Vers. 12/03/2024
Onebra SRL processes your data in compliance with EU Regulation 2016/679 on the protection of personal data (“GDPR”) and other applicable regulations. Please read the following information carefully. In the text below, the term “data subject” refers to you. The Data Controller is at your disposal for any clarification.
Origin of the data – Data subject
Data subjects – The organization’s employees and contractors (including interns and trainees)
Types of data processed – Personal and contact data, tax identification data, curricular/CV data, bank reference data, data related to family status, health data, data related to work activities performed, performance evaluation data, remuneration data, social security and insurance data, financial and tax-related data, trade union membership data.
Purposes of processing – To prepare and execute the employment and/or contractor agreement, to pay salaries and fees, to organize the Controller’s activities, to carry out checks and apply disciplinary measures, to pay social security and insurance contributions, to evaluate the data subject’s work performance for organizational, training, or career purposes, to comply with any resulting legal obligation.
Data Controller – Onebra SRL Via del Brennero 97 – Trento info@onebra.it
Joint Controller – Not present
Data Protection Officer (DPO) – Not appointed
Representative in the EU – Not appointed
Legal basis for processing – Art. 6(1)(b) GDPR (processing is necessary for the performance of a contract or pre-contractual measures), Art. 6(1)(c) GDPR (processing is necessary for compliance with a legal obligation), Art. 9(2)(b) GDPR (carrying out the obligations and exercising specific rights in the field of employment and social security law).
Legitimate interest – Not applied
Data retention period – Up to 10 years after the termination of the employment or collaboration relationship.
Potential recipients of the data – Employment and tax consultants, occupational physicians, safety officers, trainers, public bodies and authorities, technology service providers, providers of goods or services on behalf of the Controller (e.g., “corporate welfare” benefits), third-party creditors (any recipients may only process the data in the interest of the Controller and for the purposes indicated above).
Transfer of data outside the EU – The data remains within the European Union.
Your rights – Your rights (available at the link below) can be exercised by contacting the Controller, the Representative, or the DPO by post or e-mail.
Complaints – For any violation of your rights, you can file a complaint with the Garante per la Protezione dei Dati Personali in Rome (the Italian Data Protection Authority) or, alternatively, with the supervisory authority of the place where you are established within the EU.
Provision of data – Necessary: the refusal to provide the data in question may prevent the establishment or continuation of the relationship with the Controller’s organization.
Consent – Not required