Data Protection Notice of Messer Italy
Introduction
It is very important to Messer Italia that personal data is handled with care. This also applies in particular to the data of applicants. The following information shows you that we handle your personal data carefully in the context of your application
Personal data
The term personal data refers to all information that can be related to you as a natural person, such as your name, address, date of birth, e-mail addresses or telephone numbers. This also includes information that can only be assigned to you indirectly, for example by assigning it to an identifier such as a name, an identification number, location data or an online identifier. A person is also considered identifiable if they can be identified based on one or more special characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
1. Company responsible for your data
Messer Italia SRL is responsible for the processing of your applicant data.
2. Contact details of the controller and the data protection officer
a. Contact details of the controller
Messer Italia SRL
via Restelli 1
202124 Milan (MI)
Phone: +39 347 779 0112
E-Mail: privacy.it@messergroup.com
3. What data does Messer Italia SRL process?
Messer Italia SRL processes the following types of personal data, among others, as part of an application process:
a. Applicant data when using the applicant portal
If you apply via our applicant portal available on our website (if we offer this), you will be asked to enter a range of personal data in order to submit your application to us. We require personal data (in particular title, first name and surname, street, zip code, city, country, telephone number and e-mail address) as well as other attachments to your application (cover letter, CV and references), as we need this information in order to actually process your application. Optionally, you can also enter your cell phone number, salary expectations (annual salary) and other information.
b. Applicant data for applications by e-mail or in writing
If you apply to us by e-mail or in writing, we process the data you provide, such as your personal data (in particular title, first and last name, street, zip code, city, country, cell phone number, telephone number and e-mail address) as well as other attachments to your application (cover letter, CV and certificates), as we need this information in order to actually process your application.
c. Applicant data for applications via recruitment agencies
If you apply to us via recruitment agencies, we generally only process anonymized data from an anonymized CV as a first step. In the further application process, we then process personal data provided by you or the recruiter, such as (in particular title, first and last name, street, zip code, city, country, cell phone number, telephone number and e-mail address) as well as other attachments to your application (cover letter, CV and certificates) in order to be able to process your application further.
d. Given the possibility that the information provided by you in your Curriculum Vitae (CV) may contain 'special categories of personal data (sensitive data)', as they are likely to reveal membership of protected groups under Law 68/99, racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as data concerning health or a person's sex life or sexual orientation, we require your explicit consent to process any such data contained in your CV.
e. This data is hereinafter referred to as "applicant data". You will find further information on the processed data in the following description of the specific processing procedure.
4. What does Messer Italia SRL do with the data?
We process your applicant data exclusively for the purpose of deciding on the establishment of an employment relationship, i.e. to carry out the entire application process with us.
5. General Information
a. Your rights
You have the following rights concerning your personal data:
- Right to information (Art. 15 GDPR).
- Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR).
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR).
- Right to object to processing (Art. 21 GDPR).
- If you have given your consent to the processing of your data, you can revoke this at any time with effect for the future (Art. 7 para. 3 GDPR). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- You can exercise your rights by sending an e-mail to the following e-mail address: privacy.it@messergroup.com
You also have the right to complain to the Italian data protection supervisory authority (www.garanteprivacy.it) about the processing of your personal data by us.
b. General information on the legal basis of the specified process
Your entered or provided applicant data are processed for the purposes of recruitment and personnel selection on the basis of Art 6 para. 1 lit. b GDPR (execution of pre-contractual measures). Any special categories of data contained in applicants’ CVs are processed on the basis of Art 9 para.2 lit.a GDPR (consent).
c. General information about the recipients of data
The IT programs used to process your data are provided by the parent company Messer SE & Co. KGaA, which has been appointed as data processor in accordance with Article 28 of the GDPR. KGaA.
Otherwise, Messer Italia SRL only transfers data to third parties if this is necessary for the selection process and if there is a legal basis for this, such as a balancing of interests justifies this - in particular within the Messer companies - or to fulfill legal requirements according to which we are obliged to provide information, report or pass on data. Otherwise, data is only transferred to external service providers who process the data exclusively on our behalf.
Within Messer Italia SRL, only those internal offices and departments receive the personal data that are necessary and required to process the application.
- Applications for Group Function positions in the Messer Group
If you apply for a position that involves a reporting chain to a central position within the parent company Messer SE & Co. KGaA and/or one of our other European subsidiaries (Group Functions), your applicant data will also be forwarded to the corresponding subsidiary within our group of companies if necessary.
This is particularly the case if - due to the cross-group position - the central coordination and review of the application is carried out by Messer SE & Co. KGaA and/or if the central position in question is employed in a different subsidiary from the one to which you have applied.
Messer SE & Co KGaA and, if applicable, other Messer companies are joint controllers within the meaning of Art. 26 GDPR.
Possible Messer companies involved
https://www.messergroup.com/en/locations
Affected group of persons / data categories
Applicants / Applicant data
Jointly defined purposes and means
Filling the Group Function positions / Central HR platform
Data processing
-
Collection of applicant data
-
Storage and evaluation of applicant data
-
Granting access to Messer companies involved in the recruitment process
-
Storage of data for recruitment purposes
-
Deletion of data in the event of rejection
-
Limited access to applicant data for the purpose of carrying out the application process
Responsibilities
The participating Messer companies are jointly responsible for:
-
Fulfillment of information obligations pursuant to Art. 13 and 14 GDPR
-
Guaranteeing the rights of data subjects under GDPR
-
Documentation of technical and organizational measures (TOM)
-
Risk assessment and, where necessary, implementation of Data Protection Impact Assessments (DPIA) pursuant to Art. 35 GDPR
-
Coordination with supervisory authorities
-
Evaluation and monitoring of contract processors pursuant to Art. 28 GDPR
-
Provision and documentation of processing registers (VZ) pursuant to Art. 30 GDPR
-
Evaluation and communication in the case of data protection violations pursuant to Art. 33 and 34 GDPR
Your data will be passed on exclusively for the purpose of checking and coordinating the application process and is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, which consists of an efficient and coordinated implementation of the selection process within the group of companies for such Group Functions positions.
Data will only be transferred to Messer companies in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) if the requirements of Chapter 5 of the GDPR are ensured, in particular if an adequacy decision has been made or standard contractual clauses have been concluded. The processing of your data in a third country may also take place in connection with the involvement of service providers as part of order processing.
As part of your application process, we will of course inform you immediately in detail which Messer companies in our group of companies we have forwarded your application to. This depends on the individual position for which you are applying.
d. General information on the retention period
If no employment relationship is established, the applicant data provided by you to and stored by us will be deleted 6 months after notification of rejection.
If you make use of the option to withdraw your application at any time, your applicant data will be deleted immediately.
e. Information pursuant to Art. 13 para. 2 lit. e GDPR
You are not obliged to provide us with your applicant data. However, the processing of your applicant data listed in section 3 is necessary for the meaningful processing of your application. Any refusal to provide them, in whole or in part, may make it objectively impossible for the company to proceed with the assessment of your application.
