INFORMATION PROCESSING OF PERSONAL DATA
pursuant to Article 13 of Regulation (EU) 2016/679

Dear Candidate,

the insertion and sending of data from the Form Work with Us implies the processing of personal data, as defined by current legislation.
Icma San Giorgio spa undertakes to be transparent about the way in which it uses this data and to the subjects with whom it shares it. To this end, we invite you to view the purposes and methods of data processing indicated below.

Data Controller (hereinafter referred to as "Data Controller")

Icma San Giorgio spa
Via Madonnina, 75 – 20010 S. Giorgio Su Legnano
E-mail icma@icmasg.it Tel. 0331/407004

Purpose and legal basis of the processing

We will process your personal data on your express consent (Article 6, paragraph 1, letter a - Reg.EU 679/2016) to evaluate your application for the purposes of any selection of current or future personnel.
Please do not send us particular data c.d. In the event that you belong to a protected category and you wish to communicate to us optionally your membership in these categories, we invite you to attach specific consent for the processing of this data.

Categories of recipients of personal data

The collected data will not be disclosed to third parties. We inform you that Icma San Giorgio spa uses IT suppliers, such as: assistance and website maintenance, hosting services supplier. Where applicable, the Data Controller has bound the processing of data by the aforementioned recipients through a contract or other legal act that governs the processing of data pursuant to art. 28 of EU Regulation 679/2016. Icma San Giorgio spa undertakes to qualify the intended recipients also with a view to guaranteeing the protection of data confidentiality and regulatory compliance. The interested party may request to the Data Controller the name of those recipients at any time. The Data Controller has defined, in view of the fundamental principles established by current legislation, the persons authorized to process personal data under their direct authority. These persons act on the basis of specific instructions provided for the purposes and methods of the processing.

Data retention period

Personal data will be stored for up to 36 months after acquisition and will subsequently be deleted.

Fundamental rights of the data subject and how to exercise them

The interested party, in accordance with EU Regulation 679/2016, can exercise the following rights:

a) Right of access: lthe data subject has the right to obtain from the Data Controller confirmation that personal data processing is being processed and, in this case, to obtain access to personal data and information art. 15, in particular: purpose of the processing, categories of personal data, categories of recipients, to which the data have been or will be communicated, the retention period of the data or the criteria used to determine this period, the origin of the data, the existence of an automated process, including profiling.

b) Right of rectification: the interested party has the right, pursuant to art. 16, to obtain from the Data Controller the correction and/or integration of inaccurate personal data concerning him, without unjustified delay.

c) Right of cancellation:the data subject has the right to obtain from the Data Controller the deletion of personal data concerning him/her without undue delay for the reasons specified in art. 17. In case of revocation of consent, the cancellation can be performed if there is no other legal basis for the treatment.

d) Right to limit processing: the data subject has the right to obtain from the Data Controller the limitation of processing in the cases referred to in art. 18;

e) Data portability right: the data subject has the right, pursuant to art. 20, to receive personal data concerning him in a structured format, commonly used and readable by automatic device.

f) Right of withdrawal of consent: the interested party has the right, pursuant to art. 7, paragraph 3, to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment given before the revocation.

The interested party may also exercise the Right to object. Pursuant to art. 21, the interested party has the right to object to the processing of data concerning him for the purposes referred to in art. 6, paragraph, letters e) (processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority vested in the data controller) or f) (the processing is necessary for the pursuit of legitimate interest of the data controller or third parties, provided that the interests or the fundamental rights and freedoms of the data subject who request the protection of personal data do not prevail, in particular if the data subject is a minor).
The interested party can exercise these rights at any time and withdraw consent in an easy way, by sending a specific request to the Data Controller, to the e-mail address icma@icmasg.it, who will inform him of the receipt and will follow up his request without unjustified delay and, in any case, within one month of receiving the request.
Pursuant to art. 19, the requests relating to the rights referred to in Articles 16., 17 and 18 will also be transmitted by the Data Controller to any interested recipients.

The right to complain to a supervisory authority

The interested party also has the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data http://www.garanteprivacy.it).

Necessity and Consequences of a refusal to communicate personal data

The communication of personal data is optional but essential to accept your application.
The refusal to provide data will not allow your application to be considered.

For all the definitions, refer to the binding legislation with particular reference to the European Regulation 679/2016 and to Legislative Decree 196/03 and subsequent amendments.

Icma San Giorgio spa

ICMA attending next PRS in Amsterdam 1-2 April 2025

LATEST ARTICLES