Information on data protection about our processing of applicant data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
Imaginary Institute s.r.l.
We are pleased about your interest in our company. In accordance with the provisions of Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data you have transmitted as part of the application process and any personal data we may have collected and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please note the information below.
1. RESPONSIBLE ENTITY IN THE PURPOSES OF DATA PROTECTION LAW
Imaginary Institute s.r.l. (con socio unico)
capitale sociale Euro 10.000 i.v.
Via Gustavo Fara 26
20124 Milano, Italia
Iscritta al Registro Imprese CCIAA Milano: REA MI – 2632919
phone: +39 349 8513291
2. CONTACT DETAILS OF OUR DATA PRIVACY OFFICER
Moritz Philip Recke
3. PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU-GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary for the decision to establish an employment relationship with us. The legal basis is Art. 88 GDPR i. V. m. § 26 BDSG-new and, if applicable, Art. 6 Paragraph 1 lit. b GDPR for the initiation or implementation of contractual relationships.
Furthermore, we can process your personal data if this is necessary to fulfill legal obligations (Article 6 (1) (c) GDPR) or to defend against legal claims asserted against us. The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). Give us explicit consent to process personal data for certain purposes, the lawfulness of this processing is given on the basis of your consent in accordance with Article 6 (1) (a) GDPR. Consent given can be revoked at any time with effect for the future (see Section 9 of this data protection information).
If there is an employment relationship between you and us, we can, in accordance with Art. 88 GDPR i. V. m. § 26 BDSG-neu further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of a law or a collective agreement, a company or Service agreement (collective agreement) resulting rights and obligations of the representation of interests of the employees is required.
4. CATEGORIES OF PERSONAL DATA
We only process data that is related to your application. This can be general data about you (name, address, contact details, etc.), information about your professional qualifications and school education, information about professional training and, if necessary, other data that you send us in connection with your application.
5. SOURCES OF DATA
We process personal data that we receive from you by post or email when you contact us or your application, or that you transmit to us using the contact form on the imaginary.institute website.
6. RECIPIENTS OF THE DATA
We only pass on your personal data within our company to those areas and people who need this data to fulfill contractual and legal obligations or to implement our legitimate interest.
We may transmit your personal data to companies affiliated with us, insofar as this is permitted within the scope of the purposes and legal bases set out in Section 3 of this data protection information sheet.
Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. In this case, the categories of recipients are providers of personnel management services and providers of applicant management systems and software.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations or if we have your consent.
7. TRANSFER TO A THIRD COUNTRY
A transfer to a third country outside the EU or the EEA is not intended.
8. DURATION OF DATA STORAGE
We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of 6 months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. In addition, we only store your personal data insofar as this is required by law or in a specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.
In the event that you have agreed to longer storage of your personal data, we will store them in accordance with your declaration of consent.
If the application process leads to an employment relationship, apprenticeship relationship or internship relationship, your data will continue to be stored, to the extent necessary and permissible, and then transferred to the personnel file.
9. YOUR RIGHTS
Each data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to notification according to Art. 19 GDPR and the right to data portability according to Art. 20 GDPR.
In addition, there is a right of appeal to a data protection supervisory authority under Art. 77 GDPR if you believe that your personal data is not being processed lawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected. Please also note that we may have to store certain data for a certain period of time in order to fulfill legal requirements (see Section 8 of this data protection information).
Right to object
Insofar as your personal data is processed in accordance with Article 6 (1) (f) GDPR to protect legitimate interests, you have the right, in accordance with Article 21 GDPR, to object to the processing of this data at any time for reasons arising from your particular situation to insert We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for processing. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.
To protect your rights, you are welcome to contact us.
10. NECESSITY TO PROVIDE PERSONAL DATA
The provision of personal data as part of the application process is not required by law or contract. You are therefore not obliged to provide information about your personal data. Please note, however, that these are necessary for the decision on an application or the conclusion of a contract in relation to an employment relationship with us. If you do not provide us with any personal data, we cannot make a decision to establish an employment relationship. As part of your application, we recommend that you only provide personal data that is required to process the application.
11. AUTOMATED DECISION MAKING
Since the decision about your application is not based exclusively on automated processing, no automated decision is made in individual cases within the meaning of Art. 22 GDPR.
Source: datenschutzexperte.de, Translated by Imaginary Institute s.r.l.