Below we provide you with some information that you need to bring to your attention in order to comply with the legal obligations contained in the Legislative Decree. 196/2003 and following. amendments (so-called “Privacy Code”), as well as to the obligations deriving from Italy's membership of the European Union law and, in particular, to the provisions contained in Regulation (EU) 2016/679 (so-called GDPR) as well as the related acts internal adaptation (Legislative Decree 101/2018).
 
Who is the Data Controller of personal data?
The Data Controller is Lighthouse HR Consulting S.r.l. (for brevity also “Lighthouse” and the “Company”), with registered office in Bresso (MI), in via Roma nr. 16, which carries out personnel research and selection activities on behalf of third-party client companies.

The contact details of Lighthouse HR Consulting S.r.l. are the following:
Telephone: +39 351 707 9188
E-mail: lighthouse@lighthousehr.it
PEC: lighthousehr@pec.it
 
For what purposes will my personal data be processed?
The processing of your personal data is carried out by Lighthouse HR Consulting S.r.l., exclusively for the purposes of recruitment and selection and therefore, more precisely, to proceed with verifying the conditions for hiring and/or starting a collaboration with third parties Lighthouse clients.
 
The data will not be used for purposes other than those described in this information, unless you are informed in advance and, where necessary, obtain your consent.
 
What is the legal basis for the processing?
Pursuant to art. 111 bis Legislative Decree. 196/2003, Lighthouse is authorized to process, in the manner and for the purposes set out in this information, the data contained in the curricula spontaneously transmitted to our Company.
For the data and information that you will provide during the cognitive interview and in the subsequent phases of the selection process, we specify that the processing of your data is necessary for the execution of the pre-contractual measures adopted at your request. As such, it is based on the legal basis contained in the art. 6 par. 1. lit. b) of the GDPR. 

What data will be processed?
Within the limits of the purposes and methods described in this information, the following categories of data may be processed:

• personal identification data (e.g. name, surname, date of birth, tax code, place of residence or domicile);

• data relating to the job position (by way of example and not limited to: unemployment status, type of job possibly held, qualification, job, level of classification, salary received, items possibly resulting from the salary schedules, etc...);

• telephone contacts and e-mail addresses;

• data relating to education and professional training (education qualifications, professional certifications, possession of a driving license, language skills, etc.).

 
You are not required to communicate data that can be classified as "special data" pursuant to articles. 26 and 27 of the Legislative Decree. 196/2003 and articles. 9 and 10 of the GDPR, i.e. those data that reveal "racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person , data relating to the health or sexual life or sexual orientation of the person", as well as those "relating to criminal convictions and crimes or connected to security measures".
 
An exception is made for those data that must be known by the employer due to the establishment of a working relationship, to allow the exercise of the rights of the employer and the worker himself (for example the possible belonging of the interested party to the "categories protected”), as well as to fulfill obligations regarding social security and protection and any other legal obligation imposed on the employer.
 
How will my data be processed and stored?
Only relevant personal data will be processed and limited to what is necessary in compliance with the purposes identified in this information.
The processing will be carried out in compliance with the principles of correctness, lawfulness and transparency provided for by the GDPR and in such a way as to guarantee adequate security of personal data, through technical-organizational measures aimed at preventing data loss, illicit or incorrect use and unauthorized access.
 
The data may be processed using paper, IT and/or telematic methods, also by persons specifically appointed and trained in processing pursuant to art. 29 of the GDPR.
Lighthouse may use third-party services for data storage (e.g. cloud services), while always respecting the principles of data minimization, storage limitation, accuracy and updating, integrity and confidentiality.

To whom will my data be communicated? Will they be widespread?
Your personal data will be communicated to well-defined subjects and, specifically, to the client companies that have appointed Lighthouse to start the selection process, for the sole purposes indicated in this information.
The same data may be communicated to subjects entitled to access it pursuant to legal provisions, regulations and regulations.
Your personal data will not be disclosed.
 
How long will my data be kept?
In compliance with the principles of relevance and limitation of purposes, pursuant to art. 5 GDPR, your personal data will be kept for the duration of the selection process and for one year from its completion for the purpose of notifying you of any further search and selection procedures for your professional profile.
 
Will my data be transferred abroad?
Personal data may be transferred to European Union countries within the scope of the purposes pursued. The transfer of personal data to non-EU countries is foreseen.
 
What are my rights?
At any time, the right may be exercised (pursuant to articles 15 to 22 of the GDPR) to:

1. obtain access to personal data;

2. obtain information about the purposes of the processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;

3. obtain the rectification and deletion of data;

4. obtain the limitation of processing;

5. obtain data portability (i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments);

6. revoke consent at any time, without prejudice to the lawfulness of the data processing already carried out and based on the consent given before the revocation;

7. lodge a complaint with the supervisory authority (Privacy Guarantor).

 
The aforementioned rights may be exercised with a written request sent to the certified email addresslighthousehr@pec.it or by registered mail with return receipt. to the postal address of Lighthouse HR Consulting S.r.l., in Bresso (MI), via Roma, 16.