Trasporti Internazionali Transmec Spa, acting as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679, hereinafter referred to as the “GDPR”, hereby informs you that the above-mentioned regulation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be carried out in accordance with the principles of fairness, lawfulness, transparency and protection of your confidentiality and your rights.

Your personal data will be processed in accordance with the legislative provisions of the above-mentioned regulation and the confidentiality obligations provided therein.

During the processing indicated, the Data Controller may process categories of common personal data and, in detail: personal data such as IP address and other common data managed through essential cookies (strictly necessary), personal data such as IP address and other common data managed through statistical cookies (performance cookies), education and training, employment, name, address or other personal identification details, psycho-aptitude test result reports.

The Data Controller may also become aware of special categories of personal data and, in detail: special data voluntarily included by the candidate in the CV sent and/or submitted spontaneously. The processing of these special categories of personal data is carried out in compliance with Article 9 of the GDPR.

Purpose and legal basis of processing: in particular, your data will be used for the following purposes related to the execution of measures connected with contractual or pre-contractual obligations:

• any special data voluntarily included by the candidate, processed solely for personnel selection purposes;

• personnel selection for the establishment of an employment relationship (for all companies of the group).

Your personal data may also, subject to your consent, be used for the following purposes:

• to draw up a psycho-aptitude profile of the candidate through tests and assessment activities, which will be integrated by the assessor into a broader analysis of the individual’s characteristics for recruitment purposes, always followed by feedback of the results to the candidate. By consenting to the storage of the test results for up to one year, in order to allow any possible evaluation for other positions consistent with the profile.

The provision of data is optional with regard to the above-mentioned purposes, and any refusal to processing will not compromise the continuation of the relationship or the appropriateness of the processing itself.

Processing methods: your personal data may be processed in the following ways:

• entrusting processing operations to third parties;

• data collection by electronic or telematic means;

• manual processing through paper archives;

• processing by electronic means.

All processing is carried out in compliance with Articles 6 and 32 of the GDPR and through the adoption of appropriate security measures.

Your data will be processed exclusively by personnel expressly authorized by the Data Controller and, in particular, by the following categories of authorized personnel:

• within the scope of personnel management;

• appointed interviewer;

• Human Resources Department.

Disclosure: your data may be disclosed to external parties for the proper management of the relationship and, in particular, to the following categories of recipients, including all duly appointed Data Processors:

• companies of the group;

• consultants and self-employed professionals, also in associated form;

• external provider duly appointed as Data Processor for candidate selection;

• software house acting as external Data Processor.

Dissemination: your personal data will not be disseminated in any way.

Your personal data may also be transferred, limited to the purposes indicated above, to the following countries:

• EU countries;

• secure non-EU countries.

Retention period: we inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization pursuant to Article 5 of the GDPR, the retention period of your personal data is:

• up to one year for other positions consistent with the profile;

• for the time necessary to evaluate the application according to company needs.

Data Controller: pursuant to the law, the Data Controller is Trasporti Internazionali Transmec Spa (Via Ponte Alto 32, 41011 Campogalliano (MO), VAT No. 00179970363), contactable at the following details: e-mail [email protected], telephone +39 059 895811, represented by its legal representative pro tempore.

Data Protection Officer (DPO) appointed by the Data Controller pursuant to Article 37 of the GDPR, contactable at the following e-mail address:

LUCIA GRASSI (contact address: at the company headquarters).

You have the right to obtain from the Data Controller erasure (right to be forgotten), restriction, updating, rectification, portability, and objection to the processing of your personal data, as well as, in general, to exercise all the rights provided for by Articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.

You may also consult the updated version of this privacy notice at any time by accessing the following internet address:
https://www.privacylab.it/informativa.php?09569307594

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exists, even if not yet recorded, to have it communicated in intelligible form and to lodge a complaint with the control authorities.

2. The data subject has the right to be informed of:

   - the origin of the personal data;

   - the purposes and methods of processing;

   - the logic applied in the event of processing with the aid of electronic systems;

   - the identification details of the data controller, the processor and the designated representative pursuant to art. 5, paragraph 2;

   - the parties or categories of parties to whom the personal data may be communicated or who may become aware of the personal data as designated representative in the territory of the country, data processors or persons in charge of processing.

3. The data subject has the right to obtain:

   - the updating, correction or, where the data subject wishes, supplementation of the data;

   - the erasure, conversion into anonymous form or blocking of the data if it is processed illegally, including data which it is not necessary to store, in relation to the purposes for which the data was collected or subsequently processed;

   - the certification that the parties to whom the data was communicated or disclosed were informed of the transactions set out under letters a) and b), also as regards their content, unless fulfilling such obligation proves impossible or would involve a disproportionate effort in relation to the right protected;

   - the portability of the data.

4. The data subject has the right to object, fully or partially:

   - for legitimate grounds to the processing of his or her personal data, even if pertinent to the purpose for which it was collected;

   - to the processing of his or her personal data for the purposes of sending advertising material or direct sales or to carry out market research or commercial communication.