Privacy notice pursuant to Article 13 of the EU Regulation 2016/679 (“GDPR”)

Dear Candidate,
pursuant to Art. 13 of the EU Regulation 2016/679 (General Data Protection Regulation, hereinafter also “GDPR”), A. Agrati S.p.A. and its subsidiaries (C.V.B. S.r.l.; Agrati-FSP S.r.l.; Agrati Vieux Condé SAS; Agrati La Bridoire SARL; Agrati Fourmies SAS; Agrati Park Forest, LLC; Agrati Medina, LLC; Agrati Tiffin, LLC; Agrati GmbH) would like to provide you with the following information on the processing of your personal data (hereinafter also “Data”).

Data Controller

The Data Controller is A. Agrati S.p.A. (hereinafter also “Agrati” or “Data Controller”), with registered office in via Piave 28/30, 20837 – Veduggio con Colzano (MB), Italy. You can contact the Data Controller for any matter relating to data protection at the following address:

Categories of Data

The processing will concern the Data you provided to the Data Controller within your application including: name and surname, job title, residence (and/or domicile), e-mail address and any further personal data contained in your curriculum vitae.

Purpose, Legal basis for processing and Data retention

Your Data will be processed by the Data Controller for the following purposes:
– to allow the Data Controller to manage in all its phases, until the possible signing of the contract, the activity of research and selection of personnel;
– to allow the Data Controller to create and manage their own archive made up of data obtained during previous staff recruitments or spontaneously sent by the data subjects in order to manage future needs of professional profiles.
Regarding the lawfulness of the processing, the latter is necessary to carry out contractual and/or pre-contractual activities at the request of the data subject (Art. 6, paragraph 1, letter b) of the GDPR).
If your CV contains special categories of personal data according to Art. 9 of the GDPR (i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, Data concerning health or data concerning a natural person’s sex life or sexual orientation) such data will be processed by the Data Controller exclusively for the purposes of personnel selection and recruitment.
Your CV and the further Data provided will be deleted 12 months after the receipt. After that, if you are still interested in submitting your application, you will have to resubmit your CV.

Methods of processing

The Data you provide are processed by the Data Controller both manually and by electronic tools. The Data Controller takes all necessary technical and organizational measures to ensure a level of security appropriate to the risk to the rights and freedoms of natural persons. Your Data will be processed by personnel authorized by the Data Controller in accordance with Article 29 of GDPR.

Compulsory or optional nature of the Data supply

The supply of Personal Data for the aforementioned purposes is strictly necessary. Failure to provide the Data, in whole or in part, could prevent the selection of personnel or not make available information useful for the assessment of your application for available job positions.

Disclosure and Transfer of Data outside the EU

Your personal data will not be disclosed under any circumstances. Following the interview such data may be communicated to other companies of the group to which the Data Controller belongs.
In particular, if we think that your professional profile may match one of our vacancies in another office or company of the Agrati Group which you haven’t applied to (inside or outside of the European Economic Area), we can share your information between our group companies.

Data subjects’ rights

With reference to the processing of the Data, pursuant to Articles 15 et seq. of GDPR you are granted the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to notification in case of rectification or erasure of personal data or restriction of processing, the right to data portability, the right to object, the right not to be subject to a decision based solely on automated processing, including profiling. In order to exercise the rights listed above, you may contact directly the Data controller A. Agrati S.p.A., using the contact details provided above.

If you consider that the processing of your Data infringes the GDPR, you have the right to lodge a complaint with the Italian supervisory authority.