Buyer

INFORMATION NOTICE REGARDING THE PROCESSING OF CANDIDATES’ PERSONAL DATA
IN ACCORDANCE WITH ARTT. 13 AND 14 OF REGULATION (UE) 2016/679 (“GDPR”)

Data Controller

The data provided are processed by Saipem Offshore Construction S.p.A., Via Luigi Russolo, 5, 20138 Milan (MI),Italy.

E-mail address: privacySOC@saipem.com ("Company" or "Controller")

Personal Data Processed

Please note that all the personal data provided will be processed in accordance with current legislation on privacy. Therefore the Company undertakes to process said data in accordance with the principles of fairness, lawfulness and transparency, in compliance with the purposes set out below, collecting said data only for specified and necessary purposes. Only authorized and properly trained personnel will be allowed to use said data in order to guarantee the necessary confidentiality of the information provided.

In particular, the Company will collect, record, consult and generally processes your personal data such as, but not limited to, your name, surname, place and date of birth, educational qualification, work experience, as well as special categories of data, which information suitable for detecting your health status (such as membership in protected categories) and any other data you provided in the CV.

Data are collected directly from the data subject and/or from third parties, such as recruiting companies.

1. Purpose of the processing
   Recruitment and selection of personnel also to begin an internship program.
   
   Legal basis of the processing
   The lawfulness of processing for common data is the execution of pre-contractual measures taken at your request; for special categories of personal data, it is the need to fulfill obligations or exercise the rights set out in applicable legislation on employment (pursuant to art. 9 co. 2, lett. b) of GDPR).
   
   Retention period of data
   Personal data will be stored for 12 months from the last update of your CV, except for the need to retain it for further purposes such as those set out in points 2 and 3.
    
2. Purpose of the processing
   In case of internal controls of the Company in order to comply with the obligations of traceability and transparency, filing of the information sheet filled in during the interview and the CV.
   
   Legal basis of the processing
   The lawfulness of processing for common data is the legitimate interest of the Data Controller.
   
   Retention period of data
   Personal data will be stored for a maximum of 10 years after the end of the selection process.
    
3. Purpose of the processing
   If necessary, to assert or defend a right of the Company in court or in arbitration and conciliation procedures.
   
   Legal basis of the processing
   The lawfulness of processing for the common data is the legitimate interest of the Data Controller. With regard to special categories of data the lawfulness of processing is to establish, exercise or defend the rights in court pursuant to art. 9. paragraph 2, lett. f) of GDPR).
   
   Retention period of data
   For the duration of any legal disputes until completion of the terms of implementation outlined in legal remedies.

Once the retention period has elapsed the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures.

Way of processing and provision of data

The processing will be carried out in digital and/or traditional form, with methods and tools aimed at ensuring maximum security and confidentiality, by persons specifically appointed for this purpose.

In case of online application, through the Company’s website, the provision of data marked with an asterisk (*) is necessary to take your application into consideration in the recruitment and selection process. A refusal to provide data makes these activities impossible, and as a result your application cannot be considered.

Recipients and data transfer

The Company - without needing specific consent – may communicate personal data to other subjects, the categories of which are described in detail below, for example:

• Saipem Group companies, even if not located in the EU (based on the adequacy decisions by the European Commission or on the basis of standard contractual clauses), in order to carry out the activities required by the application process;
• Third parties (by way of indication, companies providing IT services, recruiting companies), including those not located within the EU, who carry out outsourcing activities on behalf of the Controller, in their capacity as data processors. The transfer of data to countries outside the EU is guaranteed by the adequacy decisions of the European Commission or on the basis of standard contractual clauses;
• Judicial authorities, as well as those subjects to whom communication is required by law. These subjects will process the data in their capacity as independent Data Controllers.

Data will not be subject to disclosure.

Data Subjects rights

Data Subjects have the right to ask the Controller for access to their personal data, rectification, deletion or portability of their personal data, integration of incomplete personal data, limitation of processing in the cases provided for by art. 18 GDPR. In addition, where applicable, Data Subjects may revoke their consent at any time.

These rights can be exercised at any time, against the Controller, by sending a specific request in writing to the e-mail addresses privacySOC@saipem.com.

Data Subjects have also the right to lodge a complaint to the competent Supervisory Authority and to use other means of protection provided by applicable law.

INFORMATION NOTICE ACKNOWLEDGEMENT

I hereby confirm that I have read the Candidates Information Notice

The Information Notice related to the data processed is available on the Saipem Offshore Construction S.p.A.website at Privacy | Saipem.

Types of Data collected

Among the Personal Information collected by this Site through the contact form and the form for spontaneous applications there are: Cookies, Usage Data, Email, Password, Name, Surname.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed together with the collection of the Data.

Personal Data is entered voluntarily by the User.

Any use of Cookies - or other tracking tools - by this Site, unless otherwise specified, has the purpose of identifying the User and recording the related preferences for purposes strictly related to the provision of the service requested by the User.

Failure to provide the User with some Personal Data may prevent this Site from providing its services.

The User assumes the responsibility of the Personal Data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Purposes of the processing of collected data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analytics, Contacting the User, Optimizing and distributing traffic.

The types of Personal Data used for each purpose are indicated above.

Communication and dissemination of data

The data collected using cookies may be processed by employees and collaborators of nCore HR, as persons in charge and responsible for data processing.

The list of data is constantly updated and is available upon request by sending a communication to the address below or an e-mail to ----

The data collected using cookies will not be disclosed.

Your rights

At any time you can request information on the processing of your personal data, obtain the update, correction or integration of the same, as well as obtaining the cancellation, transformation into anonymous form or blocking of data processed in violation of the law and oppose the processing of You according to the provisions of art. 7 of Legislative Decree no. 196/2003 reported in full at the end of this policy.

To exercise your rights you can contact the Data Controller by sending a written notice to the address below or an e-mail to ----

Owner and manager of the treatment

Holder of the treatment is ----

Internal manager of the treatment is ----

Last updated: July 2015

Art. 7 D.Lgs 196/2003. Rights attributed to the interested party.

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form.
The interested party has the right to obtain the indication:
the origin of personal data;
of the purposes and methods of processing;
of the logic applied in case of treatment carried out with the aid of electronic instruments;
of the identifying details of the holder, of the responsible and of the designated representative according to article 5, paragraph 2;
the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
The interested party has the right to obtain:
updating, rectification or, when interested, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves a use of means manifestly disproportionate to the protected right.
The interested party has the right to object, in whole or in part:
for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of the collection;
to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Changes to this information

The Data Controller reserves the right to make changes to this privacy statement at any time by giving notice to Users on this page. Please therefore consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this statement, the User is required to cease using this Site and may request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected until then.

Information on this privacy policy

The Data Controller is responsible for the privacy policy.

Last updated: July 2015