Privacy Notice for Employees

SUBJECT: Information pursuant to and for the purposes of Article 13 of the EU GDPR 2016/679 relating to the protection of the processing of personal data

The undersigned Company informs that, for the establishment and management of the ongoing employment relationship with you, it is the owner of your data and that of your family members qualified as personal data pursuant to the GDPR (General Data Protection Regulation – EU Regulation 2016/679).

Purpose of the processing

The collection and processing of personal data is carried out:

  1. for any hiring, where this has not already taken place;
  2. for the processing and payment of remuneration;
  3. for the completion of all the practices required by current regulations on Occupational Safety, Privacy and Environment;
  4. for the fulfilment of legal and contractual obligations, including collective and corporate obligations, related to the employment relationship.
  5. for the management, within the employment relationship, of the use of company means of transport, assigned to the person and not.
  6. for the management, within the employment relationship, of the work missions organized by the company.
  7. for the management of reports of wrongdoing and violations as required by the company Whistleblowing procedure

and will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of your privacy and rights. Your personal data will be processed for the entire duration of the employment relationship and also subsequently for the fulfilment of all legal obligations.

In relation to the employment relationship, the company may process data that the law defines as "sensitive" as they are suitable for detecting, for example:

  • a general state of health (absences due to illness, maternity, accident or compulsory start-up) suitability or otherwise for certain tasks (as a result expressed by medical personnel following preventive/periodic medical examinations or requested by yourself);
  • membership of a trade union (assumption of office and/or request for deductions for trade union membership fees), membership of a political party or holding elected public office (leave or leave), religious beliefs (religious holidays available by law); Data of a sensitive nature, concerning the state of health, which the competent doctor processes in the performance of the tasks provided for by Legislative Decree 81/08 and other provisions on hygiene and safety in the workplace, for the performance of preventive and periodic medical checks, will be processed at the employer's premises exclusively by the same doctor as independent data controller, for which the company asks for express consent. Only judgments on unfitness will be communicated by the doctor to the employer himself

Processing methods

The processing of data for the purposes set out takes place both automatically, on electronic or magnetic support, and non-automated, on paper, in compliance with the rules of confidentiality and security provided for by law, consequent regulations and internal provisions.

Place of processing

The data are currently processed and stored at:

  1. Registered office, Via Ettore Ponti, 49, 20143 Milan
  2. Secondary office Via Borgo ai Fossi, 1/3/5, 50018 Scandicci (Florence)

They are also processed, on behalf of the undersigned, by professionals and/or companies in charge of carrying out technical, IT, development, management, administrative-accounting and staff training activities.

In particular, your data are transmitted to the company M.D.P. Srl, Via Monte Rosa, 11, Milan, Data Processor for the processing of payrolls and all related and consequent obligations.

With regard to the performance of the tasks envisaged by Legislative Decree 81/08 (Consolidated Law on Health and Safety at Work), the following have been appointed:
of data processing:

  • for the Milan office, CDI Centro Diagnostico Italiano Srl, Via Saint Bon 20, Milan
  • for the Scandicci campus, Dr. Martina Masciotta, via di Riboia 38, Impruneta (FI)

Mandatory or optional nature of the provision of data and consequences of any refusal to provide it

The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to provide them in whole or in part may make it impossible for the undersigned to execute the contract or to correctly carry out all obligations, such as those of a remunerative nature, contribution, tax and insurance, related to the employment relationship.

Communication of data

Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated in Italy and transferred abroad exclusively for the purposes specified above to:

  • Public bodies (INPS, INAIL, Provincial Directorate of Labour, Tax Offices...);
  • Funds or funds, including private pension and/or assistance funds;
  • Medical practices in compliance with obligations regarding health and safety at work;
  • Insurance companies and credit institutions;
  • Trade unions to which you have given a specific mandate;
  • Supplementary funds;
  • Business organizations to which the company belongs.
  • Management company means of payment for company car use
  • General transport management companies (buses, railways, planes) and hotel management.

In addition, with regards to the management of your data, the following categories of internal and external persons in charge of the handling of personal data and sensitive information to whom specific written instructions have been given on how to treat data:

  • Employees of the personnel office;
  • Labour Consultants and/or Companies specialising in the processing of pay slips, their employees and collaborators, as persons in charge or external managers;
  • Professionals or service companies for business administration and management, accounting control and auditing, management of labor law practices, who operate on behalf of our company.
  • Professionals or service companies specialized in the field of staff training, for the management of courses and the issuance of the related certificates of participation.

Transfer of data abroad

We do not plan to transfer your data to third party companies outside the European Union.

Data retention times

The data provided will be stored in our archives according to the following parameters:

  • For administration, accounting, payroll management, staff training, contractual and labour law activities, management of any disputes: 10 years as established by law by the provisions of art. 2220 of the Italian Civil Code.
  • For activities related to the Whistleblowing procedure, 5 years from the communication of the final outcome of the report.

Rights of the data subject

With regard to the personal data, the Employee may exercise the rights provided for in Articles 15-20 of the GDPR. In the event of signing any form of consent to the processing requested by RENATO CORTI Srl, please note that the data subject may revoke it at any time, without prejudice to the mandatory obligations provided for by the legislation in force at the time of the request for revocation, by contacting the Data Controller at the addresses below.

Under the GDPR, you can ask the data controller:

  1. confirmation as to whether or not your personal data is being processed and, if so, to obtain access (right of access – Art. 15)
  2. the rectification of inaccurate personal data, or the completion of incomplete personal data (right to rectification – Art. 16)
  3. the deletion of the data themselves, if one of the reasons provided for by the Regulation exists (right to be forgotten – art. 17)
  4. the limitation of processing when one of the hypotheses provided for by the Regulation occurs (right of limitation – art. 18)
  5. to receive the personal data you have provided to the controller in a structured, commonly used and machine-readable format and to transmit such data to another data controller (right to portability – art. 20)
  6. to be informed in the event of rectification or erasure of personal data or restriction of processing (Notification obligation – Art. 19)

Data Controller and Data Processor

The data controller, to whom you can contact to assert the rights transcribed above, is RENATO CORTI SRL, with registered office in MILAN VIA ETTORE PONTI, 49 20143 MILAN, in the person of the Pro Tempore Legal Representative. The aforementioned rights may also be exercised by you by sending communications to the following e-mail address: privacy@renatocorti.it.

Updates

Updates to this policy will be made available on the company website www.renatocorti.it (Privacy and GDPR menu).

Milan, 27/03/2024