INFORMATION WORK WITH US

INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to art. 13 of EU Regulation 2016/679, General Data Protection Regulation (“GDPR”)

This information is provided for the processing of data collected as part of the “Work with us” page of the website www.pisa1940.com owned and managed by F.lli Pisa Srl (“Site”).

Through the aforementioned web page, users can submit their spontaneous applications in relation to work or collaboration positions at the company.

In this regard, it is hereby specified that this information is intended both for users who send their application in relation to a specific job advertisement published on the Site and for users who send a spontaneous application through the tools and the contacts available on the Site itself.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The Company has appointed its own Data Protection Officer, also known by the acronym DPO, with the task of supervising compliance with the Regulation and, in general, with the legislation on the protection of personal data and to cooperate with the the competent supervisory authority (the Guarantor for the Protection of Personal Data), acting as a point of contact with the data subjects.

The Data Protection Officer can be reached at the following contact details:

- by email to dpo@pisaorologeria.com;

- by traditional paper mail to the address of the Owner's office as indicated above;

- physically at the office by appointment

2. PERSONAL DATA SUBJECT TO PROCESSING

In addition to anything else provided in other pages, documents or sections of the Site, the following data may be collected and processed through the "Work with Us" web page of the Site:

- personal data provided by completing forms and (if any) questionnaires preparatory to the transmission of your application. In this regard, the personal data processed may include personal identification data, contact details and information relating to your previous work experience;

- personal data provided by sending your curriculum vitae or in the subsequent stages of the selection procedure and include identification data, contact data, data relating to training and/or previous work experience,

(hereinafter, jointly, the " Data ").

For purposes strictly related to the resolution of technical problems that the Site may present, personal data relating to your access to the Site itself may be processed.

Without prejudice to the foregoing, the Data Controller reminds you of the following:

(i) except in the case in which the knowledge of certain data belonging to "particular categories" is necessary by law or is strictly indispensable for the establishment of the employment or collaboration relationship and does not conflict with specific legal provisions (such as those referred to in Law no. 300/1970, Workers' Statute, and in matters of equal opportunities or aimed at preventing discrimination), the Company does not collect personal data belonging to to "particular categories" (such as, by way of example, data on health conditions, on belonging to protected categories, information on membership of parties, trade unions or other organizations or associations of a religious nature).

Any data belonging to "special categories" will be immediately deleted in the absence of a written declaration of consent from the candidate, after having read this information.

(ii) If, through the optional, explicit and voluntary sending of documents and curriculum vitae, you transmit personal data referable to third parties (e.g. through references), you assure the Company of the correctness and relevance of such information, acting as the independent owner of the processing and assuming all legal obligations and responsibilities and, in particular, guaranteeing from now on - and assuming all related responsibilities - that such processing is based on an appropriate legal basis pursuant to art. 6 or 9 of the Regulations.

3. LEGAL BASIS AND PURPOSE OF THE PROCESSING

The processing of the Data provided is aimed exclusively at achieving the following purposes:

(i) in fulfillment of pre-contractual obligations - to evaluate the consistency of your profile with respect to the job positions open at the Company and, in general, to manage and conduct the selection procedure, expressly included therein to contact you in order to plan, arrange and manage an interview (based on the contact details provided by you), thus following up on your specific request;

(ii) in fulfillment of legal obligations - for the fulfillment of obligations deriving from the law or national and/or community regulations in force, including in the tax field, as well as from provisions issued by competent authorities and bodies.

(iii) on the basis of a legitimate interest of the Company - to ascertain, exercise or defend a right in court or whenever the jurisdictional authorities exercise their functions.

Without prejudice to what is specified in paragraph 2 above, any processing operations concerning particular categories of data will be based on your explicit consent. In this regard, in the absence of your express consent and if the processing of particular categories of personal data is essential for the selection process, the Company will not be able to take your application into consideration and will, in accordance with its internal policies, to delete the Data relating to you.

It is specified that for carrying out the Personal Data processing operations referred to above there is NO type of automated decision-making process, pursuant to Article 22 of the GDPR.

4. MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA

The provision of Data for the purposes indicated above is purely optional. However, since this processing is necessary to allow the evaluation of the request in relation to the submission of an application, failure, partial or incorrect provision of the data in question will make it impossible, depending on the case, to manage and carry out the procedure of selection.

5. DATA COMMUNICATION

The data may be communicated to the following categories of subjects:

- to all those subjects (including Public Authorities) who have access to personal data pursuant to regulatory or administrative provisions;

- to all those entities, public and/or private, natural and/or legal persons to whom the communication is necessary or functional for the correct fulfillment of a contractual or legal obligation.

In addition to the foregoing, personal data may be disclosed to subjects who also operate on behalf of the Company, such as, by way of example and not limited to:

- to companies, consultants or professionals possibly responsible for the installation, maintenance, updating and, in general, management of the hardware and software infrastructure of the Site;

- to the Company's legal and tax professionals and consultants;

who will treat them as external managers of personal data processing on behalf of the Company or, based on assessments that will be conducted on a case-by-case basis, as independent data controllers.

Furthermore, the employees and collaborators of the Company, in particular of the human resources office, as well as the department managers who have been specifically authorized for this purpose by the Data Controller and who have undertaken to confidentiality or are bound by an appropriate legal obligation of confidentiality.

If, for the pursuit of the purposes indicated above, personal data are transferred outside the territory of the European Union or the European Economic Area, the transfer will take place to third countries that guarantee an adequate level of protection of personal data, as established by specific decisions of the European Commission (including the so-called “EU-US Data Privacy Framework”). The transfer of personal data to countries that do not belong to the European Union and which do not ensure adequate levels of protection will be carried out only after the conclusion of specific agreements, which incorporate the so-called "standard contractual clauses", in the version approved by the European Commission and, from time to time, in force and applicable and in any case in compliance with the requirements and conditions of the Regulation.

6. STORAGE TIMES

Personal data will be kept for the time necessary to evaluate the application and for the entire selection phase and procedure and, subsequently, for a period not exceeding [12] months (for contacts and any future interviews), as well as in any case for the time maximum envisaged by the applicable legal provisions regarding the limitation of rights and/or forfeiture of the action (also in the administrative-fiscal field) and, in general, for the exercise/defence of the Company's rights in disputes brought by public authorities, public entities/bodies and private entities.

If you pass the selection procedure and establish an employment or collaboration relationship with the Company, the Data concerning you will be archived and processed by the Company based on the privacy information prepared for employees and collaborators.

7. RIGHTS OF THE INTERESTED PARTY

As a data subject, you have the right to ask the Data Controller to exercise the following rights:

Right of access

You may request to obtain confirmation regarding the existence or otherwise of processing of your personal data and, if so, to access such data and specific information on the processing, such as, by way of example, the purposes, categories of data being processed, the existence of the other rights indicated below. You may also request a copy of your data.

Right of rectification

You have the right to request and obtain rectification of personal data concerning you and/or the integration of incomplete personal data.

Right of cancellation

You may obtain the deletion of your data, without unjustified delay, among other things, if (i) such data are no longer necessary for the purposes for which they were collected, (ii) you object to the processing of your data (as below indicated) and there is no other overriding legitimate reason for the processing, (iii) the data are processed unlawfully, (iv) the data must be deleted pursuant to a legal obligation, (v) personal data of a minor of 16 years in relation to the provision of information society services. This right does not apply if the processing of data is necessary, inter alia, for the fulfillment of a legal obligation or for the establishment, exercise or defense of a right in court.

Right of limitation

You have the right to obtain the limitation of the processing of your personal data, which means that the data processing will be suspended for a certain period of time. Circumstances that may give rise to this right include situations where the accuracy of the personal data has been contested, but some time is required to verify its (im)accuracy. This right does not prevent us from continuing to process your personal data.

Right to portability

In case of automated processing based on consent or on the execution of contractual obligations, you have the right to receive personal data in a structured, commonly used and machine-readable format and to transmit it to another data controller.

You also have the right to obtain direct transmission of data from one owner to another, where technically feasible.

The possibility of obtaining the deletion of the data remains unaffected, as indicated above.

Right of opposition

You have the right to object at any time, for reasons relating to your particular situation, to processing based on a legitimate interest of the Data Controller, unless the latter demonstrates compelling legitimate reasons for proceeding with processing which prevail over the interests, rights and fundamental freedoms of the interested party or for the establishment, exercise or defense of a right in court. You also have the right to object to processing for marketing purposes.

Finally, you have the right to lodge a complaint with the Supervisory Authority (http://www.garanteprivacy.it/) if you believe that the processing of the Data violates the provisions of the Regulation; as well as to revoke consent where previously given.

Exercise of rights

The above rights may be exercised through specific functions present on the Site or with a request addressed without formalities to F.LLI PISA at the office indicated above or by communication to the DPO at the addresses indicated above.

*

It is possible that this information is subject to changes and updates, also due to changes in the applicable legislation.

Any changes or updates will be made known by publication on the home page of the Site and will be applicable and binding from that moment.

The Company therefore invites you to periodically visit this page in order to become aware of any changes or updates.