Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR), SIINFO srl informs you that the personal data provided via the “Contact Us” form on the website will be processed in compliance with current legislation on the protection of personal data.

1. Data Controller

The Data Controller is SIINFO srl (hereinafter referred to as the Controller for brevity), with:

• Registered Office: Via di Corte, 68 – 01036 Nepi (VT)
• Operational Headquarters: Viale Marco Polo 117/A – 00154 Rome (RM)
• Website: https://www.siinfo.eu
• Certified Email: siinfo@pec.it
• Contact address for personal data protection issues: privacy@siinfo.eu

2. Purpose and Legal Basis of Processing

The personal data provided by candidates, by submitting their CV in paper or electronic format, will be processed exclusively for purposes related to the evaluation of their professional profile and personnel selection. The processing is based on Art. 6, paragraph 1, letter b) of the GDPR, as it is necessary for the implementation of pre-contractual measures taken at the request of the data subject. For any sensitive data (e.g., membership of protected categories), the processing will be carried out pursuant to Art. 9, paragraph 2, letter b) of the GDPR. The data may also be processed for internal statistical analyses, performed in aggregate form or in a manner that does not allow direct identification of the data subject, in order to improve the services offered pursuant to Art. 6, paragraph 1, letter f) of the GDPR (legitimate interest of the Data Controller in improving its services, while respecting the fundamental rights and freedoms of data subjects).

3. Processing Methods

The processing will be carried out using computerized and/or paper-based tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimization. The data may be collected, recorded, organized, structured, stored, adapted/modified, retrieved, consulted, used, disclosed by transmission, compared/interconnected, as well as any other operation necessary for the pursuit of the aforementioned purposes.

4. Data Recipients

The data may be shared with the Data Controller’s partner suppliers and/or collaborators who support the website’s operation and any requested services, appointed as data processors pursuant to Art. 28 GDPR.

5. Transfer of Data Abroad

Personal data may be transferred to third countries, particularly the United States or other non-EU countries, in connection with the use of the Zoho Mail email service, whose servers are located in those countries. The transfer will take place in compliance with Articles 44 et seq. of the GDPR, through the adoption of Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional measures where necessary, to ensure an adequate level of personal data protection.

6. Data Retention

The data will be retained for a maximum period of 24 months from receipt of the CV, unless otherwise required by law or requested by the interested party. 7. Data Provision The provision of data is optional, but failure to provide it will make it impossible to evaluate the application. 8. Rights of the interested party The interested party has the right to: • access their personal data; • request rectification or erasure; • object to processing or request restriction of processing; • lodge a complaint with the Italian Data Protection Authority. 9. Exercise of Rights To exercise their rights, the interested party may write to the following email address: privacy@siinfo.eu 10. Complaints The interested party has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

7. Purpose and Legal Basis of Processing

Personal data (name, email address, telephone number) will be processed for the following purposes:

• Management of contact requests sent via the website and provision of responses to questions or requests for information;

• Processing of internal statistical analyses, performed in aggregate form or in any case in a manner that does not allow direct identification of the data subject, in order to improve the services offered.

The legal basis for processing is:

• for managing requests: art. 6, paragraph 1, letter b) of the GDPR (execution of pre-contractual measures at the data subject’s request);

• for statistical analysis: Art. 6, paragraph 1, letter f) of the GDPR (legitimate interest of the Data Controller in improving its services, while respecting the fundamental rights and freedoms of data subjects).

8. Processing methods

The processing will be carried out using computerized and/or paper-based tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimization. Data may be collected, recorded, organized, structured, stored, adapted/modified, retrieved, consulted, used, disclosed by transmission, compared/interconnected, as well as any other operation necessary for the pursuit of the aforementioned purposes.

9. Data recipients

The data will not be disclosed outside the EU. It may be disclosed to partner suppliers and/or collaborators of the Data Controller who support the operation of the website and any requested services, appointed as data processors pursuant to art. 28 GDPR.

10. Transfer of data abroad

Personal data may be transferred to third countries, particularly the United States or other non-EU countries, in connection with the use of the Zoho Mail email service, whose servers are located in those countries.

The transfer will take place in compliance with Articles 44 et seq. of the GDPR, through the adoption of Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional measures where necessary, to ensure an adequate level of personal data protection.

11. Data Retention

The data will be retained for the time necessary to process the request and in any case no longer than 12 months from receipt, unless otherwise required by law.

12. Rights of the Data Subject

The data subject has the right to:

• access their personal data;
• request rectification or erasure;
• object to processing or request restriction of processing;
• lodge a complaint with the Italian Data Protection Authority

13. How to exercise your rights

To exercise your rights, you may write to the following email address: privacy@siinfo.eu

14. Complaints

The interested party has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)