CANDIDATE NOTICE
Information on the processing of personal data
pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data (commonly referred to as the “GDPR”)
Piquadro S.p.A. (hereinafter “PQ”), parent company of the “Piquadro Group”, together with The Bridge S.p.A. (hereinafter “TB”) and Lancel Sogedi S.A. (hereinafter “LC”), in their capacity as Joint Controllers, consider privacy and the protection of personal data as fundamental, and invite their users and customers to carefully read this Notice which contains important information about the Data Processing (hereinafter referred to as “Notice”).
This Notice:
-
describes the processing of personal data related to recruiting activities, applications and job postings;
-
does not refer to the processing of candidates’ data after their hiring and during the employment relationship.
-
is also applicable to the completion of the application form available on the website https://www.piquadro.com (hereinafter: “Website”);
A) Identity and contact details of the Controller
Piquadro S.p.A
località Sassuriano, 246
Silla di Gaggio Montano (40041 - BO)
Tax Code and VAT no. 02554531208
Phone +39 0534.409001 – privacy@piquadro.com
B) Purpose of processing and legal basis
Your personal data will be processed without requiring your consent for the following purposes:
- Staff search and selection for current and future open positions,
- Recruitment and integration of corporate personnel,
- Filling vacancies and absences,
- Candidate profiling.
These processing activities are based on the following legal grounds:
- fulfilling a request of the data subject – lawfulness condition under Article 6, letter b) of the GDPR;
- pursuing a legitimate interest of the Controller – lawfulness condition under Article 6, letter f) of the GDPR – related to the recruitment and onboarding of new employees, evaluation and selection of applications, verification of employment requirements and/or the initiation of a collaboration, or making job offers consistent with the candidate’s professional profile.
Providing the data marked with an asterisk (*) in the online form for the purposes indicated above is mandatory and failure to provide such data and/or an explicit refusal to process them will make it impossible for the Controller to carry out the assessment and selection of the application.
C) Processing of special categories of data
In relation to the application, only common data will be collected; therefore, the candidate is not required to provide so-called special categories of data as defined by Article 9 of Regulation 2016/679 or health-related data. We ask you not to include special categories of data (i.e., those “revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of data concerning health or sex life or sexual orientation of the individual”).
An exception is made if such data must be known due to the nature of the employment relationship to be established, particularly with regard to the candidate’s potential inclusion in protected categories and any pre-employment medical examinations.
In such case, explicit consent will be requested for the processing of special categories of personal data for one or more specific purposes.
D) Categories of recipients of personal data communication
For the purposes outlined in the previous paragraph, the personal data you provide may be communicated or made accessible to:
- employees and collaborators of the Controller, in their capacity as authorized data processors (so-called “persons in charge of processing”);
- third parties carrying out outsourced activities on behalf of the Controller, as Data Processors, including:
- service providers for IT system and telecommunications network management, service providers for paper and/or digital document archiving, service providers for administrative and accounting activities;
- labor consultants, recruiting service providers.
- other legal entities within the national and international Piquadro Group [further information about the Group and its legal entities is available at www.piquadro.com].
The full and updated list of Data Processors can be obtained by submitting a written request to privacy@piquadro.com.
E) Storage and transfer of personal data abroad
The management and storage of personal data take place in the cloud and on servers located within the European Union, owned and/or available to the Controller and/or third-party companies duly appointed as Data Processors.
Transfer of data to non-EU countries only occurs within the scope of intra-group communications for needs strictly related to recruitment activities and in any case in compliance with Chapter V of the GDPR.
Your personal data will not be disseminated.
F) Retention period of personal data
Personal data are processed and stored for the time strictly necessary to achieve the purposes for which they were collected and are retained for a period of 5 years from the time the CV is submitted.
Personal data collected in relation to your application will be processed for the time necessary to achieve the above purposes.
If the candidate is not selected for the job position for which they applied, we may retain the data for a longer period, in order to evaluate the application for other suitable roles that may open in the future, and in any case for no longer than five (5) years from the date of the initial application.
After this retention period, the data will be destroyed or anonymized.
G) Exercisable rights
In accordance with Chapter III, Section I of the GDPR, you may exercise the rights listed therein and, in particular:
-
Right of access – Obtain confirmation as to whether or not personal data concerning you are being processed, and, if so, receive information regarding, in particular, the purposes of the processing, the categories of personal data concerned, the storage period, and the recipients to whom the data may be disclosed (Article 15, GDPR);
-
Right to rectification – Obtain without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete data (Article 16, GDPR);
-
Right to erasure – Obtain without undue delay the erasure of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR);
-
Right to restriction – Obtain the restriction of processing, in the cases provided for by the GDPR (Article 18, GDPR);
-
Right to data portability – Receive the personal data concerning you in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR);
-
Right to object – Object to the processing of your personal data, unless there are legitimate grounds for the Controller to continue the processing (Article 21, GDPR);
-
Right to lodge a complaint with the supervisory authority – Lodge a complaint with the Data Protection Authority at Piazza Venezia, 11 – 00187 Rome.
You may exercise these rights by simply sending a request via email to the Controller at privacy@piquadro.com.
Last update: 30 April 2025
