Privacy Policy
This policy is provided to those who spontaneously or as a result of a personal search, send their resumes pursuant to and for the purposes of Legislative Decree No. 196 of June 30, 2003, as amended by Legislative Decree 101/2018 – “Code for the Protection of Personal Data” (hereinafter the Privacy Code) – and Article 13 of the European Data Protection Regulation No. 679/2016 (General Data Protection Regulation, hereinafter GDPR). The aforementioned legislation provides for the protection of individuals with respect to the processing of personal data and that such processing will be based on the principles of lawfulness, fairness and transparency and the protection of your privacy and rights. Your personal data will be processed in accordance with the legislative provisions of the above-mentioned legislation and the confidentiality obligations stipulated therein.
Data controller
The processing of personal data is carried out by Bakery Princi S.r.l. (hereinafter the “Company”), Via Speronari No. 6, 20123 – Milan (MI), Tax Code and VAT No. 12125380159, and enrolment with the Companies’ Register of Milan – Monza Brianza – Lodi No. MI – 1530153, which acts as the Data Controller for the processing of personal data. The data controller can be reached at the following contact address: e mail princi@princi.it.
Data protection officer
The Data Protection Officer is Frareg S.r.l., based in Viale Jenner no. 38 – 20159 Milan, Italy, which can be contacted at the e-mail address: dpo@frareg.com.
Legal basis for processing
Bakery Princi S.r.l. will carry out the processing:
– based on your consent;
– because it is necessary for the contractual and legal obligations to which it is subject.
Data Source
The personal data processed are those provided in connection with:
– Sending your resume by any means;
– Evaluation interviews.
Data communication and disclosure
The personal data processed by the Data Controller will not be disclosed to unspecified parties, in any possible form, including making them available or mere consultable without Your explicit consent, except for communications necessary for the evaluation of the candidate, for possible administrative files in case of employment.
They may, on the other hand, be communicated to the Data Controller’s workers, to some external subjects that collaborate with them, and to the Data Controllers of other companies traceable to Bakery Princi Srl, for employment and evaluation purposes.
Data Transfer
The Data Controller manages personal data on servers located within the European Union. It is, in any case, understood that, should it become necessary, the server may be moved within other EU countries and/or to non-EU countries. In this case, the Data Controller ensures that the transfer of data to countries outside the – EU will take place in accordance with Articles 44 et seq. of the GDPR and applicable legal provisions, entering into agreements that guarantee an adequate level of protection, if necessary.
The Data Controller also reserves the option of using cloud services. In the latter case, service providers will be selected from among those which provide adequate guarantees, as stipulated in Article 46 GDPR.
Data Retention
The processing will be carried out in automated and/or manual form, with methods and tools in compliance with the security measures referred to in Article 32 of the GDPR by specially appointed individuals, in compliance with the provisions of Article 29 of the GDPR (or: The processing of personal data exclusively for the mentioned purposes is carried out by means of manual, computerized, telematic tools, with logics that guarantee data confidentiality and security also understood in the sense of integrity and availability). We would like to inform you that, in accordance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Article 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the time limits prescribed by law.
Bakery Princi S.r.l. reserves the right to retain your resume for a period of 24 months, unless otherwise indicated by you, so that we can contact you again later for possible opening of further job positions, without prejudice to your right to request at any time the deletion of your data from the archives of the Data Controller (Bakery Princi S.r.l.). After 24 months, your resume and all your data will be deleted.
Rights of the data subject
At any time, you may exercise, pursuant to Articles 15-22 of the GDPR, the right to:
1- Ask for confirmation of the existence or non-existence of one’s personal data;
2- Obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and the retention period;
3- Obtain rectification and deletion of data;
4- Obtaining restriction of processing;
5- Obtain portability of data, i.e., receive them from a data controller, in a structured, commonly used, machine-readable format, and transmit them to another data controller without hindrance;
6- Oppose the processing at any time and also in the case of processing for direct marketing purposes;
7- Oppose automated decision-making related to natural persons, including profiling.
Withdrawal of consent
The data subject may withdraw any consent given at any time.
However, the processing that is the subject of this policy is lawful and permitted, even in the absence of consent, insofar as it is aimed at the execution of pre-contractual measures (the evaluation of applications and the selection of candidates) taken at the implicit request of the data subject.
Changes to this policy
The constant evolution of the services offered by the Company may result in changes in the features of the processing of the user’s personal data described so far. As a result, this privacy policy may be subject to changes and additions over time, which may also be necessary with reference to new regulatory interventions regarding the protection of personal data.
We therefore invite you to check its contents periodically: where possible, we will try to inform you promptly about changes and their consequences.
The updated version of the privacy policy, in each case, will be posted on this page, indicating the date it was last updated.
Legislative references and useful links
The processing of the user’s personal data is carried out by the Company in full compliance with the relevant regulations set forth in the Regulation (EU) 2016/679 General Data Protection Regulation, the Italian personal data processing regulations and the provisions of the Italian Supervisory Authority (http://www.garanteprivacy.it/) and, where applicable, of the foreign competent supervisory authorities.