Work with us
Please send your application as an email to: contatti@brunarosso.com
Read careers Privacy Policy
INFORMATIVE NOTE ACCORDING TO EX ARTT. 13 GDPR E 111-BIS D.LGS. 196/03
Dear Candidate,
for the protection of natural persons with regard to the processing of their personal data and the free circulation of the same, directing this Processing to the principles of lawfulness, fairness and transparency, pursuant to art. 13 EU Regulation 2016/679 (GDPR) and of the 111-bis D.LGS. 196/03 (Privacy Code), and in relation to the personal data that the Data Controller will come into possession of - obtaining his Curriculum Vitae (hereinafter also simply 'CV'), spontaneously transmitted for the purpose of establishing an employment relationship - and will perform the treatment, the following information is provided.
For the aforementioned Regulation:
a) BRUNA ROSSO S.r.l. is the ‘Controller’
b) You are the ‘Data subject’ and your data will be treated as indicated below; You also have the rights that we illustrate below.
It is hereby specified that this does not constitute a commitment or promise of future employment.
* * *
1. Controller
As mentioned, the Controller of personal data is BRUNA ROSSO srl (hereinafter also simply "Bruna Rosso"), located in Corso Nizza n. 36, 12100, Cuneo, P. Iva 00917330045, tel. 0171692295, C.F. and VAT ID .: 00917330045, mail contatti@brunarosso.com.
2. Purposes of the processing of personal data
The transmission of your CV has the effect of your candidacy, preordained for a possible, future, and unforeseen assumption by the owner. The personal data that you communicate through this CV will be processed by the Controller solely for the purpose of searching and selecting personnel, or for any legal protection of their rights.
3. Legal basis for processing
The legal bases for the processing referred to in the purposes indicated in the previous point 2) are the need to execute the pre-contractual measures adopted at your request and the legitimate interest of the Controller.
4. Categories of recipients to whom personal data have been or will be communicated
Your personal data may be communicated to the following categories of subjects:
employees of the Controller, authorized for processing and on adequate instructions from the Controller, who are committed to confidentiality or have an adequate legal obligation of confidentiality;
external parties that perform, on behalf of the Controller, as data processors (bound by a specific contract pursuant to Article 28 GDPR) or as independent data controllers, necessary for the execution of the activities connected and consequent to the execution of the contract , some technical and organizational activities, such as, for example, administrative, accounting and tax or IT services companies, professional companies / firms that provide assistance, advice or collaboration to the data controller, in accounting, administrative, fiscal, legal matters , tax and financial;
public administrations or authorities (Revenue Agency, Judicial or Public Security Authority, etc.) for the fulfillment of legal obligations.
Personal data are not subject to dissemination.
5. Period for which the personal data will be stored
In the event of failure to hire you, the Controller will keep your personal data for a maximum of two years, subject to different terms provided for by law or by order of the authority.
In the event of your employment, your data - as well as all other personal data relating to the employment relationship - will be kept for the stored duration of the relationship and for subsequent legal terms.
6. Nature of data provision and consequences of refusal
The provision of your personal data is optional: the missed (or insufficient) conferment could however make it impossible for the Controller to evaluate your candidacy.
7. Rights of the interested party
The EU Regulations grant you the following rights with regard to the processing of personal data:
a) right of access with a request to copy the processed data (art. 15 GDPR);
b) right of rectification of inaccurate personal data without unjustified delay as well as integration of incomplete personal data (art. 16 GDPR);
c) right to erasure of personal data without unjustified delay - c.d. "Right to be forgotten" - for one of the reasons indicated in letter a) at lett. f) of the art. 17 GDPR;
d) right to restriction of processing for one of the hypotheses indicated by lett. a) at lett. d) of the art. 18 GDPR;
e) the right to data portability (art. 20 GDPR);
f) the right to object, for reasons connected to your particular situation, to the processing of personal data concerning you pursuant to art. 6, paragraph 1, letters e) or f) GDPR, including profiling - right to object to the Code ‘Direct marketing’ (art. 21 GDPR);
g) to lodge a complaint with a supervisory Authority (art. 77 GDPR).
The exercise of your rights may be delayed, limited or excluded in the cases provided for by art. 2-undecies of Legislative Decree 196/2003.
Concerning the exercise of these rights, you may contact the Controller by written request.
Finally, your right to contact the Supervisory Authority remains, even through the presentation of a complaint, where deemed necessary, for the protection of your personal data and your rights.