Privacy Policy Candidates

Privacy Policy Candidates

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

FOR JOB CANDIDATES

This notice is provided, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 on the protection of personal data (“Data”), to candidates being considered for the establishment of an employment relationship

DATA CONTROLLER

Innorg S.r.l.
VAT No.: IT10590600010
registered office: Corso Francesco Ferrucci 112, 10141 Torino (TO)
e-mail: amministrazione@innorg.it

DATA PROTECTION OFFICER (DPO)

The Data Protection Officer (DPO) is MIA Consultant, who may be contacted for any matter at the following e-mail address: dpo.innorg@miaconsultant.it.

CATEGORIES OF DATA PROCESSED

The categories of Data processed are:

  • Personal and identification data (first name and surname, date and place of birth, address, tax code);
  • Contact data (telephone number, e-mail address);
  • Data contained in the CV and cover letter;
  • Educational qualifications and grades obtained;
  • Languages spoken and technical, professional and IT skills;
  • Possession of a driving licence, if any;
  • Any limitations on working hours;
  • Any other categories of data
PURPOSES OF PROCESSING LEGAL BASIS RETENTION PERIODS
1. Selection and assessment of candidates for the purpose of establishing an employment relationship Necessary for the performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) All Data will be processed for up to 1 year from receipt of the Curriculum Vitae, with the exception of personal and contact Data, which may be retained for up to 10 years following receipt of the CV, in order to avoid including individuals who have already been excluded in a new selection procedure
2. Possible defence of the Data Controller in legal proceedings Legitimate interest of the Controller (Art. 6(1)(f) GDPR) For the entire duration of the dispute, or until the time limits for lodging appeals have expired

NATURE OF DATA PROVISION

The provision of personal data for purposes 1 and 2 is a necessary requirement for starting the selection procedure. If the data are not provided, it will not be possible to proceed with the selection process.

RECIPIENTS OF THE DATA

The Data collected may be disclosed to:

  • The internal department responsible for personnel selection;
  • Third parties providing services to the Controller and carrying out processing on its behalf;
  • IT service providers and/or recruitment platforms.

DATA TRANSFERS OUTSIDE THE EU

Personal Data are stored on servers located within the European Union, managed by third-party companies engaged and duly appointed as Data Processors.

The Controller may transfer certain categories of the Data Subject’s Data to countries outside the European Union. Data will be transferred exclusively to countries deemed adequate by the European Commission or to organisations providing the safeguards set out in Articles 44 – 50 of the GDPR.

RIGHTS OF DATA SUBJECTS

The Data Subject may exercise, in relation to the processing of Data described herein, the rights provided for by the GDPR (Articles 15-22), including the right to:

a. obtain confirmation of the existence of the Data and access their content (right of access);

b. update, amend and/or correct the Data (right to rectification);

c. request the erasure or restriction of processing of Data processed unlawfully, including Data whose retention is not necessary in relation to the purposes for which they were collected or otherwise processed (right to be forgotten and right to restriction);

d. object to processing (right to object);

e. lodge a complaint with the Supervisory Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it) in the event of an infringement of the legislation on the protection of personal Data;

f. receive a copy in electronic format of the Data concerning them as Data Subject, where such Data have been provided in the context of the contract, and request that such Data be transmitted to another controller (right to data portability).

COMPLAINT TO THE AUTHORITY

The Data Subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (Art. 77 GDPR).

AUTOMATED DECISION-MAKING

The Controller does not carry out any processing of personal data that involves automated decision-making.

Version No. 1 of 13/10/2026