profiling and disclosure

Your personal data and that of your employees will not be subject to disclosure or to any form of fully automated decision-making process, including profiling

Rights of the data subject

Among the rights granted to you by the GDPR are the rights to:

• ask the Company for access to your personal data and information relating to them; the rectification of inaccurate data or the supplementation of incomplete data; the deletion of personal data concerning you (if one of the conditions indicated in art. 17, paragraph 1 of the GDPR is met and in compliance with the exceptions provided for in paragraph 3 of the same article); the restriction of the processing of your personal data (if one of the cases indicated in art. 18, paragraph 1 of the GDPR is met);
• request and obtain from the Company your personal data in a structured format and readable by automatic device, also in order to communicate such data to another data controller (so-called right to portability of personal data);
• object at any time to the processing of your personal data on the occurrence of special situations that affect you;
• revoke consent at any time, with restriction to cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or particular categories of data (e.g. data revealing racial origin, political opinions, religious beliefs, health or sexual orientation). Processing based on consent and carried out prior to the relevant revocation, however, will still be lawful;
• lodge a complaint with a supervisory authority (Data Protection Authority - www.garanteprivacy.it).