PRIVACY POLICY FOR APPLICANTS
Last update March 2026
Fiume Santo S.p.A., with sole shareholder, with registered office in Fiume Santo, località Cabu Aspru snc, 07100 – Sassari, as the Data Controller (hereinafter, "Data Controller"), informs you - pursuant to Articles 13 and 14 of the EU Regulation 2016/679 (hereinafter, "GDPR") and the current national legislation on the protection of personal data - that your personal data will be processed with the following methods and for the following purposes:
- Object of the Processing
The Data Controller processes identifying and non-sensitive personal data (e.g. first name, surname, address, photograph, etc. – "Personal Data" or also "Data") together with health-related data, such as fitness for certain jobs and membership of protected categories, where necessary for the role for which you have applied, collected directly from you and freely provided by you, for the purposes of selection and/or during the job interview with the Data Controller.
- Purposes of the Processing
Your Personal Data are processed, without your prior express consent, for the following Purposes:
(i) the proper conduct of the recruitment process;
(ii) the compliance by the Data Controller with legal obligations.
(iii) the pursuit of a legitimate interest of the Data Controller, consisting in preventing or investigating any unlawful activities and exercising legal rights in court.
- Modalities of the Processing
The processing of Personal Data is carried out, both via hardcopy (paper) and electronic modalities, by means of the following processing operations: collection, registration, updating, organisation, storage, consultation, elaboration, amendment, selection, mining, confrontation, usage, interconnection, blockage, cancellation and destruction of Data.
- Data Storage
The Data Controller shall process the Personal Data for a duration that is necessary to fulfil the above purposes and anyway for no longer than 2 years from the collection.
- Provision of Data
The provision of data for service-related purposes is mandatory; Without such data, the Data Controller will be unable to initiate or carry out the recruitment process.
- Access to Data
Your Data may be made accessible to:
(i) employees and/or collaborators of the Data Controller (e.g. employees of the Procurement Department) and/or other EPH Group Companies, in light of their role of Persons in charge of the processing and/or internal Data Processors and/or system administrators;
(ii) third companies and/or other subjects (e.g. employment consultants, employers’ associations, etc.) carrying out outsourcing activities on behalf of the Data Controller, as external Data Processors.
- Data Communication
Without your express consent, the Data Controller may disclose your Personal Data to the following parties, who will process it as independent data controllers, where requested by them:
(i) Government departments
(ii) Local authorities (regions, counties, municipalities)
(iii) Regional and county tax commissions.
- Data Transfer
The Data will not be disclosed but may be transferred for the purposes set out above to countries outside the EU. To ensure an adequate level of protection for Personal Data, the transfer will take place in accordance with the European Commission’s approved adequacy decisions or following the Data Controller’s adoption of the Standard Contractual Clauses drawn up by the European Commission.
- Data Subject’s Rights
The Data Controller informs you that, as a data subject, you have the right to exercise your rights at any time (Articles 15–22 of the GDPR). In particular, you may request access to your data, request that it be corrected and, where applicable, erased or restricted, and object to its processing.
- Modalities of Exercise of Rights
You shall be able to exercise your rights anytime:
(i) by sending a registered letter with return receipt to the address of the Data Controller;
(ii) by sending an email DPCommittee@epproduzione.it
- Data Controller and Data Processor
The Data Controller is Fiume Santo S.p.A., with sole shareholder, with registered office in Fiume Santo, località Cabu Aspru snc, 07100 – Sassari. The updated list of Data Processors, Persons in charge of the processing and system administrators is kept at the office of the Data Controller.
The Data Controller
Fiume Santo S.p.A.