PRIVACY POLICY REGARDING THE PROCESSING OF PERSONAL DATA

MB S.p.a., VAT number 02947820243, with registered office in Via Astico 30/A, 36030 Fara Vicentino VI, hereby informs you that, in its capacity as Data Controller, it shall use your personal data in compliance with the principles of personal data protection set out in Regulation (EU) 2016/679 or GDPR and in the national legislation in force.

The Data Controller’s contact addresses are: 

Email: privacy@mbcrusher.com

Certified email address: mbcrusher@legalmail.it

Telephone: +39 0445 308148

---

METHODS AND PURPOSES OF DATA PROCESSING

Your data will be processed by means of:

• computer information systems

for the following purposes:

• screening of CVs in order to source and select suitable candidates for open positions
• management of contact information in order to schedule interviews

---

LEGAL BASIS

Pursuant to Article 6 of the GDPR, the legal basis for the processing of common data, is:

• Consent.

The legal basis for the processing of special categories of personal data, pursuant to Article 9 of the GDPR, is:

• Consent.

Providing your personal data for the above purposes is optional, but failure to provide personal data may make it impossible for the Controller to evaluate your profile or schedule interviews.

---

CATEGORIES OF RECIPIENTS AND TRANSFER OF PERSONAL DATA

Without prejudice to any communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of recipients:

• To those who, within the Controller's organisation, require it in order to fulfil their role. These are the persons authorised to process the data under the direct authority of the Data Controller pursuant to Article 4 (10) of Regulation (EU) 2016/679 (hereinafter referred to as "authorised users");

The Controller will not transfer your data outside the European Economic Area.

---

RETENTION PERIOD

Your data will be processed for as long as is strictly necessary to achieve the purposes for which it was collected and for the next six months from the date of acquisition of the same. At the end of this period, your data will be permanently deleted. 

---

RIGHTS OF THE DATA SUBJECT

In accordance with Regulation (EU) 2016/679 (GDPR) and the national legislation in force, the data subject may, in the manner and within the limits provided for by the legislation in force, exercise the following rights: 

• to request confirmation of the existence of personal data concerning you (the data subject’s right of access - Article 15 of Regulation (EU) 2016/679;
• to know its origin;
• to receive such communication in an intelligible form;
• to receive information about the criteria, methods and purposes of the processing;
• to request the updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of the law, including that no longer necessary to achieve the purposes for which it was collected (right of rectification and cancellation - Articles 16 and 17 of Regulation (EU) 679/2016);
• the right to restrict and/or to object to the processing of data concerning you (Article 18 of Regulation (EU) 679/2016);
• the right of revocation;
• the right to data portability (Article 20 of Regulation (EU) 679/2016);
• where processing is based on consent, the right to receive the data you provided to the data controller in a structured and readable form from a data processor and in a format commonly used by an electronic device;
• the right to submit a complaint to the Control Authority (the Data Subject’s right of access - Article 15 of Regulation (EU) 679/2016).

To exercise these rights, you may send a written request to the Data Controller at the contact addresses indicated above.