Privacy Career

Privacy Policy - Work with Us

Preamble

Pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter also "GDPR"), Ridewill s.r.l., as data controller (hereinafter also simply "controller" or "Ridewill"), informs data subjects about the use of personal data in relation to applications submitted in the "Work with Us" section of the company website.

1. Data Controller and Data Protection Officer (DPO)

Pursuant to Art. 4(7) of the GDPR, the data controller is Ridewill, with registered office at Via Socrate, 6 -- 22070 Casnate con Bernate (Co). Tel.: +39.031.5476941, E-mail: info@ridewill.it PEC: ridewill@pec.it

The Data Protection Officer (DPO) of Ridewill can be contacted at the e-mail address dpo@trustds.it PEC: dpotrustds@legalmail.it

2. Purpose of processing, personal data processed, legal basis, retention period, and nature of data provision

Purpose A): Management of job applications submitted to Ridewill for personnel selection purposes.

• Personal data processed: Personal data provided within the context of personnel selection, which may include name and surname, year of birth, nationality, province and municipality of residence in case of Italian nationality, e-mail address, education level, degree, professional area of interest, availability, previous occupations, curriculum vitae, and membership (or not) of protected categories of workers;
• Legal basis for processing: The processing of personal data is carried out based on the execution of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR). If special categories of data are communicated, processing is necessary to fulfill obligations and exercise specific rights of the data controller or the data subject under labor law, social security, and social protection, pursuant to Art. 9(2)(b) GDPR;
• Data retention period: The controller may retain the data for up to six months from the date of collection, subject to any additional retention period due to contractual relationships with Ridewill;
• Nature of data provision: Providing the data is mandatory in order to submit an application and allow the controller to evaluate it.

3. Processing methods and recipients of data

Personal data collected is processed in the context of responding to the applications mentioned above and, more generally, for managing applications by the controller, in compliance with the principles of Art. 5 GDPR.

Processing is carried out by persons authorized by the controller to pursue the purposes indicated. Authorized persons are bound by professional secrecy. Processing may also involve collaboration with other entities appointed as data processors, who process data in accordance with the purposes and methods determined by the data controller pursuant to Art. 28 GDPR. The list of data processors is available upon request. Regarding the use of social platforms such as LinkedIn for candidate-recruiter contacts, the processing of personal data by social platforms is governed by their privacy policies and terms and conditions, to which reference is made.

Processing is conducted in compliance with fundamental rights and freedoms and conforms to the principles of Art. 5 GDPR, particularly fairness, lawfulness, and transparency. The controller ensures the relevance and proportionality of the information processed relative to the pursued purposes.

4. Data transfer outside the European Economic Area (EEA)

Personal data processed for the aforementioned purposes is generally not transferred to third countries outside the European Union or the European Economic Area (EEA), nor to international organizations. If data is transferred outside the EEA, the controller undertakes to comply with the provisions of Chapter V of the Regulation to ensure adequate data protection. Further information can be requested from the controller and/or DPO.

5. Rights of data subjects

Data subjects – understood as the individuals to whom the processed data refers – may exercise the rights under Art. 15 et seq. GDPR, in particular: the right to access their personal data, request rectification or restriction, and deletion where applicable, as well as the right to object to processing and the right to data portability. If the legal basis for processing is consent, data subjects also have the right to withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise their rights, data subjects may contact the controller or the data protection officer using the contact details provided in this notice.

If data subjects believe that the processing of personal data by the controller violates the GDPR, they have the right to lodge a complaint with a supervisory authority in the Member State where they habitually reside or work, or where the alleged violation occurred (Art. 77 GDPR). The Italian supervisory authority is the Garante per la protezione dei dati personali, whose contact information is available on its website (www.garanteprivacy.it).

Pursuant to Art. 79 GDPR, data subjects have the right to judicial remedy if they believe their rights have been violated due to processing.

6. Amendments to the data processing information

Ridewill may modify, add, or remove any part of this personal data processing information. To facilitate verification of any changes, the notice indicates the date of the last update.