en
OPEN POSITIONS

Privacy policy Candidates

PRIVACY POLICY PURSUANT TO ART. 13 OF EU REGULATION 2016/679 (GDPR)

1. DATA CONTROLLER

The Data Controller is Quadra Research S.r.l., with registered office in Udine, Viale Giovanni Paolo II 3, Tax Code/VAT No. 02786400305. You may contact the Data Controller by telephone (0432-486407), telefax (0432-487229), or email selezione@quadraresearch.it.

2. CATEGORIES AND ORIGIN OF PERSONAL DATA PROCESSED

2.1 CATEGORIES OF PERSONAL DATA

In relation to the purposes set out below, the processing may concern the following categories of personal data:

  1. Identification and contact information (name, surname, place and date of birth, tax code, residence, telephone numbers, email).
  2. Data relating to the job position sought.
  3. Data relating to educational qualifications, work experience, and other information provided in the curricolum vitae.

2.2 SPECIAL CATEGORIES OF PERSONAL DATA

The Company may process “special categories of data” pursuant to art. 9 of the GDPR, where necessary under art. 9 para. 2 letter b) of the GDPR, such as health-related data like belonging to protected categories, possibly contained in the CV or in any additional documentation submitted by the data subject. This data may only be processed to assess candidates for job positions within the context of targeted recruitment. In the absence of such circumstances or the conditions of art. 9 GDPR, such data will not be processed and will be immediately deleted.

2.3 SOURCE OF PERSONAL DATA

The personal data may be obtained from the following sources:

  1. Directly from the data subject
  2. From publicly available sources, including professional social network profiles (in accordance with the limits and guarantees set out in this privacy policy).

3. PURPOSES OF PROCESSING, LEGAL BASES AND RETENTION PERIODS

PURPOSES OF PROCESSING LEGAL BASIS RETENTION PERIODS
1a) Inclusion in the Data Controller’s candidate database for recruitment purposes.
1b) Responding to advertisements for so-called “open positions,” i.e., job advertisements already posted on the website. In this case as well, the data will be entered into the Data Controller’s database for future and additional recruiting activities compatible with the profile of the data subject.		 Performance of pre-contractual measures at the request of the data subject (Art. 6.1(b) GDPR). Data will be stored for 5 years from the last activity carried out, unless the data subject requests its deletion at any time.
2) Processing of any personal data attributable to the special categories referred to in art. 9 of the GDPR to assess candidates for job positions within targeted recruitment. The need to folfil obligations and exercise specific rights of the data controller or data subject in the field of employment law and social security and social protection law (art. 9.2 letter b) GDPR). Data will be stored for 5 years from the last activity carried out, unless the data subject requests withdrawal of candidacy or deletion at any time.
3) Processing of public information relating to profiles present on professional social networks to verify the completeness and correctness of the profiles provided. Legitimate interest of the data controller (art. 6.1 letter f) GDPR). Data will be stored for 5 years from the last activity carried out, unless the data subject objects.
4) Administration of psycho-aptitude tests and exercises relating to the development and assessment of skills (selection), professional situations and various aptitudes in relation to the open position. Performance of pre-contractual measures at the request of the data subject (Art. 6.1(b) GDPR). Data will be stored for 5 years from the last activity carried out, unless the data subject requests withdrawal of candidacy at any time.

4. NATURE OF THE DATA PROVISION AND CONSEQUENCES OF REFUSAL

The provision of data is optional. However, any refusal to provide the requested data or to consent to their processing for the purposes indicated above will prevent the Data Controller from following up on your application.

5. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

Your data may be communicated, for the purposes referred to in paragraph 3, to the following recipients or categories of recipients:

  1. parties providing services for the management of the information system used by the Data Controller and communication networks (e.g., email providers, hosting services);
  2. consoltants and freelance professionals, including in associated form;
  3. authorities, entities and public bodies for compliance with legal obligations and/or provisions of public bodies, upon request;
  4. parties processing data in execution of specific contractual or legal obligations.

The recipients of the data mentioned above will process your personal data as independent data controllers or as data processors appointed by us pursuant to art. 28 of the GDPR. The updated list of data processors is kept at the Data Controller’s registered office.

6. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Personal data will not be transferred to third countries or international organizations.

7. DATA SUBJECT RIGHTS

At any time, you may exercise, pursuant to articles 15 to 22 of the GDPR, the right to:

  1. request confirmation of the existence or otherwise of your personal data;
  2. obtain information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
  3. obtain the rectification and erasure of data;
  4. obtain the restriction of processing;
  5. obtain data portability, i.e., to receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
  6. object to processing at any time and also in the case of processing for direct marketing purposes;
  7. object to automated decision-making relating to natural persons, including profiling;
  8. request from the data controller access to personal data and the rectification or erasure thereof or the restriction of processing concerning them or to object to their processing, in addition to the right to data portability;
  9. withdraw consent at any time without affecting the lawfolness of processing based on consent given before withdrawal;
  10. lodge a complaint with a supervisory authority (Garante per la protezione dei dati personali – www.garanteprivacy.it).

You may exercise your rights at any time by sending:

  1. a registered letter to the address Viale Giovanni Paolo II n°3 – 33100 Udine;
  2. an email to the address selezione@quadraresearch.it

8. PROCESSING METHODS

The processing of your personal data is carried out through the operations indicated in art. 4 no. 2) of the GDPR, specifically: collection, recording, organization, storage, consoltation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. Your personal data are subject to both paper and electronic and/or automated processing.

The Data Controller will process personal data for the time necessary to folfil the purposes mentioned above and in any case for no more than 5 years from their collection.