this is to inform you, pursuant to articles 12 and 13 of the EU Regulation n. 2016/679 on the “Protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter “Regulation”), that, in the context of the Call powered by Fondazione Istituto Italiano di Tecnologia (hereinafter “IIT”), IIT process a set of personal data concerning you.
- Identity and contact details of the Data
The Data Controller is IIT, having its registered office in Genoa,
Italy, Via Morego 30, tel: (+39) 010.71781, fax: (+39) 010.720321.
- Contact details of the DPO
Protection Officer is the Responsible of the Data Protection Department, Rödl&Partner,
Milan - email: firstname.lastname@example.org.
- Purposes of the processing
processing of your personal data by IIT will be for the purpose of management of the selection
In particular, the processing of personal data may be performed for:
- Acquisition of data in the screening phase of your application;
- Evaluation of your curriculum;
- Performing interviews;Reference checks.
- Purposes in relation to special categories of
In regards to special categories of data, when present within the
curriculum and/or acquired during the selection activities (such as, for example, data
concerning health, data revealing racial or ethnic origin or trade union membership, etc.), in
accordance with the provisions of art. 9 of the Regulation, they will be processed only if you
give your explicit consent to the processing for the purposes related to the selection and
- Legal basis of the processing
legal basis of the processing is represented by:
- the art. 6, let. b) of the
b) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
the art. 9 let. a) of the Regulation
a) The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject.
- Methods of processing
Your data will
be processed both by computerized and paper based methods, observing the rules on the protection
of personal data, including those relating to data safety.
- Categories of parties to whom personal data will
The personal data you provide will be also released to non-IIT
scientists whom IIT has appointed as Evaluators under the Call and that this will be done only
to the extent required by the selection procedures applied by IIT.
It is understood,
moreover, the obligation of IIT to release information to the Judicial Authority, whenever
- Retention of personal data
retention of your personal data will be carried out in compliance with security measures used by
with regard to the protection of data, and the access to these data will be allowed only to
subjects involved and designated for their processing.
Anyway your personal data will be
kept until the limitation period of the rights deriving from the selection activities and in any
case for a period not exceeding eighteen months (unless you renew the consent to the
- Rights of data subjects
exercise in every moment the rights of art. 13, letter b) and art. 15, 16, 17, 18 and 20 of the
Regulation, addressing to Data Protection Officer, at the contact provided in point n. 2 of this
In particular, as a data subject, you will require:
- The access to the personal data concerning you, according with the art. 15 of the Regulation;
- The rectification of inaccurate personal data concerning you, according with the art. 16 of the Regulation;
- The erasure of personal data concerning you (“right to be forgotten”), according with the art. 17 of the Regulation;
- The restriction of processing of data concerning you, according with art. 18 of the Regulation.
We inform you, finally, that you will have the right to object in every moment, according with the art. 21 of the Regulation, if one of the situations described by the art. 6, paragraph 1, letters e) and f) of the same Regulation occurs.
- Consent and Withdrawal
withdraw your consent at any time by contacting the Data Protection Officer.
- Complaint to the supervisor
With regard to art. 77 of the Regulation, we remind you that you have
the right to lodge a complaint to the supervisor authority if you think that the processing of
your data is performed in violation of the provisions of the Regulation.
- Nature of the processing and obligatoriness of
personal data conferment
Many of the processed data are required to perform the
obligations arising from legal requirements and to fulfil respective contractual obligations. In
some cases, the lack of consent to the processing of personal data may make it impossible for
IIT to continue the working relationship established.
- Existence of automated individual decision making
in the processing
It is specified that, for the processing of the data, there is NOT any kind of automated individual decision-making, according with the art. 22 of the Regulation.