Dear User,
The following information is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (hereinafter "Regulation"), with specific reference to the processing performed to receive and evaluate your job application. The processing activities will concern the personal data collected through the dedicated "Work with Us" section of the website (https://www.stafer.com/lavora-con-noi), provided directly by you by completing the appropriate fields or by submitting your CV in relation to a spontaneous application or in response to a job advertisement or collaboration. The processing described below may also be carried out with reference to applications received by submitting a CV in paper format to the company secretary, as well as to receipt of your application through other channels (e.g., job search platforms, professional social networks, etc.). The processing described below may also be carried out in cases where your data is communicated to the Company by employment agencies.
Data Controller
The Data Controller of personal data, for the purposes described below, is Stafer S.p.A., with registered office at Via Malpighi, 9 - 48018 Faenza (RA), Italy, Tel. +39 0546 624811, Fax +39 0546 623141 EU VAT No. IT00068620392, stafer@stafer.com
1. Purpose of processing
The purposes pursued are the following:
a) Recruitment and selection: for purposes related or instrumental to the evaluation of your application for the purposes of recruiting and selecting personnel and for the performance of so-called "recruitment" activities. Pre-employment activities such as, for example, analyzing CVs received, organizing individual interviews, and any other activity aimed at potentially entering into an employment contract. Providing your data for this purpose is optional, but failure to provide it or providing it incorrectly could make it impossible to evaluate and/or consider your application. The legal basis for the processing is the implementation of pre-contractual measures adopted at your request. Please note that any sensitive data (Article 9 of the Regulation) contained in your application will be processed in accordance with applicable regulations for specific and legitimate purposes, as well as to fulfill or require the fulfillment of specific legal obligations for the purpose of establishing the employment relationship (Article 9, paragraph 2, letter b) of the Regulation). The legal basis therefore lies in the need to fulfill the obligations and exercise the specific rights of the controller or the data subject in the field of employment and social security and social protection law, to the extent authorized by Union or Member State law or by a collective agreement pursuant to Member State law, providing appropriate safeguards for the fundamental rights and interests of the data subject.
b) Supplementing and verifying your application: with regard to the acquisition of public information regarding your professional profile through professional social networks, to verify that the data you provide correspond to what you have declared or to supplement it, limited to information of a professional nature only and taking all necessary measures to ensure the proper balancing of your interests, rights, and fundamental freedoms with our legitimate interest. The legal basis is the legitimate interest of the Data Controller (Article 6, paragraph 1, letter f) of the Regulation);
c) Request and verification of references: to obtain information regarding your professional references from previous employers. The legal basis is your consent (Article 6, paragraph 1, letter a) of the Regulation), acquired through the specific form at the bottom of this policy.
2. Data processed
Data provided voluntarily Personal data provided directly by you in the event of an application related to a job posting or in the event of a spontaneous application will be processed. Your data will also be processed if communicated by third parties such as employment agencies and other entities who, in accordance with the law, carry out, in their own interest or that of third parties, intermediation, research and selection of personnel, or support for professional relocation.
The personal data processed, by way of example and not limited to, refers to the following categories:
a) personal details (name, surname, date and place of birth), contact details and other contact information such as email address, telephone number, and residential address;
b) information contained in the CV, such as, for example, date and place of birth, previous and current work experience, educational qualifications, and photographs.
c) additional information and data provided voluntarily by you as deemed relevant to the assessment of your professional profile;
d) public information available online, in any case processed within the limits of Article 8 of the Workers' Statute and applicable legal obligations. In particular, in pursuing the purposes described, special categories of data pursuant to Article 9 of the Regulation may be processed, such as data revealing religious or philosophical beliefs, trade union membership, and/or data relating to your health if you belong to a protected category. We invite you to carefully evaluate the data provided, if it belongs to such special categories, communicating it only if you deem it essential for the selection process. In any case, if data is provided that is not relevant to the purpose, it will not be used. Data collected from public or publicly accessible sources As part of the selection and search for certain professional profiles, your data may be enriched and/or compared with additional information extracted from public or publicly accessible sources, within the limits established by law and in compliance with the fundamental principles of personal data protection. These sources, for example, may include your profiles on professional social networks (LinkedIn) if freely accessible, or public directories and registers.
3. Recipients and transfers
Your personal data will be disclosed to or shared with:
a) personnel of the company acting as Data Controller in relation to your application. These individuals are specifically appointed and authorized to carry out the purposes indicated above, have committed to confidentiality or have received an appropriate legal obligation of confidentiality;
b) third parties designated as Data Processors in accordance with applicable law, who are tasked with processing data on behalf of the company (for example, companies responsible for managing IT systems and services, providers of email platforms, providers of services for receiving online job applications, etc.);
c) parties acting as independent data controllers (professionals, public bodies, auditing or supervisory bodies), also in compliance with legal obligations;
d) upon request, to the competent financial offices or other public administrations in accordance with the provisions of current legislation. Your data is not intended for publication or dissemination. Some of your personal data may be shared with recipients in countries outside the European Union or the European Economic Area. In such cases, the transfer will take place in compliance with applicable legislation, adopting adequate transfer guarantees in compliance with the provisions of Chapter V of the Regulation.
4. Retention
The data will be processed for a period of 6 months, except in cases of interest related to your professional profile, for which retention periods may be extended up to a maximum of 12 months.
5. Rights of the Data Subject
You have the right to obtain, where applicable, access to your personal data and the rectification or erasure of such data, or the restriction of processing (Articles 15 et seq. of the Regulation). You have the right to object to the processing, for reasons related to your particular situation, for the pursuit of the purposes based on the legitimate interest of the Company. In particular, you have the right to object to the further processing of your data collected online. The appropriate request can be submitted by contacting the respective Data Controller at the contact details indicated in this Disclosure, preferably according to the instructions available on the website https://www.garanteprivacy.it/home/modulistica-eservizi-online#diritti
RIGHT TO COMPLAIN
Data subjects who believe that the processing of their personal data carried out through this website violates the Regulation have the right to lodge a complaint with the Data Protection Authority, as provided for by Article 15 of the Regulation. 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation).
Last updated: February 5, 2026
Date ________________
Legible name and surname _________________________________________________ Signature of acknowledgement _____________________________
STATEMENT OF CONSENT FOR PROFESSIONAL REFERENCES FROM PREVIOUS
EMPLOYERS
The undersigned, having read the information on the processing of personal data, is aware that his/her consent is optional and revocable at any time, in relation to the processing of his/her personal data to allow the Company to acquire information relating to professional references from his/her previous employers.
□ Consent
□ Do not consent
Here _________________________, on ____/____/______
Legible name and surname __________________________________________________ Signature _____________________________