Candidate Privacy Policy

Information pursuant to Article 13 of EU Regulation 2016/679 on the Processing of Personal Data 

Data controller  

We inform you that, pursuant to EU Regulation 2016/679 (hereinafter: "Regulation"), your Personal Data will be processed by Value Partners S.p.A., based in Milan, Largo Francesco Richini 6, as the data controller ("Controller"). 

 Types of data subject to processing 

The Data Controller will process personal data (art. 4.1 of the Regulations), collected during the recruitment process, including, but not limited to, personal information (first name, last name, date of birth, address, picture, gender, marital status, etc.), contact information, and data related to the curriculum vitae. When communications are received from a candidate, it may transpire that the company processes data falling within special categories of personal data (as per Article 9.1 of the Regulations) – for instance, data which could infer health status (e.g., membership of so-called protected categories or disability).  

 Your Personal Data will be processed for the following purpose: 

• Selection and evaluation of personnel for a possible working relationship or collaboration with the Controller. 

The lawful bases for processing for this purpose are the execution of pre-contractual measures (Article 6.1.b of the Regulations), the explicit consent to processing for data falling within special categories (Article 9.2.a of the Regulations), and the legitimate interest of the Controller in verifying the candidate's suitability for the specific vacant position (Article 6.1.f of the Regulations). 

Any processing of such data belonging to special categories of personal data may take place in accordance with Article 9.2.a of the Regulations, only with your explicit consent. In this regard, if not strictly necessary, we ask you not to provide this type of information; otherwise, should you decide to provide it, you are asked to issue an appropriate consent in compliance with the current legislation on the protection of personal data. In the absence of your giving consent to the processing of your special data, should you provide such type of data, it cannot be considered for the purposes of your application. 

The provision of your Personal Data for the above purpose is optional, but in default it will not be possible to properly assess your professional qualities. 

Recipients of Personal Data 

Your Personal Data may be shared with: 

• people authorized to process your Personal Data in accordance with Articles 29 and 32(4) of the Regulations and 2-quaterdecies of the Privacy Code (e.g., employees of the Company who must process your Personal Data by reason of their job duties, system administrators).; 
• parties who, in the provision of services on behalf of the Company, process data on behalf of the Company and typically act as data processors (third parties involved in the management of information systems and web platforms; third-party collaborators that the Company uses for specific services of a technical and/or organizational nature - such as IT service providers, external collaborators and consultants) For the complete and updated list of data processors write to privacy@valuepartners.com); 
• entities and authorities, which normally act as autonomous data controllers in accordance with Article 4, no. 7) of the Regulations, to which it is mandatory to communicate your Personal Data in accordance with the regulatory provisions applicable to the Company or by virtue of contractual obligations or in execution of pre-contractual measures. 

 "With regard to the possible transfer of Data to Third Countries, the Data Controller informs that the processing will take place according to one of the modalities allowed by the applicable law, such as the consent of the data subject, the execution of a contract concluded between the data subject and the data controller or the execution of pre-contractual measures adopted at the request of the data subject; the conclusion or execution of a contract concluded between the data controller and another natural or legal person in favor of the data subject; the adoption of Standard Clauses approved by the European Commission; the selection of entities operating in countries considered safe by the European Commission. You can get more information, upon request, from the Controller at the contacts above!” 

 Methods of Data Processing 

In relation to the stated purposes, the processing of personal data is carried out using manual, computer, and telematic tools, with methods strictly related to the purposes themselves and, in any case, in a manner that ensures the security and confidentiality of the data, as well as compliance with the specific obligations established by law. 

Retention of Personal Data 

Your Personal Data will be retained for one year. In any case, further retention may be required by applicable regulations, including that provided for by Article 2946 of the Civil Code. More information is available from the Controller. 

Your Privacy Rights (pursuant to Articles 15 et seq. of the Regulation) 

You have the right to request the Controller, at any time, access to your Personal Data, rectification or deletion of the same, or to request the limitation of processing in the cases provided for by Article 18 of the Regulation, as well as to obtain in a structured, commonly used, and machine-readable format the data concerning you, in the cases provided for by Article 20 of the Regulation. 

You may submit a request to object to the processing of your data pursuant to Article 21 of the Regulation, stating the reasons justifying the objection: the Controller reserves the right to assess your request, which will not be accepted if there are legitimate compelling reasons to proceed with the processing that prevail over your interests, rights, and freedoms. 

At any time, you may revoke your consent previously given pursuant to Article 7 of the Regulation, without affecting the lawfulness of the processing carried out prior to the revocation of consent. 

In any case, you always have the right to lodge a complaint with the Data Protection Authority, pursuant to Article 77 of the Regulation, if you believe that the processing of your data is contrary to the applicable regulations. 

We remind you that you can remove your sensitive data from your CV, as you are not obliged to disclose it to us. However, if you believe it is necessary for your application, you must consent to its processing; otherwise, we will not be able to process it. 

Requests should be addressed in writing to the Controller at the following address: privacy@valuepartners.com.