Information on the processing of personal data of candidates for vacant positions at Ewiva S.r.l.


This Information Notice - given pursuant to Articles 13 and 14 of the EU Regulation 2016/679 ("GDPR") - explains how Ewiva S.r.l. handles personal data collected as a result of applying for vacant positions at the Company.


1. Personal Data Controller

EWIVA S.r.l., with registered office in Via Privata Grosio 10/4 Milan VAT no. 16223171006 - certified email (hereinafter "Ewiva" or the "Data Controller").


2. Processing Subject and Modes

As part of the process of collecting CVs during applications for vacant positions, the Data Controller may process - in addition to the so-called common identification and contact data (such as, for instance, name, surname, age, gender, place and date of birth, address, tax code, e-mail) - also information relating to the course of studies and/or any previous work experience, in which case, publicly accessible sources (e.g. LinkedIn) may be consulted or the Data Controller may turn to third party companies specialised in personnel recruitment and selection.

Only the data necessary to assess the profile should be included in the CV and not other information such as, for example, information relating to health status, religious beliefs or political opinions (so-called 'special categories of data').

The personal data collected are processed in compliance with the principles of lawfulness, correctness and transparency, as set out in Art. 5 GDPR, also with the aid of computerised and digital tools designed to store and manage the data themselves, and, in all cases, in such a way as to guarantee their security and protect the data subject’s utmost confidentiality.


3. Scope and legal basis of processing

Ewiva will process your Personal Data for the fulfilment of specific purposes and in the presence of an appropriate legal basis provided by the applicable data protection law. Specifically:


Legal basis

Participation in the selection process for the indicated role

Execution of pre-contractual measures taken at the request of the data subject

The provision of your Personal Data is necessary to achieve the purposes set out in the table above. Failure to do so will make it impossible for Ewiva to handle your application to the Company's vacant positions.


4. Recipients of Personal Data

For the pursuit of the purposes set out in paragraph 3 of this Policy, Ewiva may need to communicate your Personal Data to third parties in Italy and/or within the European Union, such as, but not limited to:

  1. employees and collaborators of Ewiva, specifically appointed as Authorised Persons for processing;
  2. to third-party companies or other entities carrying out certain activities in outsourcing on behalf of the Data Controller, in their capacity as data processors, as well as to their employees and collaborators specifically appointed as Authorised Data Processors for specific purposes such as, by way of example, the possible management of one or more stages of the selection process.


5. Period of retention of Personal Data

Personal Data will be kept for the time necessary to process the application and for 2 years after receipt of said application. After the aforementioned period, the information will be deleted, without prejudice to further storage thereof where necessary to fulfil specific legal obligations and/or for the handling of disputes, complaints and court actions.


6. Data Protection Officer

The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted by e-mail at


7. Rights of data subjects

In the cases provided for, you have the right to obtain from the Controller, access to your personal data; rectification; erasure, portability, objection or restriction of processing concerning said data (Articles 15 et seq.). GDPR). Any such request or report should be forwarded to the DPO at the above address.  Furthermore, should you consider that the processing has not been carried out in a manner that complies with the GDPR, you may lodge a complaint with the Personal Data Protection Authority via the procedures indicated on the relevant website.


8. Change to Information

This information may change over time. We therefore recommend that you check that the version you are referring to is the most up-to-date version possible, which will always be available on the Ewiva s.r.l. website.