Scientific and Technical

INFORMATION AND EXPRESS STATEMENT OF CONSENT TO PERSONAL DATA PROCESSING FOR INTERVIEWEES

This is to inform you that, pursuant to Articles 12 and 13 of EU Regulation 2016/679 on "Protection of individuals with regard to the processing of personal data and the free movement of such data" (hereinafter the Regulation), within the context of the selection process commenced with the Fondazione Istituto Italiano di Tecnologia, hereinafter referred to as "IIT", the above-mentioned Foundation manages a series of personal data related to you.

1. Identity and contact details of the Data Controller
The Data Controller of your personal data is the Fondazione Istituto Italiano di Tecnologia, based in Via Morego, 30 - 16163 Genova.

2. Contact details of the Data Protection Officer
The Responsible of the Data Protection Department, Rödl&Partner, Milan - Phone 010 71781 – email: dpo@iit.it.

3. Purposes of data processing
The processing of your personal data by IIT will take place for the purpose of managing of managing the selection process commenced.
In addition, some personal data may be used for purposes related to corporate management control and internal statistical research.
In particular, the processing of personal data may be carried out for:
a) the assessment of suitability of the professional and personal profile;
b) the refund of travel expenses incurred for participation in the selection process.

4. Purposes related to the processing of special categories of personal data
For what concerns, on the other side, special categories of personal data, if included in the Curriculum Vitae or obtained during the selection process, for example those related to state of health, racial or ethnic origin, trade union membership etc, in accordance with the provisions of Article 9 of the Regulation, the data processing can be carried out only if you give your consent to their processing for purposes related to selection process and preliminary recruitment.

5. Legal basis of data processing
The legal basis of data processing consists of:
Articles 6, letter b) of Regulation (b. the data processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures taken upon his/her request;);
Article 9, letter a) of this Regulation (a. the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject;).

6. Processing Method
Your data will be processed by computer and paper support, following the rules on protection of personal data, including those related to data security.

7. Categories of recipients of personal data
The data you have provided may be disclosed to public and private entities relevant to the purposes mentioned above.
The communication of personal data is carried out on the basis of the obligations provided by law. In this regard, personal data are communicated to Italian Job Agency and Credit Institution, in the sole case of refund of travel expenses, so IIT will communicate your data to the Credit Institution which will pay, and to any other bodies that can need those data, always within the limits of the law provisions.
Your data may also be communicated to persons appointed by IIT as External Data Processors for purposes strictly related to the management of selection process.
Furthermore, the IIT’s obligation to communicate data to the Judicial Authority remains in place, whenever, in this regard, a specific request is sent.

8. Data storage
The storage of your personal data will take place in compliance with the security measures used by IIT on data protection, and access to them will be allowed only to the staff involved and duly appointed to process data.
Your data will be kept until the limitation period of rights arising from the selection process and in any case for no longer than 18 months (except in case of renewal of the consent to the data processing).

9. Rights of the data subject
You may exercise the rights provided in Article 13, letter b) and in Articles 15, 16, 17, 18 and 20 of the Regulation at any time by contacting the Data Protection Officer, at the contact data at point 2 of this information note.

In particular, as data subject, you can request:

1. access to your personal data, as provided in Article 15 of the Regulation;
2. correction of your personal data, as provided in Article 16 of the Regulation;
3. cancellation of your personal data ("right to be forgotten"), as provided in Article 17 of the Regulation;
4. restriction of personal data processing, as provided in Article 18 of the Regulation.

Furthermore, we inform you that you can object to the processing of data at any time, pursuant to Article 21 of the Regulations, in case one of the situations mentioned in Article 6, paragraph 1, letters e) and f) of the same Regulation occurs.

10. Consent and withdrawal
You can withdraw your consent at any time by contacting the Data Protection Officer.

11. Complaint to the Supervisory Authority
Finally, pursuant to Article 77 of the Regulation, we remind you that you have the right to submit a complaint to the Supervisory Authority (Protection Authority for Personal Data Processing), if you believe that your data processing infringes the provisions of the Regulation.

12. Nature of the processing and obligation of providing data
Many of the data required are necessary (even in fulfilment of obligations coming from legal rules) to selection process related to the eventual recruitment. In some cases, failure to provide these data may result in conclusion of the selection process.

13. Existence of automated decision-making processes in the data treatment
It is specified that for processing of the above data there is NOT any type of automated decision-making process, pursuant to Article 22 of the Regulation.


The undersigned, after receiving the above information and being aware of the rights set out in Article 13, letter b) and Articles 15, 16, 17, 18 and 20 of the Regulation,
• Gives his/her consent
to the processing of his/her special categories of personal data as mentioned in point 4 of the information.

This is the description of your section break.