PRIVACY POLICY

for job applicants pursuant to Article 13 of Regulation (EU) 2016/679 (1,2)

This Privacy Policy describes the methods of processing personal data of the subjects involved in the selection processes or who apply spontaneously (“candidates” or “interested”) through the website of Diatech Pharmacogenetics s.r.l. (hereinafter only “Diatech” or “Company” or “Data Controller”) accessible at the following address: https://www.diatechpharmacogenetics.com/en or voluntarily provided outside the company website.

In this Policy the term “personal data” means any piece of information that can identify a person, either as a single data subject or together with other data, such as name, surname, telephone number, e-mail address, information on respective studies and other personal information made available by sending a curriculum vitae and/or completing the “Personal Selection Questionnaire”.

This Privacy Policy does not apply to third party practices over which Diatech has no control, such as, but not limited to, third party websites, services and applications to which the user of the “Work with us” website  (https://www.diatechpharmacogenetics.com/en/work-with-us/) can choose to access through the Diatech website.

This policy therefore updates and replaces any previous versions issued to date.

 

  1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data controller of your data is Diatech Pharmacogenetics s.r.l., with registered office in Via Ignazio Silone, 1/b – 60035 Jesi (AN), which determines the purposes and methods of processing in full compliance with current legislation on the protection of personal data.

The Data Controller can be contacted by e-mail at legale@diatechcompany.com or by sending the communication to the address of the company headquarters.

Data Protection Officer – DPO

If you need any further information regarding your rights, please contact the DPO Protection Trade s.r.l., having its registered office at Itri (LT), Via Giorgio Morandi, 22, Italy, in the person of lawyer Patrizio La Rocca, contactable at the following address: dpo_diatechpgx@protectiontrade.it.

  1. SCOPE OF THE INFORMATION ON THE PROTECTION OF PERSONAL DATA
  • Data provided voluntarily by the data subject “off-line” (outside the company website)

Personal data and / or curriculum vitae sent by the person concerned by mail, e-mail or delivered directly to the headquarters, exclusively for selection purposes or self-application for employment.

Voluntary submission of personal data associated with the presentation of your curriculum vitae, in cases where the user is interested in participating in one of the open selections for hiring new staff on the page “Work with us”. The processing of such data is solely constrained to the selection process.

  • “Data provided offline or acquired online for any future selections“.

In the event that the selection for which you have applied is unsuccessful or if there are no selections in line with your profile, your personal data will be stored, within the limits of the data retention period indicated below, for any future selections related to professional positions in line with your CV.

Whatever the manner in which the data have been collected, their processing is always in compliance with the principles of lawfulness, fairness, transparency, relevance and not excess, in compliance with the purposes indicated above, to the extent that the collection is strictly necessary for treatment.

Specific data (for example those regarding “protected categories” (Law No. 68/99)) are not required but in the event that they are indicated in the curriculum, the Data Controller processes only the data relevant for the valutation of professional aptitude, to the extent that the processing of such data is strictly indispensable for the proper establishment of the employment relationship.

  1. LEGAL BASIS FOR PROCESSING

The personal data are processed because necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6, par. 1, lett. b) of the Regulation (EU) 2016/679.

Specific data (for example those regarding “protected categories” (Law No. 68/99)) that may be voluntarily inserted by Interested party in the curriculum are processed only if and to the extent that at least one of the following applies:

  • processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  • Pursuant to Article 9, par. 2 lett. b) of the Reg. (EU) 2016/679 (“processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject”) and to Article 88 (“Processing in the context of employment”)
  • Pursuant to Article 9, par. 4 of of the Reg. (EU) 2016/679, the observance of the “Prescriptions relative to the treatment of specific data in the labour relations” (Provv. 146 of 2019, Annex 1, par.1)” or of the rules of deontology according to art. 2 quater of the Privacy Code.

In the event of retention of your personal Data for any future selections in line with Your CV, the data processing will take place based on your consent which you will be asked to give after 12 months from the provision of data, using the email address you indicated during the application.

  1. NATURE OF THE CONFERMENT

The conferment of personal data is optional but your refusal implies the objective impossibility for the Data Controller to acquire and manage the job application.

  1. METHODS OF DATA HANDLING

The processing of data will be carried out in both digital and analog forms, using methods and tools designed to guarantee maximum security and confidentiality.

In case of submission of applications via the form accessible from the Company’s website, the provision of data marked with an asterisk (*) is required in order to send your application.

Although the conferment of personal data is optional, the refusal implies the objective impossibility for the Data Controller to consider and evalue you job application.

  1. DATA RETENTION PERIOD

The data collected for personnel selection purposes will be stored in our databases for the period necessary for the evaluation and in any case less than 12 months, except with your consent to an additional period of 12 months for the purpose “Data provided offline or acquired online for any future selections“.

At the end of this period, your personal data will either be destroyed or anonymized.

  1. PEOPLE AUTHORISED TO HANDLE, RESPONSIBLE FOR AND COMMUNICATE THE DATA

The handling of the collected data is carried out by Company staff identified and authorized for this purpose according to specific instructions given in compliance with current regulations.

The data collected, if it is necessary or key for the performance of the purposes indicated above, may also be processed by third parties appointed as external data processors, or, depending on the case, communicated to the third parties as independent data controllers, and precisely:

  • companies that are part of our corporate group;
  • persons, companies, associations or professional firms if necessary for the purpose (for example: technicians for the operation and maintenance of computer systems);
  • Judicial authorities or control bodies, and those who are required to communicate by law. These subjects will process the data as independent data controllers.

In any case, personal data will never be disclosed.

  1. DATA SECURITY

Diatech Pharmacogenetics has adopted specific physical, electronic and organizational measures in order to guarantee the security of personal data in its archives, in particular to prevent unauthorized access to its information systems, as well as to prevent the loss, alteration or unauthorized forwarding of data to third parties.

  1. RIGHTS OF THE DATA SUBJECT

The Interested Party has the right to excercise the rights granted by the (EU) Reg. 2016/679.

In particular, You have the right to:

  1. Obtain the confirmation that your personal data are being processed;
  2. Access to your personal data, obtaining the indication of purposes and methods of the treatment by the Data Controller, the categories of personal information concerned, the categories of recipients to whom your personal information may be disclosed, the envisaged period for the retention of your personal information, obtain the confirmation of the existence of automated decision-making, including profiling and, in these circumstances, receive the information about the logic applied in case of treatment carried out with the aid of electronic instruments, the importance and the possible consequences for the Interested party, if not defined in the text of this policy;
  3. Obtain the rectification or integration of your personal data, if inaccurate, incomplete or outdated;
  4. Restrict or object the processing of personal data, when permitted by the applicable laws;
  5. In cases provided by law, obtain the cancellation of personal data that are not strictly required for the pursuit of the above-mentioned purposes;
  6. Withdraw consent, if given;
  7. Request a copy of your Personal Data in electronic format so that you can transmit the data to third parties;
  8. Not be subject to a decision solely based on automated processing, including profiling, having legal effects that affect you or have a significant impact on you;
  9. Get alerted if your data have been seriously compromised.

If it deems it appropriate, the Interested Party has the right to lodge a complaint with a supervisory authority.

The Data Controller to turn to for the exercise of the rights is Diatech Pharmacogenetics s.r.l. contactable at the following addresses:

  1. e-mail legale@diatechcompany.com
  2. Letter with confirmation of receipt to: Via Ignazio Silone, 1/b – 60035 Jesi (AN), Italy

It is recommended to indicate any information necessary to handle your request.

  1. AMENDMENT TO THIS PRIVACY POLICY

Diatech Pharmacogenetics reserves the right to change this Privacy Policy by notifying you of changes in the document no less than 30 (thirty) working days before the effective date of the updated. The notice may also be published on the Company’s website (https://www.diatechpharmacogenetics.com/en/).

Last updated: 18th of March 2024

Reason for revision:

  • Integration of any processing of data relating to personnel selection;
  • Integration of any processing of specific data;
  • modification to legal basis;
  • modification to data retention period

Previous update: 15th October 2018

Reason for revision: The publication of DPO informations pursuant to Article 37 (par. 7) of Regulation (EU) n. 2016/679

Notes:

(1)           Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

(2)           Legislative Decree no. 196 of 30 June 2003 and subsequent modifications – CODE IN PROTECTION OF PERSONAL DATA