Privacy Notice for CV Submissions
This notice supplements our general website privacy policy and explains how the Data Controller processes the data provided in this form. Please also refer to our main Privacy Policy.
Data Controller Identity and Contacts
Connection S.r.l., (“Connection” or “the Controller”) registered office: via Padania, 13/B – 31020 – San Vendemiano (TV). E-mail: info@connection-italia.it | PEC: info@pec.connection-italia.it | Phone: +390438777177
Data Categories and Sources
Connection processes common personal data (e.g., personal information, contact details, professional background, education, and images) and special categories of data (e.g., health-related information). Data may be collected directly from the candidate or from third parties (e.g., recruitment portals).
Purposes and Legal Bases
A. Recruitment management: data is processed for candidate evaluation and selection.
B. Legal Defense: the Controller may process data to manage disputes or legal proceedings.
| Purpose | Legal basis (common data) | Legal basis (special categories of data) |
| A. | Execution of pre-contractual measures. | Fulfillment of obligations under labor law. |
| B. | Legitimate interest of the Controller to establish, exercise, or defend a right. | Establish, exercise, or defend a right. |
Retention period
| Purpose | Retention time |
| A. | 12 months from collection. |
| B. | 10 years from the final resolution of the dispute. |
Nature of Data Provision and Consequences of Refusal
| Purpose | Nature | Consequences |
| A. | Necessary | Impossibility for the data subject to submit their application and for the Controller to manage the selection. |
| B. | Necessary | Impossibility to manage the litigation. |
Data Recipients
Data are processed by authorized internal personnel within the scope of their duties and are disclosed externally according to the following rules
| Purpose | Categories of external recipients |
| A. | Occupational Health Physician, Employment Consultant. |
| B. | Law Firms and Judicial Authority. |
As data is processed using IT systems, it may also be accessible to providers performing technical assistance or maintenance on such systems.
Data Transfer to a Third Country or an International Organization
The Controller does not transfer personal data outside the European Economic Area.
Rights of Data Subjects
The subject to whom the personal data refer is recognized the following rights:
Access: confirm whether your personal data is being processed, access the data, and request a copy.
Rectification: update your personal data, correct inaccuracies and supplement any incomplete information.
Erasure: deletion of your personal data under certain conditions (contact the Data Controller for more information).
Restriction: request your data to be marked to limit future use under specific circumstances. Contact us for more details.
Objection: object to data processing based on your specific situation, provided the processing is grounded on legitimate interests or public interest tasks performed by the Controller.
Portability: receive the personal data provided to the Controller in a structured format and request its transmission to another data controller, provided the processing is based on consent or a contract and is carried out by automated means.
Withdrawal of Consent: withdraw your consent at any time for the purposes that required it; this will not affect the lawfulness of the processing carried out prior to the withdrawal.
The rights effectively exercisable in relation to the processing activities performed are:
| Purpose | Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of Consent |
| A. | X | X | X | X | |||
| B. | X | X | X | X | X |
To exercise the rights set out above, it is possible to use the form available at the following link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and forward it to the following address: privacy@connection-italia.it. The data subject may request from the same address to obtain more details in relation to the information set out above (e.g., balancing test of legitimate interest or the list of data processors).
You have the right to lodge a complaint with a supervisory authority: for Italy, the Italian Data Protection Authority (www.garanteprivacy.it).