personal data processing disclosure to candidates for recruitment

FIORINI PACKAGING SPA with its registered office in Via Giambattista Fiorini, 25 – 60019 Senigallia, Ancona (AN), Tax code and VAT reg. no.: 00090900424, (hereinafter, “Data Controller”),
in its capacity as Data Controller, in response to your application for recruitment/CV submission,hereby informs you that your personal data will be processed in full compliance with the provisionsof EU Regulation 016/679 on Personal Data Protection, pursuant to the provisions of Art. 13 of the GDPR.

1. Subject-matter of Processing
The Data Controller processes personal, identifying data (such as name, surname, address, telephone number, e-mail address, bank and payment details) – hereinafter, “personal data” or also “data”) you disclosed at the end of the recruitment process by the Data Controller.
2. Purpose and Nature of processing
The personal and tax data will be processed for the sole purpose of recruiting if Fiorini Packaging Spa decides to proceed with any recruiting activities. Their provision is mandatory for the correct management of this purpose, which would otherwise not be able to be carried out.
3. Processing methods
Your personal data will be processed using manual and electronic means in accordance with the principles of necessity and relevance by adopting appropriate security measures for the purposes related to the management of the recruitment process.
4. Access – Communication
For these purposes only, your data will be accessible to our data processors and any external subjects (such as recruitment companies, occupational psychologists, recruiters and assessors) who may be in charge of the recruitment and of conducting the assessment interviews. In any event, your personal data will not be disseminated except with your specific consent
5. Data conservation
At the end of the recruitment process or in any case 2 years after receiving your CV, your data will be destroyed and all forms of processing will cease without further notice.
6. Data transfer
The Controller does not transfer the personal data to third-party countries or to international organisations. However, the Controller reserves the right to use cloud-based services; in this case,
the service providers will be selected among those who provide adequate guarantees, as envisaged in Art. 46 of the GDPR 679/16. Should it be necessary to move the non-EU server, the Data Controller will immediately ensure that the transfer is carried out in accordance with the applicable legal provisions.
8. Rights of the data subject
Pursuant to the provisions of the European Regulation, data subjects may exercise the rights envisaged by Articles 15 to 21 in addition to submitting a complaint to the supervisory authority (Art. 77) if they consider that the processing carried out by the Data Controller is not in conformity. The rights can be exercised using a dedicated form, which can be obtained from Fiorini Packaging
9. How to exercise these rights
You may at any time exercise your rights by sending a registered letter with advice of receipt to our registered office, or by e-mail to or by certified e-mail to also using the dedicated forms available from our administration.
10. Legal Basis of Processing
In compliance with Art. 6 of the Regulation, processing is lawful insofar as it is necessary for the performance of the contract to which the data subjects are party and for the performance of pre- contractual actions taken in favour of the same. The Data Controller will process personal data lawfully, fairly and transparently, in accordance with the principles of the GDPR, ensuring the protection of personal data and fundamental rights and freedoms. Where the data subjects are under the age of 16, such processing shall be lawful only if and to the extent that such consent is given or authorised by the holder of parental responsibility whose identification data and copies of identification documents have been acquired.

Rev.1 del 27/05/2022