artt. 13-14 del Reg.to UE 2016/679
The disclosure is a general obligation that must be fulfilled before or at the latest when initiating the direct collection of personal data. In the case of personal data not collected directly from the data subject, the information must be provided within a reasonable time, or at the time of communication (not registration) of the data (to third parties or the data subject). Pursuant to the General Regulation for the Protection of Personal Data of Natural Persons (GDPR – Reg.(EU)2016/679), the undersigned organization, data controller, informs of the following:
Sources and categories of personal data
The personal data held by the undersigned organization are collected directly from the data subjects and by them directly and freely provided and from third parties (e.g. databases and private investigation companies).
The collection will concern only common data; therefore the candidate will not be required to indicate those particular c.d. as qualified by art. 9 of Reg. 2016/679 or on the state of health.
‘Data of particular categories’ means data suitable for revealing racial or ethnic origin, philosophical or other religious beliefs, political opinions, membership of trade unions, associations or organisations of a religious nature, philosophical, political or trade union, the state of health and sexual life, biometric identifying and genetic (although the latter are absolutely not treated). Judicial data are those that are capable of revealing measures in the field of criminal records, the register of administrative sanctions dependent on crime and the related pending loads, or the quality of accused or suspected person in accordance with the Code of Criminal Procedure.
This is without prejudice to the hypothesis in which the data in question must be known due to the possible establishment of the employment relationship, with particular reference to the possible belonging of the interested party to the protected categories and to any pre-assunctive medical examinations.
Purpose and legal basis of processing
Personal data, identifying and curricular, as well as, where appropriate, particular categories, collected from the interested party or third parties that the Data Controller uses for the selection procedures, shall be processed and used to comply with the request of the person concerned and, more specifically, to verify the conditions for recruitment and/or the initiation of cooperation.
Consequences of refusal to provide data
The provision of the data collected from the interested party is optional and it is left to the will of the candidate to submit his curriculum vitae. With regard to the data subsequently and possibly requested by the Data Controller, failure to provide it will make it impossible to proceed with the verification of the conditions for the recruitment and/ or for the start of the collaboration and, the possible establishment of the relationship with the Data Controller. The consent to the treatment is not necessary according to art. 6 co.1 lett. b) Reg. 2016/679, insofar as the processing concerns the data contained in the curricula spontaneously transmitted by the data subjects for the possible establishment of a working/collaboration relationship, without prejudice to data belonging to particular categories for which consent is required pursuant to art. 9 co.1 lett. a) Reg. 2016/679
method of data processing
Data processing means the collection, registration, organisation, storage, processing, modification, deletion and destruction of data or the combination of two or more of these operations. In relation to the aforementioned purposes, the processing of personal data is carried out on paper and by means of manual, computerized and telematic tools, including automated, capable of storing and managing the data themselves, with logics strictly related to the purposes themselves and, however, in order to ensure security and confidentiality; personal data will therefore be processed in accordance with the methods indicated in art. 5 Reg.to EU 2016/679, which provides, inter alia, that the data are processed lawfully and fairly, collected and recorded for specific, explicit and legitimate purposes, accurate, and if necessary updated, relevant, complete and not exceeding the purposes of the processing, with due regard for fundamental rights and freedoms and the dignity of the person concerned, in particular with regard to confidentiality and personal identity, through protection and security measures. The undersigned organization has set up and will further improve the security system of access and data retention.
There is no automated decision-making (e.g. profiling).
Extra-EU transfers
The processing will take place mainly in Italy and the EU, but it could also take place in non-EU and non-EEA countries if it is considered functional to the efficient fulfilment of the purposes pursued in compliance with the guarantees in favour of the data subjects.
storage life
Personal data will be stored by the Data Controller up to and not later than five (5) years from their collection except for the possible establishment of the employment and/or collaboration relationship.
target groups
The data are shared between the companies of the group (Rear Soc. Coop., Rear Vigilanza Srl, General Service Soc. Coop. ). Data (only indispensable data) are communicated • to data processors, both internal and external, who carry out specific tasks and operations • in cases and subjects provided by law The data will not be disseminated unless otherwise provided by law. In addition, without the prior general consent of the data subject to communications to third parties, even where such communications are useful or to protect, safeguard or promote the interests of the person, it will be possible to provide only services that do not provide such communications.
User rights
At any time you may: exercise your rights (access, rectification, cancellation, limitation, portability, opposition, absence of automated decision-making processes) when provided against the data controller, pursuant to art. from 15 to 22 of the GDPR; submit a complaint to the Italian Data Protection Authority (www.garanteprivacy.it); if the processing is based on consent, revoke the consent given, considering that the withdrawal of consent does not prejudice the lawfulness of the processing based on consent before the revocation.
Contact details and contacts
the data controllers are
1) REAR SOC. COOP., con sede in Via Pietrino Belli 55, 10145, Torino; E-mail:
privacy@rearonline.it, Tel. 011-5360400
2) REAR VIGILANZA PRIVATA SRL, con sede in Via Nizza 294, 10126, Torino; Tel. 011-5627965
3) GENERAL SERVICE SOC. COOP., con sede in Via Pietrino Belli 55, 10145, Torino; E-mail:
privacy@rearonline.it, Tel. 011-5360400
The complete list of data processors is available on request.
