Eustema S.p.A. is aware of the fundamental importance of protecting the Personal Data of its Suppliers, thereby providing that the processing of Personal Data is carried out in full compliance with the protections and rights recognized by the EU Regulation 2016/679 (hereinafter “GDPR”).
This policy explains in detail who we are and and the purposes of the use your data, which you submitted by spontaneous application or following a recruitment process by Eustema.
The Data Controller of the personal data provided through the website www.eustema.it is Eustema S.p.A. (hereinafter referred to as “Eustema” or the “Company”) with registered office in Rome at via Carlo Mirabello nr. 7,
CF and P. IVA 05982771007 contactable at the e-mail address: “privacy(at)eustema(dot)it “. The Data Controller has appointed a Data privacy Officer (DPO) available at the following e-mail address: “dpo_privacy(at)eustema(dot)it “.
The Data Controller, for some treatments, will be supported by the company Eustema S.p.A. with registered office in Rome at Via Carlo Mirabello nr. 7,
TAX CODE and VAT NUMBER no. 15957891003 , which will act as Joint Data Controller. The Joint Data Controllers EUforLEGAL S.r.l. and Eustema S.p.A. have indeed stipulated a co-ownership agreement concerning the data processing according to art. 26 of the GDPR.
An extract of the co-ownership agreement is available upon request by sending an e-mail to the address daf(at)eustema(dot)it
Your data will be processed by the Owner and/or the Co-owner only for purposes related to the management of the contractual or training relationship (internship).
The purposes referred to in points a) and b) are linked one another: the conferment of data and consequently any consent, cannot be made only in relation to one of them.
The Owner and the Co-owner will process the data:
It follows that the provision of Personal Data is mandatory for the aforementioned purposes.
Any partial or total failure to provide the Data will result in the partial or total impossibility of achieving such purposes. The spontaneous sending, by any means, of the Data on your part will be considered as explicit consent to the processing .
We will not use your personal data for purposes other than those described in this statement, unless previously informed and, where necessary, obtaining your consent.
The legal basis for the processing is Your consent (Article 6, letter a, GDPR).
For the above-mentioned purposes, we will only process the personal data included in the curriculum vitae, concerning common data such as, for example: name and surname, tax code, domicile, e-mail or PEC address, telephone and fax numbers, qualifications, role and/or company classification, etc..
Should you have decided to apply for a particular job offer and/or provide us with special data in accordance with art.9 of the GDPR (e.g. health data, judicial data, trade union membership, etc.), the Data Controller and/or Co-owner will have to process and collect data for which the law requires your consent. In this case we inform you that such data will be processed exclusively for the purposes indicated in paragraph 1. Should you send us particular data, even without consent, the spontaneous transmission of data by you will be considered as an expression of your valid consent to the treatments carried out.
Your Data is collected, prior to the start of or during a selection, by:
the spontaneous sending of Your CV through: a) a web page made available by Eustema and expressly dedicated to the purpose (section “Join us”); b) electronic mail; c) fax; d) mail; e) other tools eventually made available by Eustema; within the consultation of specialized databases, in which you have spontaneously deposited your curriculum for the purpose of consultation by potentially interested companies.
Where personal data were received in response to your spontaneous submission of the curriculum or collected from third parties, the information referred to in this statement will be provided at the time of registration of data.
The Company’s purpose is the protection of your data and their treatment is based on principles of correctness, lawfulness and transparency. The Data will be treated in archives and paper supports or with the help of digital supports, informatic and telematic tools. However, the logical and physical security and, in general, the confidentiality of your personal data will be guaranteed.
Your personal data will be stored, starting from their receipt or update, for a maximum period of twenty-four months for the management of the application (unless otherwise provided by law that provides for longer periods), after which they will be deleted or made anonymous. Where, however, a working relationship should be established, Your Personal Data will be retained, from their receipt, for the time prescribed by tax and employment law.
For the purposes referred to in paragraph 1, as part of the activities of research and selection, and management of applications, your data will be processed by internal resources of the offices of the Owner and / or the Owner, adequately trained, acting as authorized personnel to the treatment of data. In addition, your data may be shared with external parties including professionals, public bodies, auditing or supervisory bodies, in order to comply with obligations deriving from the law, regulations, EU legislation or for aspects concerning the management and execution of the contractual relationship.
Your personal data will not be disclosed or will not be made known to unspecified persons. Access to the archived Data shall only be allowed to public authorities, in the cases and modalities provided for by the laws in force, in case of legal disputes.
For all the purposes indicated in this informative report, Your Data will not be communicated outside the European Union. Should it be necessary in the future to transfer data outside the European Union, the Joint Data Controllers undertake to comply with the provisions of Chapter V of the GDPR and to do what is necessary to ensure adequate levels of protection and safeguarding of Personal Data.
At any time, you will have the right to request:
– access to Your personal data and receive confirmation as to whether or not any personal data concerning You is being processed and, if so, obtain information relating, in particular, to: the purposes of the processing, categories of personal data processed, the period of storage, recipients to whom they may be communicated (Article 15, GDPR);
– their rectification in case of inaccuracy of the same obtaining, without undue delay, the rectification of inaccurate personal data and the integration of incomplete ones (Article 16, GDPR);
– the deletion, without undue delay, of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR);
– the limitation of their processing in the cases established by the GDPR (Article 18, GDPR);
– the right to object to the processing of Your personal data, unless there are legitimate reasons for the Controller and/or the Joint Controller to continue the processing (Article 21, GDPR);
– The right to lodge a complaint with the National Supervisory Authority (Information and contact details at www.garanteprivacy.it).
You will be able to exercise Your rights by sending an e-mail request to “privacy(at)eustema(dot)it ” and we will take care of Your request to ensure the effective exercise of Your rights.
Yes, you may revoke your consent at any time, but this may not
– affect the lawfulness of the processing based on the consent given before the revocation
– affect further processing of the same data based on other legal bases (for example, contractual obligations or legal obligations to which the Owner is subject).