Privacy Policy - Regulation EU 2016/679 (GDPR)
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter also “GDPR”) on personal data, we inform you that the processing of personal data, provided through your job application, is aimed solely at the management of personnel selection procedures and will be carried out by the company Max Mara Fashion Group S.r.l., with registered office in Via Pietro Giannone, 10 - 10122 Turin (Italy), which under the GDPR acts as Data Controller (hereinafter also the “Company” and/or “Data Controller”) and through persons authorized to process personal data by the Data Controller duly trained.
The processing will be carried out in a relevant, transparent manner and in compliance with the principles of lawfulness, limitation, accuracy, integrity and confidentiality provided by Article 5 of the GDPR and other applicable rules.
Purposes
​
The collection and processing of personal data are aimed exclusively at carrying out activities of research, selection and evaluation of personnel for the purpose of the possible establishment of a working relationship, collaboration or internship also for any positions different from those for which you have spontaneously applied, for interviews and any video interviews (data processing including image/audio), for any surveys aimed at improving the recruiting service of the Company and, in aggregate and anonymous form for internal analysis activities.
The collection of your personal data, which took place through your application and/or through the sharing of your social profile (Linkedin) authorized by you, and the processing, concern the personal data of personal details and contact information, images, including photography and possible audio, accompanying the professional profile, as well as the categories of special data ex art. 9 of the GDPR (including, for example, data relating to any disabilities and/or belonging to “protected categories”)that you have decided to transmit and/or communicate and which will be processed limited to the operations that are indispensable to enable you to take advantage of the protections provided for by law and for the Company's fulfillment of specific obligations provided for by EU legislation, laws and/or regulations.
Such personal data will be processed within the limits strictly pertinent to the legal obligations, and to the aforementioned purposes.
All of your data will be placed in special computer and/or paper archives files, or in any other appropriate type of support, and kept under constant control with adequate operational procedures and security measures, in accordance with the provisions of Article 32 of EU Regulation 2016/679, to ensure the security and confidentiality of your personal data, from unlawful or incorrect use and unauthorized access and in order to prevent the loss of such data.
Legal basis for processing and data retention
​
The legal basis for the processing of personal data you provide to the Data Controller for the above purposes is the need to execute pre-contractual measures as part of the selection process you have joined or promoted with your spontaneous application. For the same purposes we may request additional personal data from you or your family members.
Your personal data will be kept at the Company for a maximum of 24 months from the date of your spontaneous application and/or from the closing date of each of the positions for which you spontaneously provided them, in the event that the data are not used for the establishment of the employment, collaboration or internship relationship.
Scope of notification and processing
​
Your data will not be subject to dissemination and, in addition to being processed by authorized persons internal to the Company in charge of carrying out the activities of research, selection and evaluation of personnel, may be communicated, only for the same purposes indicated above, to the following categories of subjects:
- subjects who will process them in the position of data processors, appointed by the Company pursuant to Article 28 GDPR, in its capacity as Data Controller, who need access to the data in order to carry out precise collaborative assignments on behalf of the Company, necessary or functional for the performance of the activity (e.g., companies specializing in personnel search etc.);
- subjects who will process the data as autonomous data controllers, limited to what is necessary to fulfil legal obligations;
- other companies belonging to the Max Mara Group
Rights of the data subject
​
You will be entitled to the rights set forth in Chapter III of Regulation (EU) 2016/679 and, in particular, at any time you will have the right to access your personal data, to request their rectification, updating and deletion, if incomplete, erroneous or collected in violation of the law, as well as to object to their processing for legitimate reasons by writing to the Data Controller who can be contacted at the following addresses: Via Pietro Giannone 10, Turin (Italy); email: ref_privacy@mmfg.it.
You will also have the right to lodge a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR.
Finally, we inform you that the Company Max Mara Fashion Group S.r.l. has appointed its own Data Protection Officer, who can be contacted at the following addresses: Via Pietro Giannone 10, Turin (Italy); email: dpo@mmfg.it