Candidate Privacy Notice
INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA – CANDIDATES (Articles 13 and 14 of EU Regulation 2016/679)
UPD. 06/09/2026
What is this notice about?
This privacy notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter the “GDPR“) and applies to the personal data relating to you (and potentially to those who provide references for you) collected by Anemocyte S.r.l., with registered office in Gerenzano (VA) at via Roberto Lepetit, 34 – acting as the data controller (hereinafter the “Data Controller”, “we“, “us“, or “our“, as applicable) – during the recruitment and selection process. Please note that it is your responsibility to inform any individuals providing references on your behalf about the processing of their personal data as described in this notice, and to obtain their consent if necessary.
What categories of personal data do we collect?
We may collect the following categories of personal data:
- Identification data: such as name, surname, date and place of birth, nationality, residential address, and tax identification number (codice fiscale).
- Contact data: such as e-mail address(es), telephone number(s), and postal address(es).
- Professional life information: such as data relating to your education and previous work experiences.
- Other information: any other details included in your curriculum vitae or otherwise voluntarily provided by you.
Generally, we will not collect or process data falling under the special categories of personal data referred to in Art. 9 of the GDPR, nor personal data relating to criminal convictions and offences. However, if the recruitment process involves the placement of individuals belonging to protected categories (categorie protette), we may collect health-related personal data, strictly to the extent required by law. In all other instances, any special categories of personal data (Art. 9 GDPR) or data relating to criminal convictions and offences that you voluntarily communicate to us will not be processed and will be immediately deleted. The provision of your personal data is necessary to fulfill the purposes listed below; failure to provide such data will make it impossible for us to pursue these purposes.
How do we collect your personal data?
Most of the data we collect is provided directly by you during the selection process. Additionally, we may collect your personal data through third parties (e.g., LinkedIn and recruiting agencies) or public registers. We do not use any form of solely automated decision-making regarding the processing of your personal data.
For what purposes and on what legal basis do we process your personal data?
Your personal data will be processed for the following purposes:
- Recruitment execution: To carry out activities necessary or otherwise related to personnel selection with a view to potentially concluding an employment contract with us, both for the specific position for which your application was selected and for any other open positions.
- Future opportunities: In the event the selection process for which you applied is unsuccessful, to allow us to retain your curriculum vitae to evaluate your profile for future open positions.
- Legal compliance: To fulfill legal obligations to which we are subject and, exclusively regarding the placement of individuals in protected categories, to fulfill obligations or allow you to exercise rights provided by law and collective agreements concerning labor law, social security, and social protection.
- Legal defense: To establish, exercise, or defend a legal claim in judicial or administrative proceedings, or during arbitration or conciliation procedures.
- Extraordinary operations: To carry out preparatory or connected activities regarding extraordinary corporate operations such as mergers, acquisitions, and transfers of business units.
Legal Bases:
- Processing for purpose (1) does not require your consent as it is necessary to take steps at your request prior to entering into a contract, pursuant to Art. 6(1)(b) of the GDPR.
- Processing for purpose (2) requires your explicit consent, pursuant to Art. 6(1)(a) of the GDPR.
- Processing for purpose (3) does not require your consent as it is necessary for compliance with a legal obligation and to exercise rights under labor law, pursuant to Articles 6(1)(c) and 9(2)(b) of the GDPR.
- Processing for purposes (4) and (5) does not require your consent as it is necessary for the purposes of our legitimate interests, pursuant to Art. 6(1)(f) of the GDPR.
How do we process your personal data?
We implement appropriate security measures to protect your personal data from the risks of accidental or unlawful destruction, loss, alteration, as well as unauthorized disclosure or access.
How long do we keep your personal data?
Regarding purposes (1) and (2):
- If your recruitment process is successful, your personal data will be retained for the entire duration of the employment or collaboration relationship and for a maximum of 10 years following its termination.
- If your recruitment process is unsuccessful, your personal data will be retained, subject to your prior consent, for 2 years following the conclusion of the selection process.
- If you choose not to grant your consent, your personal data will be immediately deleted at the end of the selection process.
Personal data collected for purposes (3), (4), and (5) will be retained for the time necessary to achieve those purposes or for the period we are legally required to keep them based on applicable legal provisions.
To whom is your personal data communicated?
Your personal data may be made accessible, brought to the attention of, or communicated to the following subjects, who will act as authorized persons, data processors, or independent data controllers:
- Our employees or collaborators in any capacity;
- Employees or collaborators of any parent, subsidiary, or affiliated companies;
- Service providers and consultants (e.g., to obtain legal advice on labor law application regarding recruitment management, or for consulting/assessment activities within the selection process);
- Public authorities or bodies, if and to the extent required or mandated by law;
- Potential buyers, should we intend to transfer ownership or control of all or part of our business.
You may request the list containing the names and contact details of the subjects belonging to the aforementioned recipient categories at any time by contacting us at the mail and e-mail addresses indicated below. As a rule, we will not transfer your personal data outside the European Economic Area (EEA). If any of the aforementioned subjects are located outside the EEA, we will transfer your personal data—in the absence of adequacy decisions and provided no derogations under Art. 49 of the GDPR apply—based on the standard contractual clauses approved by the European Commission via Implementing Decision (EU) 914/2021.
Your rights under data protection laws
Pursuant to Articles 15 to 21 of the GDPR, you have the right to:
- Be informed about the purposes and methods of processing your personal data;
- Access your personal data;
- Rectify incomplete, inaccurate, or outdated personal data;
- Obtain the erasure of your personal data;
- Obtain, where provided by law, the restriction of processing;
- Object, wholly or partially, where provided by law, to the processing of your data;
- Obtain data portability, if technically feasible.
Where consent is required for processing, you may also withdraw your previously granted consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You can exercise the above rights and request any information regarding the processing of your personal data by contacting us at:
- Post: Anemocyte, via R. Lepetit 34, Gerenzano 21040 (VA), Italy
- E-mail: privacy@anemocyte.com
- Furthermore, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it) if you believe your rights under the GDPR have been violated.
