PRIVACY POLICY

Pursuant to Article 13 of the EU Reg. 2016/679 (hereinafter, "GDPR")

for the processing of personal data - cv of candidates Far Networks

  1. GENERAL INFORMATION

Applicants are informed of the following general profiles, which apply to all areas of the processing of their data within the Far Networks organization (hereafter, also as "data subject(s)", ex art. 4, c. 1 GDPR):

1.1 The Data Controller is Far Networks S.r.l. in the person of its legal representative and Chairman of the Board of Directors Nicola Fracassi, with registered office in Gorgonzola (20064 - MI) - via Mattei n. 65 and operational headquarters in Cernusco sul Naviglio (20063 - MI) - Strada Padana Superiore n. 19/D, c.f. and p.i.: 05313430968, which you can also contact at the following addresses: far.info@farnetworks.com - tel. +39 02.92271.450 - fax. +39 02.92271.456.

1.2 All candidate data are processed lawfully, fairly and transparently towards the data subject, in accordance with the general principles set forth in Article 5 GDPR, being collected and subsequently processed, by the Data Controller, for the purpose of carrying out the recruitment, selection and evaluation of personnel.

1.3 We have taken specific security measures to prevent data loss, illegal, or incorrect use, and unauthorized access.

1.4 Data processing is carried out with the support of computerized/telematic means and/or manually and concerns "common" data (name/surname/address/phone/email/tax code/banking data/social security position) or information, by the person concerned spontaneously included in his/her professional profile or which emerged during the interview, which also includes "special categories of data" (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as dealing with genetic data, biometric data intended to uniquely identify a natural person, data relating to a person's health or sexual life or sexual orientation). In particular, the personal data collected are essentially common data - identifying and curricular - therefore, the interested party/candidate will not be required to indicate - with exceptions - those mentioned above as "special data"; except in the case in which the special data listed above must be known in relation to the purpose of knowing whether the interested party belongs to the protected categories for the purposes of employment as provided for by law; moreover, it is anticipated as of now that during the interview phase it is possible that data relating to criminal convictions and offenses may also be processed.

1.5 The updated list of persons authorized to process on behalf of the Controller as well as the external data processors designated by Far Networks is available at the Controller's office.

  1. PURPOSE, PROVISION OF DATA AND COMMUNICATIONS

2.1 Purpose and Scope

The processing of personal data is carried out to fulfill the purpose of recruitment, selection and evaluation of personnel (for the purpose of hiring and/or initiation of professional collaboration), following the receipt - either spontaneously or as a response to specific recruitment and personnel selection advertisements published by the Owner - of the curriculum vitae from the candidate.

Please note that Far Networks may make use of online platforms (e.g.: LinkedIn Premium service) that can be used to search, organize and communicate with potential candidates. The aforementioned Premium service is governed by LinkedIn's Privacy Policy which can be found at the link https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv; in addition, if the individual decides to register via social login, we recommend viewing the privacy policy present on the relevant platform (e.g.: LinkedIn).

In any case, it should be noted that the Data Controller may verify, also through specialized companies, that the personal data provided correspond to the truth by making use of public information (including professional social network profiles, databases, web registers or publicly accessible multimedia archives). In this case, the related processing that follows, in accordance with the indications of the Working Group Article 29 in the "Opinion on data processing at work", is limited to only information related to professional aptitude for work, necessary for the sole purpose of assessing the specific risks related to the type of activity to be carried out by the candidates, carried out to the least intrusive extent possible, taking all necessary measures to ensure a proper balance between the employer's legitimate interest in monitoring and the fundamental rights and freedoms of the latter.

2.2 Contribution

The provision of "common" data for the purposes mentioned in section 2.1 is entirely optional, as it is in the candidate's interest to offer complete information regarding his or her work experience as well as contact details, and this is done in order to be able to obtain a response or to provide Far Networks staff with useful elements to prepare an interview with the candidate.

In the case of information provided by the data subject, within his or her professional profile or during an interview, which also includes "particular categories of data", Your possible consent to the processing of the data better illustrated in art. 1.4 of this notice for the execution of the purposes referred to in point 2.1 is of a mandatory nature; therefore, we inform you that your possible refusal to consent to the processing in question does not allow the Holder to carry out the selection and personnel assessment activities.

2.3 Communications

The Data Controller may disclose and/or make accessible the data of data subjects for the purposes mentioned in Section 2.1:

  1. (a) to employees and collaborators of the Owner in their capacity as authorized processors and/or system administrators;
  2. b) to third party companies or other entities (by way of example, professional firms, consultants, service companies, etc...) that perform outsourcing activities on behalf of the Controller, in their capacity as external data controllers or to the Controller's associates for the exercise of their control rights.

The data will not be subject to dissemination by the Data Controller (i.e., bringing your data to the attention of an indefinite number of parties).

  1. LEGAL BASIS, DATA TRANSFER AND RETENTION TIME

3.1 Legal basis

  1. a) The processing of so-called "common" data is carried out for the execution of pre-contractual measures taken at the request of the same data subject pursuant to Art. 6 co. 1 letter b) of the GDPR.
  2. (b) The processing of special categories of personal data, will be carried out only in the event that the person concerned expresses his or her consent independently, freely and specifically in accordance with Article 4 No. 11 of the GDPR, which, for convenience, is collected at the bottom of this notice.
  3. (c) In the case of actions to assert or defend a right in court, including for possible pre-contractual liability, the legal basis for processing is the legitimate interest of the Data Controller.

3.2 Data Transfer

The data are stored at the Data Controller's servers or at third-party companies, appointed as external data controllers by processing the data on behalf of the Data Controller, whose servers are located within the European Economic Area; any data transfers to sub-processors abroad will be covered by standard contractual clauses and/or adequacy decisions, in accordance with Articles 45 and 46 GDPR.

3.3 Preservation

The Data Controller retains and processes the personal data for the time necessary to fulfill the purposes indicated and, in any case, where the interview has not resulted in a recruitment and/or work and/or professional collaboration for a maximum of 24 months from the date of the inclusion of the cv in the database or its subsequent update, following a request to that effect by the data subject, and this for the legitimate interest of the Data Controller to have professional profiles for subsequent inclusion in its structure, all provided that no prior request for revocation of processing by the data subject has taken place.

However, the data subject is invited to express his or her disagreement, if any, to such storage subsequent to the interview stage with the consent/disagreement form at the end of this letter.

After the above retention periods have elapsed, personal data will be destroyed or anonymized, consistent with technical procedures for deletion and backup.

  1. AUTOMATED DECISION-MAKING PROCESSES

The Holder does not carry out on the data of those who spontaneously, or as a result of a personnel search, send their resumes, processing that consists of automated decision-making processes.

  1. YOUR RIGHTS

5.1 You may freely exercise the following rights in relation to the data processed by Far Networks:

  1. (a) Obtain confirmation that a processing of data concerning you is or is not taking place, and if so, obtain access to the data and information about the processing.
  2. (b) Request rectification of inaccurate data;
  3. c) Request the deletion of the data in the event that, among other reasons, the data are no longer necessary for the purposes for which they were requested; in this case, Far Networks will cease to process the data, except where the data are necessary for the establishment, exercise or defense of a right.
  4. (d) Request the application of data processing limitation, in which case the data may be processed only with the consent of the data subject; exceptions to this are the retention of the data and its use for the establishment, exercise or defense of a right or for the protection of the rights of other natural or legal persons or for reasons of substantial public interest of the European Union or a Member State.
  5. (e) Object, in whole or in part, for legitimate reasons, to the processing of your data, in which case, Far Networks shall cease processing the data, except where the same is necessary for the defense against possible claims.
  6. f) Receive, in a structured, commonly used, machine-readable format, the data provided to Far Networks or request that Far Networks transfer it directly to another data owner when technically possible.
  7. (g) To revoke the consent granted, if relevant, for the purposes specified in Section 2 above without affecting the lawfulness of the processing on the basis of the consent provided prior to revocation.

5.2 The aforementioned rights of access, rectification, cancellation, restriction, opposition, and portability of data may be exercised directly by the data subject or his or her legal representative or volunteer, by request addressed to Far Networks at its contact details by sending a registered letter to.r. at the registered office of Far Networks S.r.l. in Gorgonzola (20064 - MI) - via Mattei n. 65 or at its operational headquarters in Cernusco sul Naviglio (20063 - MI) - Strada Padana Superiore n. 19/D as well as by email to far.info@farnetworks.com or, finally, by pec email to farnetworks@pec.com.

The data subject has the right to file a complaint with the competent supervisory authority.

***

The undersigned at the bottom identified declares that he/she has received complete information according to Art. 13 GDPR and gives his/her explicit consent to the processing and communication in case of his/her own data falling under the special categories of data according to Art. 9 GDPR gives his/her explicit consent to the processing of data for the period indicated in the information (24 months).

Cernusco sul Naviglio, Date__________________________

Nome ________________________________________

Cognome ______________________________________

Firma ________________________________________