The information contained in this e-mail and its attachments are to be considered strictly confidential. If you received this message without being the recipient, we kindly ask you to inform us via e-mail and to destroy it by deleting this message from your system. It is a behavior contrary to the GDPR principles retaining this message, divulging it even if partially, distributing it to other subjects, copying or using it for different purposes. We also bring to your attention that this message, as well as any reply and/or other messages sent to the sender will be considered as a working activity and – as such – may be known by other subjects belonging to the organization to which the sender belongs.
We inform you that your personal data shall be process pursuant to the Regulation (UE) 2016/679 and specifically in accordance with the following information:
APPLICANT INFORMATION
PURSUANT TO ART. 13 – 14 OF THE REGULATION (EU) 2016/679
The IMA group companies are committed to protecting and respecting your privacy. This information, pursuant to Art. 13 of the EU Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data (hereinafter “GDPR“), wants to provide you with all useful information regarding the processing of your personal data concerning, connected and/or instrumental to the job recruiting activities.
We therefore invite you to carefully read this information (hereinafter “Information“) as it contains important information on the protection of your personal data and on the security measures adopted by the IMA group companies to guarantee confidentiality in full compliance with the GDPR.
The Data Controller, that is whoever determines the purposes and means of the processing of personal data, is the IMA group company with which you intend to establish an employment relationship (“Company” or “Data Controller”).
The updated list of the IMA Group companies is available at the following website: https://ima.it/it/il-gruppo-ima/societa-del-gruppo-ima/.
You can request all the details regarding the Data Controller identification data by sending an email to: privacy@ima.it.
The IMA Group companies have appointed a data protection officer (“DPO”) who can be contacted to obtain clarifications on the processing of your personal data.
In particular, the Italian companies of the IMA Group has appointed the following DPO:
Alberto Bertuzzo
Pirola Pennuto Zei & Associati
Via delle Lame 109
40122 Bologna (Italy)
Tel.:+39 051 526711
E-mail: dataprotectionit@ima.it
other European companies of the IMA Group has appointed the following DPO:
Christian Schwinge
schwinge GmbH
Am Kochenhof 12
70192 Stuttgart
GERMANY
Phone: +49 (0) 711 / 258560-0
E-mail: dataprotectioneu@ima.it
The Data Controller will process the personal data collected before the establishment of the employment relationship, provided spontaneously by you as a candidate (“Candidate“), within the scope of the application or later communicated by you.
These personal data are those typically contained in a Curriculum Vitae (“CV” or “Curriculum”), consisting of identification data, academic and professional careers, specific skills and knowledge, as well as additional data that may be supplied by you during the application procedure (“Personal Data“).
Through your CV or later, the Company may also collect special categories of Personal Data as defined in art. 9 of the GDPR, such as:
– personal data revealing racial or ethnic origin;
– political opinions, religious or philosophical beliefs;
– trade union membership;
– data concerning health or data concerning a natural person’s sex life or sexual orientation
Any processing of such data will take place, pursuant to art. 9 of the GDPR, only with your explicit consent and in compliance with the current authorizations concerning the protection of personal data. In this regard, unless strictly necessary, we ask you not to provide this type of information; otherwise, if you decide to provide them, we ask you to express your specific consent in compliance with the current legislation on the protection of personal data. We remind you, in fact, that in the absence of your consent to the processing of special categories of Personal Data, if you communicate us this type of data, your application cannot be taken into consideration.
In order to avoid any processing of unnecessary data, we invite you to omit any information or data not strictly relevant to the selection in the Curriculum or in any further communications with us.
The collection and processing of Personal Data provided by you is carried out exclusively for the purpose of research, evaluation and selection of personnel in the interest of the Company for the purpose of establishing an employment relationship.
The processing of your Personal Data for the aforementioned purposes has as its legal basis in Art. 6, par. 1, lett. b) of the GDPR, and specifically the legal basis is “the execution of pre-contractual measures adopted at the request of the interested party”.
The processing of special categories of personal data pursuant to art. 9 GDPR for the aforementioned purposes has, instead, as a legal basis the Art. 6, par. 1, lett. a) of the GDPR and so your free and informed consent to the processing.
The communication and the provision of your Personal Data are absolutely optional.
However, any refusal to provide Personal Data (or your willingness to request deletion) may determine the impossibility of the Company to establish or continue the selection or evaluation procedure of the candidacy.
The processing by the Company of your Personal Data shall be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights, in accordance with the principles expressed by the GDPR.
Your Personal Data may be processed by paper-based or IT instruments and it shall include – in compliance with the limits and conditions laid down by the privacy legislation – all the operation or set of operations necessary for the processing at issue, including communication to subjects as per para. 6 below. The processing of Personal Data shall be carried out in compliance with confidentiality and security rules provided by European regulations, by law, and other national provisions.
For internal storage requirements, the Company reserves the right to destroy any paper copies of the CV provided by the data subject and to keep a copy in electronic format. Specific security measures are observed to prevent the loss of Personal Data, unlawful or incorrect use and unauthorized access to the same.
It is specified from now on that, if your application is accepted, your Personal Data will be processed for the entire duration of the employment relationship and also subsequently for the fulfillment of all legal obligations.
The Company, for the purposes described in paragraph 3 above, could communicate your Personal Data to:
The Personal Data collected by the Company shall not be disseminated, without prejudice to the communications provided by laws.
It is understood that, in the event of any extraordinary corporate transaction (e.g. sale or lease of a company, merger, etc.) concerning the Company, the Personal Data may be transferred or communicated to third parties purchasers/lessee or others, entitled by the Company.
The Personal Data provided by you will be stored in our archives for the time strictly necessary to achieve the purposes described above and may be used to contact you in order to possible future interviews, also in relation to open positions other than the one for which you presented your application. At the end of this period, your Personal Data will be permanently deleted.
The Company, in any case, will cease the processing of the Personal Data of those candidates who expressly request to do so in the manner indicated in paragraph 8 below.
The Company reserves the right to destroy the CVs or any document containing Personal Data of the Candidate in the event that it does not deem it is compliant with the purposes referred to in paragraph 3 above.
If your application is accepted, the Personal Data concerning you will be filed and processed by the Company pursuant to the employee information.
With reference to your Personal Data you can exercise, at any time, the rights pursuant to the GDPR as indicated below:
The Company, moreover, informs you that it is possible to lodge a complaint pursuant to Art. 77with the competent supervisory authority based on your residence, workplace or place of infringement of your rights.
You may exercise your above listed rights by means of a request to be sent by email to privacy@ima.it or by registered post to the Company Headquarters.
Requests relating to the exercise of your rights shall be processed without undue delay and in any event within 30 days from the receipt of the request.
Finally, we inform you that the Data Controller reserves the right to modify or update this information also in order to comply with new obligations imposed by laws or for technical reasons.
CLIENT INFORMATION
PURSUANT TO ART. 13 – 14 OF THE REGULATION (EU) 2016/679
We inform you, pursuant to Art. 13 -14 of the Regulation (EU) 2016/679 on the protection of personal data (“GDPR”) that your personal data could be processed according to the current legislative and contractual provisions.
In relation to the above, we inform you that:
The Data Controller, that is whoever determines the purposes and means of the processing of personal data, is the IMA Group company with which your company has a contractual relationship (hereinafter “Company” or “Data Controller”).
The updated list of the IMA Group companies is available at the following website: https://ima.it/it/il-gruppo-ima/societa-del-gruppo-ima/.
You can request all the details regarding the Data Controller identification data by sending an email to: privacy@ima.it.
The IMA Group companies have appointed a data protection officer (“DPO”) who can be contacted to obtain clarifications on the processing of your personal data.
In particular, the Italian companies of the IMA Group has appointed the following DPO:
Alberto Bertuzzo
Pirola Pennuto Zei & Associati
Via delle Lame 109
40122 Bologna (Italy)
Tel.:+39 051 526711
E-mail: dataprotectionit@ima.it
other European companies of the IMA Group has appointed the following DPO:
Christian Schwinge
schwinge GmbH
Am Kochenhof 12
70192 Stuttgart
GERMANY
Phone: +49 (0) 711 / 258560-0
E-mail: dataprotectioneu@ima.it
The Data Controller collects and processes “contact” personal data (name, surname, fiscal code, email address, telephone number, position and company) of the client employees with whom it have dealings(“Personal Data”).
Moreover, the Company could carry out checks on the solvency of its commercial counterpart through credit control and credit risk analysis and, during these activities, may gain knowledge of Personal Data relating to the members of the corporate bodies of the analysed Company.
Data update
At any time, you can verify that the Personal Data processed for the purposes as per this information are correct and, should they be changed, you can request the update of this data, by sending an email to privacy@ima.it or by registered post to the Company’s headquarters.
The collection and the processing of your Personal Data are carried out for the following purposes:
The processing of your Personal Data for the purposes mentioned above has its legal basis on:
We hereby remind you that you can object to the processing at any time by contacting the Company as per in paragraph 8 below, except in the event that the Company demonstrates the existence of prevailing, compelling, legitimate grounds for the exercise or the defence of a right, pursuant to Art. 21 of GDPR.
The processing by the Company of your Personal Data shall be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights, in accordance with the principles expressed by the GDPR.
Your Personal Data may be processed by paper-based or IT instruments and it shall include – in compliance with the limits and conditions laid down by the privacy legislation – all the operation or set of operations necessary for the processing at issue, including communication to subjects as per para. 6 below. The processing of Personal Data shall be carried out in compliance with confidentiality and security rules provided by European regulations, by law, and other national provisions.
Processing of your Personal Data is achieved by means of the operations described in Art. 4 no. 2 GDPR, that are: collection, recording, organisation, structuring, updating, storage, adaptation or alteration, retrieval and analysis, consultation, use, disclosure by transmission, comparison, alignment, restriction, erasure or destruction.
The Company guarantees the logical and physical security of the Personal Data and, in general, the confidentiality of the Personal Data processed, implementing all the appropriate technical and organisational measures required to avoid the loss of Personal Data, the unlawful use or, in any event, the incorrect use of the same, and unauthorized access by third parties.
The Company, for the purposes described in paragraph 3 above, could communicate your Personal Data to:
The third parties as above to which the Company may communicate your Personal Data shall process them in their role as Data Processors, expressly appointed by the Company pursuant to Art. 28 of the GDPR or as autonomous data controller.
The Personal Data collected by the Company shall not be disseminated, without prejudice to the communications provided by laws.
It is understood that, in the event of any extraordinary corporate transaction (e.g. sale or lease of a company, merger, etc.) concerning the Company, the Personal Data may be transferred or communicated to third parties purchasers/lessee or others, entitled by the Company.
The complex IMA Group business structure necessarily entails the circulation of Personal Data outside of the European Union and the European Economic Area (“EEA”), which is defined in Art. 44 of GDPR as “transfers of personal data to third countries”.
In the event that your Personal Data are transferred to third countries, they shall be processed in compliance to the provisions of Articles 45 et seq. of GDPR.
For more information on the transfer of your Personal Data, you can contact the Company to the following address: privacy@ima.itor by registered mail to the Company headquarters.
Your Personal Data shall be stored for the period of time strictly necessary for the purposes of the data processing indicated in para. 3 above and in particular:
With reference to your Personal Data you can exercise, at any time, the rights pursuant to the GDPR as indicated below:
The Company, moreover, informs you that it is possible to lodge a complaint pursuant to Art. 77with the competent supervisory authority based on your residence, workplace or place of infringement of your rights.
You may exercise your above listed rights by means of a request to be sent by email to privacy@ima.it or by registered post to the Company Headquarters.
Requests relating to the exercise of your rights shall be processed without undue delay and in any event within 30 days from the receipt of the request.
Finally, we inform you that the Data Controller reserves the right to modify or update this information also in order to comply with new obligations imposed by laws or for technical reasons.
SUPPLIERS INFORMATION
PURSUANT TO ART. 13-14 OF THE REGULATION (EU) 2016/679
We inform you, pursuant to Art. 13-14 of the Regulation (EU) 2016/679 on the protection of personal data (“GDPR”) that your personal data could be processed according to the current legislative and contractual provisions.
In relation to the above, we inform you that:
The Data Controller, that is whoever determines the purposes and means of the processing of personal data, is the IMA Group company with which your company has a contractual relationship (hereinafter “Company” or “Data Controller”).
The updated list of the IMA Group companies is available at the following website: https://ima.it/it/il-gruppo-ima/societa-del-gruppo-ima/.
You can request all the details regarding the Data Controller identification data by sending an email to: privacy@ima.it.
The IMA Group companies have appointed a data protection officer (“DPO”) who can be contacted to obtain clarifications on the processing of your personal data.
In particular, the Italian companies of the IMA Group has appointed the following DPO:
Alberto Bertuzzo
Pirola Pennuto Zei & Associati
Via delle Lame 109
40122 Bologna (Italy)
Tel.:+39 051 526711
E-mail: dataprotectionit@ima.it
other European companies of the IMA Group has appointed the following DPO:
Christian Schwinge
schwinge GmbH
Am Kochenhof 12
70192 Stuttgart
GERMANY
Phone: +49 (0) 711 / 258560-0
E-mail: dataprotectioneu@ima.it.
For purposes described in paragraph 3 below, the Company collects and processes “contact” personal data (name, surname, email address, telephone number, position and company) of the Contact Personnel within its suppliers (“Personal Data”).
Moreover, during the qualification procedures of its suppliers, the Company may gain knowledge of identification Personal Data and data related to the position covered by the Contact Personnel within the supplier for purposes connected to the operational management of the commercial relationship.
Data update
At any time, you can verify that the Personal Data processed for the purposes as per this information are correct and, should they be changed, you can request the update of this data, by sending an email to privacy@ima.it or by registered post to the Company’s headquarters.
The collection and the processing of your Personal Data is carried out without your consent.
Indeed, your Personal Data are processed pursuant to Art. 6 para. 1 letters b), c) and f) of the GDPR for the following purposes:
The processing of your personal data for the purposes mentioned above has its legal basis on:
We hereby remind you that you can object to the processing at any time by contacting the Company as per in paragraph 8 below, except in the event that the Company demonstrates the existence of prevailing, compelling, legitimate grounds for the exercise or the defence of a right, pursuant to Art. 21 of GDPR.
In general, the provision of Personal Data and their processing is obligatory; indeed should you refuse to supply your data (or your desire to request their erasure), means that is impossible for the Company to enter into and proceed with the contractual relationships.
The processing by the Company of your Personal Data shall be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights, in accordance with the principles expressed by the GDPR.
Your Personal Data may be processed by paper-based or IT instruments and it shall include – in compliance with the limits and conditions laid down by the privacy legislation – all the operation or set of operations necessary for the processing at issue, including communication to subjects as per para. 6 below. The processing of Personal Data shall be carried out in compliance with confidentiality and security rules provided by European regulations, by law, and other national provisions.
Processing of your Personal Data is achieved by means of the operations described in Art. 4 no. 2 GDPR, that are: collection, recording, organisation, structuring, updating, storage, adaptation or alteration, retrieval and analysis, consultation, use, disclosure by transmission, comparison, alignment, restriction, erasure or destruction.
The Company guarantees the logical and physical security of the Personal Data and, in general, the confidentiality of the Personal Data processed, implementing all the appropriate technical and organisational measures required to avoid the loss of Personal Data, the unlawful use or, in any event, the incorrect use of the same, and unauthorized access by third parties.
Your Personal Data shall not be disclosed, but the Company could, for the purposes described in Art. 3 above, communicate them to:
The third parties as above to which the Company shall communicate your Personal Data shall process them in their role as Data Processors, expressly appointed by the Company pursuant to Art. 28 of the GDPR or as autonomous data controller.
The Personal Data collected by the Company shall not be disseminated, without prejudice to the communications provided by laws.
It is understood that, in the event of any extraordinary corporate transaction (e.g. sale or lease of a company, merger, etc.) concerning the Company, the Personal Data may be transferred or communicated to third parties purchasers/lessee or others, entitled by the Company.
Your Personal Data shall be stored for the period of time strictly necessary for the purposes of the data processing indicated in para. 3 above and, in any event, for no longer than 10 years from the termination of the contractual relationship and, anyway, no later than the terms established by law for the prescription of the rights.
With regard to the Personal Data processed for the purpose indicated in para. 3 lett f), the storage period is 2 years from the termination of the audits activities.
At the end of the aforementioned periods Personal Data shall be erased.
With reference to your Personal Data you can exercise, at any time, the rights pursuant to the GDPR as indicated below:
The Company, moreover, informs you that it is possible to lodge a complaint pursuant to Art. 77with the competent supervisory authority based on your residence, workplace or place of infringement of your rights.
You may exercise your above listed rights by means of a request to be sent by email to privacy@ima.it or by registered post to the Company Headquarters.
Requests relating to the exercise of your rights shall be processed without undue delay and in any event within 30 days from the receipt of the request.
Finally, we inform you that the Company reserves the right to modify or update this information also in order to comply with new obligations imposed by laws or for technical reasons.
The exclusive tech videos shot during Achema 2024 are now available on our dedicated website