CANDIDATES ONLINE SUBSCRIPTION

According to Article 13 of Regulation (EU) 2016/679 (hereinafter, the “GDPR”), we inform you that the personal data you provide for the purpose of your registration to the “Work with Us” section of the Company's web portal (hereinafter, the “Portal”), will be processed to enable you both to apply for a specific position and to submit a “spontaneous” application to any open position.

Please be advised that your application may in any case be considered for any available professional opportunity that we feel best matches your skills and experience, as better indicated in the general conditions of registration and use of the Portal.

DATA CONTROLLER

Tecnica Group S.p.A.

via Fante d’Italia, 56 31040 Giavera del Montello (TV), Italy, [email protected]

(“Tecnica” or “Company”).

DATA PROTECTION OFFICER (DPO)

The Data Protection Officer can be reached at the following e-mail address: [email protected]

PERSONAL DATA PROCESSED

The Company will process the data you provide within the Portal and within your curriculum vitae, in cover letters, etc., including:

- c.d. common data, such as, but not limited to, first name, last name, place and date of birth, residence, e-mail address and telephone contacts, educational qualification, work experience, credentials;

- c.d. special categories of data (formerly sensitive data), e.g. information likely to reveal your health status (such as belonging to protected categories).

Such data will be hereinafter referred to as “Data”.

DATA PROCESSING PURPOSES

1) The Data will be processed to enable you to register with the Portal, which allows you to apply for specific open positions and/or to be contacted again for future positions similar and/or suitable to your profile.

2) To verify that the Data correspond to the truth by making use of public information (including professional social network profiles). Processing is limited to information related to professional aptitude and profile carried out in the least intrusive manner possible, taking all necessary measures to ensure a proper balance between the employer's legitimate interest in monitoring the data subject and the data subject's fundamental rights and freedoms.

3) To ascertain, exercise and/or defend the Company’s rights in court.

LEGAL BASIS FOR PROCESSING DATA

In relation to the purpose of 1):

- the legal basis for the processing of common data is the performance of a contract to which you are a party (Art. 6(1)(b) GDPR);

- the legal basis for the processing of special categories of data is the need of the data Controller to carry out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law (Art. 9(2)(b) GDPR).

In relation to the purpose of 2): the legal basis for the processing is the legitimate interest of the data Controller (Art. 6(1)(f) GDPR).

In relation to the purpose of 3): the legal basis for processing special categories of data is to enable the Controller to establish, exercise or defend a right in court (Art. 9(2)(f) GDPR).

DATA RETENTION PERIOD

In relation to the purpose in 1), Data will be retained for 12 months after the last access to the Portal (e.g., logging in, updating data or CV).

In relation to the purpose in 2), Data will be retained for the duration of the selection activity with respect to the individual selection and for an additional 12 months with respect to future selections.

In relation to the purpose in 3), Data will be retained throughout the duration of the litigation, until the time limits for appeal actions are exhausted.

Once the aforementioned retention period has lapsed the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures.

DATA PROVISION

The Data provision is necessary for your registration on the Portal aimed at the search and selection activity; therefor, any refusal to provide it will not allow you to register on the Portal and consider your application.

DATA RECIPIENTS

The Data may be communicated to parties acting as independent data controllers, such as public authorities or professional firms, or processed, on behalf of the Company, by parties that provide services functional to the pursuit of the above purposes (e.g. IT services or personnel selection), designated as data processors pursuant to Article 28 of the GDPR.

In addition, the Data are processed by Company employees belonging to the corporate functions assigned to the pursuit of the above purposes, who have been expressly authorized to the processing and have received appropriate operating instructions.

PERSONAL DATA TRANSFERS OUTSIDE THE EU

Some data may be transferred with recipients located outside the European Economic Area. The Data Controller ensures that data processing by these recipients is done in compliance with the GDPR. Indeed, transfers may be based on an adequacy decision, standard contractual clauses approved by the European Commission, or another appropriate legal basis. More information is available from the Data Controller by writing to [email protected].

RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Company via e-mail sent to [email protected], data subject can ask at any time:

- for access to personal data (Art. 15 GDPR);

- the correction of personal data (Art. 16 GDPR);

- the erasure of personal data (Art. 17 GDPR);

- the restriction of processing (Art. 18 GDPR);

- to object to the processing in cases of legitimate interest of the Controller (Art. 21 GDPR);

- to receive the Data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit it to another controller without hindrance (“Right to Data portability”, Art. 20 GDPR).

Data subjects have the right to lodge a complaint to the competent Supervisory Authority, pursuant to Article 77 of the GDPR.