Information Notice on the Processing of Personal Data of Candidates in accordance
with Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and
Royal Decree No. M/148 dated 05/09/1444H (27 March 2023). (“GDPR”)
Data Controller
The data provided are processed by Snamprogetti Saudi Arabia Co. Ltd L.L.C. Al-Khobar 31952 Kingdom of Saudi Arabia. Email address: privacy@saipem.com ("Company" or "Controller")
Personal Data Processed
Please note that all the personal data provided will be processed in accordance with current legislation on privacy. Therefore, the Company undertakes to process said data in accordance with the principles of fairness, lawfulness and transparency, in compliance with the purposes set out below, collecting said data only for specified and necessary purposes. Only authorised and properly trained personnel will be allowed to use said data in order to guarantee the necessary confidentiality of the information provided.
In particular, the Company will collect, record, consult and generally process your personal data such as name, surname, images and audio-video recordings.
Purposes of the processing
1. For images and/or audio-video recordings: purpose of processing activities expressly specified in the release note
2. For the data you provide by filling the release note: Company needs to identify the data subjects in order to prove at any moment to have obtained all the rights referred to in the release note.
3. If necessary, your data will also be used to ascertain, exercise or defend the rights of the Company in court.
Legal basis of the processing
1. The lawfulness of the processing is the is the execution of a contract to which the Data Subject is a party.
2. The lawfulness of the processing is the execution of the contract to which the Data Subject is a party.
3. The lawfulness of the processing is based on protecting the legitimate interest of the Data Controller.
Retention period of data
1. Your data will be be kept for a period of 12 months.
2. Your data will be processed for the entire duration of the above initiative, after which they will be kept only to be able to prove at any moment to have obtained all the rights referred to in the release note.
3. Your data will be processed for the entire duration of the litigation, until the exhaustion of the terms of availability of the appeal.
Once the retention period has elapsed the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures.
Way of processing and provision of data
The processing will be carried out in digital form, with methods and tools aimed at ensuring maximum security and confidentiality, by persons specifically appointed for this purpose.
Notwithstanding the fact that the use of your image is optional and subject to your authorisation, should you decide to authorise the use of your image, the personal data requested by the Data Controller are necessary to identify you correctly. Should you refuse to provide the personal data concerning you, it will be the Company's responsibility to duly anonymise your image and/or audio-visual footage concerning you.
Recipients and data transfer
The Company - without needing specific consent - may communicate personal data to other subjects, the categories of which are described in detail below, for example:
1. Third parties (by way of indication, companies involved in the photo editing to create a visual for the initiative), including those not located within the Kingdom of Saudi Arabia, who carry out outsourcing activities on behalf of the Controller, in their capacity as data processors. The transfer of data to countries outside the Kingdom of Saudi Arabia is guaranteed by the adequacy decisions of the European Commission or on the basis of standard contractual clauses;
2. Judicial authorities, as well as those subjects to whom communication is required by law. These subjects will process the data in their capacity as independent Data Controllers.
Personal data (images) will be disseminated through Saipem social media pages.
Data Subjects rights
1. Data Subjects have the right to ask the Controller for access to their personal data, rectification, deletion or portability of their personal data, integration of incomplete personal data, limitation of processing in the cases provided for by art. 18 GDPR, as well as the right to object to processing for reasons related to their particular situation, in cases of legitimate interest of the Data Controller. In addition, where applicable, Data Subjects may revoke their consent at any time.
2. These rights can be exercised at any time, against the Controller, by sending a specific request in writing to the e-mail addresses dpo@saipem.com or privacy@saipem.com.
3. Data Subjects have also the right to lodge a complaint to the competent Supervisory Authority and to use other means of protection provided by applicable law.
I hereby acknowledge and consent to the collection, processing, and storage of my personal data by the company in accordance with applicable data protection laws and the company’s privacy policy.