Field HSE Lead

INFORMATION NOTICE REGARDING THE PROCESSING OF CANDIDATES’ PROSPECTIVE EMPLOYEES' PERSONAL DATA

IN ACCORDANCE WITH THE UK GENERAL DATA PROTECTION REGULATION (UK GDPR) AND THE DATA PROTECTION ACT 2018

Data Controller

The data provided are processed by Saipem S.p.A. UK Branch, Saipem House, 12-42 Wood Street, Kingston Upon Thames, Surrey, KT1 1TG and Tern Place, Bridge of Don, Aberdeen, AB23 8JX. .

E‐mail address: saaukprivacy@saipem.com. Also referred to as "Company" or "Controller" below.

Personal Data Processed

Please note that all personal data will be processed in accordance with the Data Protection Act 2018 and the UK GDPR. Therefore, the Company undertakes to process your personal data in accordance with the principles of fairness, lawfulness and transparency, in compliance with the purposes set out below. The Company will process your personal data only for specified and necessary purposes. Only authorised and properly trained personnel will be allowed to access and process your personal data.

In particular, the Company will collect, record, and generally process your personal and identifying data provided in the CV and during the recruitment process which are necessary for the selection and recruitment process.

The Company may also collect, record and process special categories of more sensitive personal information including information about your physical and mental health (such as medical conditions).

Personal data is collected from you, the data subject, during the recruitment process. It may also be acquired through third parties (e.g. registered professionals such as recruitment agencies).

Purposes and Lawful Basis for the Processing of Your Personal Data

The Company needs to use your personal information in order to process your application for a job or application for a work experience placement. In most cases we will use your personal data to perform our pre-contractual/assignment measures taken at your request, to comply with our legal obligations or where we need to in order to further the Company’s legitimate business interests. The situations in which we commonly use your personal data include:

• Carrying out our selection and recruitment procedures
• Determining employment/assignment terms
• Implementing health and safety and security measures
• Monitoring CCTV records and physical access to our offices and worksites via ID badges and key cards

The Company’s legitimate business interests include:

• Making decisions about employment or engagement
• Recruitment and succession planning
• Ensuring compliance with our policies
• Ensuring health and safety in the workplace
• Protection of Company and third-party property
• Dealing with enquiries from authorities, regulators and public bodies and managing legal disputes involving you or other personnel.

The Company may process “special categories” of your personal data (e.g. relating to your health) in the following circumstances:

• Where we need to carry out our legal obligations or exercise rights in connection with employment. The processing of personal data is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment or for the establishment, exercise or defence of legal claims; and
• Situations where we may use your personal data relating to physical and mental health include where we aim to ensure health and safety at work and assess your fitness to work and to provide appropriate adjustments.

Retention period of data

The Company will keep your personal data for no longer than is reasonably necessary and will act in line with the UK GDPR and Data Protection Act 2018. The data will then be destroyed or anonymised in line with technical erasure and backup procedures.

What this means in practice will vary as between different types of information, and when we consider our approach we take into account any ongoing need for the information, as well as our legal obligations for example in relation to tax, health and safety, employment rights and potential or actual disputes or investigations.

Way of processing and provision of data

The processing will be carried out in digital and/or traditional form, with methods and tools aimed at ensuring maximum security and confidentiality (where appropriate), by persons specifically appointed for this purpose.

The Company does not conduct any automated decision making.

Recipients and data transfer

The Company may communicate personal data to other recipients from time to time, as described in detail below:

• Saipem Group companies – Personal data may be shared with group companies for the purposes set out above and to ensure the provision of effective and efficient services and communication throughout the group, including outside the UK.
• Third parties (such as, consultants, recruitment companies, companies providing IT services, service providers, business partners, clients, project partners and joint ventures) – this includes third parties not located within the UK who carry out outsourced activities on behalf of the Controller, in their capacity as data processors.
• Judicial authorities – as well as those recipients to whom disclosure is required by law. These subjects will process the data in their capacity as independent Data Controllers.

The transfer of data to countries outside the UK is only done where there are adequate safeguards in place. Adequate safeguards may take the form of ‘adequacy regulations’ about certain jurisdictions issued by the UK Secretary of State, or standard data protection agreements (approved by the UK Information Commissioner’s Office or UK government) which govern the transfer of personal data.

Data Subjects rights

Data Subjects have the following rights:

• To be informed: you have the right to be provided with clear, transparent and easily understandable information about how we use your personal information;
• To have access to your personal data: you can request access to your personal information, subject to certain conditions;
• To rectification: you may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. You have a responsibility to help us keep your personal information accurate and up to date;
• To erasure: subject to certain conditions, you are entitled to have your personal data erased;
• To portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances; and
• To object or restrict: subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data including where we are using it for our legitimate business interests.

If we seek your consent to process specific personal information, you have the right to withdraw your consent at any time by notifying the Company of such withdrawal.

The above rights can be exercised at any time, against the Controller, by sending a specific request in writing to the e-mail address saaukprivacy@saipem.com.

You also have the right to lodge a complaint about any matter concerning your personal data to the Information Commissioner’s Office, using the details below. However, we take our obligations seriously, so if you have any questions or concerns, we encourage you to raise them with the Company first, so that we can try to resolve them.

Information Commissioner’s Office
Wycliffe house
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel 0303 123 1113
https://ico.org.uk

Types of Data collected

Among the Personal Information collected by this Site through the contact form and the form for spontaneous applications there are: Cookies, Usage Data, Email, Password, Name, Surname.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed together with the collection of the Data.

Personal Data is entered voluntarily by the User.

Any use of Cookies - or other tracking tools - by this Site, unless otherwise specified, has the purpose of identifying the User and recording the related preferences for purposes strictly related to the provision of the service requested by the User.

Failure to provide the User with some Personal Data may prevent this Site from providing its services.

The User assumes the responsibility of the Personal Data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Purposes of the processing of collected data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analytics, Contacting the User, Optimizing and distributing traffic.

The types of Personal Data used for each purpose are indicated above.

Communication and dissemination of data

The data collected using cookies may be processed by employees and collaborators of nCore HR, as persons in charge and responsible for data processing.

The list of data is constantly updated and is available upon request by sending a communication to the address below or an e-mail to ----

The data collected using cookies will not be disclosed.

Your rights

At any time you can request information on the processing of your personal data, obtain the update, correction or integration of the same, as well as obtaining the cancellation, transformation into anonymous form or blocking of data processed in violation of the law and oppose the processing of You according to the provisions of art. 7 of Legislative Decree no. 196/2003 reported in full at the end of this policy.

To exercise your rights you can contact the Data Controller by sending a written notice to the address below or an e-mail to ----

Owner and manager of the treatment

Holder of the treatment is ----

Internal manager of the treatment is ----

Last updated: July 2015

Art. 7 D.Lgs 196/2003. Rights attributed to the interested party.

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form.
The interested party has the right to obtain the indication:
the origin of personal data;
of the purposes and methods of processing;
of the logic applied in case of treatment carried out with the aid of electronic instruments;
of the identifying details of the holder, of the responsible and of the designated representative according to article 5, paragraph 2;
the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
The interested party has the right to obtain:
updating, rectification or, when interested, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves a use of means manifestly disproportionate to the protected right.
The interested party has the right to object, in whole or in part:
for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of the collection;
to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Changes to this information

The Data Controller reserves the right to make changes to this privacy statement at any time by giving notice to Users on this page. Please therefore consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this statement, the User is required to cease using this Site and may request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected until then.

Information on this privacy policy

The Data Controller is responsible for the privacy policy.

Last updated: July 2015