Applicant privacy notice
This notice is provided under Article 13 of Regulation (EU) 2016/679 (GDPR) to anyone who submits an application through the “Careers” form.
1. Data controller
Verde Rana S.r.l., Via Carlo Forlanini 34/36/38, 50019 Sesto Fiorentino (FI), Italy — Tax ID / VAT no. 05586830480 — REA FI-558451.
Contact: ufficio@verderana.it · curriculum@verderana.it · tel. +39 055 720054.
2. What data we process
First name, last name, email address, phone number (optional), message and CV, together with the data it contains (for example education, work experience, contact details and any photograph). Please do not include data that is not relevant to your application, in particular data on health, opinions or affiliations, unless strictly necessary.
To prevent repeated submissions in quick succession, the website also uses a non-reversible code derived from your IP address.
3. Why we process it and on what basis
- To assess your application and, if your profile is of interest, to contact you, including by phone: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- To keep your CV for possible future selections, for the period stated below: the controller’s legitimate interest (Art. 6(1)(f) GDPR); you may object at any time.
- To protect the form from abuse (automated or repeated submissions): the controller’s legitimate interest (Art. 6(1)(f) GDPR).
- Special categories of data that your CV may contain: processed only if you included them voluntarily and to the extent necessary for the assessment; legal basis: explicit consent given by submitting the form (Art. 9(2)(a) GDPR).
4. How the data is handled
The form sends the data to the curriculum@verderana.it mailbox over an encrypted connection. The website does not store CVs: the temporary file received by the server is deleted once sending is complete. Your CV is downloaded and reviewed by authorised staff of the relevant Verde Rana department who, if your profile is of interest, may contact you by phone.
5. Who receives the data
Only authorised Verde Rana staff and technical service providers (hosting and email), appointed as data processors where required by Art. 28 GDPR. Data is not disseminated and is not transferred to third countries.
6. How long we keep it
For as long as needed to assess your application and, if no contact follows, for a maximum of 12 months from receipt; it is then deleted. If your application leads to employment, the data becomes part of your employment file under the relevant notice. You may ask for erasure at any time.
7. Nature of the provision of data
Providing data is optional, but without the data requested by the form we cannot assess your application.
8. Your rights
You may request access to your data, rectification, erasure or restriction of processing, object to processing and, where applicable, obtain data portability (Arts. 15–22 GDPR); you may also withdraw any consent given, without affecting processing already carried out. Write to curriculum@verderana.it. You have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your country of residence.
9. Automated decisions
No profiling and no decision based solely on automated processing is carried out.