Privacy Policy
Privacy Policy
▼ Information on the processing of personal data of Candidates who apply via the website using specific tools (forms) of the Data Controller and on the information present in the CV uploaded by the Candidate
▼ Data Controller
Lekkerland Italia S.C. a R.L. , Milanofiori – Strada 1 Palazzo F2 20057 Assago (MI) – gdpr@lekkerland.it
▼ Purpose [F] and Legal basis [B]
1. [F] Evaluation for the purpose of establishing and executing the contractual relationship
[B] Contract with the interested party (or pre-contractual measures adopted at the request of the same)
2. [F] Fulfillment of obligations under applicable regulations and standards
[B] Legal obligation
3. [F] Administrative-accounting obligations
[B] Legal obligation
4. [F] If necessary, to ascertain, exercise or defend the rights of the Data Controller in court or out of court
[B] Legitimate Interest of the Data Controller
5. [F] Efficient management of the contractual relationship and management of requests from interested parties
[B] Contract with the interested party (or pre-contractual measures adopted at the request of the same)
▼ Legitimate interests pursued by the Data Controller
The data controller can use his legitimate interest as a legal basis for a specific purpose by balancing his rights with those of the data subject, taking into account his "reasonable expectations" also in consideration of the existing relationship with the data controller himself.
When the treatment is based on the legitimate interest of the Data Controller, it is not necessary to request the consent of the interested party to pursue that specific purpose.
The processing must not adversely affect the rights and freedoms of the data subject.
Some examples of legitimate interest:
• Organizational efficiency of corporate data governance;
▼ Data recipients (by categories)
• Persons authorized to process duly instructed and held to confidentiality.
• Data processors who have signed binding agreements according to European legislation.
• Independent controllers with sufficient guarantees to process data subjects' data and with a valid legal basis for doing so.
By way of example, the data may be communicated to: a) external suppliers, specifically appointed, to identify candidates for roles for which particular skills are required.
▼ Transfers to third countries pursuant to articles 46, 47, 49 GDPR
Transfers to third countries will take place in accordance with current legislation:
• in countries recognized as safe by the EU Commission
• in countries with which Europe has international agreements on data protection
• with subjects with whom the Data Controller has entered into legally binding agreements aimed at providing adequate guarantees for the protection of the interested parties as required by law.
• in the presence of foreseen exceptions:
• consent of the interested party
• out of necessity and not in a repetitive way for the types and quantities of data that allow it.
Further details on the place, adequate guarantees and copy of the data can be requested from the Data Controller
▼ Criteria for determining the data retention period
The Data Controller applies the principle of data minimization for all treatments.
For some, the retention period can be determined more precisely than others, for example:
• for a maximum of 12 months from the provision of Candidate data
▼ Rights of Data Subjects
• Obtain confirmation or otherwise of a treatment in progress and possibly obtain access to data concerning the interested party
• Know the origin of the data processed by the Data Controller
• Verify the accuracy of the data concerning the data subject
• Oppose, for legitimate reasons, the treatment
• Request any integration, cancellation, updating, rectification, blocking of personal data processed in violation of the law, portability
Requests can be addressed to the Data Controller via the contact details in the header
Interested parties also have the right to:
• Be aware of breaches that may present a high risk to data subjects
• Propose a complaint to the competent Supervisory Authority in the Member State in which they usually reside or work or in the State in which the alleged violation occurred.
▼ Compulsory Contribution
The communication of personal data is a necessary requirement for the conclusion of the contract. When the interested party is obliged to provide personal data and does not provide them, it will be impossible to pursue the purposes for which the data are requested.
▼ Additional Purposes
If the data controller intends to further process personal data for a purpose other than that for which they were collected, before this further processing the Data Controller provides the data subject with information regarding this different purpose and any further information pertinent to the new purposes .
These communications may take place by updating the Information and/or through the contacts of the interested party.
▼ Version and date
V. 05 May 2023
