The following information is intended for natural persons, including professionals, sole proprietors, and representatives/contacts of companies, entities, associations and foundations.
Identity and contact details of the Data Controller:
Gi.Di. Meccanica S.p.A., hereinafter also referred to as “Gi.Di.” or the “Data Controller”, with registered office at Via Toniolo, 29 – 31028 Vazzola (TV, Italy), and contactable by email at info@gidimeccanica.com or by phone at +39 0438 441603.
Categories of data and their source:
Gi.Di. processes common personal data (e.g., personal details, contact information, work-related data, education and culture, image data) and special personal data (e.g., health-related data): this information may be collected from the data subject and/or from third parties.
| Purpose | Legal basis (common data) | Legal basis (special data) |
|---|---|---|
| A. | Performance of pre-contractual measures. | Compliance with obligations under labour law. |
| B. | The Data Controller’s legitimate interest in establishing, exercising or defending a legal claim. | Establishing, exercising or defending a legal claim. |
Retention period:
The Data Controller will not disclose the data, but intends to communicate them to internal staff members authorised to process them in accordance with their respective duties, as well as to professionals, agencies or service companies (including those involved in personnel recruitment), labour consultants and the occupational physician.
If these recipients process data on behalf of the Data Controller, they will be appointed as data processors by means of a specific contract or other legal act.
| Purpose | Retention period |
|---|---|
| A. | 24 months from collection. |
| B. | 10 years from the final resolution of the dispute. |
Nature of the provision and consequences of refusal:
| Purpose | Nature | Consequences |
|---|---|---|
| A. | Necessary | Impossibility for the data subject to submit their application and for the Data Controller to manage the selection process. |
| B. | Necessary | Impossibility to manage the dispute. |
Scope of communication:
The data are processed by internal personnel authorised for specific tasks and are communicated externally according to the following rules:
| Purpose | Categories of external recipients |
|---|---|
| A. | Companies belonging to the same corporate group, occupational physician, labour consultant, recruitment agency, employment agencies. |
| B. | Law firms; debt collection or credit transfer companies; judicial authorities. |
Since the data are processed also through IT tools, they may be accessible to subjects who provide assistance/maintenance on such systems.
Data transfer to a third country or an international organisation:
The Data Controller does not transfer personal data outside the European Economic Area.
Rights of the data subjects:
The following rights are granted to the data subject:
| Purpose | Access | Rectification | Delection | Restriction | Objection | Portability | Withdrawal of consent |
|---|---|---|---|---|---|---|---|
| A. | X | X | X | X | |||
| B. | X | X | X | X | X |
To exercise the aforementioned rights, the data subject can use the form available at the link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following email address: info@gidimeccanica.com. The data subject may also request further details regarding the information provided above (e.g. balancing test for legitimate interest or the list of data processors) by contacting the same address.
A complaint can be lodged with a supervisory authority: in Italy, the Italian Data Protection Authority (www.garanteprivacy.it).
