PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA

 

This information governs the processing of personal data resulting from the receipt of your curriculum vitae through postal addresses, carried out by Playground S.r.l. with registered office in Strada Padana Superiore 2B, 20063 Cernusco sul Naviglio, Milan, P. IVA 05469810963, PEC playagency@pec.it (hereinafter referred to as “Playground” or the “Data Controller”), in accordance with the applicable data protection regulations, including, in particular, EU Regulation 2016/679 (hereinafter referred to as “GDPR”) and Legislative Decree 101/2018.

1. Identity and contact details of the Data Controller

The Data Controller is Playground S.r.l.

As the Data Controller is established in Italy, no representative has been appointed.

2. Contact details of the Data Protection Officer

The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following address: dpo@playground.it.

3. Purpose of processing and legal basis of processinga) With regard to curricula vitae sent spontaneously by you, the processing of personal data is carried out to allow their assessment; in this case, the legal basis of the processing is the legitimate interest of the Data Controller.
4. Ways of expressing consent

To process your personal data, you must sign an electronic document, including by means of specific flag boxes.

5. Processing methods and logic

Regarding the personal data processed and stored for the purposes referred to in point a), number 3 of this information notice, the processing will be carried out using paper-based instruments, automated logic and the use of CRM-type management software that will enable the best possible management of the fulfilment of contractual obligations, as well as by electronic mail systems.

6. Source of personal data

The Data Controller processes only the data provided by the data subject in the curriculum vitae.

7. Recipients and possible categories of recipients of personal data

Potential recipients of your personal data may be:

• communication companies, who act as data controllers and carry out commercial communication activities on behalf of the Data Controller;
• companies offering information society services, including those offering hosting services.

8. Categories of data

The Data Controller will process your personal data.

Therefore, you are required to omit from the curriculum vitae any indication of special personal data, i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as data concerning the person’s health or sex life or sexual orientation. Any curriculum containing such data shall be immediately deleted by the Data Controller.

9. Data transfer

The Data Controller intends to transfer personal data to a third country or international organization. Such entities may be, by way of example:

• Communications companies that carry out communications activities on behalf of the Data Controller;
• Companies offering information society services, including, in particular, those offering hosting services;
• Service providers of the communication company.

The transfer of personal data to said entities, if established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission. By means of an adequacy decision, the European Commission verifies that the third country, the territory or one or more specific sectors within the third country, or the international organization in question guarantee an adequate level of protection of your rights. In any case, the Data Controller – should it deem it appropriate – reserves the right to conclude specific separate agreements obliging said subjects to adopt adequate security measures, including organizational measures, aimed at offering appropriate guarantees regarding your rights. Google Inc. is contractually bound to ensure adequate protection of your rights as data subject. The data may thus be transferred to the following country: United States of America. To obtain a copy of this data or the place where it was made available, please send your request to the following addresses: dpo@playground.it.

10. Period of retention of personal data

The personal data processed for the purposes referred to in point 3(a) of this notice will be kept for a period not exceeding 10 (ten) years from the date on which the curriculum vitae was sent.

11. Optional nature of consent and consequences of non-consent

In relation to the personal data processed and stored for the purpose referred to in point 3(a) of this notice, the processing of personal data is based on the legitimate interest of the Data Controller; if the data were not processed, it would not be possible to comply with your requests as data subject.

12. Rights of the data subject

12.1 Right of objection

You, as data subject, shall have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of those provisions. The Data Controller shall refrain from further processing the personal data unless the Data Controller demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

12.2 Other rights

The Data Controller also wishes to inform you of the existence of the following rights:

• Right of access: you have the right to obtain confirmation from the Data Controller as to whether or not personal data is being processed and, if so, to obtain access to the personal data and specific information, in accordance with Article 15 of the GDPR;
• Right of rectification: you shall have the right to obtain from the Data Controller the rectification of inaccurate personal data without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR;
• Right to erasure of data, including the right to withdraw consent: you shall have the right to obtain from the Data Controller the erasure of personal data without undue delay and the Data Controller shall be obliged to erase the personal data without undue delay. You shall also have the right to withdraw your consent, if the grounds defined in Article 17 of the GDPR exist; in this case, the right to withdraw may be exercised at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal;
• Right to restriction of processing: you have the right to obtain from the Data Controller the restriction of processing when the hypotheses defined in Article 18 of the GDPR apply;
• Right to data portability: you have the right to receive in a structured, commonly used and machine-readable format, personal data provided to the Data Controller and has the right to transmit such data to another Data Controller without hindrance by the Data Controller in the cases and under the conditions provided in Article 20 of the GDPR.

13. Exercise of rights

Requests to exercise the rights indicated in this information notice, including the right to cancellation and the right to withdraw the consent given, should be addressed directly to the Data Controller at the email address dpo@playground.it. Alternatively, you can exercise your rights by sending a communication by registered mail with return receipt to the address: Strada Padana Superiore 2B, 20063 Cernusco sul Naviglio, Milan.

14. Accessibility of information

The information is available from the Data Controller. If you expressly request so, the information may also be provided orally, provided that your identity is proven, by means of a phone request addressed to the addresses of the Data Controller.