This notice supplements the website browsing privacy policy and is intended to explain how the Data Controller specifically processes the personal data provided through this form. Users are therefore invited to read the website privacy policy available at:
https://www.csmmachinery.com/en/privacy-notice/
CSM Machinery S.r.l., hereinafter also referred to as “CSM Machinery” or the “Data Controller”, with registered office in Cimetta di Codognè (TV), Via Cadore Mare no. 25,
email: info@csmmachinery.com
certified email (PEC): csmmachinery@pec.csmmachinery.com
telephone: +39 0438 795326
Application management: personal data are processed for all purposes related to assessing applications and verifying profiles of interest.
Legal claims and defense: the Data Controller may process personal data for the management of disputes and legal or out‑of‑court proceedings.
| Purpose | Legal basis (ordinary data) | Legal basis (special categories of data) |
|---|---|---|
| Application management | Performance of pre‑contractual measures | Compliance with obligations under labour law |
| Legal claims and defense | Legitimate interest of the Data Controller to establish, exercise or defend a right | Establish, exercise or defend a right |
| Purpose | Retention period |
|---|---|
| Application management | 24 months from data collection |
| Legal claims and defense | 10 years from the final resolution of the dispute |
| Purpose | Nature | Consequences of refusal |
|---|---|---|
| Application management | Mandatory | Impossibility for the data subject to submit an application and for the Data Controller to manage the selection process |
| Legal claims and defense | Mandatory | Inability to manage disputes or legal claims |
Personal data are processed by duly authorized internal staff for specific tasks and may be disclosed externally in accordance with the following rules:
| Purpose | Categories of external recipients |
|---|---|
| Application management | Companies belonging to the same corporate group, occupational physician, labour consultant, recruitment agencies, employment agencies |
| Legal claims and defense | Law firms; debt collection or credit assignment companies; judicial authorities |
Since data are also processed by electronic means, they may also be accessible to entities providing assistance or maintenance services for such systems.
The Data Controller does not transfer personal data outside the European Economic Area (EEA).
The data subject is entitled to exercise the following rights:
| Purpose | Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of consent |
|---|---|---|---|---|---|---|---|
| Application management | ✔ | ✔ | ✔ | ✔ | – | – | – |
| Legal claims and defense | ✔ | ✔ | ✔ | ✔ | ✔ | – | – |
To exercise the above rights, data subjects may use the form available at:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924
and submit it to the following contact address:
amministrazione.machinery@csmmachinery.com
The data subject may also request additional information using the same contact details (e.g. balancing test for legitimate interest or the list of data processors).
Data subjects may lodge a complaint with a supervisory authority. In Italy, the competent authority is:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
www.garanteprivacy.it
