Pursuant to article 13 of EU Regulation 2016/679 (hereinafter the “GDPR“) on the protection of personal data, Sellmasters S.r.l. informs candidates who submit their applications enclosing a curriculum vitae that the data provided will be processed for the sole purpose of recruitment and selection of personnel for open positions, in accordance with this privacy policy. Such processing will be carried out by means of procedures, including computerised procedures, and in the manner and within the limits necessary for the pursuit of the aforementioned purposes.

1. Data Controller

The data controller of personal data is Sellmasters S.r.l. (hereinafter referred to as the “Data Controller” or the “Company”), in the person of its sole director, with registered office in Viale di Val Fiorita, 86, 00144 Rome, VAT no. 14821441004, which can be contacted at the email address privacy@sellmasters.it.

2. Personal Data

The personal data to be processed are the data provided by the candidate (the “Candidate” or “Data Subject“) through the submission of his/her curriculum vitae, including but not limited to: name, surname, e-mail address, user name, education, previous work experience, publications and any other information provided by the Candidate in his/her curriculum vitae.

Candidates are requested not to include data belonging to special categories pursuant to Article 9 of the GDPR, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or data concerning health. The only data concerning health that may be provided are indications that the Candidate belongs to a protected category of workers.

3. Purpose of processing

Personal data are processed by the Data Controller for the purpose of managing the recruitment procedures and, in particular, personal data may be used for the following purposes (i) recruitment and selection of personnel for current and future open positions and for keeping records relating to recruitment processes, and (ii) in the event of a successful recruitment, for keeping records relating to the employee by the Human Resources department.

4. Legal basis of the processing and nature of the data provision

The legal basis for the processing of personal data for the purposes referred to in point 3 is Article 6 (1) (a) of the Regulation (“[…] the data subject has given the consent to the processing of his/her personal data for one or more specific purposes“). The provision of personal data for the purposes referred to in point 3 above is not compulsory. However, refusal to provide such data may make it impossible to process your application, to receive an offer for an open position and to provide information on recruitment procedures.

5. Duration of processing

Personal data of a Candidate who is not offered a position may be kept for subsequent employment opportunities that may arise for a maximum period of 24 months from receipt of the curriculum vitae, unless and until the Candidate objects to such further processing, whereupon the data shall be immediately deleted.

In the absence of such an objection, should a Candidate whose CV has been submitted for a previous selection be considered for further selection and the Candidate agrees to be considered for the further selection by submitting an updated CV, the aforementioned period of 24 months shall start from the moment the updated CV is received.

If the Candidate receives and accepts an offer, the data collected will be retained for a longer period in accordance with the privacy policy applicable to employees.

6. Data processing methods

The data will be processed and stored exclusively for the purposes indicated above by means of paper and electronic tools and will be processed using instruments that guarantee the integrity, security and confidentiality of the data, in accordance with the provisions of the GDPR. All appropriate technical and organisational measures will be taken to ensure a level of data protection that complies with the provisions of the GDPR. Access shall be allowed only to persons duly authorised by the Data Controller to process personal data employed within the Human Resources Department.

7. Communication to third parties and/or disclosure of personal data

Personal data may be communicated to other companies belonging to the Group and/or to external personnel recruitment and selection companies involved in the activities for the pursuit of the aforementioned purposes. The personal data may also be disclosed to persons who provide services related to the above purposes (e.g. technical services for the management of IT systems) and to employees of the Company. These subjects, duly appointed by the Data Controller, will act as data processors or persons authorised to process the personal data.

8. Data Transfer

Personal data will be processed and transferred exclusively within the European Union.

9. Rights of the Data Subject

Pursuant to the provisions of Chapter III of the GDPR, the Data Subject has the right to access at any time to his/her personal data and to request their rectification or cancellation; the right to obtain from the controller restriction of processing in the cases provided for by Article 18 of the GDPR, where technically possible, as well as to obtain in a structured, commonly used and machine-readable format the data concerning him/her, in the cases provided for by Article 20 of the GDPR and the right to object to processing in the cases provided for by Article 21 of the GDPR.

The Data Subject may revoke consent to the processing of his/her personal data and exercise the rights listed above by sending a request to the Data Controller at the addresses indicated in point 1 above without any formality, without prejudice to the lawfulness of the processing carried out before revocation.

In any case, the Data Subject has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, pursuant to art. 77 of the GDPR, if he/she believes that the processing of his/her data is in breach of the privacy legislation in force.