Dear Madam, or Sir,
the company F.lli Pisa Srl processes information concerning you, your personal data, for purposes related to the selection, establishment and management of the employment relationship, for this purpose, as prescribed by the European legislation for the protection of personal data (European Regulation 679/2016), we provide you with the following information.
- Data Controller and Data Protection Officer.
The Data Controller, i.e. the person responsible for decisions regarding the purposes, methods and security of personal data, is the company Fratelli Pisa Srl with headquarters in Milan – postal code 20121, via Montenapoleone n. 9, corner of via P. Verri, tel. 02762081, PEC f.llipisa@legalmail.it, email compliance@pisa1940.com.
The Data Protection Officer, also known by the acronym DPO, monitors compliance with the legislation on the protection of personal data and cooperates with the supervisory authority (the Guarantor for the Protection of Personal Data).
The Data Protection Officer can be reached:
- by email to dpo@pisa1940.com
- by traditional paper mail to the registered office address
- physically at the office by appointment
- Purposes and legal bases of the processing.
The personal data that you provide to us and that will be collected during the relationship to which you are a party will be processed for the purposes according to the legal bases indicated below:
|
Purpose
(Why we process your data)
|
Legal basis
(Based on which legal provision we treat them.)
|
Consequences in case of refusal to treatment
(What happens if you refuse to provide personal data and/or authorize processing)
|
|
To select personnel and possibly establish and manage the employment relationship including obligations related to termination, e.g. payment of salaries, allowances, bonuses, other emoluments, donations or ancillary benefits.
|
Art. 6, Par. 1, Letter b) GDPR (processing is necessary for the execution of a contract of which the interested party is a party).
|
The inability to process the data is incompatible with the employment relationship.
|
|
For the application of legislation on social security and assistance, including supplementary assistance, on workplace hygiene and safety, as well as on tax, trade union and health protection matters.
|
Art. 6, Par. 1, Letter c) GDPR – fulfillment of legal obligations to which the Company is subject. Personal data of special categories are processed limited to the fulfillment of the obligations and the exercise of the specific rights of the Company or its in the field of labor law and social security and social protection.
|
The inability to process the data is incompatible with the employment relationship.
|
|
To ensure the safety of buildings and those who work there, such as, for example. the data collected in access controls.
|
Art. 6, Par. 1, Letter c) GDPR - the processing is necessary to fulfill a legal obligation to which the Company is subject.
|
The inability to process the data is incompatible with the employment relationship.
|
|
For
- protect company assets and people,
- ensure the functioning of the information system,
- communicate with staff.
Limited to: network traffic data (points 1 and 2); to video surveillance images (point 1); to the data contained in electronic instruments if maintenance is required (point 2); to personal contact data (point 3).
|
Art. 6, Par. 1, Letter f) GDPR – legitimate interest of the Company in processing personal data for the purposes indicated.
|
Consent is not required. You can object to the processing at any time by giving us written notice at the contact points indicated above. The unusability of such data could be incompatible with work performance, e.g. where the use of electronic instruments or presence in video-surveillance areas is required.
|
|
For the promotion of the company in information materials regarding images taken on the occasion of events and/or demonstrations and/or promotional displays.
|
Art. 6, Per. 1, Letter a) GDPR – your consent to processing for the purposes indicated.
|
In the absence of your consent, the data will not be processed. Failure to consent does not affect the employment relationship. Where consent has been given, it can always be revoked.
|
|
To manage reports received through the whistleblowing system, or during the exercise of the duties of the supervisory bodies.
|
Art. 6, Par. 1, Letter c) GDPR – fulfillment of legal obligations (e.g. Legislative Decree 24/2023; Legislative Decree 231/2001).
|
The inability to process the data is incompatible with the employment relationship.
|
|
To satisfy your express requests, such as for example. union withholdings, salary-backed loans, the benefits of Law 104, extraordinary leave, etc...
|
Art. 6, Per. 1, Letter a) GDPR – your consent to processing for the purposes indicated.
|
In the absence of your consent, the data will not be processed.
|
|
To respond to requests from Judicial Authorities (for example declarations made to the magistrate relating to seizures of a fifth of the salary) or from the Board of Auditors or the Supervisory Body.
|
Art. 6, Par. 1, Letter c) GDPR – fulfillment of legal obligations.
|
The inability to process the data is incompatible with the employment relationship.
|
- Recipients and categories of data processed.
The personal data provided by you or acquired during the service will be processed exclusively by personnel authorized for this purpose or by data controllers designated for this purpose. Further information on designees, data controllers and system administrators can be requested from the Human Resources Office.
Your data may be communicated, in addition to the subjects expressly delegated by you, to the following recipients:
|
Purpose
|
Data category
|
Recipients
|
|
For the application of legislation on social security and assistance, including supplementary assistance, on workplace hygiene and safety, as well as on tax, trade union and health protection matters.
|
Identification data, economic data, data relating to the employment relationship, data relating to health.
|
INPS, INAIL
|
|
For payroll processing.
|
Identification data, data relating to the employment relationship, economic data, attendance and absences.
|
Payroll processing firm (as data controller)
|
- Transfer abroad – automated processes
Your personal data is not transferred outside the European Union.
Your personal data are not processed using automated decision-making systems, which provide relevant information for the purposes of: i) hiring; ii) the assignment of the task; iii) management of the employment relationship; iii) the termination of the employment relationship; iii) the assignment of tasks or duties.
Your personal data are not processed using automated monitoring systems designed to provide information on: i) surveillance, ii) the assessment of workers' contractual obligations, iii) the performance of workers' contractual obligations, iii) the fulfillment of obligations workers' contracts.
- Personal data retention period and criteria used
The personal data being processed are collected in documents whose storage is established consistently with the processing purposes as summarized below.
|
Document
|
Shelf life
|
|
Work file
|
10 years from the termination of the employment relationship, unless suspended in the event of disputes.
|
|
Payslips pay
|
6 months from the date of issue, unless suspended in the event of disputes.
|
- Rights of the interested party.
Interested parties have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 et seq. of the Regulation). The specific request is submitted by contacting the Data Protection Officer (DPO) at the contact points indicated above.
- Right to complain
Interested parties who believe that the processing of personal data relating to them carried out by us occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by the art. 77 of the Regulation itself, or to take action in the appropriate judicial offices (art. 79 of the Regulation).
- Collaboration
The protection of data concerning you and compliance with the principles established by law, with particular reference to the principle of transparency, are values of primary importance for us; We will be grateful if you would like to help us by reporting any misunderstandings of this document or suggesting improvements to the Data Controller's contact details as indicated above.
