Privacy policy - Employees
The data acquired concern you and your family members and will be processed for purposes related to the execution of the employment contract with Bernoni Grant Thornton, pursuant to art. 16, para. 1, letter b) of the Regulation.
The Data Controller is the Bernoni Grant Thortnon entity which the data subject has an employment relationship with.
Below are the specific purposes related to the processing of data of Bernoni Grant Thornton employees:
- management of the employment relationship, internal organisation, planning and performance of the working activity, evaluation of the results and development of personnel;
- administrative, financial, accounting and tax management of the employment relationship;
- health and safety on the workplace;
- management of cybersecurity, of electronic access and of the use of personal IT and communication devices;
- management of the building security and of physical accesses, also through the use of a personal badge with RFID technology;
- compliance with obligations provided by law or by collective labour agreements;
- compliance with fulfilments under insurance contracts.
The legal basis for the processing of common data is the performance of the employment contract, the subsequent regulatory fulfilments, as well as the pursuance of the legitimate interest with reference to physical safety, cybersecurity and security of the Bernoni Grant Thornton network, whereas special categories of personal data[1] are processed pursuant to art. 9, para. 2, letter b) of the Regulation.
Without prejudice to the communications made to fulfil law obligations, the data collected and processed can be communicated, for the purposes above, to:
- public entities and offices (INPS, INAIL, ASL, tax offices, etc.);
- credit institutions, to perform payments of credits;
- credit card companies;
- professionals or service companies dealing with personnel administration and management, operating on behalf of Bernoni Grant Thornton;
- company trade union representatives and trade unions which you have given mandate to;
- social security and welfare funds (even private);
- insurance companies and brokers;
- medical practices, also to comply with workplace health safety fulfilments;
- travel agencies, hotels and companies managing business travels, for purposes related to your tasks;
- mobile network operators and internet service providers;
- lawyers and legal advisors;
- providers of products or services related to your tasks;
- Bernoni Grant Thornton clients, including prospects, for the purposes related to your tasks;
- control bodies within the scope of their institutional activities at Bernoni Grant Thornton;
- third parties, including other member firms of the Grant Thornton network, which Bernoni Grant Thornton could work with in order to carry out their activity, for the purposes related to your tasks;
- subsidiaries, parent or associated companies of Bernoni Grant Thornton, also due to connections through electronic means.
Data can be disclosed to data processors, as well as to people authorised to data processing pursuant to art. 29 of the Regulation, who will process them in compliance with the provisions of this policy. Data processing is not subject to automated decision-making, including profiling.
Data will not be disseminated.
Data will be processed by Bernoni Grant Thornton for the entire duration of the contract and afterwards to comply with all law fulfilments provided. Data will be retained for the term provided by civil and tax law.
Disclosure of data is mandatory, as far as provided by law and by the contract. A total or partial refusal to their disclosure may result into the impossibility to execute the contract or to correctly comply with all remuneration, social security contribution, tax and insurance fulfilments related to the employment relationship.
Privacy policy - Candidates
The data acquired will be processed by Bernoni Grant Thornton for purposes related to the research and recruitment of personnel to be included in their organisation and to evaluate whether their profiles meet internal requirements, pursuant to art. 6, para. 1, letter b) of the Regulation and for the purpose of complying with the obligations or exercising the rights provided for by the applicable labour laws (pursuant to art. 9, para. 2, letter b) of EU Regulation no. 2016/679), where applicable.
The Bernoni Grant Thornton entities are joint controllers.
Disclosure of data is mandatory, therefore, the refusal to provide said data or to allow their further processing will imply the impossibility for Bernoni Grant Thornton to input data in their databases and, subsequently, to consider your job application.
We invite you not provide us with personal data relevant to criminal sentences and offences, or data belonging to special categories[2], except for those strictly necessary for the establishment of a working and/or contractual relationship (e.g. the belonging to a protected class). In this case, we inform you that data relevant to special categories can be processed only upon receiving explicit consent to do so. Otherwise, your data will be deleted from our databases.
Data may be disclosed to data processors which Bernoni Grant Thornton engage with within outsourcing relationships, as well as to people authorised to personal data processing under the direct authority of the Controller or of the Processor for the purposes of this policy.
Data will not be disclosed or disseminated and will be processed by Bernoni Grant Thornton for the entire duration of the selection process. The processing is not subject to automated decision-making, including profiling. Data will be processes only in a Member State of the European Union (EU) or in a Member State of the European Economic Area (EEA).
Data relevant to your profile and the outcome of the recruiting process will be stored in case of future personnel research consistent with your profile.
Privacy policy - Collaborators
The data acquired will be processed for the purposes related to the execution of the collaboration contract with Bernoni Grant Thornton, pursuant to art. 6, para. 1, letter b) of the Regulation.
The Data Controller is the Bernoni Grant Thortnon entity which the data subject has a contractual relationship with.
Below are the specific purposes related to the processing of data of Bernoni Grant Thornton employees:
- management of the contractual relationship;
- internal organisation, planning and performance of the working activity;
- management of cybersecurity, of electronic access and of the use of personal IT and communication devices;
- management of the building security and of physical accesses, also through the use of a personal badge with RFID technology;
- compliance with obligations provided by law;
- training and evaluation of the results;
- compliance with fulfilments under insurance contracts.
The legal basis for the processing of common data is the performance of the collaboration contract, the subsequent regulatory fulfilments, as well as the pursuance of the legitimate interest with reference to physical safety, cybersecurity and security of the Bernoni Grant Thornton network.
Disclosure of data is mandatory, as far as provided by law and by the contract. A total or partial refusal to their disclosure may result into the impossibility for Bernoni Grant Thornton to execute the contract.
Without prejudice to the communications made to fulfil law obligations, the data collected and processed can be communicated, for the purposes above, to:
- credit institutions, to perform payments of credits;
- professionals or service companies dealing with personnel administration and management, operating on behalf of Bernoni Grant Thornton;
- insurance companies and brokers;
- lawyers and legal advisors;
- providers of products or services related to your tasks;
- control bodies within the scope of their institutional activities at Bernoni Grant Thornton;
- travel agencies, hotels and companies managing business travels, for purposes related to your tasks;
- Bernoni Grant Thornton clients, including prospects, for the purposes related to your tasks;
- third parties, including other member firms of the Grant Thornton network, which Bernoni Grant Thornton could work with in order to carry out their activity, for the purposes related to your tasks;
- subsidiaries, parent or associated companies of Bernoni Grant Thornton, also due to connections through electronic means.
Data may be disclosed to data processors which Bernoni Grant Thornton engage with within outsourcing relationships, as well as to people authorised and trained to personal data processing, in compliance with art. 29 of the Regulation, under the direct authority of the Controller or of the Processor for the purposes of this policy.
Data will not be disclosed or disseminated and will be processed by by Bernoni Grant Thornton for the entire duration of the selection process. The processing is not subject to automated decision-making, including profiling. Data will be processes only in a Member State of the European Union (EU) or in a Member State of the European Economic Area (EEA).
Data processing is not subject to automated decision-making, including profiling.
Data will not be disseminated.
Data will be processed by Bernoni Grant Thornton for the entire duration of the contract and afterwards to comply with all law fulfilments provided. Data will be retained for the term provided by civil and tax law.
Privacy policy – interns/trainees
The data acquired will be processed for the purposes related to the execution of the internship/traineeship contract with Bernoni Grant Thornton, pursuant to art. 6, para. 1, letter b) of the Regulation.
The Data Controller is the Bernoni Grant Thortnon entity which the data subject has a working relationship with.
Below are the specific purposes related to the processing of data of Bernoni Grant Thornton interns/trainees:
- management of the employment relationship, internal organisation, planning and performance of the working activity, evaluation of the results and development of personnel;
- processing and payment of the remuneration due;
- administrative, financial, accounting and tax management of the internship/traineeship relationship;
- management of cybersecurity, of electronic access and of the use of personal IT and communication devices;
- management of the building security and of physical accesses, also through the use of a personal badge with RFID technology;
- compliance with obligations provided by law or by collective labour agreements;
- compliance with fulfilments under insurance contracts.
The legal basis for the processing of common data is the performance of the internship/traineeship contract, the subsequent regulatory fulfilments, as well as the pursuance of the legitimate interest with reference to physical safety, cybersecurity and security of the Bernoni Grant Thornton network.
Disclosure of data is mandatory, as far as provided by law and by the contract. A total or partial refusal to their disclosure may result into the impossibility for Bernoni Grant Thornton to execute the internship/traineeship contract.
Without prejudice to the communications made to fulfil law obligations, the data collected and processed can be communicated, for the purposes above, to:
- entities, public offices and entity organising the internship/traineeship;
- credit institutions, to perform payments of credits;
- professionals or service companies dealing with personnel administration and management, operating on behalf of Bernoni Grant Thornton, in particular labour consultants;
- insurance companies and brokers;
- medical practices, also to comply with workplace health safety fulfilments;
- travel agencies, hotels and companies managing business travels, for purposes related to your tasks;
- lawyers and legal advisors;
- providers of products or services related to your tasks;
- Bernoni Grant Thornton clients, including prospects, for the purposes related to your tasks;
- control bodies within the scope of their institutional activities at Bernoni Grant Thornton;
- third parties, including other member firms of the Grant Thornton network, which Bernoni Grant Thornton could work with in order to carry out their activity, for the purposes related to your tasks;
- subsidiaries, parent or associated companies of Bernoni Grant Thornton, also due to connections through electronic means.
Data may be disclosed to data processors which Bernoni Grant Thornton engage with within outsourcing relationships, as well as to people authorised to personal data processing, under the direct authority of the Controller or of the Processor for the purposes of this policy. Data processing is not subject to automated decision-making, including profiling.
Data will not be disseminated.
Data will be processed by Bernoni Grant Thornton for the entire duration of the internship/traineeship and afterwards to comply with all law fulfilments provided. Data will be retained for the term provided by civil and tax law.
[1] Art. 9 of the Regulation identifies within the special categories of data “personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, as well as genetic data and biometric data processed for the purpose of uniquely identifying a natural person and the processing of data concerning health or a natural person’s sex life or sexual orientation”.
[2] Art. 9 of the Regulation identifies within the special categories of data “personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, as well as genetic data and biometric data processed for the purpose of uniquely identifying a natural person and the processing of data concerning health or a natural person’s sex life or sexual orientation”.
