About
This policy outlines the processing activities involved in the submissions of application through the website https://zextras.factorial.it/, within the terms specified hereinafter. Through the website (hereinafter, also the "Page") personal data are processed, both provided directly and deliberately by you (such as by filling forms, by uploading files etc.) and indirectly (such as during the mere navigation of the website). You should read this policy so you can understand what information is collected through the Page, why it is collected, and how it is used.
Any questions relating to the processing of your personal data can be sent to
dataprotection[at]zextras[dot]com
Data Controller, data subject and data processors
Data controller is Zextras Group s.r.l. or one of its affiliates (hereinafter defined as "Zextras", "we", "us", "controller" or "data controller"). The data subject (hereinafter defined as "you", "Candidate") is the subject accessing the Page, filling the forms, and/or uploading their resume or cover letter.
Some activities (for example website hosting) are carried out on behalf of the controller itself by data processors
providing sufficient guarantees to implement appropriate technical and organizational measures. Please contact us
(dataprotection[at]zextras[dot]com) if you would like additional information regarding data processors.
Processing activities are entirely carried out within the facilities of the data controller or data processors.
General information about data collected by us
Personal data processed through the Page is carried out only by Zextras' employees and by technical staff in charge of server maintenance activities. No personal data will be communicated to any third party, except data needed to provide the service or information requested by the candidate or directly collected by third parties.
Personal data is processed with automated means for no longer than is necessary to achieve the purposes for which it has been collected. Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorization. Personal data may be disclosed only upon request of competent authorities authorized by law.
We also acquire personal data as part of the standard transmission of the internet communication protocol. This data category includes IP addresses and/or the domain names of the computers used by any user connecting with the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment.
Log files are processed on the basis of a prevailing legitimate interest of the Controller to monitor lawful use of the website and fight threats, according to standard practices. The aforementioned data is stored for no longer than is necessary for the purposes for which they are processed.
Personal data voluntarily provided by the Candidate
Types of data
When you fill a form, or upload a resume or cover letter, we ask for personal information such as your name and surname, address, phone number, e-mail address. When you upload your resume and your cover letter, we process their content such as the information about your past professional experience, your education, your interests and hobbies.
During the recruitment process we process, if needed, proof of identity, visa status, work permit, and residence document.
Purpose
Any personal data that is provided by the candidate is used to evaluate the application regarding the open job positions posted on the Page.
Lawful basis
The lawful basis of the processing of personal data provided by the candidate consists in the necessity of said data in order to take steps at the request of the data subject (you) prior to entering into a contract.
Some personal data (such as the visa status and the work permit) will be collected and processed for the purposes of compliance with a legal obligation to which Zextras is subject.
If you opt-in for your inclusion to the talent pool in order to be contacted about future job opportunities, the lawful basis of the processing of your data is the consent you provided for that purpose. You can revoke at any time the consent you provided.
Retention
The aforementioned personal data provided directly by the Candidate is stored for no longer than is necessary for the purposes for which they are processed and, in any case, no longer than six months. If You opted-in for the inclusion to the talent pool in order to be contacted about future job opportunities, personal data will be stored until You withdraw your consent.
Automated Decision Making/Profiling
Some of our providers allow us to select appropriate candidates to consider based on criteria expressly identified by us, or typical in relation to the role for which You have applied. The process of finding suitable candidates is automatic, however, any decision as to who we will engage to fill the job opening will be made by Zextras' staff.
This process is performed based on legitimate interest in order to facilitate the recognition of candidates with higher potential of being hired. It does not evaluate key characteristics regarding an individual and is completely anonymous.
Data Subjects' Rights
You as a data subject have a number of rights relating to your personal data and what happens to it. You are entitled at any time to obtain confirmation of the existence of a processing activity of personal data; you are entitled also to be informed of contents and origin of personal data, verify its accuracy, or else request that such data be supplemented, updated or rectified as well as to exercise all right defined in section 2 of EU Regulation 2016/679.
The above Section also provides for the right to request erasure, anonymization or blocking of any data that is processed in breach of the law as well as to object in all cases, on legitimate grounds, to processing of the data.
You can contact us or our DPO at dataprotection[at]zextras[dot]com to exercise one of the following rights or
if you need more information regarding our processing activities of your data.
Specifically you have the right to:
- request access to your personal data and require us to correct any mistakes in your personal data;
- request erasure of your personal data where there is no good reason for us to continue to process it;
- request restrictions or the temporary stop on the processing of your personal data in certain situations;
- object to processing your personal data at any time in certain situations (such as for direct marketing purposes);
- receive the personal data concerning You in a structured, commonly used and machine-readable format;
- lodge a complaint with a supervisory authority.