PRIVACY NOTICE FOR THE PROCESSING OF JOB APPLICANTS’ PERSONAL DATA
In order to carry out the recruitment process for professionals or employees, Solving S.r.l. S.T.A., with registered office at Corso Venezia 10, 20121 – Milan (MI), VAT No. IT14172920960 (hereinafter “SLVG”, the “Firm” or the “Data Controller”), collects the personal data of individuals who voluntarily submit their application to participate in the selection process.
Under EU Regulation 679/2016 (“GDPR”), “processing” means any operation, including the mere collection and/or storage, of personal data relating to any natural person (the “Data Subject”); “data controller” means the person who determines the purposes and means of processing; and “personal data” means any information relating to an identified or identifiable natural person, also indirectly by reference to any other information. The personal data processed are those voluntarily provided to SLVG by the Data Subjects through the submission of their curriculum vitae and/or completion of the application form in order to participate in the recruitment process.
- DATA CONTROLLER
The Data Controller is Solving S.r.l. S.T.A., with registered office at Corso Venezia 10, 20121 – Milan (MI), VAT No. IT14172920960 – represented by lawyer Francesco Conti.
The Data Protection Officer appointed by the Data Controller is lawyer Claudio Rizzo, with office in Milan, Corso Venezia, 10. For information requests and to exercise your rights, you can freely contact the DPO at:
- +39 02 66010054
- e-mail: rizzo@slvg.it or privacy@slvg.it.
- PURPOSES OF PROCESSING
- The data voluntarily provided by the Data Subjects when submitting their application will be used by the Data Controller to select candidates for the start of a possible collaboration.
- In addition, such data may be used by the Firm to create a database from which to select names useful for any new hires or collaborations, both in the context of current and future selection processes.
- LEGAL BASIS OF PROCESSING
The legal basis for processing for the above purpose 2.1 is the performance of pre-contractual measures at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.
The legal basis for processing for the above purpose 2.2 is the consent of the data subject.
The Firm will not collect or process data falling within the special categories of personal data referred to in Article 9 of the GDPR, nor personal data relating to criminal convictions and offences. Only if the selection is aimed at the placement of persons belonging to protected categories may the Firm collect – to the extent required by law – personal data relating to health. In all other cases, any special categories of personal data or personal data relating to criminal convictions and offences voluntarily communicated by the Data Subject will not be processed and will be immediately deleted.
- NATURE OF DATA PROVISION
The provision of data for the purpose referred to in point 2.1 above is necessary, as it is strictly functional to participation in the candidate selection process.
Since the service requested from the Data Controller originates from a spontaneous and unsolicited request by the Data Subject, in the form of the transmission of their curriculum vitae, any request for data deletion makes it impossible for the Firm to consider the application.
The Data Subject may make such requests by sending an e-mail to privacy@slvg.it.
The provision of data for the purposes referred to in point 2.2 above is optional.
- CATEGORIES OF RECIPIENTS TO WHOM DATA MAY BE DISCLOSED
The data will be communicated to the Firm’s internal collaborators and/or employees, as well as to legal, administrative, employment, and technical consultants for selections, affiliated companies or companies bound by contractual obligations with the Firm, competent public bodies, etc. Where necessary, the data will be accessible to the judicial authority or the police upon specific request. Where necessary or required by laws, regulations, EU legislation, orders of judges, arbitrators or public authorities, as well as for the performance of contractual obligations (e.g. public bodies, supervisory authorities, banks), personal data may be transmitted to those to whom communication is provided for. The data may also be communicated to internet providers, web administrators, companies performing data entry and mailing activities. The data will not be further disseminated.
- METHODS OF PROCESSING
The Firm will collect, record, store and archive personal data using manual, IT and telematic tools with logics strictly related to the purposes themselves and, in any case, in such a way as to ensure the security and confidentiality of the data collected.
The security of the data and their transmission is ensured by adequate protection systems such as antivirus, anti-ransomware, firewall and access passwords, and by physical measures aimed at selecting and preventing access to the premises where the data are stored.
- DATA RETENTION
If the selection process for which the application was selected is successful, the Data Subject’s personal data will be retained for the entire duration of the employment or collaboration relationship, plus the 10-year period provided by law after its termination. Such information will be contained in the notice delivered to the data subject at the time of hiring or commencement of the collaboration.
If the selection process for which the application was selected is unsuccessful, the Data Subject’s personal data will be retained, subject to consent, for 12 months after the conclusion of the selection process, in order to evaluate the application in relation to any positions that may be opened in the future. If the Data Subject does not give consent, the personal data will be immediately deleted at the time of communication of the negative outcome to the candidate.
- DATA SUBJECT’S RIGHTS
The rights granted to the Data Subject include the following:
(a) to ask the Data Controller to confirm the existence or non-existence of his or her personal data;
(b) to obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period;
(c) obtain rectification and erasure of the data;
(d) obtain restriction of processing;
(e) obtain portability of the data, i.e. receive them from a data controller in a structured, commonly used and machine-readable format and transmit them to another data controller without hindrance;
(f) to object to the processing at any time, including in the case of processing for direct marketing purposes;
(g) to object to automated decision-making relating to fixed persons, including profiling;
(h) request from the data controller access to and rectification, erasure or restriction of personal data concerning him/her, object to the processing of personal data, as well as the right to data portability;
(i) withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation; j) lodge a complaint with a supervisory authority.
For any complaints or reports regarding the methods of data processing, Data Subjects may contact the Data Controller. Complaints or reports may also be submitted to the supervisory authority (the Italian Data Protection Authority – www.garanteprivacy.it).
- DISCLOSURE AND DISSEMINATION OF DATA
The personal data provided by the Data Subject by simply sending their application will not be transferred to third parties. If the selection process results in the initiation of a collaboration of any nature, the Data Subject will be provided with a subsequent notice, including information on any dissemination of their personal data to third parties.
- TRASFER ABROAD
If any of the parties indicated above are located outside the European Economic Area (EEA), we will transfer your personal data, in the absence of adequacy decisions and where none of the derogations under Article 49 of the GDPR applies, on the basis of the standard contractual clauses referred to in Article 46(2)(c) and (d) of the GDPR.
September 2025
Solving S.r.l. S.T.A.