We collect and process your personal data as explained below:
DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)
The data controller is:
Healthcare Network Partners Italy Srl
Via Nazario Sauro 8 – 40121 Bologna
Tel.: +39 (0)51 095 5152
VAT no.: 06671690482
The DPO is Ms Silvia Stefanelli. You can contact her at:
- Tel.: +39 (0)51 520 315
- Via Azzo Gardino 8/A, 40122 Bologna, Italy
THE KINDS OF PERSONAL DATA WE PROCESS
We collect and process the following types of personal data through this website:
Like all websites, this one gathers some personal-data items and sends them to us as an inevitable result of communicating via the internet.
Website-use data includes: the IP addresses or domain names of computers you use when visiting the website; URI (Uniform Resource Identifier) addresses of the resources requested; the time of the request; the method used to send the request to the server; the size of the file obtained in response; the numeric code for the response status from the server (success, error, etc.); and other parameters about your operating system and computing environment.
Data provided by you
These are details that you voluntarily send to us via email or by filling in data-entry forms: your forename, surname, email address, telephone number, postal address, CV and any other information that you volunteer.
Technical and session cookies
Session cookies are those that are not saved permanently on your computer; they disappear when you close your browser. We use them only to send session identifiers (random numbers generated by the server), which are necessary for you to browse the site smoothly and securely. None of your personal details are captured by the site or sent anywhere during this process.
Google – Google Analytics cookies. Google Analytics is a web analysis service supplied by Google Inc. (“Google”). Google collects data to track and analyse use of the website (without identifying users), to produce reports on how the website has been operating and to share them with other Google services. Google can collect data to contextualise and personalise ads on its advertising network. Personal data collected: browsing and site-use data, including cookie use. Place of processing: USA. (Google privacy notice: http://www.google.com/intl/it_ALL/analytics/learn/privacy.html)
Disabling cookies – withdrawing consent under GDPR article 7
Cookies are associated with the browser you use, and you can disable them directly from it, if you wish to withdraw your consent for cookies. Remember, though, that if you do disable cookies, then some aspects of the website might not work properly.
For how to disable cookies, please follow the instructions for your browser: Mozilla Firefox, Microsoft Internet Explorer, Microsoft Edge, Google Chrome, Opera, Apple Safari.
You can selectively opt out from having your data collected by Google Analytics; to do so, install the relevant opt-out component from Google on your browser.
WHY WE PROCESS YOUR PERSONAL DATA (LAWFUL BASIS)
The personal data that you provide to us will be processed for the purposes below:
This website’s software procedures and information systems gather website-use data as part of its normal operation. When collecting this information, we do not attempt to associate it with identified individuals. By its nature, however, it could potentially be used – by processing it and linking it with data held by third parties – to identify you and other users. We use this information only to obtain anonymous statistical information on use of the website and to check that the site is working properly. The data could also be used to investigate who is responsible for any damage to the website in a cybercrime.
We collect this data based on the implied consent that you give by continuing to use the site.
The personal data that you provide will be used for the following purposes:
- to respond to requests that you make
- to send information about HNP’s activities via our newsletter
- to check whether you meet our recruitment criteria and/or our conditions for starting a working relationship with you.
This data is collected based on your explicit consent, which you give by filling in a form on the website and/or asking for information about us.
The data you provide when sending an unsolicited CV is processed based on the performance of pre-contractual measures taken at your request under GDPR article 6(1b). Candidates’ personal data is processed within the limits and for the purposes described above with no need for consent, under article 111-bis of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
For completeness, note that you may withdraw your consent at any time under GDPR article 7.
You can withdraw consent as easily as you gave it.
WHY WE NEED YOUR DATA AND WHAT HAPPENS IF YOU REFUSE TO PROVIDE IT
Except as regards the website-use data, you are free to choose whether to provide your personal data to access the services offered on this website. If you do not give us the details needed by filling in the relevant forms, then you will not be able to access the services you wanted, and we shall not be able to consider you for any jobs you might be interested in.
HOW YOUR DATA IS PROCESSED
Data is processed using manual, digital and telematic means for reasons strictly related to the purposes for which it was collected and in line with the principle of data minimisation and all the other principles set out in GDPR article 5. In particular, in accordance with the principles of integrity and confidentiality, we take security measures to prevent data loss, unlawful or improper use, and unauthorised access attempts.
WHERE YOUR DATA IS PROCESSED
Your data is processed in relation to this site’s web services at the Healthcare Network Partners Italy Srl headquarters as above by the company’s appointed officers and at its office at Via N. Sauro 8, 40121 Bologna, Italy, tel.: +39 (0)51 095 5152.
Where required, your data may be processed by staff at the company responsible for the website’s technical upkeep, Officina Immagine Scrl, at its office at Piazza San Francesco 10, 40122 Bologna, Italy.
HOW LONG WE KEEP YOUR DATA
The data controllers keep your data for as long as is strictly necessary, as required by law. Candidate CVs will be retained for at most 5 years.
In any event, you can withdraw consent for processing your data at any time, as described above.
Any service suppliers receiving your data will process it for as long as is strictly necessary to perform their assigned tasks.
TRANSFERRING AND DISCLOSING DATA
Besides the data controllers, other appointed people may have access to your data. These are the people involved in running the website (clerical, marketing, legal and system-admin staff) and third-party external service suppliers (Officina Immagine Scrl and OVH) acting on behalf of or in the name of Healthcare Network Partners Italy Srl as duly appointed data processors. They will process your data in line with the purpose for which it was originally collected.
Your personal data is transferred to third countries, such as Switzerland, at the headquarters of our parent company, Healthcare Network Partners AG, for the group’s organisational needs. The European Commission has ruled that Switzerland provides adequate protection for personal data: (https://www.garanteprivacy.it/documents/10160/10704/997811.pdf/7626e36c-ed8a-4b5b-9bf3-b09263afbc93?version=1.0).
Your data may also be sent to all parties to which it must be disclosed by law.
For a list of the entities that process personal data, please write to Healthcare Network Partners Italy Srl at email@example.com.
You, the user (the data subject), have various rights under the GDPR:
- the right to access your personal data (once the data controller has confirmed that it has processed your data)
- the right to have your data corrected and added to
- the right to have your data deleted
- the right to place limits on the processing of your personal data under certain conditions
- the right to be sent your personal data that has been provided to the data controller, in a structured, commonly used format and to send it to another data controller
- the right to object to the processing of your personal data if your personal situation so warrants
- the right not to be subject to an automated decision-making process
- the right to be told if your data has been subject to a serious breach
- the right to withdraw consent for processing at any time
- the right to complain to a supervisory authority.