Dear Applicant, Privacy Policy pursuant to Article 13 of EU Regulation 2016/679 for the processing of personal data of candidates. Data Controller We inform you that, pursuant to EU Regulation 2016/679 (hereafter “Regulation”), your personal data, collected for the purposes of personnel selection and evaluation shall be processed by CID SpA, which is a member of Alvimedica Group with registered office in Via per Crescentino s/n 13040 Saluggia (VC) ITALY in a capacity of Data Controller (hereafter “Data Controller”). Types of data being processed The Data Controller shall process personal data (Article 4(1) of the Regulation) which includes, by way of example and without limitation, your first and last name, your mobile phone number and data belonging to special categories (Article 9(1) of the Regulation) which includes, by way of example and without limitation, data that may reveal racial and ethnic origin, religious convictions, political opinions, membership in political parties, membership in trade unions, religious or philosophical associations or organisations, as well as health data (for example data belonging to the so-called protected categories). The data collected during the selection and provided by you, may also regard your family members. Purpose, legal basis and optional nature of the data processing Your personal data shall be processed for the purpose of selecting and evaluating personnel for a possible employment relationship or collaboration with the undersigned (or with Group companies). The legal basis of the data processing for the specific purposes is the implementation of precontractual measures (Article 6(1)(b) of the Regulation), the explicit consent to the processing of data pertaining to special categories (Article 9(2)(a) of the Regulation), the legitimate interest of the Data Controller to verify the suitability of the candidate to fill the specific open position (Article 6(1)(f) of the Regulation). The possible processing of such special data may be carried out pursuant to Article 9.2.a) of the Regulation, only subject to your explicit consent and in accordance with current applicable authorisations on personal data protection. In this regard, unless it is strictly necessary, we ask you not to provide this type of information;should you decide to provide such data, you shall be asked to grant specific consent in its regard, in compliance with current legislation on the protection of personal data. In the absence of your consent to the processing of your special personal data, should you provide such data, this data cannot be taken into consideration for the purposes of your application. The provision of your personal data for the abovementioned purposes is optional; however, otherwise it shall not be possible to correctly evaluate your professional qualities. Recipients of personal data Your Personal Data may be shared with:  Natural persons authorised by the Data Controller subject to the signing of a confidentiality agreement (e.g. employees of the Human Resources/Administration department and system administrators);  Group Companies The complete and updated list of Data Processors please contact +39 0161 18261. “With regard to the possible transfer of Data to Third Countries, the Data Controller notes that the processing shall take place according to one of the methods permitted by applicable law, such as the consent of the Interested Party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects participating in international programmes aimed at the free circulation of data (e.g. EU-USA Privacy Shield) or operating in countries deemed safe by the European Commission. On request, more information can be obtained from the Data Controller at the contacts listed above.” Retention of personal data Your personal data shall be stored for a period of 12 months. The foregoing is without prejudice to the additional retention of data provided for by applicable law including as foreseen by Article 2946 of the Italian Civil Code. Additional information is available from the Data Controller. You privacy rights (pursuant to Articles 15 et seq. of the Regulation) You have the right to ask the Data Controller, at any time, to provide access to your Personal Data, to correct or delete the data or to oppose to its processing; you have the right to request the limitation of its processing in the cases provided for in Article 18 of the Regulation, as well as obtaining in a structured, commonly-used and machine-readable format the data that concerns you, in the cases provided for by Article 20 of the Regulation. Requests shall be sent in writing to the Data Controller at the following address privacy@cidvascular.it. In the event that you believe that the processing of your personal data is contrary to the legislation in force, you have the right to submit a complaint with the Authority for the Protection of Personal Data, pursuant to Article 77 of the Regulation. You may revoke your consent already given (Article 7(3) of the Regulation), without this affecting the lawfulness of the processing of data carried out before the withdrawal of consent. Please note that you can remove your sensitive data from your CV, as you have no obligation to communicate such data. However, if you believe that such data is necessary for the purposes of your application, you must consent to its processing, which shall otherwise not be permitted. CONSENT OF THE INTERESTED PARTY/PARTIES (only in case of special categories of personal data)  I explicitly consent to the processing of my special personal data (personal data that may reveal the racial or ethnic origin, political opinions, religious or philosophical convictions or union membership, as well as genetic data and biometric data that may uniquely identify a person, data related to the health or sex life or the sexual orientation of the person) eventually provided in the CV, on an optional, explicit and voluntary basis, for the purposes of the application.