PRIVACY POLICY - CANDIDATES

The information regarding the processing of Personal Data (namely, information regarding identified or identifiable natural persons) transmitted by you via the job application, the letter of presentation or your curriculum vitae is provided below, in compliance with the requirements set out under art. 13 of the General Data Protection Regulation 2016/679 (hereafter, the "GDPR").

DATA CONTROLLER’S IDENTITY AND CONTACT DETAILS
The Data Controller is Bonaccorsi Hein & Partner (hereafter, the "Firm" or the "Data Controller"), with registered office in Largo Donegani, No. 2 – 20121 Milan, tel. 0229005476; fax 0229005470; e-mail: info@bhpavvocati.it. Our internal privacy contact person is Ms. Federica Brevetti, lawyer.

CATEGORIES OF PERSONAL DATA
The Personal Data we process will be exclusively the personal data you have indicated voluntarily in the job application and/or in the letter of presentation and/or in your curriculum vitae. Personal Data include your identifying details and contact addresses, as well as the information relating to your studies and training, your previous professional experience, and any educational qualifications, diplomas or authorisations, personal characteristics, aptitudes and skills.
Furthermore, using the same mechanisms it is possible that you may communicate data included in particular categories, pursuant to art. 9 of the GDPR, namely, data (in order to limit the list to those which may be pertinent) "which reveal the racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership […], as well as data relating to health or sex life or to sexual orientation" ("Sensitive Data").
However, since in general, the Firm does not need to collect such data during the personnel search and selection phase, we invite you to avoid communicating such data to us, by deleting these data from your curriculum, unless their indication is necessary to ensure a better classification of your position. In this case, it is essential that you give your consent by indicating the following phrase at the bottom of your curriculum or in the cover letter: "Having read the information notice of Bonaccorsi Hein & Partner, available on the www.bhp.it internet website, I hereby expressly authorise Bonaccorsi Hein & Partner to process the sensitive data contained in my curriculum/job application/letter of presentation, in order to enable the owner to assess my application". Your application cannot be assessed without this authorisation.

PURPOSE AND LEGAL BASIS FOR DATA PROCESSING
We will process your Personal Data, including the Sensitive Data exclusively to assess your application and to contact you.
Therefore, the legal basis for data processing is represented by the need to reply to your request for your application to be assessed.
If you disclose Sensitive Data to us, the legal basis for data processing will be your consent.

MANDATORY OR NON-MANDATORY REQUIREMENT TO PROVIDE PERSONAL DATA
No Personal Data are to be provided as a mandatory requirement in the selection stage. However, without certain data we may find ourselves in a situation where we are unable to contact you (if there are no contact addresses), or we are unable to properly assess your profile and your suitability for the position.

STORAGE PERIOD
The Personal Data of the candidates, including the Sensitive Data, will be stored for a period of 6 months from the date of receipt of the curriculum or of the job application.

PERSONS OR ENTITIES WHO OR WHICH MAY HAVE ACCESS TO PERSONAL DATA ON BEHALF OF THE DATA CONTROLLER OR TO WHOM THE DATA ARE COMMUNICATED
The Personal Data we collect will be processed exclusively by our persons in charge of data processing, and moreover, will be accessible to the companies appointed to provide us with software and hardware support.
Each external person or entity who or which has access to the Personal Data has been or will be appointed as Data Processors, pursuant to art. 28 of the GDPR, subject to strict constraints regarding confidentiality and secrecy, in compliance with the provisions of the above-mentioned legislation.

TRANSFER ABROAD
Under no circumstance will your Personal Data be transferred outside the European Economic Area.

DATA SUBJECT’S RIGHTS
We take this opportunity to remind you that, in relation to your Personal Data, you will be entitled to exercise, in relation to us, the rights acknowledged by the GDPR, namely: (i) the right to access the Personal Data and information, for example: the purpose of data processing and the types of data held by us (art. 15 of the GDPR); (ii) the right to obtain the rectification of incorrect Personal Data which concern you, or to integrate incomplete Personal Data (art. 16 of the GDPR); (iii) the right to erasure ("right to be forgotten") of the Personal Data which concern you, if one of the grounds envisaged under art. 17 of the GDPR applies; (iv) the right to restriction of processing, namely, the right to obtain that the Personal Data which may be subject to dispute are flagged and not deleted, for the period necessary to exercise a given right regarding such data (art. 18 of the GDPR); (v) the right to data portability (art. 20 of the GDPR).
Lastly, we inform you that the GDPR confers on all data subjects the right to submit a complaint to the Supervisory Authority, if the Authority’s provisions have been violated.
You may use the following e-mail address:
info@bhpavvocati.it for any request or observation.


PRIVACY POLICY
PRIVACY POLICY - CLIENTS
PRIVACY POLICY - PROFESSIONALS AND SUPPLIERS