Candidate Data Protection Notice

In compliance with EU Regulation 2016/679 (“GDPR”), we provide you with the following information regarding the processing of your personal data and its purposes.

Data collection is carried out through registration by completing the form on the “Contact Us” page, and in compliance with the GDPR, the processing is based on principles of legality, fairness, transparency, and protection of privacy.

Your personal data is used for the selection procedures, in particular, to verify the prerequisites for selection, hiring, and/or possible employment collaboration, as per your request.

Data Controller

The data controller is Attianese S.p.A. with its registered office at Via Nazionale, km 41, 850 SN 84015, Nocera Superiore (Sa), VAT number 04634130654, represented by its current legal representative.

Personal Data Processed

In particular, the personal data in question include:

• Name
• Residential address
• Phone number
• Email address
• Work-related data
• Educational and work history

“Special” Data

On an exceptional and optional basis, at the candidate’s initiative, the Data Controller may become aware of the candidate’s possible membership in protected categories or other personal data falling within the category of “special” data. These may include data capable of revealing racial or ethnic origin, religious, philosophical, or other beliefs, political opinions, membership in parties, trade unions, associations, or organizations with a religious, philosophical, political, or trade union purpose, as well as personal data capable of revealing health and sexual life.

Nature of Data Provision

Data provision is optional and is at the candidate’s discretion. Without any solicitation from the Data Controller, candidates may submit their curriculum vitae and complete the form. Failure to provide data will result in the impossibility of verifying the prerequisites for selection procedures, hiring, and/or the commencement of a possible employment collaboration with the Data Controller.

Data Usage Methods

Personal data may be processed electronically as well as by non-automated means. The processing is carried out only with operations, as well as with logic and forms of data organization, that are strictly necessary in relation to the above-mentioned obligations, tasks, or purposes. Data is generally collected directly from the data subject.

Data Circulation Scope

Data may be used by personnel of the Data Controller who have been assigned specific roles and have received appropriate operational instructions to prevent loss, destruction, unauthorized access, or unauthorized processing of the data. Your personal data will only be made accessible to those within the organizational structure who require it due to their job or hierarchical position. Third-party companies that perform instrumental activities on behalf of the Data Controller may also use the data. These companies act as external data processors and operate under the direction and control of the Data Controller. The updated list of data processors is available upon request at privacy@attianese.it. Your data will not be disclosed to undetermined recipients.

Data Transfer Abroad

Your data will not be transferred abroad.

Data Retention Period

Data will be retained for the time necessary for the fulfillment of the candidate selection procedures and in any case, not exceeding 2 years from their collection, unless an employment relationship and/or collaboration is established.

No Need for Consent

Your consent for processing is not required as the processing concerns data contained in curricula vitae voluntarily submitted by individuals for the purpose of establishing a work/collaboration relationship. This also applies to any special data submitted in the same manner by the data subject, for which consent is excluded under current national and European Union regulations.

Exercise of Rights

You may access your personal data, request rectification, erasure, or restriction of processing where applicable by law, or object to their use in cases of legitimate interest by the Data Controller. You also have the right to data portability where applicable. You can obtain an updated list of data processors by contacting the Data Controller. You have the right to lodge a complaint with the Italian Data Protection Authority if you believe that your rights have not been respected or if you have not received a response to your requests in accordance with the law.

How to Exercise Your Rights

To exercise your rights, you can contact the Data Controller:

• By email at: privacy@attianese.it
• By registered mail at the following address: Via Nazionale, km 41, 850 SN 84015, Nocera Superiore (Sa)