Processing of personal data for personnel search and selection purposes

Processing of personal data for personnel search and selection purposes

Polti S.p.A. sole shareholder, via Ferloni, 83 - 22070, Bulgarograsso, Como, tax code and VAT number 01457440137 (hereinafter referred to as Polti), the parent company of:

  • POLTI ESPAÑA S.A. - Paseo del Ferrocarril 381- 08850 Gavà - ES
  • POLTI FRANCE S.A.S. - 11/13 Rue des Aulnes - 69760 Limonest - FR
  • POLTI UK LTD. - The Junction - Merchants Quay - M50 3SG Manchester - GB
  • POLTI DEUTSCHLAND G.M.B.H. - Hafeninsel 11, - 63067 Offenbach am Main - DE
  • POLTI USA INC. - 5301 Beethoven Street, Suite 170 - Los Angeles, CA 90066 - US
  • POLTIPLAST S.R.L. - Via Monte Rosa n. 13 - 22070 Bulgarograsso (CO) - IT

in the performance of its own activities in its capacity as data controller, collects and processes personal data provided by the data subjects. In order to guarantee the protection and exercise of the rights provided for by law with regard to the protection of personal data, the data subject is informed of the following:

Purposes of the data processing

The data provided by data subjects will be processed in order to fulfil the following purposes:

  • 1. Recruitment and selection of personnel, including activities to manage the signing of the contract of employment.

In addition to the staff responsible for managing your contract, the data may be processed by the following entities:

  • Personnel recruitment and selection companies
  • Personnel selection consultancy firms
  • Consultancy firms in the employment market sector (employment law and remuneration analysis consultancy)

The data provided by data subjects could be used for the purposes of profiling the candidate’s attitudes and professional capacity. The profiling process is necessary for processing purposes and the candidate’s opposition to that process could make it impossible for the data controller to select the correct candidate for the job.

Storage period of the data

Data subjects are informed that personal data will be kept on Polti’s systems for 18 months, after which their data will be deleted, unless it is bound by further contractual or legislative obligations linked to possible entry into a contract of employment or collaboration.

Data subject’s rights and methods of exercise

Data subjects must be informed of the methods by which they may exercise their rights. Data subjects are informed that:

  • In the case that a request is made by the data subject to exercise the rights provided below, Polti has a period of one month in which to respond.
  • In the case of multiple requests, this period may be extended by two months.

Rights of the data subjects

Polti undertakes to ensure that data subjects are able to fully exercise their rights, provided that this does not harm a legitimate right or the rights of other data subjects. Data subjects wishing to exercise such rights may do so by writing to the following address: privacy@polti.com.

Polti has appointed the DPO before the guarantor authority who can be contacted at dpo@polti.com.

Data subjects are informed that, in the case of serious breaches or failure to comply by Polti with one of the rights set forth in this notice, data subjects may file a formal complaint with the relevant national Data Protection Authority.

Absence of consent

Data subjects are informed that, in the case that the data subject does not consent to data processing described in this notice, Polti will be unable to proceed with the purposes of the data processing.

Normative sources

The following document has been prepared in accordance with the General Data Protection Regulation (GDPR), which is the EU’s agreed standards for data protection, which has also been implemented in UK law through the Data Protection Act 2018 (DPA 2018).

The transition period for leaving the EU ended on 31 December 2020. The GDPR has been retained in UK law as the UK GDPR and will continue to be read alongside the DPA 2018, with technical amendments to ensure it can operate in UK law.

To read more about the GDPR, please visit the ICO Information Commissioner’s Office website – it’s an independent authority that upholds information rights in the public interest.