1. Identification and Contact Data of the Data Controller

The Data Controller of personal data is Omega3C S.r.l., with registered office at 46 Corso Magenta, 20123 Milan (MI), Italy, Tax Code and VAT No. IT07613840961 (hereinafter, "Omega3C"). For any requests related to the processing of your personal data and for more information on recipients, transfers, methods, and storage period of your data, you can send a communication by post to our office or by email to the address  privacy@omega3c.com

2. Type of Data Processed

We will process – both manually and automatically – only the data strictly necessary for the purposes indicated in paragraph 3 below. In any case, if the CV contains data not relevant to the purposes pursued, Omega3C will refrain from using such information.

In compliance with the above, Omega3C will process:

(a) Common personal data:

• Personal data contained in your CV and/or shared during any interviews (e.g., name and surname, age, date and place of birth, additional identifying data contained in identification documents, contact data such as telephone number and email address, postal address);
• Any profiles and indications prepared during the interview and/or assessments prepared by recruitment agencies and/or employment centres.

(b) Special Categories of Personal Data:

Unless required and necessary by labour law, we do not collect special categories of personal data (i.e., related to your ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as your genetic data, biometric data intended to uniquely identify you, data concerning health or sex life or sexual orientation) and we invite you not to provide such data and/or information from which they could be deduced. In particular, in compliance with the Provisions on the processing of special categories of data in employment relationships (gen. auth. no. 1/2016) – as amended following the entry into force of the GDPR – the processing of special categories of data will only take place where necessary to allow you to participate in the selection process and guarantee you the rights provided by law (pursuant to art. 6(1)(c) and art. 9(2)(b) GDPR). Otherwise, Omega3C will refrain from using the special categories of data possibly present in your CV.

3. Purposes and Legal Bases of Processing and Nature of Provision

Your data will be processed for the purposes and on the legal bases described below:

a) To carry out personnel selection activities, evaluate your professional profile, and manage all stages related to the selection (e.g., communications with the candidates, job interviews, etc.). Legal basis: your data will be processed as necessary for the execution of pre-contractual measures adopted upon your request (art. 6(1)(b) GDPR). This processing is necessary and the failure to provide your data will make it impossible to evaluate your application.

b) To contact you for potential job positions that may be of interest to you. Specifically, regardless of the outcome of the selection process, Omega3C will retain (i) your CV for 6 months from collection or, if later, from the conclusion of the selection process and (ii) a summary of your professional profile (e.g., contact details and main experiences/skills) for 12 months to contact you and request an updated CV if potentially suitable positions become available. Legal basis: the data will be processed as necessary for the legitimate interest of Omega3C (art. 6(1)(f) GDPR) to have a list of individuals potentially suitable for future job positions. You have the right to object to the processing at any time and if you exercise this right, Omega3C will delete your CV and/or your summary profile.

c) To comply with obligations established by laws, regulations, collective agreements, and generally applicable legislation. Legal basis: your personal data will be processed as necessary to comply with a legal obligation to which we are subject (art. 6(1)(c) GDPR). This processing is necessary and the failure to provide your data will make it impossible to comply with these legal obligations and to evaluate your application.

d) To ascertain, exercise, or defend a right of Omega3C and/or its employees, including in court or before an authority, and where necessary, to carry out extraordinary operations related to Omega3C (including mergers, acquisitions, sales, corporate reorganizations, corporate restructurings) within the strictly necessary limits to pursue these purposes. Legal basis: the data will be processed as necessary for the legitimate interest of Omega3C or third parties (art. 6(1)(f) GDPR) to protect their interests and legal position, including economic freedom. The failure to provide the data will make it impossible to evaluate your application. You have the right to object to the processing at any time.

4. Recipients of Personal Data

In the context of data processing for the purposes of paragraph 3, your data may be processed by third parties belonging to the following categories:

• Authorized Omega3C personnel who are given specific instructions for processing;
• Recruitment agencies, third parties performing activities related or instrumental to Omega3C's activity (e.g., suppliers entrusted with the maintenance and development of IT systems, consultants and/or companies managing the mailing list service on behalf of Omega3C, performing activities functional to the hiring process), as well as legal and/or tax advisors, and/or companies involved in possible mergers, demergers, or other extraordinary operations, public administrations, and competent authorities.

These entities will operate, depending on the case, as data processors or autonomous data controllers.

5. Transfer of Data Outside the European Economic Area

If necessary to achieve the purposes indicated in paragraph 3, your data may be transferred outside the European Economic Area ("EEA") in compliance with the Applicable Legislation and, in particular, with the safeguards provided by the GDPR (e.g., standard contractual clauses and, where necessary, adoption of technical, organizational, and/or contractual measures) suitable to ensure an adequate level of data protection and, in any case, essentially equivalent to that guaranteed within the EEA.

6. Methods of Processing and Retention Period

Your data will be processed and stored in our archives for the period necessary to achieve the above-described purposes, including the conclusion of the selection process. In particular, Omega3C has identified a legitimate interest in retaining: (i) your CV for 6 months from the date of collection or, if later, from the closure of the selection process you participated in, (ii) your summary profile (e.g., personal details, job position sought, email address, or other contact details) for an additional 12 months unless you object to the processing of your data and it is not necessary to retain them longer to comply with a legal obligation, an authority's order, or to defend our right. After these 18 months, you will receive an email asking if you are interested in updating and/or retaining your CV in our archives for an additional 12 months. In the absence of your response or update, your data will be deleted or anonymized.

Should a working relationship be established with you, your data will be further processed for that purpose as per a separate notice that will be provided at the time of establishing such a relationship.

7. Your Rights

You can exercise your rights at any time under Articles 15 et seq. of the GDPR, including the right:

a) To obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed and, if so, to access your personal data;

b) To obtain without delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data;

c) To obtain, where applicable, the erasure of your data;

d) To obtain the restriction of processing where possible;

e) To request the portability of the data provided to Omega3C, that is to receive them in a structured, commonly used, and machine-readable format and to transmit such data to another controller without any hindrance from Omega3C itself in all cases where this is required by law;

f) To object to the processing of your data if it is carried out pursuant to art. 6(1)(f) GDPR unless there are compelling legitimate grounds for the Data Controller to proceed with the processing that overrides your interests, rights, and freedoms, or for the establishment, exercise, or defence of a legal claim;

g) To lodge a complaint with the competent data protection authority and/or seek judicial remedy. For Italy, the competent authority is the Garante per la Protezione dei Dati Personali, which can be contacted by following the procedures and instructions published on its official website (www.garanteprivacy.it).

The above rights can be exercised at any time by sending an email to privacy@omega3c.com or by written communication to Omega3C S.r.l., C.so Magenta 46, 20123 Milano.

8. Changes and Updates to the Notice

Considering future changes that may occur to the Applicable Legislation, this notice may undergo modifications and integrations over time. Where possible, we will endeavour to inform you promptly of the changes made and their consequences.

This version is from March 2024.