Information pursuant to Articles 13-14 of EU Regulation 2016/679 (‘GDPR’) for the processing of personal data.

We inform you that, pursuant to EU Regulation 2016/679 (hereinafter also referred to as the ‘Regulation’ or ‘GDPR’), your personal data as defined below will be processed by KEYWE SRL with sole shareholder (‘Company’ or ‘KEYWE’), in its capacity as data controller (‘Controller’), including through authorised parties pursuant to Article 29 of the GDPR. TYPE OF DATA PROCESSED - Personal details: first name, surname; - Contact details: telephone number, email address; - Data relating to your educational and professional background, such as: education, professional experience, references, distinctions, awards, certifications; - Special data (or so-called sensitive data): such as information that may reveal your state of health (such as membership of protected categories). Personal details, contact details, educational details and special data are hereinafter collectively referred to as ‘Personal Data’. It is understood that if your CV or cover letter contains special categories of data that are not relevant to the purpose pursued, the Company will refrain from using such information, in accordance with the provisions of the Provision of the Data Protection Authority containing the requirements relating to the processing of special categories of data, pursuant to Article 21, paragraph 1 of Legislative Decree No. 101 of 10 August 2018 - Requirements relating to the processing of special categories of data in employment relationships (general authorisation no. 1/2016). The Data is collected from the data subject (i.e. provided directly by you) and/or from third parties, such as recruitment companies, temporary employment agencies, universities and professional social network operators. PURPOSE AND LEGAL BASIS OF THE PROCESSING Your Personal Data will be processed by KEYWE for: - participating in the personnel selection process. The legal basis for the processing lies in the implementation of pre-contractual measures taken at the request of the data subject, pursuant to Article 6.1(b) of the GDPR. With regard to special categories of data, the condition of lawfulness referred to in Article 9.2(b) of the GDPR (i.e., the need to fulfil the obligations and exercise the specific rights of the Data Controller or the data subject in the field of labour law and social security and social protection, to the extent authorised by Union or Member State law or by a collective agreement under Member State law, with appropriate safeguards for the fundamental rights and interests of the data subject). - to store the Data for any future selection processes, in the event that the selection is unsuccessful. The legal basis lies in the legitimate interest of the Data Controller, pursuant to Article 6.1, letter f) of the GDPR, and, with regard to special categories of data, the condition of lawfulness referred to in Article 9.2, letter b) of the GDPR. - For legal obligations (pursuant to Article 6.1(c) of the GDPR) and/or for the protection of the legitimate interests of the Data Controller (pursuant to Article 6.1(f) of the GDPR). The provision of Data is necessary for the recruitment and selection process. DATA RECIPIENTS The Data may be processed, on behalf of the Data Controller, by persons designated as data processors pursuant to Article 28 of the GDPR, including, in particular, companies or professionals who provide support for the implementation and maintenance of the information system and company applications. The Data may be processed by employees and/or collaborators of the Data Controller and/or the aforementioned data processors, who are responsible for pursuing the above-mentioned purposes, who have been expressly authorised to process the data and who have received adequate operating instructions. If necessary, the data may be processed by law enforcement agencies and/or competent authorities. Your Personal Data will not be transferred abroad. DATA SECURITY The Data Controller uses all necessary security measures to improve protection and maintain the security, integrity and accessibility of Personal Data. Personal Data is stored on secure servers that are accessible and usable in accordance with the Data Controller's security standards and policies. RETENTION PERIOD Your personal data collected will be stored until the selection process is complete, or for 18 months from the date of collection or participation in the selection process. Where there are reasons for legal obligations and/or for defence in court (statute of limitations). CONTACTS OF THE DATA CONTROLLER KEYWE SRL with sole shareholder Headquartered in Treviso, Piazza Francesco Crispi no. 7 Tax code and VAT number 04845420266 PEC keywesrl@pec.it – email: privacy@key-we.it RIGHTS OF DATA SUBJECTS If the conditions are met, you have the right to ask the Data Controller for: - access to your Personal Data; - the correction of your Personal Data; - the deletion of your Personal Data for which the Data Controller no longer has any legal basis for processing; - restriction of the way in which the Data Controller processes your Personal Data, within the limits provided for by the legislation on the protection of personal data; - a copy of the Data you have provided to the Company, in a structured, commonly used and machine-readable format (portability) and the transmission of such Data to another data controller; - and exercise the rights referred to in Articles 15 to 22 of the GDPR. Requests should be sent in writing to the Data Controller at the following address: privacy@key-we.it. If you exercise any of the above rights, the Data Controller will be responsible for verifying that you are entitled to exercise them and will respond, as a rule, within one month. In any case, you have the right to lodge a complaint with the competent authority, represented in Italy by the Data Protection Authority, pursuant to Article 77 of the Regulation, using the references available on the website www.garanteprivacy.it, or to take appropriate legal action.