Information pursuant to and for the purposes of art. 13, of EU Regulation 2016/679 (GDPR) relating to the protection of individuals with regard to the processing of personal data, as well as to the free movement of such data and which repeals Directive 95/46 / EC
Rastelli Rubinetterie srl would like to inform you that the European Regulation n. 679 of 27 April 2016 on the processing of personal data provides for the protection of individuals with regard to the processing of personal data.
Pursuant to article 13 of the EU REG. 2016/679, we invite you, therefore, to take note of the following information:
- Identification details of the Data Controller
The Data Controller is Rastelli Rubinetterie Srl, via Regione Monticelli, 10/14 Invorio (NO) Communicative references: Rastelli Rubinetterie srl, data controller
- Purpose of the treatment
The processing of personal data, including particular data (formerly sensitive data), provided upon hiring, is aimed solely at the establishment and management of the employment relationship, the management of tax, social security and insurance data, as well as security obligations of work and to what is established by laws, contracts and company regulations. The legal basis that justifies the processing of data is represented by the employment contract, by the fulfilment of legal obligations, as well as by the explicit consent.
- Processing methods
In relation to the afore mentioned purposes, the data are processed electronically and on paper. The data will be entered in the records and registers required by law and will be transmitted to social security institutions and financial offices in compliance with the provisions of the law for employers. All data processing operations are carried out in such a way as to guarantee the integrity, confidentiality and availability of personal data.
- Data retention period
The data provided will be kept for the entire duration of the employment relationship and for a subsequent period of up to 10 years.
- Scope of communication and dissemination of data
The data may be communicated to:
– all subjects to whom the right of access to such data is recognized by virtue of regulatory rules;
– to our collaborators, employees, in the context of the relative tasks in charge of processing the data;
– to all those natural and / or legal persons, public and / or private when the communication is necessary or functional for the establishment and management of the employment relationship, in the ways and for the purposes described above
- Rights pursuant to art. 15, 16, 17 18, 20, 21 and 22 of the EU REG. 2016/679
We inform you that as an interested party you have the right to lodge a complaint with the Supervisory Authority, the rights listed below, which you can assert by addressing a specific request to the Data Controller and / or the data processor, as indicated in point 1.
Art. 15-Right of access. The interested party has the right to obtain from the data controller confirmation that personal data concerning him or her is being processed and in this case, to obtain access to personal data and information regarding the processing.
Art. 16 – Right to rectification. The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17 – Right to cancellation (right to be forgotten). The interested party has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller has the obligation to delete personal data without undue delay.
Art. 18 – Right to limit the treatment. The interested party has the right to obtain the limitation of the processing from the data controller when one of the following hypotheses occurs: a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the treatment is illegal and the interested party opposes the cancellation of personal data and instead requests that their use be limited; c) although the data controller no longer needs it for processing purposes, personal data are necessary for the interested party to ascertain, exercise or defend a right in court; d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Art. 20 – Right to data portability. The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit these data to another data controller without impediments from part of the data controller to whom you provided them. In exercising his rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 – Right to object The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) of) , including profiling based on these provisions.
ART. 22 – Right not to be subjected to automated decision-making, including profiling The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which affects in a way analogous significantly on his person