According to what is indicated in the advertisements for open job positions (which expressly report such information), the Controller of the processing may be:
Instead, with regard to spontaneously sending your curriculum, the Controller of the processing is HNH HOSPITALITY SPA.
We inform you that the personal data contained in Curriculum Vitae and the specific fields on the job application page shall be processed (with or without the use of electronic tools) for the purposes related to recruiting and selecting personnel.
The legal basis for processing is constituted by the Subject’s consent.
Your personal data can be accessed only by persons authorized to carry out data processing and subjects who process the data on behalf of the Controller and have been appointed in charge. Said subjects are bound by secrecy and confidentiality, also based on specific internal regulations. The data shall not be transferred to third parties nor spread.
The data sent shall not be transferred to third countries.
With regard to storing the data processed under the aforementioned terms, based on need, pertinence and not in surplus, the storage times of the different typologies of personal data processed must be identified by concretely considering each purpose, we inform you that the curricula vitae shall be stored for two years from the date of receipt. Once this period has expired, they shall be destroyed or deleted.
The Controller declares that the Subject has the right to request:
Finally, the Subject may:
In relation to processing based on consent (pursuant to article 6, paragraph 1, letter a), and to article 9, paragraph 2, letter a) of the GDPR), we inform you that you have the right to revoke said consent at any moment (without compromising the lawfulness of the processing based on consent prior to revocation).
Finally, if you, as the Subject, feels that the processing violates the law, you have the right to lodge a complaint with a supervisory authority (Guarantor for the protection of personal data or another competent authority) according to article 77 and the following of the GDPR.