Information on the processing of personal data of candidates

Who is the data controller?

Your personal data will be processed as Controller by inovaLab S.r.l., with registered office in Padua, Vicolo Bellini 10F, VAT and tax code 03890870284. You can contact us at any time and for any request related to this information at this address: info@inovalab.eu.

Why are we providing you with this information?

We provide you with this information in compliance with the obligations imposed by art. 13 of EU Regulation 2016/679 (hereinafter, “GDPR”) and it concerns the data that we will process when you spontaneously propose your candidacy or respond to a specific advertisement in the “Join us” section of our website inovalab.eu.

What data will be processed?

We will process the data that you will provide us through your Curriculum Vitae, such as, by way of example and not exhaustively, your personal data (name, surname, date of birth), contact details (email address and telephone number), data relating to your education (education, professional and/or degree courses taken), data relating to your professional path. We also inform you that we may analyze the professional social profiles made freely available on the Internet by you (e.g. Linkedin).

Special categories of personal data

It is possible that in the Curriculum there may be data that fall within the categories of special data listed in Article 9.1 of the GDPR:

  • data suitable for revealing racial or ethnic origin;
  • political opinions, religious or philosophical beliefs;
  • union membership;
  • data relating to the person’s health, sexual life or sexual orientation.

 

We invite you to communicate such data only where expressly provided for in the job advertisement in relation to membership of protected categories, specifying that in the event of the transmission of special categories of personal data but in the absence of specific consent to process such data, inovaLab cannot be held responsible in any way, nor can it receive disputes because in that case the processing will be allowed as it concerns data made manifestly public by the data subject pursuant to Article 9.1 of the GDPR. Therefore, as mentioned above, it is important to explicitly consent to the processing of such special categories of personal data where you decide to share such information.

Purpose and legal basis

Below we list the reasons why we process your data (purpose of processing) and the legal framework that allows us to do so (legal basis).

 

Purpose  Legal basis Activity Data retention
Application for a job position 6.1 (b) of the GDPR

Execution of pre-contractual measures

 We will process your data to evaluate your professional profile and eventually contact you for collaboration purposes 1 year

How do we process your data?

We process your data using computer and/or telematic tools and adopting a series of security measures that prevent unauthorized access, disclosure, modification, or destruction of your data.

Who has access to your data?

Internal subjects of inovaLab (administrative, commercial, marketing, legal personnel) or external subjects (such as third-party technical service providers, hosting providers, IT companies, communication agencies) may have access to your personal data. All these subjects have been appointed, as the case may be, as Data Processors or Controllers for the purpose of providing the service and have received clear and precise instructions on how to handle your data.

Retention period of personal data

Your personal data will be kept as long as the position for which you sent the Curriculum is available or, in the case of a spontaneous application, for up to one year from their receipt. InovaLab reserves the right to contact candidates shortly before the indicated deadline to request an extension of this retention period. InovaLab reserves the right to destroy curricula or any other document containing personal data deemed not compliant with the purposes of this information.

Do we transfer your data to third countries?

No transfers of personal data outside the European Union are made.

What are your rights and how can you exercise them?

The GDPR guarantees you the exercise of a series of rights in relation to the processing of your personal data. In particular, you can request:

  • access to your data (Art. 15 GDPR);
  • the rectification of your data (Art. 16 GDPR);
  • the erasure of your data (Art. 17 GDPR);
  • the limitation of the processing of data (Art. 18 GDPR);
  • the portability of data concerning you (Art. 20 GDPR).

We remind you that, pursuant to Art. 7 GDPR, you have the right to withdraw your consent at any time; the revocation of consent does not affect the lawfulness of the processing based on the previous consent. You can make a request to object to the processing of your data based on Art. 21 GDPR, in which you provide evidence of the reasons justifying the objection. We reserve the right to evaluate your request, which will not be accepted in case of legitimate reasons to proceed with the processing that prevail over your interests, rights, and freedoms. You can exercise your rights by writing to the email address indicated above.

In any case, you always have the right to lodge a complaint with the competent Control Authority (Data Protection Authority) pursuant to Art. 77 of the GDPR if you believe that the processing of your personal data is in violation of the applicable law.

What happens in case of changes to this policy?

InovaLab reserves the right to make changes to this policy at any time, by giving notice to the interested parties via the email address provided by you. Please check your email, using the last modification date indicated at the bottom as a reference. In case of non-acceptance of the changes made to this policy, please let us know, and we will proceed with the deletion of any of your data in our possession.