Candidate Privacy Policy

1. Data Controller

The Data Controller is TREND S.p.A., with registered office at Piazzale Fraccon, 8, 36100 Vicenza, Italy, reachable at the following e-mail address: [email protected].

2. Purposes of processing

Personal data transmitted through the “Work with us” section of the website are processed by TREND S.p.A. for the following purposes:

a) receipt and management of the application;

b) evaluation of the candidate’s professional profile;

c) organization and conduct of introductory and selection interviews;

d) possible inclusion of the candidate in selection processes relating to open or future positions consistent with their professional profile;

e) fulfillment of obligations provided for by applicable legislation;

f) possible establishment, exercise, or defense of a legal claim by the Controller.

3. Categories of data processed

TREND S.p.A. may process personal data contained in the application and attached documents, such as, by way of example: personal details, contact details, data relating to educational background, professional qualifications, work experience, and any other information included by the candidate in the curriculum vitae or transmitted documentation.

The candidate is requested not to include data belonging to special categories pursuant to Art. 9 of Regulation (EU) 2016/679 in their CV, unless strictly necessary and permitted by current legislation.

4. Legal basis for processing

The processing of the candidate’s personal data is based on the following legal grounds:

• Art. 6, par. 1, lett. b), GDPR: execution of pre-contractual measures taken at the request of the data subject, with reference to the management and evaluation of the application;
• Art. 6, par. 1, lett. c), GDPR: fulfillment of legal obligations to which the Controller is subject;
• Art. 6, par. 1, lett. f), GDPR: pursuit of the legitimate interest of the Controller in the correct organization of personnel selection activities and the retention of the CV for future professional opportunities compatible with the candidate’s profile;
• Where the candidate communicates data belonging to special categories, such data will be processed exclusively in cases permitted by law and, where applicable, pursuant to Art. 9, par. 2, lett. b), GDPR.

5. Nature of data provision

Providing data is optional. However, failure to provide the data necessary to evaluate the application may make it impossible to examine the application and proceed with the selection process.

6. Processing methods

Data processing is carried out using paper and electronic tools, in compliance with the principles of lawfulness, fairness, transparency, minimization, accuracy, integrity, and confidentiality, adopting technical and organizational measures adequate to guarantee the security of personal data.

7. Recipients of personal data

Personal data may be processed by subjects authorized by the Controller and, within the limits of the purposes indicated above, communicated to:

• Internal personnel in charge of selection and administration activities;
• Consultants and service providers supporting TREND S.p.A. in the management of IT systems, recruiting platforms, or selection activities, duly appointed as Data Processors where necessary;
• Subjects, entities, or authorities to whom communication is mandatory by law or by order of the authority;
• Any group companies, if involved in the selection process, within strictly relevant limits.

Personal data will not be disseminated.

8. Data transfer to third countries

As a rule, personal data are processed within the European Economic Area (EEA).

Should it become necessary to transfer data to third countries or international organizations for organizational needs or the use of IT suppliers/infrastructure, such transfer will take place in compliance with the conditions set out in Chapter V of Regulation (EU) 2016/679 (adequacy decisions or appropriate safeguards).

9. Data retention period

Personal data contained in curricula vitae and application documentation will be kept for a period not exceeding 12 months from the date of receipt of the application or, if later, from the date of the last update spontaneously communicated by the candidate.

After this period, the data will be deleted or anonymized, unless further storage is necessary to fulfill legal obligations or for the establishment, exercise, or defense of a legal claim.

10. Rights of the data subject

The data subject may exercise, in the cases provided for by Art. 15 et seq. of Regulation (EU) 2016/679, the following rights: access to personal data, rectification, erasure, restriction of processing, objection to processing, as well as the right to data portability where applicable.

To exercise these rights, the candidate may contact the Controller at the following e-mail address: [email protected].

11. Right to lodge a complaint with the Supervisory Authority

The data subject has the right to lodge a complaint with the Data Protection Authority if they believe that the processing of their personal data violates applicable legislation.

12. Automated decision-making processes

Personal data are not subject to fully automated decision-making processes, including profiling, which produce legal effects or similarly significantly affect the data subject, unless otherwise informed in advance.