CV policy

Dear customer

We wish to inform you that the UE 2016/679 (European regulation on personal data protection) provides for the protection of persons and other subjects and respect for the processing of personal data.

According to articles 13 and 14, therefore, we provide you with the following information:

1. Data subject

The data subject is

 S.P.M. S.p.a.
Via Patrioti, 44/46
25014 Castenedolo

In the person of the Legal Representative ANDREA LAFFRANCHI, domiciled at the company, which can be contacted by email address SPM@PEC.SPM-MOULD.COM or using the phone number 0303363211.

2. Purpose, legal basis for the processing of data

The processing of the personal data supplied by you is intended solely to perform the contractual obligations and to fulfill its specific requests, as well as to comply with regulatory obligations, particularly accounting and tax obligations.

For the purposes of the aforementioned treatment, the holder may become aware of data defined as “sensitive” pursuant to EU Reg 2016/679, such as those suitable for revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, adherence to parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, health status and sexual life.

3. Treatment modalities

In relation to the finalities, the data are processed in electronic and paper format. The control operations are carried out in such a way as to guarantee the logical security, security and confidentiality of personal data.

4. Legitimate interests pursued by the data controller or third parties

4.1. Nature of personal data

Your personal data, collected for the performance of the service you requested, relating to the following types of processing are the object of processing:

a) Reception, processing and storing your CVs submitted to us on our website

4.2. Mandatory or optional nature of the conferment

The provision of your personal data is not mandatory, but any refusal for the purposes indicated in point 4.1 paragraph a) could make it impossible or extremely difficult to provide the services you requested.

4.3. Scope of communication and dissemination of data

Your data may be disclosed to:

• all subjects whose right of access to such data is recognized pursuant to regulatory provisions;
• to our employees, employees, in the context of their duties;
• to all those natural and / or legal, public and / or private persons when the communication is necessary for the conclusion of the existing contractual object in the ways and for the purposes described above;
• to professionals or professional offices, or companies, for the purpose of processing accounting and tax obligations;
• The data you provide will be processed and communicated only in the Italian territory.

4.4.Timing of data retention

Your data will be stored in our archives, paper and computer, for a maximum time of 48 months from your application, once this deadline your data will be deleted from our archives and the paper data destroyed.

5. Rights of the interested party

5.1. Art . 15 (right of access), 16 (right of rectification) of the EU Reg. 2016/679

The interested party has the right to obtain from the controller the confirmation that the processing of personal data concerning him is being carried out and in this case, to obtain access to personal data and to the following information:

1. a) the purposes of the processing;
2. b) the categories of personal data in question;
3. c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
4. d) the period of storage of personal data provided or, if this is not possible, the criteria used to determine this period;
5. e) the existence of the data subject’s right to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their processing;
6. f) the right to lodge a complaint with a supervisory authority;
7. g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the expected importance and consequences of such processing for the data subject.

5.2.Right referred to in art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”)

The interested party has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to delete personal data without unjustified delay, if one of the following reasons exists:

1. a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
2. b) the data subject withdraws the consent on which the processing is based in accordance with Article 6, paragraph 1, letter, or Article 9, paragraph 2, letter a), and if there is no other legal basis for processing;
3. c) the data subject opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate prevailing reason to proceed with the processing, or he opposes the processing pursuant to Article 21, paragraph 2;
4. d) personal data have been unlawfully processed;
5. e) personal data must be deleted in order to fulfill a legal obligation established by Union law or the Member State to which the data controller is subject;
6. f) personal data was collected in relation to the offer of information society services pursuant to Article 8, paragraph 1 of EU Regulation 2016/679

5.3. Right referred to in art. 18 Right to limitation of treatment

The interested party has the right to obtain the treatment limitation from the data controller when one of the following hypotheses occurs:

1. a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. b) the processing is unlawful and the data subject opposes the deletion of personal data and requests instead that its use be limited;
3. c) although the data controller no longer needs it for the purposes of processing, personal data is necessary for the data subject to ascertain, exercise or defend a right in court;
4. d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, EU Reg 2016/679 pending verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

5.4. Right referred to in article 20 Right to data portability

The interested party has the right to receive in a structured format, commonly used and readable by automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance by part of the data controller

6. Withdrawal of consent to treatment

You are entitled to revoke your consent to the processing of your personal data by sending a registered letter with return receipt to the following address: SPM SPA – VIA PATRIOTI 44/46 – 25014 CASTENEDOLO (BS) accompanied by a photocopy of your identity document, with the following text: << revocation of consent to the processing of all my personal data >>. At the end of this operation your personal data will be removed from the archives as soon as possible.

If you wish to have more information on the processing of your personal data, or exercise the rights referred to in point 7 above, you can send a registered letter with return receipt to the following address: SPM SPA – VIA PATRIOTI 44/46 – 25014 CASTENEDOLO (BS). Before you can provide, or change any information, you may need to verify your identity and answer some questions. An answer will be provided as soon as possible.