Candidates Personal Data

INFORMATION CONCERNING THE PROCESSING OF CANDIDATES’ PERSONAL DATA

PURSUANT TO REGULATION (EU) 2016/679

Pursuant to art. 13 and 14 of Regulation (EU) 2016/679 concerning the “protection of individuals with regard to the processing of personal data and the free circulation of such data” (also GDPR), IBI SA wishes to inform you about the processing of the personal data provided by you by means of the transmission of your curriculum vitae or the receiving of the same from employment agencies.

DATA CONTROLLER

The Data Controller for your data, in relation to the collaborative relationship, is

IBI Industrie Biomediche Insubri S.A. with registered office in Via Cantonale 67, Mezzovico-Vira (Switzerland).

Contact Email: gianni@ibi-sa.com

TYPE OF PERSONAL DATA PROCESSED

The Data Controller collects and processes your data for the purpose of carrying out the required professional service (pre-contractual) or for the management of the subsequent contractual relationship established.

In particular, this concerns the following data:

• Personal and identification data, such as name, surname, place and date of birth, sex, tax code, passport photo;
• Contact details such as residence/home address, telephone number, e-mail;
• Curricular information such as school, university and professional training.

PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

The processing of your personal, contact and curricular data is carried out for the purpose of selecting and establishing your professional collaborative relationship and, more specifically, to allow IBI S.A. to conduct activities in relation to the management of applications and professional evaluation of candidates.

The legal basis for the processing of personal data is the execution of pre-contractual and contractual measures requested by you on your behalf (Article 6, paragraph 1, letter b).

PROVISION OF DATA

The provision of your personal data is optional.

In any case, we inform you that any refusal to provide your personal data may make it impossible for the Data Controller to establish the contractual relationship or to follow up on a professional contract already in place between the parties.

SUBJECTS OR CATEGORIES OF SUBJECTS TO WHOM DATA MAY BE COMMUNICATED

For the purposes indicated above, your personal data may be disclosed to employees of the company, who will be authorised to process such data within the context of their respective roles (e.g., management, development and training of personnel, personnel administration, accounting management, management of legal and litigation activities, management of communication tools and network services).

Pursuant to art. 28 of the Regulations, those subjects who perform the processing of personal data on behalf of the Data Controller have the necessary requirements to ensure compliance with the rules of the Regulations and have been duly designated as Data Processors.

The list of Data Processors may be requested at the email address

An updated list of the aforementioned subjects is available at the registered office of the Data Controller.

TRANSFER OF YOUR DATA TO COUNTRIES LOCATED OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

Currently, the Data Controller does not transfer your data to companies and/or international organisations located outside the EEA.

Nevertheless, it is understood that, if necessary, the Data Controller will have the right to transfer personal data within the EU and/or in countries outside the European Economic Area.

In this case, the Data Controller assures, with immediate effect, that the transfer of data will take place in accordance with Articles 44 and et seq. of the Regulations and with the applicable legal provisions in stipulating, if necessary, agreements that guarantee an adequate level of protection.

PERSONAL DATA RETENTION TIMES

As part of the pre-contractual relationship, CVs will be kept for the entire duration of the selection process and, in any case, for a period not exceeding 3 years from receipt of the curriculum vitae. Once this deadline has passed, the collected data will be deleted or processed anonymously.

Following the establishment of a contractual relationship, your personal data will be retained for the entire duration of the employment relationship and subsequently for the period of time required by law, for up to a maximum of 15 years.

RIGHTS OF THE INTERESTED PARTY

As an interested party, pursuant to art. 15-22 of the Regulations, you can exercise certain rights as summarised below:

• Right of access of the interested party: right to obtain confirmation from the data controller that personal data concerning you is being processed and in this case, to obtain access to personal data – and a copy of the same – and to receive information relating to such processing;
• Right to rectification: the right to request from the data controller the correction of inaccurate personal data concerning you without undue delay and the integration of incomplete personal data, including by providing a supplementary declaration.
• Right to Erasure: the right to request from the data controller the deletion of personal data concerning you without undue delay for any of the following reasons:
  • the personal data is no longer necessary with respect to the purposes for which they were collected or otherwise processed;
  • the interested party revokes the consent upon which the processing is based and there is no other legal basis for the processing;
  • the interested party opposes the processing and there is no legitimate overriding reason to proceed with the processing;
  • the personal data was processed unlawfully;
  • the personal Data must be deleted to fulfil a legal obligation required by European Union or Member State law to which the data controller is subject;
  • the personal data was collected in connection with the provision of information company services.
• Right to restriction of processing: the right to request the restriction of the processing from the data controller when one of the following occurs:
  • the data subject disputes the accuracy of the personal data, for the period necessary to the data controller to verify the accuracy of such personal data;
  • the processing is unlawful and the data subject opposes the deletion of personal data and requests that it be restricted;
  • Despite the data controller no longer requiring it for the purposes of processing, personal data is necessary for the interested party to ascertain, exercise or defend a right in court;
  • the interested party is opposed to the processing pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
• Right to Portability: the right to receive the personal data concerning you provided to the Data Controller in a commonly used structured format and readable by an automatic device, and to transmit such data to another data controller if the processing is based upon the consent or the contract and is carried out by automated means.
• Right to object: the right to object to the processing conducted for the execution of a task of public interest or connected to the exercise of public authority or on the basis of the legitimate interest of the data controller or third parties, as well as the right to object to the processing of personal data concerning you conducted for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing.

Such requests may be addressed to the Data Controller at the following email address gianni@ibi-sa.com

You will receive a reply as soon as possible and, in any case, no later than 30 days from your request.

PROCESSING BASED ON AUTOMATED DECISION-MAKING PROCESSES

The Data Controller does not process personal data based on automated decision-making processes, including profiling.

COMPLAINTS

If you wish to lodge a complaint regarding the ways in which your personal data is processed by the Data Controller or regarding the management of a complaint you have lodged, you have the right to submit an application directly to the competent supervisory authorities.

Date and Location: Mezzovico-Vira (CH), 21/09/2020