Privacy

INFORMATION ON THE PROCESSING OF PERSONAL DATA - CANDIDATES' INFORMATION

The Company MB Research S.a.s. di Monica Boselli e C. (hereinafter "MB Research" or the "Company"), authorised to carry out personnel recruitment and provision activities, as referred to in Article 2, paragraph 1, letter c) of Legislative Decree no. 276/2003, by the Ministry of Labour and Social Policies by Order of the Director General no. 1345 of 15 January 2007, is duly aware of the importance of protecting people’s right to privacy with regard to the processing of personal data. In compliance with European and Italian legislation on the subject, MB Research informs you that any personal data collected will be processed in compliance with personal data protection legislation.

With reference to the management and processing of personal data of data subjects, pursuant to Article 13 of EU Regulation no. 679/2016, MB Research provides the following information:

 

1. Types of data collected
   In carrying out its activities, MB Research collects the personal data of those concerned, including:
   - personal data; - contact details; - photographs and videos of presentations; - further data, including special ones, provided by the person concerned or contained in curricula; - data of third parties collected on indication of the person concerned (e.g. data relating to the presence of persons with disabilities in the family or dependent children).
   Any "special data", "biometric data""genetic data." "data relating to health', 'data relating to offences or criminal convictions', as defined by the legislation in force, indicated will be immediately deleted in the absence of explicit declarations of consent of the person concerned to their treatment by the Company.Data subjects are invited to omit data that are not relevant to the submission of requests for work.

 

2. Purpose and legal basis of the processing
   The data collected by MB Research during the course of its activities will be processed to:
   1. to carry out research and personnel selection activities. The legal basis that legitimizes the processing of personal data for this purpose is to be found in the case provided by art. 6 par. 1, letter b) of EU Regulation no. 679/2016, or because the processing is necessary for the performance of a contract to which the person concerned is a party or pre-contractual measures taken at the request of the same. In the event of the provision of particular data, the legal basis that legitimizes the processing of such data is to be found in the case provided by art. 9 par. 2, letter a) of EU Regulation no. 679/2016, or because the person concerned has given his or her explicit consent to the processing of such personal data;
   2. communicate candidates' data to third parties who request them for the evaluation of possible hiring, such as client companies operating in the textile, fashion, luxury, design, entertainment, large organised distribution, food, cosmetics, industry (chemical, pharmaceutical, etc.), hospitality, financial services, banking, insurance, as well as IT and telecommunications. The legal basis legitimizing the processing of personal data for this purpose is to be found in the hypothesis provided by art. 6 par. 1, letter b) of EU Regulation no. 679/2016, or because the processing is necessary for the performance of a contract to which the data subject is a party or pre-contractual measures adopted at the request of the same. In the event of the provision of particular data, the legal basis that legitimizes the processing of such data is to be found in the case provided by art. 9 par. 2, letter a) of EU Regulation no. 679/2016, or because the person concerned has given his or her explicit consent to the processing of such personal data;
   3. comply with legal obligations or requests of the Judicial Authority. The legal basis that legitimizes the processing of personal data for this purpose is to be found in the case provided by art. 6 par. 1, letter c) of EU Regulation 679/2016, or because the processing is necessary to fulfill a legal obligation to which the data controller is subject;
   4. to compile statistical information on the characteristics of the candidates. For this purpose, no special data or data relating to criminal convictions or offences will be processed, but only common personal data in aggregate form. The legal basis that legitimizes the processing of personal data for this purpose, pursuant to art. 5 par. 1, letter b) and recital 51 of EU Regulation 679/2016, is to be found in the one provided in relation to the purpose referred to in letter A of this paragraph.

 

3. Period of data retention
   Personal data collected and processed for the purposes set out in points 2 a), 2 b) and 2 d) will be kept for a period of 3 years. At the end of this period, the interested party will receive a communication regarding the imminent cancellation of their personal data, through which they will be informed of the possibility of voluntarily extending the storage of their data for the same purposes. The data necessary to comply with tax, accounting and administrative regulations will be stored in accordance with the law.

 

4. Treatment modalities
   The personal data collected will be processed, stored and processed by electronic means and will be stored both on computer media and on paper, organized in a database, and on any other type of suitable support. Specific security measures are observed to prevent loss of data, illegal or incorrect use and unauthorized access. In the event of data processing for statistical purposes, technical and organizational measures are taken to ensure the principle of data minimization and the collection of aggregated data that do not allow the identification of those concerned.

 

5. Communication of personal data
   The processing of personal data carried out by MB Research does not involve automated decision-making processes or profiling. The results of data processing for statistical purposes are not used to support measures or decisions concerning specific individuals.
   The communication of data for the purposes referred to in points 2 a), 2 b), 2 c) and 2 d) is optional, but failure to do so may make it impossible for MB Research to provide its service to those concerned.

 

6. Acquisition of data from third parties
   As part of the processing of data for the purposes set out in points 2 a) and 2 b), MB Research may collect data from third parties (e.g. contacts). In compliance with the Recommendation of the Committee of Ministers of the Council of Europe CM/Rec (2015)5, the parties concerned are informed that the Company will inform them in advance.

 

7. Subjects to whom personal data may be communicated
   The personal data collected will not be disseminated and may be communicated, in addition to subjects who have the right and interest to access your personal data by law or secondary and/or EU regulations, to authorized personnel within the Owner, as well as to companies, associations or professional firms that provide services and activities on behalf of the Owner as Data Processors for the fulfillment of legal obligations, as well as for any organizational and administrative requirements necessary to provide the requested services.In the execution of the purposes referred to in point 2 b), the data may be communicated to third parties operating in the textile, fashion, luxury goods, design, entertainment, large organised distribution, food, cosmetics, industry (chemical, pharmaceutical, etc.), hospitality, financial, banking and insurance services, as well as IT and telecommunications, who will operate as independent Data Controllers. The names of other parties who may become aware of your personal data in their capacity as "Data Processors" are shown in an updated list available from MB Research (to be requested at the addresses indicated in point 9).

 

8. Transfer of data outside the European Union or to international organisations
   MB Research does not transfer the data processed for the purposes indicated in this notice to international organisations. The Company may transfer the data collected in countries outside the European Union for the performance of its research and personnel selection activities at the request of the data subject, pursuant to art. 49 par. 1, letter b) of EU Regulation 679/2016.

 

9. Rights of the interested party
   In relation to the aforementioned processing of personal data, the interested party has the right to exercise at any time the rights provided for by EU Regulation no. 679/2016, including, for example, to obtain information on: - the origin of personal data; - the purposes and methods of processing; - the logic applied in case of processing with the aid of electronic instruments; - the identity of the owner, manager and designated representative.You have the right to obtain: - access, updating, rectification or, when interested, integration of data; - the cancellation, transformation into anonymous form or blocking of data processed unlawfully, unless the processing is for statistical purposes as indicated in point 2.d of this notice;

   - the limitation of data processing, i.e. asking the data controller or data processor to reduce the purposes or the ways in which their data are processed.

   The data subject may also request a copy of his/her data in standard format ("Right to data portability").

   The person to whom the data refer also has the right to object at any time and at no cost, in whole or in part:

   - for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;

   - the processing of personal data relating to you carried out pursuant to Article 6(1) GDPR, points e. ('processing is necessary for the performance of a task carried out in thepublic interest or in the exercise of official authority vested in the controller') or f. ('processing is necessary for the purposes of pursuing the legitimate interest of the controller or a third party') including profiling on the basis of those provisions;

   - to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or carrying out market research or commercial communications (direct marketing), including profiling insofar as it is related thereto.

   The data subject has the right to withdraw his or her consent to the processing, when this is based on the assumption provided for in Article 6(1)(a) (when "the data subject hasgivenhis or her consent to the processing ofhisor her personal data for oneormore specific purposes"), or Article 9(2)(a) (when "the data subject has given his or herexplicit consent to the processing of his or her personal data for one or more specific purposes") of Regulation EU 679/2016, at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.

   Where the data subject considers that processing of data relating to him/her is in breach of the law in force, he/she shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State where he/she is normally resident, works or where the alleged breach has occurred. The Italian supervisory authority can be reached at the contact details on its website.

 

10. Data controller - Contact details
    The data controller is MB Research S.a.s. di Monica Boselli e C., with registered office in Corso Monforte, no. 15, 20122 Milan (MI), authorised to carry out personnel research and selection activities pursuant to art. 2, paragraph 1, letter c) of Legislative Decree no. 276/2003 by the Ministry of Labour and Social Policies by order of the General Manager no. 1345 of 15 January 2007, in the person of the legal representative pro tempore. The Company can also be contacted at the e-mail address info@mbresearch.it and at the address PEC mbresearch1@pec.it.Per exercise the rights listed above, the interested party may make a request using the e-mail account info@mbresearch.it.MB Research reserves the right to update this information on the processing of personal data.