Website guidelines for curriculum vitae collection

Purpose of processing
We inform you that the personal data voluntarily provided by you will be processed by API Spa, as personal data controller, exclusively for the research and selection of personnel, for current and future open positions, via paper-based, electronic or telematic means, whichever is most suitable for guaranteeing the security and confidentiality of the related processed data.

Processing procedure
Personal data will be processed mainly using IT equipment. Personal data that you voluntarily provide, either by filling in online forms or by spontaneous submission of your curriculum vitae, via the website of API Spa as part of the application process, will be stored in a data handling application of API Spa exclusively for the purposes indicated above, and for the period stipulated by the relevant legislation.
For the purposes of this paragraph, API Spa undertakes to observe specific security measures to prevent the loss of data, its illicit or incorrect use and unauthorised access, in full compliance with the laws and regulations.

Compulsory/voluntary provision of data
Personal data is provided voluntarily. However, the refusal of the interested party to provide personal data will make it impossible for the Data Controller’s to process the data and, consequently, it will be impossible to evaluate the application and to proceed with a potential selection of the candidate.

Data Controller and Responsible Officer
The Controller for the described processing activities is API Spa, with headquarters in Via Brodolini, 5/A - 20089 Rozzano (MI) - Italy.
Processing operations will be carried out by Assignees appointed by the Data Controller and/or the Officer responsible for data processing, who operate under their direct authority in compliance with the instructions received.

Persons/bodies to whom/which personal data may be communicated, or who may access them in their capacity as Responsible Officers or data processing officers
For the sole purpose of maintaining this website and the database containing personal data received, API Spa may use third parties that, in this way, may gain access to your data. In any case, these bodies guarantee the adoption of security and confidentiality criteria equivalent to those adopted by API Spa, and operate in the capacity of external data processing bodies.

Rights of the interested party
The interested party has the right to obtain confirmation of the existence of his/her personal data, and of their communication, in an intelligible manner.
The interested party has the right to know the content and the origin of the personal data.
The interested party furthermore has the right to demand:

a) the updating, amendment, or, where he/she has an interest in it, the integration of the data;
b) the deletion, anonymization or blocking of unlawfully processed data, including data that does not need to be retained for the purposes for which it was collected or subsequently processed;
c) confirmation that those to whom the data is communicated or disclosed are notified of the actions referred to under points (a) and (b), including their content, unless the fulfilment thereof proves impossible or involves the use of means that are clearly disproportionate to the right being protected.

The interested party has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him/her, even if it is pertinent to the collection purposes stated;

In any case, the interested party remains free, at any time, to revoke consent by sending an informal notice to that effect to API Spa, at .