Policy on the processing and protection of personal data (hiring policy)
Art. 1. Data Controller: the person or the company deciding how and why to process data
Art Cosmetics S.r.l. Single-member private limited liability company, subject to the direction and coordination of AC HOLDING S.r.l.
Phone: +39 0363 547001
E-mail address: privacy@artcosmetics.it
CEM address: privacy@pec.artcosmetics.it
Art. 2. DPO Contact information
Art Cosmetics S.r.l. single-member private limited liability company has designated a DPO (Data Protection Officer). DPO contact information:
Phone: +39 0363 547001
E-mail address: privacy@artcosmetics.it
Art. 3. Purposes and legal basis for the processing: Why data are being processed and its justification
a) hiring.
Legal basis: to carry out precontractual activities (consent to data processing is not required).
Refusal to provide the requested data will impede the proper execution of the pre-contractual obligations.
Furthermore, it is emphasised that:
- No personal information shall be resold to third parties.
- No data shall be used to detect personal preferences/habits through automated tools (profiling).
- Art Cosmetics performs and keeps anonymous statistical analyses derived from the data collected for internal use only.
Art. 4. Processed data and methods of processing
The application requires a user profile on the recruitment system used by Art Cosmetics to be made by the applicant. When the applicant sends their first application, an email with a temporary password will be sent in order to access their account for the first time so they can update his/her data and information. The applicant must change the password on first log in.
Pursuant to the purposes outlined in Art. 3, the Data Controller processes the following data:
first name, surname, email address, telephone number, other data found in the CV and/or application form.
The data are processed within the limits strictly necessary to achieve the purposes set out in Art. 3 above, including with the aid of computers.
Data processing is carried out with appropriate measures to ensure the security and confidentiality of personal data, in particular in accordance with the principles of lawfulness, necessity and proportionality.
Art. 5. Data preservation
The data are processed and stored at the Data Controller’s head office and on the company tools used (e.g. servers and computers).
Some digital files are stored in cloud storage systems (e.g. information exchanged via email and data recorded in the recruitment software used by Art Cosmetics). Suppliers have been selected to ensure data protection and confidentiality.
These devices are physically located within the European Union.
The Data Controller will keep the personal data for the time necessary to fulfil the purposes outlined in Art. 3 above.
- a) – Hiring: 12 months after the last change made to the user profile.
Some data may also be present in backup systems. In such case, it will not be possible to remove it. We guarantee that in the event of a total erasure of the systems, such data will be anonymised/deleted again.
Art. 6. Data communication and transmission
The applicant’s information may be sent on to employment agencies which carry out interviews on behalf of Art Cosmetics.
The data are not subject to other communication or dissemination to third parties, except to satisfy any legal obligation.
Art. 7. Transfer of data to Third Countries
The data are not subject to communication and dissemination in countries outside the European Union.
Art. 8. Rights of the Data Subjects
Art. 7 no. 3 The Data Subject has the right to withdraw their consent at any time; Art. 15 Right of access, including the right to obtain an indication of the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; Right to obtain indication of the origin of the data collected, as well as the purposes and methods of processing. Right to make any claim to the Control Authority at any time (Data Protection Authority); Art. 16 The Data Subject’s right to have personal data updated, rectified or supplemented; Art. 17 Right to erasure (‘right to be forgotten’); Art. 18 Right to restriction of processing, where applicable; Art. 20 Right to data portability if permitted by existing technology; Art. 21 Right to object at any time for any reason on grounds relating to their particular situation if the processing is carried out in the exercise of official authority or in the performance of a task carried out in the public interest or if it is carried out on the basis of the legitimate interest of the Controller; Art. 22 Right to obtain information regarding automated individual decision-making, including profiling.
Art.19 also requires the Data Controller to communicate the rectification or erasure of personal data or restriction of processing requested by the Data Subject.
Art. 9. Requests of the data subjects: how rights can be exercised
The requests referred to in Art. 8 above may be submitted by the Data Subjects to the Data Controller using the specific ‘Exercise of personal data protection rights’ form available on the Data Controller’s website at the following address:
https://www.artcosmetics.it/data-subject-rights/
The Data Controller and the DPO may also be contacted at the addresses specified in Art. 1 and Art. 2 above.
Art. 10. Updates to this information
This information may be subject to changes and additions, as well as a consequence of possible regulatory changes and/or additions. Any changes will be communicated to the Data Subjects.
The Data Subject can request a copy of this information at any time by sending a request to: privacy@artcosmetics.it