Dear Applicant,
Privacy Policy pursuant to Article 13 of EU Regulation 2016/679 for the processing of personal data of
candidates.
Data Controller
We inform you that, pursuant to EU Regulation 2016/679 (hereafter “Regulation”), your personal data,
collected for the purposes of personnel selection and evaluation shall be processed by CID SpA, which is a
member of Alvimedica Group with registered office in Via per Crescentino s/n 13040 Saluggia (VC) ITALY in
a capacity of Data Controller (hereafter “Data Controller”).
Types of data being processed
The Data Controller shall process personal data (Article 4(1) of the Regulation) which includes, by way of
example and without limitation, your first and last name, your mobile phone number and data belonging to
special categories (Article 9(1) of the Regulation) which includes, by way of example and without limitation,
data that may reveal racial and ethnic origin, religious convictions, political opinions, membership in
political parties, membership in trade unions, religious or philosophical associations or organisations, as
well as health data (for example data belonging to the so-called protected categories).
The data collected during the selection and provided by you, may also regard your family members.
Purpose, legal basis and optional nature of the data processing
Your personal data shall be processed for the purpose of selecting and evaluating personnel for a possible
employment relationship or collaboration with the undersigned (or with Group companies).
The legal basis of the data processing for the specific purposes is the implementation of precontractual
measures (Article 6(1)(b) of the Regulation), the explicit consent to the processing of data pertaining to
special categories (Article 9(2)(a) of the Regulation), the legitimate interest of the Data Controller to verify
the suitability of the candidate to fill the specific open position (Article 6(1)(f) of the Regulation).
The possible processing of such special data may be carried out pursuant to Article 9.2.a) of the Regulation,
only subject to your explicit consent and in accordance with current applicable authorisations on personal
data protection. In this regard, unless it is strictly necessary, we ask you not to provide this type of
information;should you decide to provide such data, you shall be asked to grant specific consent in its
regard, in compliance with current legislation on the protection of personal data. In the absence of your
consent to the processing of your special personal data, should you provide such data, this data cannot be
taken into consideration for the purposes of your application.
The provision of your personal data for the abovementioned purposes is optional; however, otherwise it
shall not be possible to correctly evaluate your professional qualities.
Recipients of personal data
Your Personal Data may be shared with:
Natural persons authorised by the Data Controller subject to the signing of a confidentiality
agreement (e.g. employees of the Human Resources/Administration department and system
administrators);
Group Companies
The complete and updated list of Data Processors please contact +39 0161 18261.
“With regard to the possible transfer of Data to Third Countries, the Data Controller notes that the
processing shall take place according to one of the methods permitted by applicable law, such as the
consent of the Interested Party, the adoption of Standard Clauses approved by the European Commission,
the selection of subjects participating in international programmes aimed at the free circulation of data
(e.g. EU-USA Privacy Shield) or operating in countries deemed safe by the European Commission. On
request, more information can be obtained from the Data Controller at the contacts listed above.”
Retention of personal data
Your personal data shall be stored for a period of 12 months. The foregoing is without prejudice to the
additional retention of data provided for by applicable law including as foreseen by Article 2946 of the
Italian Civil Code. Additional information is available from the Data Controller.
You privacy rights (pursuant to Articles 15 et seq. of the Regulation)
You have the right to ask the Data Controller, at any time, to provide access to your Personal Data, to
correct or delete the data or to oppose to its processing; you have the right to request the limitation of its
processing in the cases provided for in Article 18 of the Regulation, as well as obtaining in a structured,
commonly-used and machine-readable format the data that concerns you, in the cases provided for by
Article 20 of the Regulation.
Requests shall be sent in writing to the Data Controller at the following address privacy@cidvascular.it.
In the event that you believe that the processing of your personal data is contrary to the legislation in force,
you have the right to submit a complaint with the Authority for the Protection of Personal Data, pursuant to
Article 77 of the Regulation.
You may revoke your consent already given (Article 7(3) of the Regulation), without this affecting the
lawfulness of the processing of data carried out before the withdrawal of consent.
Please note that you can remove your sensitive data from your CV, as you have no obligation to
communicate such data. However, if you believe that such data is necessary for the purposes of your
application, you must consent to its processing, which shall otherwise not be permitted.
CONSENT OF THE INTERESTED PARTY/PARTIES (only in case of special categories of personal data)
I explicitly consent to the processing of my special personal data (personal data that may reveal the
racial or ethnic origin, political opinions, religious or philosophical convictions or union membership, as well
as genetic data and biometric data that may uniquely identify a person, data related to the health or sex life
or the sexual orientation of the person) eventually provided in the CV, on an optional, explicit and voluntary
basis, for the purposes of the application.
