This Notice is provided to inform you of the processing of your personal data.

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
The Data Controller is Cielo e Terra S.p.A., (hereinafter, “Controller”), with registered office in Via IV Novembre, 39 – 36050 Montorso Vicentino (VI), C.F. 00592670244, P.I. IT 02160070245, PEC: cieloeterra@cert.assind.vi.it, tel. 0444 485211.

PURPOSE OF THE PROCESSING OF PERSONAL DATA
The Data Controller, by way of example and not limited to, will collect the following categories of common personal data: name, surname, date of birth, residence, email address and telephone contacts, educational qualifications, work experience and any additional data included by you in the curriculum vitae and/or provided during an interview at our offices.
If you respond to an ad or apply voluntarily, you will be given the opportunity to declare whether you belong to a protected category in the data collection forms or during an interview at our offices. This information is suitable for revealing your state of health and falls within the special categories of data referred to in Article 9, paragraph 1 of the GDPR and will be processed in accordance with the applicable regulations in force.
Le finalità del trattamento dei suoi dati personali è quella della valutazione della sua candidatura ai fini della valutazione ed eventuale assunzione come dipendente presso il Titolare.

LEGAL BASIS FOR THE PROCESSING
The legal basis applicable to the processing of your personal data for the purpose referred to in point 2 is the execution of pre-contractual measures adopted upon request.

TREATMENT METHODS
The data processing is based on the principles of correctness, lawfulness and transparency and data minimization (privacy by design); it may be carried out both manually and through IT tools to store, process and transmit them and will take place through adequate technical and organizational measures, as far as is reasonable and in the state of the art, to guarantee, among other things, the security, confidentiality, integrity, availability and resilience of the systems and services, avoiding the risk of loss, destruction, unauthorized access or disclosure or, in any case, illicit use, as well as through reasonable measures to promptly delete or rectify inaccurate data with respect to the purposes for which they are processed.
Your personal data is processed both on paper and electronically.
The Data Controller will process the personal data for the time necessary to fulfill the purposes indicated above, or until revoked, and in any case for no longer than 30 months from the collection of the data.

RECIPIENTS OF PERSONAL DATA
Your data for the purposes referred to in point 2:
A. may be processed exclusively by employees of company functions authorised to process data as they are responsible for pursuing the purposes indicated above. These employees have received adequate operating instructions in this regard.
B. may be communicated to third-party companies or other subjects (for example, credit institutions, professional firms, employment consultants, etc.) who carry out outsourcing activities on behalf of the Data Controller, in their capacity as "external data controllers;
C. may also be used for the pursuit of the purposes referred to in the previous point 2 to the Companies of the COLLIS VENETO WINE GROUP - SOCIETÀ COOPERATIVA AGRICOLA GROUP

DATA COMMUNICATION
Without the need for express consent, the Data Controller may communicate your data for the purposes referred to in point 2. to Supervisory Bodies, Judicial Authorities, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes.
These subjects will process the data in their capacity as independent data controllers.
Your data will not be disclosed.

DATA TRANSFER
Personal data are stored in computer archives and not at the Data Controller or at the recipients indicated in point 5, within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the computer archives (servers) even outside the EU. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO RESPOND
The provision of data for the purposes referred to in point 2. is optional. Failure to provide data or the withdrawal of the same at a later time would make it impossible to evaluate your application for employment with the Data Controller.

RIGHTS OF THE INTERESTED PARTY
In your capacity as data subject, you have the following rights:
i. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
ii. obtain the indication: a) of the origin of the personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of the owner, of the managers; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as managers or "appointed";
iii. obtain: a) the updating, rectification or, when there is interest, the integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or post. Please note that the interested party's right to object, set out in point b) above, for direct marketing purposes by automated methods extends to traditional methods and that in any case the possibility for the interested party to exercise the right to object even only in part remains intact. Therefore, the interested party can decide to receive only communications by traditional methods or only automated communications or neither of the two types of communication.
Where applicable, you also have the right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Guarantor Authority.

DATA RETENTION DURATION
The data provided by you through your CV in our possession or those provided during interviews and/or interviews both at the office and by telephone or electronic means will be retained for a maximum period of 18 months.

HOW TO EXERCISE YOUR RIGHTS
You may exercise your rights at any time by sending:
- a registered letter to the Data Controller (see point 1);
- an email to cielo e terra@cert.assind.vi.it