Privacy Policy for Resumes

Data Controller

The Data Controller is Fonti Alta Valle Po S.p.A. (FAVP), with registered office at Via Roma 61, 12034 Paesana (CN), Italy, VAT No. 02819640042, telephone (+39) 0175 989111, email [info@acquaeva.it](mailto:info@acquaeva.it), certified email (PEC) [pec@pec.favp.it](mailto:pec@pec.favp.it), represented by its legal representative pro tempore.

Data Protection Officer (DPO)

The Data Protection Officer (DPO) may be contacted by email at [dpo@aesseservizi.eu](mailto:dpo@aesseservizi.eu), by telephone at +39 0171 451725, or by writing to: “AMBIENTE SICURO SERVIZI Società Cooperativa, Data Protection Officer, Via Cascina Colombaro 56, 12100 Cuneo, Italy”.

Purposes of the Processing

The personal data provided by you will be processed exclusively for the following purpose:

• to assess your application for possible employment.

In connection with the potential employment relationship, the Company may become aware of data classified by applicable law as “special categories of personal data”, also known as sensitive data, which you may have voluntarily included in your curriculum vitae.

Where your curriculum vitae contains information that is not relevant to the purposes pursued by the Data Controller, the Data Controller will refrain from using such information.

Mandatory or Optional Nature of Providing Personal Data and Consequences of Refusal

The provision of personal data is optional. However, a refusal to provide such data, in whole or in part, will make it impossible for the Company to assess your application for the position or positions for which you have applied.

Methods of Processing Personal Data

Personal data is processed both in paper and electronic format, using electronic or otherwise automated tools, in compliance with applicable legislation, particularly with regard to confidentiality and security, and in accordance with the principles of fairness, lawfulness, transparency and protection of individual rights.

The processing is carried out directly by the Data Controller’s organisation, by its appointed data processors and/or by specifically authorised persons.

Please also note that, in relation to the processing described in this notice, the Data Controller does not carry out automated decision-making processes or profiling activities.

Disclosure and Dissemination

Your personal data may be disclosed, strictly within the limits relevant to the obligations, duties and purposes described above and in compliance with applicable legislation, exclusively to persons authorised to process personal data.

Your personal data will not be disseminated in any way.

Personal Data Retention Period

Where your application is considered to be of interest, your curriculum vitae will be retained for one year from the date of receipt, after which it will be destroyed.

Transfer of Personal Data

Personal data is stored on servers located within the European Union.

Nevertheless, where necessary, the Data Controller may transfer or relocate the servers outside the European Union. In such cases, the Data Controller hereby guarantees that any transfer of personal data outside the European Union will be carried out in accordance with the applicable legal requirements.

Rights of the Data Subject

As a data subject, you are entitled to exercise the rights provided for under Articles 15 et seq. of the GDPR, including the right to:

1. Obtain confirmation from the Data Controller as to whether or not personal data concerning you is being processed and, where that is the case, obtain access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data has been or will be disclosed; the envisaged period for which the personal data will be stored or, where this is not possible, the criteria used to determine that period;
2. Lodge a complaint with a supervisory authority;
3. Where personal data is transferred to a third country or an international organisation, be informed of the appropriate safeguards relating to the transfer pursuant to Article 46 of the GDPR;
4. Receive a copy of the personal data undergoing processing. Where further copies are requested, the Data Controller may charge a reasonable fee based on administrative costs. Where the request is made by electronic means, and unless otherwise requested, the information will be provided in a commonly used electronic format. This right must not adversely affect the rights and freedoms of others.

To exercise your rights, you may submit a written request to the Data Controller and/or the DPO.