Privacy policy
Privacy policy pursuant to artt. 13 e 14 of Reg. EU No. 679/2016
Advancing Humanity S.R.L., with registered office in Via Tolmezzo 15 - 20132 Milano (MI), acting as data controller (hereinafter ""Advancing Humanity"" or ""Data Controller""), hereby provides you, pursuant to article 13 of Regulation (EU) No. 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter the ""GDPR""), with information relating to the processing of your personal data, collected upon registering on the website www.phyd.com (hereinafter the ""Website""), creating your profile in the restricted area (hereinafter the ""Restricted Area""), and accessing the skills self-assessment questionnaire (hereinafter the ""Service"") as made available by the Data Controller through the Website.
The personal data requested at the time of registration is collected and processed for the following purposes.
Registration on the Website and creation of your profile in the Restricted Area. With this activity, the Data Controller pursues a contractual purpose since it provides a service in favour of the user. In particular:
- Registration on the Website. On the registration page, you will be asked to provide some personal data, such as, for example, your email address, password, name and surname. Filling in such data will allow you to access another area, where further personal data will be required to create your profile in the Restricted Area.
- Profile creation in the Restricted Area. After registering in the ""Register"" section, you will be asked to provide further personal data, such as, for example, your name, address, city, date of birth, telephone number, work experience, work-related certifications, training, ideal or desired Text_Job, and a photograph, so as to create your profile in the Restricted Area. Registration allows the Data Controller to manage your Restricted Area, accept any requests for the rectification and amendment of personal data, and provide self-assessment services, as better specified below.
Performing the skills self-assessment test and processing the results. With this activity, the Data Controller pursues a contractual purpose since it provides a service in favour of the user. In particular, in your Restricted Area, you will be able to access a self-assessment test, where you will be required to enter data and/or information relating to your personal traits and professional skills, as well as the technical skills you have acquired, based on which statistical/mathematical analyses will be carried out in order to determine an employability index for your jobs of interest.
The legal basis for processing personal data for the purposes referred to in point A is of a contractual nature. Providing your email address and password during registration is mandatory in order to register on the Website and any refusal to provide this data will make it impossible for us to create your profile. The provision of all other data is optional.
Upon providing your express consent, your personal data (collected for the purposes set forth in point A. above, also through the skills self-assessment test) will be processed for profiling purposes, i.e. to create your profile by analysing issues such as professional performance and aptitude and aspects related to your behaviour in the workplace, with a view to sending you personalised commercial communications.
The legal basis for such processing of your personal data is, as mentioned previously, your express consent.
With regard to processing data for profiling purposes, please note that your personal data will be processed exclusively by means of automated tools and in such a way as to make it impossible for the Data Controller to intervene and interfere in the decision-making process or in the generation of the final outcome of the self-assessment test. This result is generated exclusively by a mathematical algorithm rooted in artificial intelligence. Please note, however, that the result of the self-assessment test does not produce legal effects (e.g. exclusions, admissions, awards) for the person concerned, nor does it affect the legal status of same or his/her contractual rights. The result of the test does not influence or deny access to job opportunities, representing instead a mere guide for future possible candidates.
Upon expressing your consent, your personal data will be processed for marketing purposes, to send promotional communications, newsletters of a commercial nature, advertising material and/or offers relating to products and services, and to carry out statistical and/or market surveys, both by the automated means (email, sms, mms, whatsapp) and the traditional means (paper mail, telephone operator) adopted by the Data Controller.
Upon expressing your consent, your personal data will be processed for marketing purposes, to send promotional communications, newsletters of a commercial nature, advertising material and/or offers relating to products and services, and to carry out statistical and/or market surveys, both by the automated means (email, sms, mms, whatsapp) and the traditional means (paper mail, telephone operator) adopted by the third parties to whom your personal data is communicated.
The legal basis for such processing of your personal data is, as mentioned previously, your consent (provided expressly for each processing).
Your personal data will be processed, if necessary, in connection with in- and/or out-of-court disputes and/or settlements.
The legal basis for such processing of your personal data is a legitimate interest of the Data Controller with a view to establishing, exercising or defending its rights and freedoms.
For reasons connected with the use of cloud-based services, data may be transferred abroad to non-European countries, and in particular to:
- Non-EU countries ""whose level of data protection has been deemed adequate by the European Commission pursuant to art. 45 of the GDPR"" or
- Non-EU countries other than those referred to above, subject to the adoption of the guarantees set forth in art. 46, paragraphs 2(c) and 2(d) of the GDPR.
A copy of the above mentioned guarantees may be requested from the Data Controller in the manner laid out in the paragraph ""Your rights"".
Your personal data will be processed by the Data Controller's employees and collaborators, acting as parties appointed to carry out processing tasks and functions, and/or by authorised data processors (or persons in charge of the processing).
Your personal data may be communicated to parties acting as data controllers, co-organizers of events; sponsor; partner such as, by way of example, supervisory and control authorities and any legitimate public entity such as judicial and/or public security authorities, as well as companies of the group to which the Data Controller belongs, for internal administrative purposes.
Furthermore, your data may also be processed, on behalf of the Data Controller, by parties appointed as data protection officers, such as, by way of example, group companies for intra-group services, companies that provide IT services, companies that provide mailing services, and companies that provide call centre services. These companies are direct collaborators of the Data Controller and perform the role of data processing officers.
Your personal data, collected in relation to the contractual purposes pursued by the Data Controller, will be stored for the entire time you remain registered on the website and for two years thereafter. In the event of litigation, it will be stored for the entire duration of same, until the terms of appeal have elapsed.
Personal data, collected and subsequently processed, may be stored for profiling or marketing purposes until you revoke your consent.
After this period, the data will be deleted and/or made anonymous so as to make it impossible to identify the persons concerned, even indirectly or through connection with other databases. Once the storage period has elapsed or in the event of the Data Controller going bankrupt and being unable to continue processing your personal data, this will be deleted or made anonymous, without prejudice to the need to retain data to meet the obligations of current or former applicable legislation, even after processing operations have ceased.
You have the right to obtain from the Data Controller access to your personal data, the right to request its erasure or restriction of processing in the cases provided for by art. 18 of the GDPR, and the right to object to its processing if said data is being processed for the purpose of the legitimate interest of the Data Controller.
In the event of data processing being based on consent or being conducted for contractual purposes and in the event of it being carried out using automated tools, you may also exercise the right to data portability or to receive your personal data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit it to another data controller without hindrance.
Finally, you have the right to revoke your consent, at any time, to data processing conducted for marketing and/or profiling purposes and to object to the processing of your data for marketing purposes, including profiling related to direct marketing. This is without prejudice to the possibility, for data subjects who prefer to be contacted for the above mentioned purpose exclusively through traditional methods, to express their objection only upon receiving communications through automated means.
At any time, you may lodge a complaint with the Data Protection Authority or resort to the other means of protection prescribed by the applicable legislation.
Such rights may be exercised, at any time, against the Data Controller by emailing: contatti@phyd.com.
The Data Controller is Advancing Humanity S.R.L. and can be contacted by email at: contatti@phyd.com.
The Data Protection Officer (DPO), Anny Pinto Zeballos, can be contacted by email at: anny.pinto@adeccogroup.com.
In the event of a temporary submission of data for storage operations alone, in the following cases set forth in art. 18 of the GDPR:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
- the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing pursuant to Article 21(1) pending verification of whether the legitimate grounds of the controller override those of the data subject.