Privacy Policy

Pursuant to articles 13 and 14 of the (EU) Regulation 2016/679 (hereinafter, the “Regulation”) Ghella S.p.A., with registered office in Via Pietro Borsieri 2/a – 00195 Rome, VAT number 00898971007, tax code and registration number to the Companies’ Register of Rome 00462220583, as data controller, hereby inform of the methods and purposes of the processing of your personal data. Please read this privacy policy carefully before providing us with any personal data concerning you. Please note that this privacy policy concerns the processing of personal data of candidates applying for a position with us, as well as, in the cases specified in this policy, the personal data of family members of the said subjects.


1. How have my personal data been obtained?

We collect your personal data directly from you when you spontaneously send us a curriculum vitae, when you apply for one of our job advertisements or when you have a job interview with us. In some cases, we may obtain your personal data (personal details, contact details, data relating to education and professional experience, sensitive data concerning health if you belong to a protected category, other data typically contained in curriculum vitae; photographs) from recruiting companies, to which you have given your consent to share your data with us, from members of our staff,from partner universities or through scouting activities on LinkedIn or other social networks or sites specialized in the encounter between supply and demand in the world of work. Finally, we may obtain some of your personal data from public lists and registers and professional registers, for example in the case where we have to check the professional competences and qualifications that you have declared.


2. For what purposes will my personal data be processed?

We will process your personal data for the following processing purposes:

    a. To pursue our legitimate interest in selecting our employees (Section 6, paragraph 1, letter f) of the Regulation)

We will process your personal data to pursue our legitimate interest in selecting and recruiting workers who have a professional profile suited to our needs and consistent with the job position indicated in the application.


    b. To fulfil legal obligations (Section 6, paragraph 1, letter c) of the Regulation)

In case you are asked to be interview for a job position, we will ask you to provide us with some personal data relating to any family relationship that you may have with employees or former employees of companies belonging to the Ghella group, as well as to the possible circumstance that you and/or one of your family members have held positions of public official or public service. We will process this information to fulfil the obligations set forth in our Organizational Model adopted pursuant to Legislative Decree 8th June 2001, n. 231 on the administrative liability of legal persons and companies.

    c. To fulfil legal obligations (Section 9, paragraph 2, letter b) of the Regulation)

If you belong to a protected category, we will process your personal data concerning your health in order to comply with legal obligations in this regard.

3.            Is the provision of data mandatory or optional?

The provision of personal data is required in order for you to apply for a job position with us. Failure to provide such data will impede your application for a job position within our company.

4.            How will my personal data be processed and how long will they be stored?

Your personal data will be processed using automated and non-automated tools. Specific security measures are put in place to prevent data loss, illicit or incorrect use and unauthorized access. Your data will be stored in our records for a maximum period of 3 years from the date on which we received your curriculum vitae or application, unless further data storage is necessary to formalize the employment relationship or allow you to perform your work in the event of a positive outcome of the selection.

5.            Who might have knowledge of my personal data?

Our employees and collaborators who are responsible for the selection of personnel can get to know your personal data. Furthermore, the following categories of subjects who/which, acting as data processor, provide us with services that are instrumental to the performance of our business, might have knowledge of your personal data: IT service providers; service providers for verifying the declared competences; external professionals and consultants; group companies that provide intra-group services.


6.            Will my personal data be disclosed to third parties?

Should a job position be opened at another company in the Ghella group, which is consistent with your profile, we may propose you to submit your application for this position. In this case, with your consent (Section 6, paragraph 1, let. a) of the Regulation), we will communicate your personal data to this Ghella group company for the purpose of personnel selection, based on your free and optional consent. If you do not provide your consent to the communication, you will not suffer any prejudicial consequences. You can revoke your consent at any time, without any consequence, in the manner indicated in the following paragraph 10.


7.            Will my Personal data be transferred outside the European Economic Area?

Generally, your personal data are processed within the European Economic Area. However, if your professional profile is in line with a job position open outside the European Economic Area, and, for the purpose of evaluating your resume, it is necessary to transfer your personal data outside the European Economic Area, even in Countries that do not offer adequate protection under the Regulation and in relation to which there are no adequacy decisions issued by the European Commission, such personal data may be transferred to these countries. In such case, the transfer will be carried out on the basis of the standard model clauses adopted by the European Commission with Decisions 2001/497/CE and 2004/915/CE, according to the provisions of Section 46.2(c) of the Regulation or, if you have provided your consent to the communication of your personal data to companies belonging to the Ghella group established outside the European Economic Area, on the basis of your consent. You have the right to obtain a copy of these standard clauses and to obtain information relating to the recipients or categories of recipients to whom the personal data have been or will be communicated, requesting it in the manner indicated in paragraph 10 below.


8.            What are my rights?

You have the right to exercise at any time, free of charge and without formalities the following rights as per sections from 15 to 22 of the Regulation: the right to request access to personal data (or the right to obtain from us the confirmation that data concerning you are being processed and, if so, to obtain the access to personal data, obtaining a copy themof, and the information referred to in Section 15 of the Regulation) and correction (i.e. the right to obtain the correction of inaccurate data concerning you or the integration of incomplete data) or the deletion of the same (meaning the right to obtain the erasure of data concerning you, in the events indicated in Section 17 of the Regulation) or the limitation of the processing related to you (meaning the right to obtain, in the cases indicated in section 18 of the Regulation, the marking of data retained with the aim of limiting their processing in the future), in addition to the right to data portability (i.e. the right, in the cases indicated in Section 20 of the Regulation, to receive from us, in a structured, commonly used and machine readable format the data concerning you, and to transmit it to another data controller without impediments). You also have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before revocation. We remind you that you always have the possibility to lodge a complaint with the Data Protection Authority ( or to the different Supervisory Authority of the Member State of the European Union in which you reside or work or in which the alleged violation has occurred.


9.            Does the Regulation also provide me with the right to object to the processing?

Yes, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, pursuant to Section 6, paragraph 1, letters e) (execution of a task carried out in the public interest or connected to the exercise of official authority) or f) (legitimate interest) of the Regulation, including profiling on the basis of these provisions.


10.         How can I contact you and exercise my rights?

Requests to exercise your rights, as indicated above, may be submitted via e-mail to the address or by mail to the address “Ghella S.p.A., Via Pietro Borsieri 2/a - 00195 Rome – to the attention of the Privacy Coordinator”.


Last update: July 2019