Policy for the Subject

 

CONTROLLER

According to what is indicated in the advertisements for open job positions (which expressly report such information), the Controller of the processing may be:

1. HNH HOSPITALITY SPA, with registered office in Mestre, Via Saragat n°1. (telephone 0415321630), e-mail privacy@hnh.it.);
2. Hotel Bellevue s.r.l., with registered office in Mestre, Viale Stazione n.16 (telephone 0415321630), e-mail privacy@hnh.it.);

Instead, with regard to spontaneously sending your curriculum, the Controller of the processing is HNH HOSPITALITY SPA.

PURPOSES

We inform you that the personal data contained in Curriculum Vitae and the specific fields on the job application page shall be processed (with or without the use of electronic tools) for the purposes related to recruiting and selecting personnel.

LEGAL BASIS

The legal basis for processing is constituted by the Subject’s consent.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Your personal data can be accessed only by persons authorized to carry out data processing and subjects who process the data on behalf of the Controller and have been appointed in charge. Said subjects are bound by secrecy and confidentiality, also based on specific internal regulations. The data shall not be transferred to third parties nor spread.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

The data sent shall not be transferred to third countries.

DATA RETENTION CRITERIA

With regard to storing the data processed under the aforementioned terms, based on need, pertinence and not in surplus, the storage times of the different typologies of personal data processed must be identified by concretely considering each purpose, we inform you that the curricula vitae shall be stored for two years from the date of receipt. Once this period has expired, they shall be destroyed or deleted.

DATA SUBJECT’S RIGHTS

The Controller declares that the Subject has the right to request:

• access to personal data and information (art. 15 of the GDPR);
• rectification or cancellation of the data (arts. 16 and 17 of the GDPR);
• restriction to the processing of personal data (art. 18 of the GDPR).

Finally, the Subject may:

• object to the processing of personal data under the terms and within the limits of art. 21 of the GDPR;
• exercise the right to data portability (art. 20 of the GDPR).

In relation to processing based on consent (pursuant to article 6, paragraph 1, letter a), and to article 9, paragraph 2, letter a) of the GDPR), we inform you that you have the right to revoke said consent at any moment (without compromising the lawfulness of the processing based on consent prior to revocation).

Finally, if you, as the Subject, feels that the processing violates the law, you have the right to lodge a complaint with a supervisory authority (Guarantor for the protection of personal data or another competent authority) according to article 77 and the following of the GDPR.