Work with us section policy

Types of data

The data processed is that entered in the Work With Us section or identifying data such as name and surname, contact data such as telephone and personal email and any other information present in the attached Curriculum Vitae. This includes information relating to:

a) The educational qualifications, professional experiences, skills, abilities and competences essential to fill the role selected by you or for any position that we may consider proposing to you;

b) The Data Controller may also process special category data pursuant to Article 9(b) of Regulation EU 679/2016 relating to their person for the purposes strictly necessary for hiring whereby essential for the procedure itself.

Processing purposes

Your data will be processed in order to carry out personnel selection activities. The processing is necessary to respond to your application or to offer you, at a later date, a new proposal if your profile is deemed appropriate to our needs.

Legal basis for processing

The legal basis for data processing is the fulfilment of pre-contractual obligations, as identified by Article 6(b) of EU Regulation 679/2016. The legal basis for processing special category data is represented by Article 9(2)(b) of EU Regulation 679/2016 as processing is necessary discharge the obligations to exercise the specific rights of the Data Controller or the Data Subject in matters of worker’s rights, social security and social welfare, to the extent authorised by European Union or member state laws or by a collective bargaining agreement pursuant to the laws of the member states, in the presence of appropriate guarantees for fundamental rights and the interests of the Data Subject.

The provision of data is mandatory. If not provided, it will not be possible to proceed with the selection of the application.

Data recipients

The data may be disclosed to employees and contractors of the Data Controller, who may process your data in compliance with the instructions given by the Data Controller. 

Your personal data may be processed by third parties that collaborate with the Data Controller for the same purposes. Your data may be communicated to the other Group companies solely for administrative purposes and for entering into contracts. These subjects may, as the case may be, operate as independent Data Controllers or as specially-appointed Data Processors.

Transfer of data

The Data Controller does not transfer Personal Data to third party countries or international organisations.

Data retention

The personal data you provide will be retained for the time strictly necessary for the purposes highlighted and in any case for a period not exceeding 24 months then at the end of this period, your data will be deleted.

Rights of the Data Subject

Pursuant to Article 13(2) and Articles 15 to 21 of the Regulation, we hereby inform you that you may exercise the following rights with regard to the processing of your Personal Data:

1. Right to obtain access to Personal Data and the following information:
   
   • The confirmation as to whether or not your Personal Data is being processed;
   • The purposes of the processing; 
   • The categories of personal data; 
   • The recipients or categories of recipients to whom the Personal Data has been or will be communicated;
   • Where the data is not collected from the Data Subject, any available information as to the origin thereof or the existence of an automated decision-making process, including profiling;
   • A copy of the personal data processed.
2. Right to rectification and integration of the personal data;
3. Right to data erasure (the right to be forgotten) if one of the following motives applies:
   
   • The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
   • The Data Subject revokes consent to the processing of the data and there is no other legal basis for the processing;
   • The Data Subject objects to the processing and there is no overriding legitimate reason to proceed with the processing;
   • The personal data has been unlawfully processed;
   • The personal data must be erased for compliance with a legal obligation under EU or Member State law to which the Data Controller is subject.

whilst if a Data Controller has made Personal Data public and is obliged to delete such data, they must inform other Data Controllers of the request to delete any link, copy or reproduction thereof;

4. Right to limitation of processing in the case in which:
   
   • The accuracy of the personal data is contested by the Data Subject, for a period enabling the Data Controller to verify the accuracy of the Personal Data;
   • The processing is unlawful and the Data Subject opposes the erasure of the personal data and requests instead the restriction of its use to be limited;
   • Even though the Data Controller no longer requires the personal data for the purposes of the processing, the data is nonetheless required by the Data Subject for the establishment, exercise or defence of legal claims;
   • The Data Subject has objected to the processing pursuant to Article 21(1), pending the verification as to whether the legitimate grounds of the Data Controller override those of the Data Subject;
   •  
5. Right to lodge a complaint with the Data Protection Authority, following the procedures and instructions published on the Authority’s official website, www.garanteprivacy.it;
6. The Data Subject’s right to data portability, as the right to receive in a structured, commonly-used and machine-readable format any Personal Data concerning them and provided to a Data Controller and – where appropriate – to transmit such to another Data Controller, where the processing is based on consent or on a contract and is carried out by automated means – where technically possible, the Data Subject also has the right to obtain the direct transmission of data from one Data Controller to another;
7. Right to object at any time to the processing of Personal Data, including profiling, in particular whereby:
   
   • The processing is carried out on the basis of the legitimate interest of the Data Controller, subject to explanation of the reasons for the objection; 
   • The Personal Data is processed for direct marketing purposes;
8. Right not to be subject to a decision based solely on automated processing, including profiling, except whereby the decision: is necessary for the entering into or executing a contract between the Data Subject and a Data Controller; is authorised by law of the EU or Member State to which the Data Controller is subject; or, is based on the Data Subject’s explicit consent.

Methods of exercising rights

Rights of Data Subjects

At any given time, Data Subjects may access their personal data, request corrections, updates and the erasure of said data. Data Subjects may also deny processing and request its limitation. 

The aforementioned requests may be sent via

• A registered letter with return receipt to Scart S.r.l. at Nucleo Pianacci 28 – 52011 Bibbiena (AR);
• A certified email to the address scart.imballaggi@pec.it;
• An email to the Data Protection Officer via dpo@scart.it.

Moreover, if processing is deemed to have been carried out in violation of the law regarding personal data protection, Data Subjects have the right to lodge a complaint with the Data Protection Authority at Piazza Venezia 11 – 00187 Rome.