INFORMATION ON PERSONAL DATA PROCESSING

JOB APPLICATIONS AND CV

ART. 13 EU REG. 2016/679

This privacy policy explains how we use the personal data of candidates for a job position.

1. Who is the Data Controller

The Data Controller is LG Service S.r.l. with registered office at (61023) Pietrarubbia (PU), Via Lago del Conte, 30, Tax Code/VAT 02773800418, Email info@lavorgommagroup.com PEC lg-servicesrl@pec.it

2. What data we collect

We process the data you enter in the form and CV, for example:

• identification and contact data (name, surname, email, phone, address);
• data relating to education, work experience, skills, qualifications, certifications;
• any data contained in attachments (CV, cover letter, portfolio, certificates).

Attention to "sensitive" data: the CV could also include special data (art. 9 GDPR), such as information on health, union membership, religious beliefs or other information not necessary for selection. We ask you not to include them, unless they are strictly relevant to the position or necessary for the fulfillment of obligations/rights regarding employment (e.g. targeted placement or fitness for work).

3. Why we process the data provided (Purpose)

Application management: receive the application, evaluate it, contact you, organize any interviews and manage the selection process.

4. Legal basis for processing

For application management and pre-employment phases: execution of pre-contractual measures taken at your request (art. 6, par. 1, lett. b GDPR). Based on art.111-bis of the privacy code, consent to the processing of personal data in CVs is not required, therefore we do not request it.

5. Is providing data mandatory?

Providing the data necessary to evaluate the application is necessary, if you do not provide it we will not be able to process your request.

Additional/non-pertinent data is optional and not recommended.

6. Who can see the data (recipients)

The data may be processed by:

• authorized internal staff (HR and functions involved in selection);
• suppliers who support the Controller as data processors (email providers, application management platforms, IT consultants), bound by contract pursuant to art. 28 GDPR;
• companies in our group;
• third parties only when necessary for legal obligations or protection of rights (e.g. Authorities).

7. Transfers outside the EU

There are no transfers outside the EU. If, for the technical management of email/platforms, some suppliers process data outside the European Economic Area, the transfer will take place in compliance with GDPR (e.g. adequacy decision or Standard Contractual Clauses and supplementary measures where necessary).

8. How long we keep them

If the selection is not successful: we keep the data for a maximum period of 24 months from the last interaction relating to the application, except for disputes or legal obligations.

If the selection is successful: the relevant data will be included in the employment relationship file and will be kept according to the times required by applicable regulations.

If you want the CV to remain "in the database" longer for future positions, we can provide separate consent and dedicated retention.

9. How we process them and security measures

We process data with IT and/or paper tools, adopting adequate technical and organizational measures (access control, credential management, backup, security logging, access limitation).

10. Automated decisions

The Controller does not adopt fully automated decision-making processes that produce legal effects or significantly affect the application (art. 22 GDPR), unless otherwise specifically indicated.

11. Rights of data subjects

We want to ensure that users are fully aware of their rights regarding the protection of personal data.

Data subjects have the right to obtain from the controller, in the cases provided:

access to their personal data, or to request copies of their personal data;

rectification, or correction of any information they believe to be inaccurate;

erasure of personal data.

restriction of processing in the cases indicated in art.18 GDPR;

to object to processing for marketing and profiling purposes;

For processing based on consent, users can revoke it at any time without prejudice to the lawfulness of processing based on consent before revocation.

The appropriate form is available at the following link https://www.garanteprivacy.it/home/modulistica-e-servizi-online, you can send it to the data controller at the following addresses:

Email info@lavorgommagroup.com

PEC lg-servicesrl@pec.it

12. Right to Lodge a Complaint

Data subjects who believe that the processing of their personal data through this site occurs in violation of the provisions of the Regulation, have the right to lodge a complaint with the Guarantor, as provided by art. 77 of the Regulation, or to resort to the appropriate courts (art. 79 of the Regulation).

To submit a complaint you can follow the instructions at the following link

https://www.garanteprivacy.it/home/modulistica-e-servizi-online

13. Changes to our privacy policy

Our company keeps its privacy policy under regular review and posts any updates on this web page.

Specific notices will be present on the Site pages in relation to particular services or processing of the Data provided.

Last updated 22.1.2026