provided pursuant to articles 13 and 14 EU Reg. 2016/679

Masi Agricola S.p.A, informs you that your personal data will be processed in compliance with the Regulation and in accordance with the following information.

1. Data Controller

The data controller is the company Masi Agricola S.p.A., represented by its pro tempore legal representative, P.IVA 03546810239 (hereinafter "Controller" or "Masi") with registered office at Via Monteleone, 26 – 37015, Sant'Ambrogio di Valpolicella (VR), Italy, Phone: 045 683 2511, reachable at the email address: privacy@masi.it in its capacity as operational head of the "Masi Group" companies, on which it plays a role in direction, coordination, and synergistic management, providing both direct (with its own structure and organization) and indirect (through selected suppliers) services. For this reason, Masi is to be considered the Data Controller under art. 4 of the GDPR for itself and on behalf of the other "Masi Group" companies listed at www.masi.it

2. Purpose of Processing

The processing may concern the following personal data: name and surname, date and place of birth, nationality, address, phone and mobile numbers, email address, and any other data on your CV (including photos). Your personal data may be transferred to the Controller by external partners, e.g., temp agencies and/or social networks (like LinkedIn); in these cases, the partner will act as an independent data controller. Please note that your CV might contain special categories of personal data (e.g., racial or ethnic origin, political views, religious or philosophical beliefs, trade union membership, genetic or biometric data, data concerning health or sexual orientation). The processing of this data doesn’t require your explicit consent according to art. 9, par. 2, letter b), e) and h) of the GDPR. However, applicants are advised not to communicate further data classified as special under art. 9 of the GDPR, not necessary for the evaluations of applications (e.g., protected categories). Otherwise, the Controller may process such data only following specific consent from the candidate, to be collected during the initial interview.

3. Data Security

Your data will be processed using both electronic and manual tools (paper-based documentation), protected by adequate security measures ensuring confidentiality and integrity. We may share your information with third parties referred to in paragraph 6 for the purposes indicated in this Notice. We require all third parties to adopt adequate technical and operational security measures to protect personal data, in line with EU data protection regulations.

4. Purposes and Legal Basis for Processing

We will process your personal data for:

a) purposes related to managing your application with our company and group companies (subsidiaries or affiliates). This may include entering your data into our databases, scheduling an interview to assess your application, collecting your personal data via questionnaires and/or requests (e.g., language skills or technical expertise). The legal basis for processing is necessary for the performance of a contract to which the data subject is party under art. 6, par. 1, letter b) GDPR.

b) compliance with legal obligations or to exercise rights established by labor law, social security, social protection law and for the establishment, exercise or defence of legal claims. Processing for these purposes does not require your consent under articles 6, par. 1, letter c) and 9, par. 2, letter b) and f) GDPR.

c) legitimate interest in sharing personal data within the companies belonging to the "Masi Group" for administrative and selection purposes. The legal basis for processing is a legitimate interest under art. 6, par. 1, letter f) GDPR.

d) for the establishment, exercise or defence of legal claims of Masi's rights. The legal basis for processing is the legitimate interest under art. 6, par. 1, letter f) GDPR

5. Data Collection

Providing data for the purposes mentioned in the previous paragraph is not mandatory. Still, failure to provide it will make it impossible to evaluate your application and/or establish a potential relationship with you.

6. Data Recipients

Data may be made accessible, brought to the attention of, or otherwise communicated to the following subjects:

- Companies of "Masi Group", employees and/or collaborators of any title of the Controller and/or companies of the group to which the Controller belongs (Data Processor).

7. Transfer of Data

Your data will not be transferred and processed outside the European Union. Your data will only be processed in states inside the European Union.

8. Data Retention

Period Personal data will be stored for 12 (twelve) months from online registration or your paper submission to the company.

9. Rights of the Data Subject

You have the right to:

- Obtain confirmation of whether or not your personal data is being processed;

- If processing is underway, access the personal data and related processing information and request a copy of the personal data;

- Obtain the rectification of inaccurate personal data and the integration of incomplete personal data;

- Obtain, if one of the conditions provided by art. 17 GDPR is met, the deletion of your personal data;

- Obtain, in the cases provided for by art. 18 GDPR, the limitation of processing;

- Withdraw consent at any time to the processing of data for the purposes requiring consent. (The withdrawal of consent does not affect the legality of the processing based on consent before the withdrawal);

- Receive your personal data in a structured, commonly used, and machine-readable format and request their transmission to another data controller, if technically feasible;

- Oppose the processing of your personal data, invoking a legitimate interest (or that of third parties), and there are elements related to a specific personal situation leading to oppose processing.

- Lodge a complaint with the Data Protection Authority if you believe your rights have been violated, following the procedures indicated on the Authority's website at: garanteprivacy.it.