"Work with us" privacy policy
Information on the processing of personal data collected from the data subject/user
In compliance with the General Data Protection Regulation (EU) 2016/679 we are to provide the necessary information regarding the processing of the personal data. This is an information that is made pursuant to art. 13 of EU Reg. 2016/679 (European Regulation for the protection of personal data - GDPR) and in accordance with Opinion 2/2017 on data processing at work - Adopted on 8 June 2017 by the Article 29 Working Group for data protection.
For browsing data and cookies, see the privacy policy in the footer of the site.

  1. THE DATA CONTROLLER pursuant to art. 4 and 24 of the GDPR, is Boffi spa Via Oberdan, 70 - 20823 Lentate sul Seveso (MB), in the person of its pro tempore legal representative. The contact email of the owner is privacy@boffi.com

  2. DATA PROTECTION OFFICER (DPO / RPD-Responsabile della protezione)
    is identified pursuant to art. 37 - 39 of EU Reg. 2016/679. The contact email of the DPO is dpo.boffi@dpoprofessionalservice.it

  3. PURPOSE AND LEGAL BASIS OF PROCESSING, DATA RETENTION, NATURE OF DATA PROVISION

  4. PURPOSE LEGAL BASIS DATA RETENTION NATURE OF DATA PROVISION
    A) Personnel recruitment, conducting research and selecting personnel for the purpose of establishing an employment relationship, also for any positions that differ from those for which the interested party applied spontaneously; retention of personal data also for future selections; management of applications in response to job vacancies published on our website; interviews and any video interviews (data processing including image / audio). processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (C44) art. 6 par. 1 letter b) of the GDPR For the duration of the recruitment and for future selections and maximum 24 months The provision of personal data is necessary to process the data for the selections
    The refusal to provide personal data makes it impossible to apply
    B) for the selections referred to in the point above, the Data Controller will be able to view the candidate's publicly accessible "social profile" on social media. The Data Controller may collect and process the candidate's personal data to the extent that such collection is necessary and relevant for the execution of the job. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (C47-C50) art. 6 par. 1 letter f) of the GDPR the data collected during the hiring process will be deleted as soon as it is clear that no job offer will be made or that the offer will not be accepted by the candidate and maximum 24 months The provision of personal data is optional
    Refusal to provide personal data does not make it impossible to select
    C) Communication of personal data and curriculum vitae to the group companies for their selections. List of group companies on request at privacy@boffi.com processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (C47-C50) art. 6 par. 1 letter f) of the GDPR the data collected during the hiring process will be deleted as soon as it is clear that no job offer will be made or that the offer will not be accepted by the candidate and maximum 24 months The provision of personal data is optional
    Refusal to provide personal data does not make it impossible to select
  5. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
    The personal data provided will be communicated to recipients, who will process the data as Data Processor (art.28 of the EU Reg. 2016/679) or as natural persons acting under the authority of the Data Controller or Data Processor (art.29 of EU Reg. 2016/679), or to recipients who hold the role of independent Data Controllers, for the purposes listed above in point 3. Specifically, the data will be communicated to: - recipient that provide services for the management of the information system used by Boffi spa and telecommunications networks (including e-mail and platforms); - labor consultants and companies for personnel selection purposes; - social networks platforms; - Boffi group companies, associated, controlled or contractually linked by Boffi spa and / or part of its distribution and sales network (such as branches, importers, distributors, resellers, shippers, etc ...), possibly also based in countries not belonging to the European Union; - competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, on request. The list of Data Processor is constantly updated and available on request to privacy@boffi.com or at the Headquarters of Boffi spa Via Oberdan, 70, 20823 Lentate sul Seveso.

  6. TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND SAFEGUARDS
    The site is hosted in EU countries. The personal data provided can be transferred to non-EU countries, in order to fulfill related purposes based on the data processing purposes. The data will be transferred according to Article 44 - General principle for the transfer; Article 45 - Transfer based on an adequacy decision; Article 46 - Transfers subject to appropriate safeguards, specifically the data will be transferred. For information about the safeguards regarding the transfer of data outside the EU, write to privacy@boffi.com

  7. DATA SUBJECTS' RIGHTS (natural persons)
    You can exercise your rights as expressed in the GDPR by sending an e-mail to Data Controller at privacy@boffi.com or writing or contacting the Data Protection Officer at dpo.boffi@dpoprofessionalservice.it.In particular you can, at any time, ask the Data Controller to access your personal data (art.15), to rectify it (art.16), to erase it (art.17), to restrict the processing (art.18) or to object to processing of your personal data (art.21) also based on Legitimate interest. You can ask for data portability (art.20). The data subject has the right to lodge a complaint with the Autorità Garante Privacy (https://www.garanteprivacy.it), or to appeal to the appropriate judicial offices

  8. CHANGES TO THE PRIVACY POLICY
    The Data Controller reserves the right to modify, update, add or remove parts of this privacy statement. The Data subject is required to periodically check for any changes. In order to facilitate this check, the information notice will contain the date to update the information. The use of the site, after the publication of the changes, will constitute the acceptance of the same.


Update date: June 30, 2020
Download Area Find store