Privacy Policy CV

This information governs the processing of personal data resulting from the reception of curriculum vitae, carried out by NUR S.r.l., with registered office in San Giorgio Bigarello (MN), Via del Commercio 1/N, Vat No. 01902640208, email info@nur.it (hereinafter "NUR" or the "Data Controller"), in accordance with applicable regulations on the protection of personal data, including, in particular, the EU Regulation 2016/679 (hereinafter, "GDPR") and Legislative Decree 101/2018.

1. Identity and contact details of the data controller

The Data Controller is NUR. NUR is a company established in the Italian territory, therefore no representative has been appointed.

2. Contact details of the data protection officer

The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following address: gdpr@nur.it.

3. Purpose of processing and legal basis of processing

1. With regard to curricula vitae sent spontaneously by the interested party through the form "Work with us" available at https://www.nur.it/en/work-with-us, the processing of personal data of the same is carried out in order to allow activities of examination and evaluation of the curriculum, in this case the legal basis of the treatment is the legitimate interest of the Data Controller.
2. In relation to the curriculum vitae sent by the interested party, following a request made orally or in writing by the Data Controller, the processing of personal data of the same is carried out in order to allow activities of examination and evaluation of the curriculum; in this case the legal basis is the need to proceed with the processing in order to execute the contract and / or for the management of pre-contractual relationships.

4. Ways of expressing consent

No consent is required to proceed with processing.

5. Modalities of treatment and logic

In relation to the personal data processed and stored for the purposes referred to in number 3 of this statement, the treatment will be done through paper tools, automated logic and use of CRM software that will allow the best management of the fulfillment of contractual obligations, as well as through the use of e-mail systems.

6. Source of personal data

Only the data provided by the interested party within the curriculum vitae will be processed.

7. Recipients and possible categories of recipients of personal data

They may be recipients of the personal data of the interested party:

• companies offering information society services, including, in particular, those offering hosting services.

8. Categories of data

The personal data of the person concerned will be processed. The interested party is required to omit from the curriculum vitae, any indication of particular data, i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as data relating to health or sex life or sexual orientation of the person. Any curriculum containing such data will be immediately deleted by the Data Controller.

9. Data Transfer

The Data Controller intends to transfer personal data to a third country or international organization. Such entities could be represented, without limitation, by:

• companies offering information society services, including, in particular, those offering hosting services.

The transfer of personal data to such subjects, if established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified that the third country, the territory or one or more specific sectors within the third country, or the international organization in question guarantee an adequate level of protection of your rights. In any case, the Data Controller - should it deem it appropriate - reserves the right to conclude specific separate agreements obliging such subjects to adopt adequate security measures, including organizational measures, aimed at offering appropriate guarantees regarding your rights. Google Inc., in particular, is contractually bound to ensure adequate protection of the rights of the person concerned. The data may thus be transferred to the following country: United States of America. In order to obtain a copy of such data or the place where it has been made available, please send your request to the following email address: gdpr@nur.it.

10. Period of retention of personal data

The personal data processed for the purposes referred to in paragraph 3 of this information, will be kept for a period not exceeding 2 (two) years from the date of sending the curriculum vitae.

11. Optional nature of consent and consequences of non-consent

In relation to the personal data processed and stored for the purpose referred to in paragraph 3, letter a) of this statement, the processing of personal data is based on legitimate interest of the Data Controller; in case of non-processing would not be possible to follow up on the requests of the person concerned.

12. Rights of the interested party
12.1 Right of objection
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of these provisions. The Controller shall refrain from further processing the personal data unless he/she can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
12.2 Other rights
The Holder also intends to inform the interested party of the existence of the following rights recognized to him:

• Data subject's right of access: the data subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her is being processed, and if so, to obtain access to the personal data and specific information, in accordance with Article 15 of the GDPR;
• Right of rectification: the data subject has the right to obtain from the Data Controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR;
• Right to erasure of data, including the right to withdraw consent: the data subject has the right to obtain from the Data Controller the erasure of personal data concerning him/her without undue delay and the Data Controller has the obligation to erase the personal data without undue delay; the data subject also has the right to withdraw his/her consent, if the reasons defined in Article 17 of the GDPR exist; in this case, the right to withdraw may be exercised by the data subject at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal;
• Right of restriction of processing: the data subject has the right to obtain from the Data Controller the restriction of processing when the hypotheses defined by Article 18 of the GDPR apply;
• Right to data portability: the data subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning him/her provided to the Data Controller and has the right to transmit such data to another data controller without impediment from the Data Controller in the cases and under the conditions specified by Article 20 of the GDPR.

13. Exercise of rights

Requests to exercise the rights indicated in this information notice, including, in particular, the right to cancellation and the right to withdraw consent must be addressed directly to the Data Controller at the email address gdpr@nur.it. Alternatively, you can exercise your rights by sending a communication by registered mail to the address: Via del Commercio 1/N, San Giorgio Bigarello (MN).

It is possible to lodge a complaint with the Italian Personal Data Protection Authority according to the modalities provided for by the official website, addressing it to the addresses available at https://www.garanteprivacy.it/home/footer/contatti.

14. Accessibility of information

The information is available from the Data Controller. If expressly requested by the interested party, the information may also be provided orally, provided that the identity of the interested party is proved, by means of a telephone request addressed to the addresses of the Data Controller.