TInvention

APPLICANT PRIVACY POLICY

The company Tinvention S.r.l., with registered office at Via Giovanni Pacini n. 93, 20131 Milan (MI), Italy, as Data Controller of data processing under the Regulation EU 2016/679 (later “GDPR”), shall undertake to protect and respect his or her privacy.
PURPOSES FOR RECRUITING JOB APPLICANTS AND LEGAL BASIS OF THE DATA PROCESSING

  1. Categories of processed data
    2. Personal data related to him or her and any other individual who is part of his or her family, children included (“data subjects” collectively). In particular, such data pertains to the following categories:
    • Personal and gender data;
    • Contact details (e-mail address, phone number);
    • Data concerning current residence and/or domicile address;
    • Data concerning education/training and occupational status;
    • Data concerning working experiences and any other data shown on the curriculum vitae and/or provided during the interview process;
    • Special categories of data pursuant to ex article 9 GDPR (e.g., suitable information to declare the state of health, sexual orientation or political/religious beliefs, ethnic origin).
  2. Purposes and legal basis of data processing
    3. His or her data shall be processed both in case of application in response to a specific job offer and in case of a spontaneous application to pursue the purposes of selecting and recruiting applicants, in particular, for a direct placement in Tinvention S.r.l. In order to guarantee a job placement, his or her data may be processed for every staff recruitment process consistent with his or her profile, only if he or she does not object to such data processing when conferring data or afterwards. Whether he or she objects to such data processing, his or her data will be processed exclusively in regard to the specific selection and recruitment process which he or she has applied for. The legal basis applicable to his or her personal data processing for the above-mentioned purposes shall be performing pre-contractual measures adopted by his or her request ex article 6 paragraph 1 point (a) and (b) of GDPR and the legitimate interest of the company ex article 6 paragraph 1 point (f) of GDPR.
  3. Period of data archiving and conservation
    4. For the above-mentioned purposes, his or her personal data shall be introduced in the business database and shall be stored for 12 months since their introduction. In case he or she withdraws his or her consent, his or her data shall be no longer stored. In case of data being processed for purposes concerning the establishment, the exercise or the defense of legal claims, data shall form part of a filing system for data historicization and shall be stored for the entire duration of the judicial dispute, until all appeal action terms have been exhausted.

MODALITIES

Data processing is based on the principles of fairness, lawfulness and transparency and data minimization (privacy by design); the data processing may be carried out both manually and by automated means implemented in order to store, prepare and transmit data and shall take place by technical and organizational measures adequate to guarantee security, confidentiality, integrity, availability and resilience of systems and services, avoiding the risk of loss, destruction, unauthorized access to or disclosure of, or still, unlawful use, and reasonable steps shall be taken to erase or rectify without delay inaccurate data, in respect to the purposes for which they have been processed.

THE ENTITIES TO WHICH HIS OR HER PERSONAL DATA MAY BE DISCLOSED

His or her data may be processed exclusively by the employees of the corporate functions, who shall be authorized to data processing and shall be assigned to pursue the above-mentioned purposes. Such employees shall receive adequate operating instructions. His or her personal data may also be processed by other subjects, expressly appointed data processors, who provide to Tinvention S.r.l.:

  • Management and maintenance services of the applicants’ database;
  • Archiving services;
  • Mailing services.

RIGHTS OF DATA SUBJECTS

Data subjects shall be recognized the rights in articles 15 to 22 of GDPR, where applicable. In particular, data subjects may request from the data controller access to and erasure of personal data, rectification of inaccurate data, integration of incomplete data, and restriction in the cases provided in article 18 of GDPR. Data subjects shall have the right at any time, in whole or in part, to object to data processing, which is necessary to pursue the legitimate interest of the data controller. Such rights may be exercised by writing an e-mail to privacy@tinvention.net. It is intended that, whereas this request is submitted by electronic means, the information shall be provided in a commonly used electronic format. Data subjects shall have the right to lodge a complaint with a competent supervisory authority (in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement).

WITHDRAWAL OF CONSENT

Data subjects shall have the right to withdraw their consent at any time, by sending an e-mail to privacy@tinvention.net. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.


CONTACT DETAILS OF THE DATA CONTROLLER

The Data Controller is Tinvention S.r.l., with registered office at Via Giovanni Pacini n. 93, 20131 Milan (MI) Italy, represented by its legal representative.

Last update: 25.09.2023.