Work with us Privacy Policy

PRIVACY POLICY
Information pursuant to and for the purposes of the New European Regulation - GDPR 2016/679 -
(personal data protection)

Dear Sir/Madam,
Below we provide some information about the processing of your personal data.

The personal data controller is Caronte & Tourist S.p.A., which can be contacted at:

• e-mail address: privacy.gruppo@carontetourist.it
• phone number: 090/3718511

The company has appointed a Data Protection Officer, pursuant to Art. 39 Regulation (EU) 2016/679, who can be contacted at the data controller's office or via the e-mail address dpo@carontetourist.it.

Type of data collected

The processing concerns the following personal data pursuant to Article 4, No. 1, GDPR:

• personal and identification data (full name);
• contact data (e-mail address, telephone number);

The processing also concerns the curriculum vitae and therefore all the data contained therein, and any additional data you voluntarily enter in the 'Message' field.

In the online application phase, personal data belonging to particular categories (e.g. health-related data) is not requested. If such data is contained in the CV and/or voluntarily provided by you, it will be processed, subject to explicit consent, only for the purposes expressed in this statement and according to the conditions and methods contained herein.

Purposes and legal bases of processing

Your data is processed for the following purposes:

Necessity or Optionality of the Processing

The requested data is indispensable for the purposes of acknowledging your application and the personnel selection procedures; therefore, failure to provide it will make it impossible to proceed with selection.

Recipients of personal data

Personal data may be communicated, strictly related to the purposes indicated above, to the following entities or categories of entities:

• Individuals authorised in writing by the Company/data controller pursuant to Article 29 of the Regulation due to the performance of their work duties (e.g. employees in the General Secretariat, Administration, IT);
• other companies of the business group to which the Data Controller belongs;
• professionals and/or consultants who collaborate with the Data Controller for the purposes of personnel selection and/or with respect to other matters relating to human resources management;
• external companies in charge of personnel selection;
• Law firms, in the event that disputes should arise.

Processing methods

Personal data is collected when completing the "Work with us" form and submitting a curriculum vitae, in written or electronic form. The processing is carried out with paper methods and IT tools in compliance with the provisions regarding the protection of personal data and, in particular, the appropriate technical and organisational measures pursuant to Article 32.1 of the Regulation, and with the observance of every precautionary measure that guarantees its integrity, confidentiality and availability.

Personal data stored on a computer database is accessible only to the individuals identified (the manager and their appointees), through personal access keys.

Data retention period

Your data will be kept for 2 (two) years from the date of sending.

In the event of claims and/or disputes arising from the candidate selection procedure, the retention period will be extended for the entire duration of this dispute and for the 10 years following its definitive resolution (e.g. settlement agreement or final ruling).

At the end of the indicated period, your Personal Data will be deleted from the database and from any other paper or electronic archiving device.

Rights of the data subject pursuant to Articles 15-22 of EU Regulation - GDPR 2016/679

Pursuant to the relevant legislation, your rights and the way these are exercised are listed below.

• Right of access - The data subject can ask at any time what kind of data the data controller possesses; the origin, the purposes, the categories of data; the recipients; the existence of a profiling process; the retention period.
• Right of rectification - The data subject may request the rectification and/or integration of their data at any time, and the data controller will be obliged to communicate these changes to third parties to whom the data has been transmitted.
• Right to be forgotten - The data subject may request the deletion of data at any time if: the purpose of the processing has been concluded; consent has been revoked; there has been opposition to the processing; it has been processed in violation of the law. The data controller will be obliged to communicate these changes to third parties to whom the data has been transmitted.
• Right to limitation of processing - The data subject may at any time request limitation of the processing: in the case of inaccurate data until rectification; in the case of dispute until clarification; on request, as an alternative to deletion.
• Right of objection - The data subject has the right to object to the use of personal data for automated processing.
• Right of portability - The data subject can exercise this right only regarding data processed for contractual purposes and with automated means, and except when it damages the rights and freedoms of others.

Data subject request procedures

The data subject may exercise the above rights at any time by sending an e-mail to: privacy.gruppo@carontetourist.it.

The data subject has the right to complain to the Data Protection Authority on the basis of the indications referred to in the link https://www.garanteprivacy.it/garante/doc.jsp?ID=4535524 or to any other supervisory authority.