PRIVACY POLICY FOR CANDIDATES

Dear Data Subject we would like to inform you that the "European Regulation 2016/679 on the protection of individuals with regard to the Processing of Personal Data and on the free movement of such data
data" (henceforth "GDPR") provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Therefore, in accordance with Article 13 of the GDPR, we will we provide you with the following information:

A. CATEGORIES OF DATA: The object of processing may be your personal data (such as identification data, personal data, contact data, studies, professional experience, ...) and any special data in your curriculum vitae or communicated by you during the selection process.

B. DATA CONTROLLER: The data controller is Adeodata SRL, VIA Carducci, 32 - 20123 MILAN, VAT No. 05617310965 contactable by phone at 0296720933 or email info@adeodata.eu

C. SOURCE OF PERSONAL DATA: The personal and/or special data in the possession of the Data Controller are collected directly from the data subject and only possibly may come from third parties (publicly searchable Internet and/or social sites and/or recruitment agencies). The Data Controller may, in addition, come into possession of personal data of the data subject as a result of interviews with the data subject's previous employers.

D. PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your personal data has as its legal basis the execution of pre-contractual measures in the field of labor law (Art. 6.1.B GDPR) and is carried out for the following purposes: carrying out the activity of recruitment, analysis, evaluation and selection of personnel by employees and/or collaborators of the Data Controller.
The possible processing of special data, included in the CV or communicated by you during the interview, has as its legal basis the need to fulfill the obligations and exercise the specific rights of the Data Controller in the field of labor law (art. 9.2.B GDPR), as clarified in the Guarantor's Provision No. 146/2019 "Provision containing the prescriptions regarding the processing of special categories of data."

E. RECIPIENTS OF THE DATA: Within the limits pertinent to the purposes, your data may be communicated, where appropriate, to other parties related to the processing activities, internal and external to the Data Controller, such as employees and assimilated, public and private entities, collaborators, freelancers, law firms, labor consultants, technical partners. Your data will not be disseminated in any way.

F. TRANSFER OF DATA TO THIRD COUNTRIES: The data collected may be subject to transfer to third countries outside the European Economic Area, by virtue of an adequacy decision of the Commission or in the presence of appropriate safeguards, in order to fulfill the above purposes.

G. PERIOD OF STORAGE: The data collected will be retained for a period of time not exceeding the achievement of the purposes for which they are processed ("principle of limitation of storage" Art.5, GDPR) or according to the deadlines stipulated by legal regulations. Verification on the obsolescence of retained data in relation to the purposes for which they were collected is carried out periodically.

H. RIGHTS OF THE DATA SUBJECT: The data subject always has the right to request from the Controller access to his/her data, rectification or erasure of data, restriction of processing or the possibility to object to processing and to request data portability. The data subject may also lodge a complaint with a supervisory authority.

I. MANDATORY OR NOT TO PROVIDE THE DATA: The provision of data for the above purposes is mandatory for the evaluation of your application, therefore, failure to provide the data, will result in the inability of the organization to continue with the selection process.

J. DATA PROCESSING METHODS: personal data and any special data you provide, will be subject to processing operations in compliance with the above-mentioned regulations and the obligations of confidentiality that inspire the activity of the Owner. The data will be processed both with computer tools and on paper media as well as on any other type of suitable media (e.g. cloud systems, digital storage and substitute storage systems, ...), in compliance with appropriate technical and organizational security measures provided by the GDPR.