PRIVACY POLICY

This notice is provided pursuant to and for the purposes of Article 13 of EU Regulation 2016/679 of April 27, 2016 (“GDPR”) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 (“Privacy Code” and, together with GDPR, “Privacy Regulations”), by Prospectivae s.r.l.s. (hereinafter also referred to as “Prospectivae” or “Controller”), as further identified below, in its capacity as data controller, which aims to provide some information regarding any personal data provided by users who consult and/or interact with the website www.prospectivae.com (the “Site”) and its use by Prospectivae.

Types of processed data and categories of data subjects

The following personal data may be processed for the purposes indicated in the next paragraph:

  • Identifying data, personal details, and other information included in the user’s CV;
  • Contact details (email address).

The personal data belongs to the following categories of data subjects: users who consult and/or interact with the Site.

Purposes of data processing and related legal bases

The Controller will process personal data solely for the purpose of pursuing the following:

  • Purposes connected and/or instrumental to personnel selection and selection process management. The legal basis legitimizing this processing is Article 6(1)(b) of the GDPR, i.e., to perform pre-contractual and/or contractual measures;
  • Responding to user requests that may reach the Controller through the contacts provided in the “contacts” section of the Site. The legal basis legitimizing this processing is Article 6(1)(b) of the GDPR, i.e., to perform pre-contractual and/or contractual measures.

User data processing will be carried out only when strictly necessary for the achievement of the aforementioned purposes and, in any case, in compliance with Privacy Regulations.

The provision of personal data is voluntary and optional; however, the failure to provide it may result in Prospectivae being unable to respond to user requests and the user being unable to obtain what is requested.

Data processing methods

The processing of personal data takes place through manual, computerized, and telematic tools, solely for the purpose of achieving the purposes for which they were collected and, in any case, in a way that ensures the security and confidentiality of the data. Database storage is carried out in protected environments, access to which is controlled and in compliance with applicable legal provisions.

Categories of subjects to whom data may be communicated

The personal data provided will be processed, based on roles and work duties, by employees and collaborators of Prospectivae, duly authorized, and/or by third parties duly appointed as data processors. These subjects are authorized to process data within the limits of their competencies and in accordance with the instructions given by the Controller.

The complete list of data processors is available at the Controller’s headquarters, upon request.

Retention of personal data

The processing will not exceed the time necessary to achieve the purposes for which the data was collected. In particular:

  • For purpose (a), user CVs will be kept for a period not exceeding 1-3 months, considering the position under selection, unless the candidate has explicitly given consent (if required) for the retention of their CV for a longer period (up to 1 year) for future job opportunities;
  • For purpose (b), personal data will be processed exclusively for the time necessary to fulfill the user’s request.

Data Controller

The data controller is Prospectivae s.r.l.s. unipersonale, with registered office in 56017 San Giuliano Terme (PI), Viale Boboli no. 14, Italy, VAT and Tax Code IT02466980501.

The Controller hereby informs that, in accordance with Article 37 of the GDPR, a Data Protection Officer (DPO) has been designated, identified as Francesco Schiano and can be contacted at the following email address: info@prospectivae.com.

Rights of data subjects

Prospectivae informs Site users that, in relation to the aforementioned processing, they may exercise the rights provided for in Articles 15 and following of the GDPR. In particular, the user has the right to:

  • Access their personal data: in particular, the data subject has the right to obtain from the Controller confirmation of whether or not personal data concerning them is being processed, the ongoing processing, and access to personal data, as well as information regarding the origin of the data, categories of data processed, purposes of processing, means of processing, data recipients, retention period, any transfers to third countries, etc.;
  • Request the rectification of their personal data without undue delay, as well as the integration of incomplete personal data, also by providing a supplementary statement;
  • Obtain the erasure of personal data without undue delay, in cases where:
    • Personal data are no longer necessary for the purposes of processing;
    • The consent upon which the processing is based is revoked and there is no other legal basis for processing;
    • Personal data has been unlawfully processed;
    • Personal data must be erased to comply with a legal obligation.
  • Obtain the restriction of processing, in cases where the accuracy of personal data is contested (for the period necessary for the data controller to verify the accuracy of such personal data), if the processing is unlawful, and/or the data subject has objected to the processing;
  • Where applicable, object at any time to the processing of personal data based on the Controller’s legitimate interest;
  • Receive personal data in a structured, commonly used, and machine-readable format and transmit such data to another data controller, only in cases where processing is based on consent or a contract and only for data processed through electronic means (so-called right to data portability);
  • Where applicable, at any time, withdraw their consent, if the processing is based on such legal basis (the withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal);
  • Lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, the data subject who believes that the processing concerning them violates Privacy Regulations has the right to lodge a complaint with the supervisory authority of the Member State where they reside or work habitually, or where the alleged violation occurred.

To exercise their rights or obtain more information about this privacy policy, the data subject can send a written request to the Controller, indicating “Privacy – exercise of privacy rights” in the subject line, to the email address info@prospectivae.com.