Processing of candidates’ personal data


Article 13 of EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data

Dear Candidate,

with this Information Notice (hereinafter “Information Notice”), prepared pursuant to Article 13 of the EU Regulation 2016/679 (hereinafter also the “Regulation”), SYNBALANCE S.R.L. (hereinafter also the “Company”), as “Data Controller”, wishes to provide clear and simple indications about the processing of personal data, a processing that will be based on the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality, with respect to the interested parties who apply for a job position in SYNBALANCE S.R.L. through the website hereinafter also the “Website”). It is understood that this Policy does not apply to other websites that may be consulted through external links.

In this regard, before communicating any personal data, the Data Controller invites you to read this Notice carefully, as it contains important information regarding the protection of personal data and the security measures taken to ensure their confidentiality in full compliance with the Regulations.

In this regard, we provide you with the following information:


The Data Controller is SYNBALANCE S.R.L., P.IVA IT03858410123, whose contact details are as follows::

  • Registered office: via Celeste Milani 24/26 Origgio (VA), 21040;
  • Operational headquarters: via Celeste Milani 24/26 Origgio (VA), 21040;
  • Telephone: 02 96799831;
  • E-mail address:;
  • PEC address:


The Data Controller in the course of the selection stages will collect the following data:

  • personal data, such as: personal information and related to one’s professional experience, organized in the form of a Curriculum Vitae.

The collection of the above personal data may take place:

  • by spontaneous submission to the Company by the Data Subject by mail, e-mail or by hand, or
  • by uploading the Curriculum Vitae to the dedicated page on the Company’s website. In this case, in addition to the uploading of the Curriculum Vitae you will also be asked to fill in some fields such as: “your e-mail”; “your first name”; “your last name”; “your address”; “city”; zip code”;
  • by responding to specific recruitment and selection advertisements posted on the Company’s social networks or third-party portals;
  • through the response to personnel search initiatives carried out independently by third-party companies. In this case, the data are collected by the Company from such third-party companies to which the Company reports its recruitment needs in advance.

Unless strictly necessary, we ask you not to provide information regarding special categories of personal data, such as: personal data revealing rational or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning a person’s health or sexual life or sexual orientation.

Otherwise, should you decide to provide them, we would like to point out that the processing of such data belonging to special categories of personal data will be carried out by the Data Controller only if necessary to pursue the purposes indicated below, in accordance with the “Prescriptions relating to the processing of special categories of data in labor relations” (Aut. Gen. no. 1/2016) and the provisions of the Regulations.

We also remind you that the optional, explicit and voluntary sending of documents, certificates, letters of reference and resumes through the site involves the subsequent acquisition of personal data. Sending such information may potentially result in, among other things, incidental processing by the Data Controller of personal data of third parties. In relation to this hypothesis, You stand as an autonomous data controller, assuming all legal obligations and responsibilities. In this sense, You undertake to indemnify and hold harmless the Controller against any dispute, claim, request for compensation for processing damage, etc., by third parties whose personal data have been processed through Your spontaneous submission in violation of the applicable data protection regulations.

With particular reference to the personal data of third parties provided by you and/or processed, you undertake to guarantee as of now, assuming all related responsibility, that this particular hypothesis of processing is based on a suitable legal basis under Article 6 of the Regulations that legitimizes the processing of the information in question.


The Data Controller may process personal data for the following purposes:

  • assessment of the consistency of your profile with respect to open job positions with the Controller and, in general, to make all appropriate assessments regarding the possibility of establishing an employment relationship between you and the Data Controller;
  • contact you at the contact details you have provided in order to manage the selection procedures

The processing of your personal data for the above purposes finds its legal basis in Article 6 (b) and (c) of the Regulations, pursuant to which:

  • processing is necessary for the performance of a contract to which the data subject is party or of pre-contractual measures (Art. 6, letter b);
  • the processing is necessary for compliance with a legal obligation to which the data controller is subject (Art. 6(c)).

With exclusive reference to the processing of personal data pertaining to special categories of data, the legal basis is Article 9(2)(b) of the Regulations within the limits provided by the “Prescriptions concerning the processing of special categories of data in labor relations” (Gen. Aut. no. 1/2016).

The provision of your personal data for these purposes is optional, but it should be noted that any failure to provide it.


Your personal data, including those belonging to special categories of data, may be shared with:

  • individuals acting as data processors and/or sub-processors, duly appointed;
  • persons authorized by the Data Controller to process personal data who have committed to confidentiality or have an appropriate legal obligation of confidentiality.

Outside of the aforementioned hypotheses, your data will not be communicated except to parties, entities or Authorities to which communication is obligatory under provisions of law or regulation.

Your data will not be transferred outside the European Economic Area.


Your personal data, including those belonging to special categories of data, will be kept for the above-mentioned purposes for a period of 12 months after their provision and may be used for future contacts and interviews. At the end of this period, your data will be permanently deleted or permanently anonymized.

Should the selection process be successful, your personal data will be processed by the Data Controller in the manner indicated in the Privacy Policy prepared for the Company’s employees.


You have the right to ask the Data Controller, at any time, for access to your personal data, their rectification or erasure or to object to their processing. You also have the right to request the restriction of processing in the cases provided for in Article 18 of the Regulations, as well as to obtain in a structured, commonly used and machine-readable format the data concerning you, in the cases provided for in Article 20 of the Regulations. Requests can be addressed to the e-mail address

In any case, you always have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei dati Personali), pursuant to Article 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.


This policy was published in February 2024 and is subject to change over time, including changes related to the possible enactment of new industry regulations, the updating or delivery of new services, or to intervening technological innovations.

Origgio, 22/02/2024