"CURRICULUM VITAE" PRIVACY POLICY

We inform you that pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679, the personal data you provide by filling in the form in the "Careers" section will be processed in compliance with the relevant regulations in force and as set out below.

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

For the Italian companies of the Sorma Group (Sorma Spa, MNLG Srl, Netpack Spa), a Data Protection Officer has been appointed, whose contact details are:

Email: marco.manganiello@rps-dati.com, Mobile 3384283908

COMPANIES BELONGING TO THE SORMA GROUP

For the purposes of the GDPR, the Sorma Group can be defined as an "entrepreneurial group" and is composed of the companies listed below, which operate in different parts of the world and may receive your CV because they are interested in your application.
Non-Italian companies, in case they invite you for an interview, will provide you with their data privacy policy according to the applicable local laws.
A list of Group companies and their contact details is given below:

PURPOSES

The personal data you provide by filling in the form on the website will enable you to apply either for a specific position or to submit an "unsolicited" application for any open position within the Sorma Group.

METHOD OF PROCESSING, TYPE OF DATA PROCESSED AND LEGAL BASIS FOR THE PROCESSING.

The selection of personnel for recruitment within the Italian companies was concentrated in the human resources department of the company Netpack, which therefore assumes the role of data controller for the personal data in the CVs. With regard to job applications to other Group companies, they will receive your CV directly.
Your personal data may be passed on within the Group as without them we will not be materially able to examine your application in order to assess whether it corresponds to the company's requirements. For this reason, it is not necessary for you to provide us with your consent to process your data for the above-mentioned purposes, unless you voluntarily provide us with "special data categories" in accordance with Article 9 of the GDPR. In the absence of such consent, this data cannot be processed and will be deleted immediately.
The legal basis for the processing is the carrying-out of pre-contractual measures taken at your request. The data collected is only that which you provide by filling in the form on the website and any other data that, although not requested, you decide to share with the Sorma Group as part of your application. No data other than what you voluntarily submit will be sought, collected and processed. It is understood that, should you send data in excess of that required for the mere purpose of submitting your application, such further data will be deleted immediately.
Data may be processed on paper documents and also by electronic and computerised means. It should be emphasised that, although the processing is also carried out with the aid of IT tools, it is not based on the use of automated decision-making or monitoring systems designed to provide information relevant to recruitment.

RECIPIENTS

The data you provide may be communicated to other companies belonging to the Sorma Group, depending on your job application and the choice you made when filling in the form. Your data may also be disclosed to external parties who perform specific tasks on behalf of the Controller (e.g. personnel recruitment and selection), duly appointed as data processors, when necessary. Finally, without prejudice to communications made in compliance with legal requirements, or at the request of the competent authorities, the data will not be disseminated. The data will be processed by employees or collaborators of the Data Controller, specifically appointed for this purpose, who will only have access to the information required to carry out the tasks assigned to them.

RETENTION PERIOD

Your personal data will be retained only for the time required to achieve the above-mentioned purposes, however for a maximum period of 12 months from the date of acquisition, after which it will be deleted.

DATA TRANSFER TO A THIRD COUNTRY OR INTERNATIONAL ORGANISATIONS

Your data may be transferred to the Sorma Group companies based in non-EU countries for the sole purpose of processing your job application in those foreign companies and in compliance with the provisions of Article 44 et seq. of the GDPR.

RIGHTS OF THE DATA SUBJECT

With regard to the processing operations covered by this policy, you have the right at any time to:

• request confirmation as to whether or not your personal data is being processed;
• access your personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom it may be communicated, the applicable retention period and the existence of automated decision-making processes;
• obtain without delay the rectification of inaccurate personal data;
• obtain, if applicable, the deletion of data;
• obtain the restriction of processing when envisaged;

The request will be answered within 30 days.
If no response is received, you have the right to lodge a complaint with the competent supervisory authority based on the location of the company.
Requests should be addressed:
For the Italian companies: to the Data Protection Officer, at the DPO's email address: marco.manganiello@rps-dati.commobile 3384283908, or directly to the data controller by mail to the address Comitato Privacy Sorma Group (Sorma Group Privacy Committee), Via dell’Arrigoni n. 220, 47522 Cesena (FC) or by email to privacy@sormagroup.com.
For non-Italian companies, to the contact details given above.