PRIVACY POLICY – JOB APPLICANTS
Last Update: October 21st, 2022
Dear Job Applicant,
we are constantly committed to the respect of Privacy Laws (in particular EU Regulation n. 2016/679 “General Data Protection Regulation” – GDPR), so we provide you the following information on the processing of your Personal Data carried out for the purpose of examining your application as a worker (regardless of the type of contract),“Processing of Personal Data”, in plain words, means any operation or set of operations which are performed on any information relating to an identified or identifiable natural person (Data Subject). As an example, an e-mail address referred to a person (e.g. jonh.doe@domainname.uk) is considered “Personal Data”, and collecting it and storing it is considered “Processing”.
We are the “Data Controller”, as we determine the purpose and means of Personal Data processing.
“Data Subjects” are the natural persons related to Personal Data. You, the Job Applicant, are defined as a “Data Subject”.
The following table contains the essential information about who we are, which categories of Personal Data we process, why, how and how long we process the Data, and which are Data Subject’s obligations and rights.
| Who are we (Data Controller)? | |||
| Public Pressure Ltd., a company duly existing and incorporated under the laws of Ireland, with registered office in 3rd Floor, Ulysses House, Foley Street, Dublin 1, Ireland, D01 W2T2 registered at the Registrar of Companies of Dublin with Number 701750, VAT no. IE-3929949FH (hereinafter also just “Public Pressure“, or “Company“, or ” Data Controller“). | |||
| Which categories of Personal Data do we process? | |||
| Identification data: name, last name, date and place of birth, address, phone number, fiscal code, e-mail address, IP address, image (optional). Educational and professional data: profession, work experience, qualification, languages spoken, educational qualification, and everything else you write in your cv. Usage data: date and time of access, CV uploading.!! Please, do not add in your CV information related to your health, religious belief, racial or ethnic origin, political opinions, trade union membership or other sensitive information, it is not necessary! However, if you believe that sharing with us your legally protected status (health related data) will be useful for a better evaluation of your profile or for the specific job position, we will ask a specific consent for the processing. | |||
| Why do we process Personal Data (purpose) and what is the legal basis of the Processing (legal basis) of each category of Personal Data? | |||
| n. | Purpose | Categories of Personal Data | Legal basis |
| 1 | Reply to your request | Common Personal Data | Necessity to take steps at the request of the data subject prior to entering into a contract |
| 2 | Management of your application and of the recruitment process in general | Common Personal Data | Necessity to take steps at the request of the data subject prior to entering into a contract |
| Special categories of Personal Data (only if needed for the specific job position) | Your consent (freely given and withdrawable at any time) | ||
| 3 | Fulfilling obligations under the applicable law and / or execute orders given by Authorities | Some or all data indicated above, depending on the obligation or the order | Necessity to comply with a legal obligation to which the controller is subject |
| 4 | Establishment, exercise or defence of legal claims | Some or all data indicated above, depending on the issue | Legitimate interest in establishing, exercising, or defending our rights. |
| Which are the Recipients of the Data (categories of Recipients)? | |||
| To the minimum extent necessary for the achievement of each Purpose, we will communicate the Data to:service providers whose services are necessary for the execution of the activities linked and consequent to application management (e.g.software and hardware);providers, platform’s providers, website providers, recruitment service providers etc.), who act as Data Processor;public organisations and Authorities, as far as it’s required by the applicable law or by their orders, or for the establishment, exercise, and/or defence of legal claims. | |||
| How long will we retain Personal Data? | |||
| The retention period for Personal Data will not exceed twelve months following the end of the selection process, if you are not hired. | |||
| Do we transfer Personal Data outside the European Union or to international organisations? | |||
| Google Forms is a service provided by Google Cloud EMEA Limited, a company headquartered in Dublin (Ireland) and controlled by Google LLC (USA); this implies the transfer of data outside the European Economic Area, a transfer made on the basis of the Standard Contractual Clauses in accordance with Art. 46 § 3 of the GDPR (see https://cloud.google.com/terms/sccs) and some additional guarantees: https://services.google.com/fh/files/misc/safeguards_for_international_data_transfers_with_google_cloud.pdf). In any case, we are committed to ensure that the transfer of Personal Data outside the European Union takes place only to countries that guarantee an adequate level of protection, for which there is an adequacy decision of the European Commission, or on the basis of the other guarantees set forth by Chapter V of the GDPR. | |||
| Is it compulsory to provide us with Personal Data? | |||
| Yes, Common Personal Data is needed to manage your application and the recruitment process in general. | |||
| What happens if you don’t provide us with your Personal Data? | |||
| We’ll not be able to process your application and consequently your recruitment. | |||
| Which rights do you have? (Data Subject’s Rights) | |||
| You, have the right to:access the data held by the Controller, and to ask for a copy, unless the exercise of the right violates the rights and freedoms of other natural persons;request the rectification of incomplete or inaccurate data;request the erasure of the data, subject to the exclusions or limitations established by the Applicable Law;request the restriction of processing, if the conditions are met and subject to the exclusions established by the Applicable Law request data portability (i.e. commonly used and machine-readable format, so that they can be transmitted to another Data Controller without hindrance), to the extent that the processing is based on consent or on the need to perform a contract, where technically possible and except where the exercise of the right infringes the rights and freedoms of other natural persons;lodge a complaint with the Data Protection Authority of your country, or of the place where the alleged violation occurred. Right to withdraw the consentRemember that You can withdraw the consent given at any time, but the withdrawal will not affect the lawfulness of the data processing carried out in the period prior to such revocation.Right to objectYou may object to the processing of data based on:the legitimate interest of the Controller, and specifically for the purpose of direct marketing upon simple request, initially (by writing to the e-mail address below) or subsequently in each communication;the legitimate interest of the Data Controller, at any time for reasons related to your particular situation (e.g. harm to your honour, reputation, decorum), unless the Data Controller demonstrates a compelling and overriding legitimate interest, and unless the processing is necessary for the establishment, exercise or defence of a legal claim. | |||
| If you have doubts or questions about Data Processing what can you do? | |||
| You may contact the Data Controller for questions concerning the processing of your Personal Data by sending an email to legal@publicpressure.io. | |||
This privacy policy has been published in the date indicated above; we can modify the content (in whole or in part) also because of changes in the privacy law; we will publish the updated version of the information note (from that moment it will be binding): Data Subject is invited to visit periodically the page which contains this document and/or the relevant section of the website.
The Controller does not collect intentionally information related to children under sixteen years of age. In the event that information on minor was collected, will be cancelled promptly on request of the Data Subject or of the person who exercises the parental responsibility.