Employment candidate Privacy Notice

Pursuant to art.13 of EU Regulation 2016/679
General Data Protection Regulation

Dear Mr/Mrs/Mrs.

Below we provide you with a brief description of the essential characteristics of your personal data processing by our company Trueblue S.p.a., with registered office in Viale del Lavoro 33, 37135 Verona – Italy, F.C. and VAT no. 03258370232, which acts as Data Controller (hereinafter “Trueblue”, the “Company” or the “Data Controller”). The processing will be carried out in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (the “Regulation”). Personal data means “any information relating to an identified or identifiable natural person”. Processing means “any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, mining, consultation, use, disclosure by transmission, dissemination or any other means of making data available, alignment or combination of data, restriction, erasure or destruction”. Your personal data will be processed for managing the process of staff search and selection – regardless of its type and in all its phases – and therefore for the fulfilment and exercise of the related and mutual obligations and rights. By simply submitting a request to the addresses below, you may exercise the fundamental rights provided for in the Regulation, including the right to obtain confirmation and communication of the data concerning you. For further details, please refer to the detailed notice below.

In accordance with art. 13 of the Regulation, we provide you with the following information on the processing of your personal data.

a) Identity and contact details of the Data Controller:

Data Controller is Trueblue S.p.a., located in Viale del Lavoro 33, 37135 Verona – Italy, F.C. and VAT no. 03258370232, tel. +39 045 92 00 901, fax +39 045 92 00 950, e-mail info@truebluecorp.com .

b) Data Protection Officer (DPO):

The Data Protection Officer appointed by the Company pursuant to art. 37 of the Regulation can be contacted at the following e-mail address dpo@truebluecorp.com 

c) Purpose and legal foundation for the processing of personal data:

Your personal data will be processed, in compliance with the above-mentioned regulation, exclusively for the research and selection of staff.
The provision of personal data essential for the above-mentioned purpose is mandatory, and the refusal to provide it or to allow their subsequent processing will make it impossible for the Company to enter data in its archive and, consequently, to evaluate your name for a possible employment relationship.
The processing and communication of your personal data, for the purposes and in the manner described in this notice, may occur without the need for your consent pursuant to art. 6, paragraph 1, letter b) and f) of the Regulation on the basis of the fulfilment of pre-contractual measures and the legitimate interest of the Company in the research and selection of personnel.
Among the personal data provided by you for the above purposes there may be some special categories of personal data, as such data may reveal your state of health, belonging to protected classes, membership of trade unions, reason for exemption from military service, etc.
Such data may be processed by the Company only with your consent in accordance with art. 9, paragraph 2, letter a) of the Regulations.

d) Recipients of your personal data

Within the above mentioned purpose, your personal data may be communicated to the following third parties (ex art. 4, point 10 of the Regulations): (i) Companies that provide Trueblue with services functional to the management of the research and selection of personnel (e.g. suppliers of management applications). Where necessary, the Company has appointed the recipients of its personal data as Data Processors pursuant to art. 28 of the Regulation. The names of all Data Processors may be requested by means sending an email to the addresses indicated below.
Within the Company, your data will only be disclosed (limited to the respective field of competence) to: (i) the persons authorised to process the data, belonging to the Management/Company Area involved in the personnel search and selection process; (ii) the persons authorised to process data belonging to the Human Resource, Administration and IT System Engineers Divisions.

e) Non-EU transmission

For the purposes indicated above, your personal data will not be transferred to countries outside the European Union.

f) Methods of personal data processing

In relation to the above-mentioned purposes, the processing of personal data will be carried out with the support of paper, computer or telematic means, in compliance with the regulations in force, so as to guarantee security and confidentiality.
Data will be processed in accordance with the requirements of current legislation on labour law and social security and social protection, occupational medicine, in execution of the employment contract signed with you, as well as in compliance with the provisions in force – and their following amendments and/or additions – issued on the subject by the Authority for the Protection of Personal Data (including Guidelines on the processing of personal data of workers for purposes of managing the employment relationship with private employers) and the Working Party set up under Article 29 of Directive 95/46 EC of 13 July 2011 (including Opinion 2/2017 on data processing at work of 8 June 2017).

g) Retention period of personal data:

Within the scope of the above-mentioned purposes, your personal data will be kept for the time strictly necessary to decide whether to proceed with your recruitment, and in any case for a time not exceeding your recruitment needs. In any case, your personal data will not be kept for a period longer than two years from receiving it, after which it will be destroyed or made anonymous.

h) Rights under Articles 15 and following of the Regulation

By writing an e-mail to privacy@truebluecorp.com you will be able to use your rights in accordance with art. 15 and following of the Regulation, including:

• Obtain confirmation whether or not personal data concerning you is being processed;
• Obtain access to your personal data and the information indicated in art. 15 of the Regulation;
• Obtain the correction of inaccurate personal data concerning you without undue delay or the integration of incomplete personal data;
• Obtain the deletion of personal data concerning you without undue delay;
• Obtain the limitation of the processing of personal data concerning you;
• Be informed of any rectification, deletion or restriction of processing carried out in relation to personal data concerning you;
• Receive personal data concerning you in a structured, commonly used and machine-readable format.

In addition, pursuant to art. 21 of the Regulation, you will have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you carried out in pursuit of the legitimate interest of the Data Controller pursuant to art. 6, paragraph 1, letter f) of the Regulation.

You can find the full list of rights of data subjects on www.garanteprivacy.it.

i) Complaint to the Data Protection Authority

We remind you that, if you believe that the treatment that concerns you violates the provisions of the Regulation, you can always submit a complaint to the Data Protection Authority for the protection of personal data (www.garanteprivacy.it), or to the Data Protection Authority of the country where you usually reside, work or the place where the alleged violation occurred.