Information on the processing of personal data of job applicants

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF JOB CANDIDATES PURSUANT TO ART. 13 OF REGULATION (UE) 2016/679

Last update: 18.07.2025

With this information notice, Alviero Martini S.p.A. (hereinafter: "Alviero Martini" or the "Data Controller"), informs you, pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"), that the personal data provided by you within the scope of personnel selection procedures will be subject to processing, in compliance with the aforementioned regulations and in accordance with the confidentiality obligations that inspire our Company's activities. Please note that, in the event of employment, a specific information notice will be provided to employees pursuant to Art. 13 of the GDPR.

DATA CONTROLLER

The Data Controller is Alviero Martini S.p.A., with registered office in Via Filippo Argelati 1/A, Milan (MI) – 20143, Italy, VAT No. 10271720152. The Data Controller can be contacted for requests or inquiries related to the processing of your personal data by writing to the following e-mail address: info@alvieromatini.it.

DATA PROTECTION OFFICER (DPO)

The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@final.it.

CATEGORIES OF DATA

The Data Controller will process the personal data contained within the curriculum vitae delivered by you through the appropriate reception channels (for example, via e-mail to personale@alvieromartini.it) as well as any further personal data potentially communicated by sending the same, in addition to those provided during the interview for candidate selection. By way of example, Alviero Martini will process your personal details (e.g., name, surname, residential address, date and place of birth), your contact details (e.g., e-mail address, mobile number), information relating to your educational and professional qualifications, and those related to your previous work experiences (e.g., profession, role, years of experience).

At this stage, the Data Controller may process—where included in your curriculum vitae—special categories of data capable of revealing your membership in protected categories as per Law No. 68 of March 12, 1999, as amended, to the extent that the acquisition of such information is strictly indispensable for the establishment of the employment or collaboration relationship. With the exception of such cases, you are requested not to provide other types of special categories of data: in the event of their inclusion, the Data Controller shall proceed with the immediate deletion of the data in question.

Please be reminded that providing your personal data is not mandatory; however, failure to provide it will make it impossible for the Data Controller to evaluate your candidacy for any potential job positions.

PURPOSE AND LEGAL BASIS OF THE PROCESSING

Your personal data will be processed by the Data Controller exclusively for the purpose of assessing the suitability of your candidacy for any open job positions and within the scope of selection procedures. Therefore, processing activities are based on the necessity to perform pre-contractual measures taken at the request of the data subject, pursuant to Art. 6, par. 1, letter b) of the GDPR, and as indicated by Art. 111-bis of Legislative Decree 196/2003 (so-called Privacy Code).

Conversely, the processing of special categories of data referring to the protected categories mentioned in the previous paragraph, which may have been included by you in your Curriculum Vitae, is based on the necessity of fulfilling specific obligations in the field of labor law, pursuant to Art. 9, para. 2, letter b) of the GDPR.

PROCESSING METHODS

Your personal data will be processed using paper and IT tools, through the use of adequate security measures to preserve their integrity, confidentiality, and availability. In no case will your data be processed with processes involving automated decisions or profiling processes.[1] The data will be stored in paper and electronic archives at the Data Controller's premises for the entire time indicated in the "RETENTION PERIOD" paragraph.[2]

CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Your data may be known and processed, for the aforementioned purpose, by:

Personnel specifically authorized by the Data Controller, pursuant to Art. 29 of the GDPR;
Third parties used by the Data Controller for the performance of specific activities (for example, recruiting and selection companies), appointed as Data Processors pursuant to Art. 28 of the GDPR;
Competent Authorities in the event of specific requests.

Your personal data will not be disseminated in any way to third parties without specific authorization. For more information and to know the list of Data Processors appointed by the Data Controller, you can contact the same at the following e-mail address: info@alvieromatini.it.

TRANSFER OF PERSONAL DATA TO NON-EEA COUNTRIES

Your personal data are not subject to transfer outside the European Economic Area (EEA). Should this become necessary, the transfer will take place in compliance with the guarantees referred to in Articles 44 et seq. of the GDPR.[3]

RETENTION PERIOD

The Data Controller processes and stores your curriculum vitae and your personal data for the period of time strictly necessary for the performance of the selection procedures and, in any case, no longer than 12 months from their collection.

RIGHTS OF THE DATA SUBJECT

In light of the rights under Articles 15 et seq. of the GDPR, taking into account the processing covered by this notice, you may request and obtain, at any time:

Access to the data concerning you and the acquisition of a copy thereof (Art. 15 GDPR);
Rectification and integration of personal data if inaccurate or incomplete (Art. 16 GDPR);
Erasure of personal data, where the conditions are met (Art. 17 GDPR);
Restriction of data processing, where the conditions are met (Art. 18 GDPR);
Portability, understood as the right to obtain the data in a structured, commonly used, and machine-readable format to transmit them to another data controller without hindrance (Art. 20 GDPR);
Objection to the processing of data for reasons related to your particular situation (Art. 21 GDPR);
Withdrawal of consent to processing, without prejudice to the lawfulness of processing based on consent acquired before the withdrawal (Art. 7, par. 3 GDPR);
Lodge a complaint with the Supervisory Authority for the Protection of Personal Data for the protection of your personal data and your rights (Art. 51 GDPR).

To exercise these rights, you may contact the DPO at the following e-mail address: dpo@final.it. To ensure that your data are not subject to violations or illegitimate use by third parties, the Data Controller, before accepting the request to exercise one of the aforementioned rights, must verify the identity of the requester and, for this purpose, may ask for further information.

HOW TO LODGE A COMPLAINT

If you wish to lodge a complaint regarding the ways in which your data are processed by the Data Controller, or regarding the management of a complaint submitted by you, you may submit an application directly to the competent Supervisory Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 - Rome, Italy, Telephone +39 06696771, E-mail: protocollo@gpdp.it, www.garanteprivacy.it).

CHANGES TO THIS INFORMATION NOTICE

This information notice may be subject to changes and/or additions to be updated regarding any new processing or processing already in progress and, furthermore, if necessary to adapt it to new regulatory interventions in the matter. We will provide evidence of the date of the last update at the beginning of this Information Notice in the "Last update" section.