5. Where does the personal data we process come from?
The EOC preferably collects personal data directly from data subjects when they first contact us. Depending on different and specific circumstances, we collect and process personal data from individuals who fall into one of the following categories:
- patients, family members of patients (e.g., current and former spouses, cohabiting partners, parents and children), and other persons who accompany patients or are reference persons for patients;
- people who visit our website or other digital services (e.g., our Apps);
- people who visit our offices or use our other services;
- EOC employees and contractors and people who apply for our job openings;
- students, pupils, apprentices, trainees and civil service participants/volunteers;
- suppliers and partners, employers and their contact persons;
- social and health insurance companies and their contact persons;
- physicians and/or private health care providers and/or belonging to other hospitals/health care institutions and their contact persons;
- freelancers, attorneys (e.g., legal representatives);
- people who write to us or contact us in various capacities (e.g., tenants and contact persons of residential and commercial property rental companies);
- members of our bodies and persons belonging to public authorities and/or offices;
- ...and anyone who falls within the definition in Section 2(E) of this statement.
We would like to clarify that, on these occasions, even if data referring to other persons (such as relatives, friends, the contact of a reference person and/or legal representative or other health care providers) are provided, we assume that the person providing these data has the authorization to do so and that these data are accurate. We also expect that he or she has informed such individuals about this statement, in accordance with the requirements of applicable law.
Data relating to minors or persons incapable of discernment
In the case of patients who are minors under the age of 16 or adults incapable of discernment, consent shall be given by the parents or legal representative.
Treatment justified by the consent of the person concerned is in principle lawful where the minor who has given consent is at least 16 years old. Where the minor is under the age of 16, the processing of personal data is lawful only and to the extent that consent is given or authorized by the legal representative. The EOC may make every reasonable effort to verify that the consent given by the legal representative is effective. However, the EOC will not be responsible in any way for any misrepresentation that may be provided by the minor and, in any case, should it be determined that the statement is false, any personal data and any material acquired will be immediately deleted. The data controller will facilitate requests concerning the personal data of minors coming from the legal representative, as per point 10.
A. Data communicated directly by data subjects
It is often you who directly communicate personal data to us, for example when you transmit data to us or communicate with us in person, by going to our facilities or by phone, e-mail, filling out paper forms and/or forms or online on our website or via App. The transmission of data to us is basically voluntary, but in some cases it is absolutely necessary to be able to use our services or in fulfillment of legal and/or contractual obligations.
In principle, we specify which personal data are mandatory.
For example, the presence of mandatory fields, which it finds on forms to be filled out, indicates that that particular information is necessary to enable us to ensure the provision of the requested services. On the other hand, the provision of other information not marked as mandatory is optional, i.e. it does not affect the activity, e.g. the use of our website, Apps or other services. Through the activity of filling out and sending contact forms and/or forms, you voluntarily provide us with your personal data and this data is used for the sole purpose of pursuing the related purposes
Online application submission
This includes, for example, when personal data are submitted by you through the completion of online application forms/forms accessible from the dedicated section on our website. Data may be processed according to open positions, which may include either a single, specific position or additional positions. The User is required to enter in the online form the information requested by the system and indicated as mandatory, For example, the presence of mandatory fields, which he finds on some forms, indicates that that particular type of information is necessary to allow us to carry out the EOC recruitment and selection activities. The personal data subject to processing are the information in the Curriculum Vitae transmitted and relating to personal details, educational qualifications, professional and work experience, contractual classification, references, job description, motivations for change, aspirations, preferences, etc. The User is free to attach additional documents to supplement the information provided, such as diplomas, work certificates and other documents pertaining to the position.
The EOC is free to use the candidate's personal data to verify the information provided at any time during the application and selection process. This may include verifications with previous employers, academic and/or professional institutions, and other entities and/or agencies, both public and private. Personal data is used and processed only to the extent strictly necessary and in a manner and procedure appropriate to the purposes related to the recruitment, selection and evaluation of EOC personnel.
Personal data will be kept for the time strictly necessary for the proper fulfillment of the above purposes. Specifically, in the case of recruitment, the personal information transmitted by the User is shared within the EOC Human Resources unit and operational and managerial functions to assess how well the application is in line with the position for which the User has applied or with possible other positions, if the User has consented.
Personnel administration uses this information to create a file (dossier) on the new employee for the purpose of managing the subsequent fulfillments arising from the employment contract. In case of non-employment, personal data are kept in the system as a rule for a maximum period of 12 months after their receipt/last profile update, after which they will be destroyed and deleted. The period could be longer, in case the data subject has consented to the possibility of using and then processing the data also for any different and/or future positions in EOC than those for which the data subject originally applied.
The User has the option to register in order to receive regular automatic notifications about positions posted on the platform. At any time the User can unsubscribe from the list of recipients you such notifications. Non-subscription to the notification service or deletion from the list of recipients does not affect or in any way reduce the use of the platform.
With the deletion of the last application on the User's profile, the profile is also automatically, permanently and completely deleted. The User may at any time request the secure and permanent partial and/or final deletion of personal data. The request shall be followed up without delay, but in any case within 30 days of the exercise of the right to deletion.
In any case, the criteria used to determine the retention period may be related to the express consent of the User/interested party, the duration of recruitment and selection activities, the conduct of statistical studies and research, or are prescribed by Law. The Data Controller, also by means of periodic checks, will regularly verify the strict relevance, non-excessiveness and indispensability of the retained personal data with respect to the stated purposes, also with reference to the additional information provided on its own initiative by the data subjects.
B. Data from third parties
Under certain conditions, it is also possible for the EOC to collect data not from data subjects. In these cases we only collect data useful for the provision of health and care services and for the preparation and execution of contracts also from other service providers, social or private insurances, authorities, other health care providers, your family members and relatives, or other third parties.
We may also collect data from publicly available sources (e.g., debt enforcement registry, land registry, commercial registry, media, or the Internet, including social networks) or receive it from (i) authorities, (ii) your employer or principal who has a business relationship with us or is otherwise in contact with us, and (iii) other third parties (e.g., lending institutions, address providers, associations, contractors, Internet analysis services). This includes, in particular, data that we process in connection with the preparation, conclusion, and execution of contracts, as well as data from correspondence and interviews with third parties, within the limits set by law.
