Personal Data Processing Information

Recruiting - CV

Renewcast S.r.l. (hereinafter also the “Data Controller”) issues the following information to the Data Subject, the person to whom the personal data refers, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereafter GDPR), concerning the protection of personal data. This information is intended to describe the characteristics of the processing carried out in relation to the personal data provided by the Data Subjects and the measures taken in order to protect their rights.
This information is released on the Renewcast (https://renewcast.com/ hereinafter the Site).

Data Controller
The Data controller is Renewcast S.r.l., domiciled and headquartered in Roma - 00192, Viale delle Milizie n. 140 (VAT 15801141001), e-mail address: renewcast@legalmail.it

Data subject to treatment
The Data Controller essentially collects the following personal data:
- biographical data
- education data
- contact details
- image
- data belonging to particular categories, such as data disclosing health, if also communicated through the CV or if the position is reserved for protected categories
- as well as, in general, information relating to the Candidate's professional experience in the form of a curriculum vitae and/or covering letter.

The Data Controller will process only personal data that is relevant and strictly indispensable for the establishment of the eventual employment relationship; therefore, the collection will concern only common data as. The Candidate shall not, therefore, communicate data belonging to particular categories insofar as they are not strictly indispensable to the establishment of the eventual employment relationship.
Should the job position offered by the Data Controller be aimed at protected categories and/or should the candidature spontaneously come from a person belonging to a protected category, the Data Controller may use the data belonging to particular categories of the Data Subject only and exclusively within the limits of the establishment of the employment relationship, subject to the consent of the Data Subject.

Purposes of the treatment
Personal data will be processed for the following pourposes:
a) to evaluate the application
b) start a working partnership

Why the treatment we perform is lawful
The processing is lawful because it is based on the following legal bases:
- execution of pre-contractual measures adopted at the request of the data subject.
- Consent of the data subject, if the Applicant communicates data belonging to particular categories whose collection is strictly necessary for the evaluation of the application.

Treatment modalities

The personal data are processed for the pursuit of the Purposes indicated in this information on electronic media.

Compulsory or optional nature of data provision

The provision of data is optional and refusal to provide the same, will make it impossible for the Data Controller to evaluate the application and thus to initiate a possible work collaboration.

Data retention

Personal data will be kept for the period of time strictly necessary to pursue the Purposes for which they were collected. The Data Controller may, however, retain personal data even afterwards, if it considers that further purposes related to personnel search and selection interests continue to exist. In any case, for the case of:
- spontaneous candidature, the data subject's personal data will be retained for 12 months from receipt of the curriculum;
- response to specific personnel search and selection advertisements published by the Data Controller and/or on its behalf by third parties, personal data will be retained for as long as the offer remains valid. After that, six months after the offer ceases to be valid, the personal data will be deleted.

Personal data will be deleted (by deletion of the curriculum vitae), in case of withdrawal of the consent given by the Candidate in case he/she has communicated data belonging to particular categories. Categories of subjects to whom personal data may be communicated
The processing of personal data provided to us may be carried out in accordance with the principle of strict necessity of treatment:

- By the employee staff of the Data Controller, who act and process the data under the authority and instructions of the same, pursuant to Article 29 of the GDPR or the employee staff designated by the Data Controller, pursuant to Article 2 quaterdecies of Legislative Decree no. 101/2018.
- By individual or legal persons whose right to access the personal data of the data subject is recognized by legal provisions provided for by the law of the European Union or Italian law, such as, by way of example, competent authorities and/or supervisory bodies for the fulfillment of legal obligations, and public administrations for their institutional purposes.
- By individual or legal persons of which the Data Controller uses for the performance of instrumental activities to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, datacenters, IT consultants). Third parties who access the data, will do so in compliance with current legislation on the protection of personal data and the instructions given by the Data Controller and will in any case be appointed by the Data Controller, as Data Processors.

A list of Data Processors is available at the Data Controller's office.

Data dissemination
The data processed will not be disseminated under any circumstances.

Rights of the interested party
The GDPR guarantees the Data Subject specific rights, and the Data Subject may exercise the following rights for each processing:
- Right of access: you have the right to obtain a copy of the personal data we hold and process.
- Right to rectification: you have the right to rectify the personal data held by the Data Controller if they are not updated or correct.
- Right to object to the processing of personal data for commercial purposes: you may request that the Controller cease sending commercial communications at any time.
- Right to object to decisions based on exclusively automated processes: you may request not to be the recipient of decisions made on the basis of exclusively automated processes, including profiling.
- Right to revoke a consent given: you have the right to revoke the consent given for a specific processing at any time.
- Right to apply to the Guarantor Authority for the protection of personal data: you have the right to apply to the Guarantor Authority for the protection of personal data if you have any doubts about the processing of personal data carried out by the Data Controller.

The Data Subject may also exercise the following rights under certain circumstances:

- Right to erasure: may request that the Data Controller erase the personal data of the Data Subject if the purposes of the processing have ceased and there are no legitimate interests or rules of law that require its continuation.
- Right to object to processing: you may request that the Data Controller cease to carry out a particular processing operation on your personal data.
- Right to restrict processing: has the right to request that the Data Controller limits the processing operations on the personal data of the Data Subject.
- Right to data portability: you have the right to obtain a copy of your data in a commonly used, machine-readable structured format from another Data Controller.

To exercise each of the aforementioned rights, the interested party may send an e-mail or write to the following address specifying the request and providing the Data Controller with the information necessary to correctly identify the sender (also attaching a copy of the identity document) at the following addresses:
- by mail: Roma - 00192, Viale delle Milizie n. 140 (VAT 15801141001)
- by e-mail: info@renewcast.com

Renewcast will reply within a month. If for some reason the Data Controller is unable to respond, it will provide a detailed explanation as to why it cannot satisfy the request

Version 01 - 2024