APPLICANTS AND CANDIDATE PRIVACY POLICY
This privacy notice is provided pursuant to Article 13 of the EU Regulation 2016/679 (the “Regulation”) and is refers to candidates for employment and internship positions. This privacy policy does not apply to processing carried out by owners of websites or platforms to which the website may refer or to platforms from which we receive applications. Please refer to the privacy policy provided by the respective owners for information regarding the processing of personal data carried out by them.

1. Data controller
The data controller is NVA S.r.l., with registered office in Via Lepetit, 8 – 20045 Lainate (MI), C.F./P. IVA IT10935300961 (the “Data Controller”).
The Data Controller can be contacted at the following e-mail address info@nvarenewables.com.

2. Personal data processed
The processing of your personal data, carried out for the purposes indicated below, may involve the following categories of personal data:
– biographical data, such as first name, last name, date and place of birth;
– contact data, such as e-mail address, telephone number, residential address;
– data related to your professional experiences;
– data related to your academic background.
No data are collected that are not relevant and strictly necessary for the fulfillment of the purposes indicated below. Please do not provide us with data belonging to special categories (art. 9 of the Regulations, such as, but not limited to, data related to health, racial or ethnic origin, sexual orientation etc.) if you do not think it is necessary for the evaluation of your application for a job or internship position. In the latter case, by sending said information, you expressly consent to its processing for the purposes described below.
The personal data processed are those communicated by you to the Data Controller directly or through our appointees, duly appointed as data processors (e.g. recruiting agencies; etc.).

3. Purposes of the data processing
The processing of your personal data by the Data Controller will be carried out for the purpose of managing the process of selecting candidates for employment and internship positions and, if the requirements are met, for managing the process of recruitment or placement within the Data Controller’s workforce.

4. Legal basis of the processing
The legal basis for the processing is Article 6(1)(b) of the Regulation (“processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”).
With reference to data concerning your state of health or your membership in trade unions or other data belonging to special categories, the legal basis is Article 9(2)(a) of the Regulation, since, “the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”. Pursuant to Article 17 of the Regulation, you may withdraw your consent at any time and in the same manner in which it was previously given. Withdrawal of consent does not affect the lawfulness of the processing put in place prior to the withdrawal of consent.

5. Method of processing
Your data will be processed by digital means and paper media, observing the rules on the protection of personal data provided for in the Regulation, including those relating to data security.

6. Categories of recipients of personal data
The data you provide may be processed by the Data Controller or by external recruitment and selection consultants duly appointed as data processors by the Data Controller for purposes strictly related to the execution and management of selection activities. It is also without prejudice to the Data Controller’s obligation to communicate the data to the Judicial Authority, whenever a specific request is made in this regard.
Your data may come to the attention of the Data Controller’s employees, in particular those in the HR, the Head of the office and/or department for which the application was proposed as well as the persons involved by them in the candidate selection process who have been duly authorized to carry out the aforementioned data processing activities by the Data Controller as persons in charge of such processing in compliance with the internal procedures for the management of personal data of candidates and interns.

7. Data Retention
The storage of your personal data will carried out, in accordance with Article 32 of the Regulations, in compliance with the security measures adopted by the Data Controller regarding data protection, and access to it will be allowed only to the personnel involved and duly authorized to process such data. Resume data will be kept for a period not exceeding 12 months.

8. Rights of the data subject
Pursuant to Articles 15 to 22 of the Regulation, you have the right to withdraw at any time the consent given without prejudice to the lawfulness of the processing carried out before the withdrawal, to obtain confirmation of the existence or non-existence of the personal data processing and to have access to the personal data, verify their accuracy or request their integration or update, or rectification; to request the erasure of personal data in the cases provided for by Art. 17 of the Regulation; to request the restriction of data processing in the cases provided for by Art. 18 of the Regulation, where technically possible; to obtain in a structured, commonly used and machine-readable format your personal data, in the cases provided for by Art. 20 of the Regulation; and to object to the processing in the cases provided for by Articles 21 and 22 of the Regulation.
You always have the right to file a complaint with Italian Personal Data Protection Authority, pursuant to Art. 77 of the Regulation, if you believe that the processing of the personal data is not compliant with law.

9. Nature of processing and obligatory nature of data provision

The provision of data is optional but necessary (including in execution of obligations arising from legal regulations) for recruitment activities aimed at the possible establishment of the contractual relationship. If the information is not provided, the Data Controller will not be able to consider your application.

Rev. 10/06/2024