Candidates Privacy Notice

Pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter “GDPR”) and of the national legislation of reference, the Controller informs you that the personal data you have provided through the application will be processed in the manner and for the following purposes:


Sinergy Srl, with registered office in Massa, via Massa-Avenza 38B, 54100 (hereinafter the “Controller”, pursuant to art. 26 GDPR) whose open positions are published on the web site or in any case by which you can be hired, can be reached through the contacts indicated on the website The Data Protection Officer can be contacted at the e-mail address


The Controller will process your personal data (hereinafter also “data”) like identifiers, contact data, information relating to your current job position etc., collected through your application, the additional data contained in your CV and/or other information possibly uploaded or sent by you in the appropriate sections, as well as the data collected by filling in the Job Application, or that will be requested to You during the selection interviews, including: information on your current job position and on the salary received, which salary you expect to earn, any references you wish to communicate, the existence of any conflicts of interest faced in relation to the job position for which you have applied, as well as information on the position of public official you may have held in the last three years.

You are kindly requested not to provide special categories of personal/sensitive data, such as data suitable to reveal health status, racial and ethnic origin, religious beliefs, political opinions, sexual life, and judicial data. In case of provision of that kind of data, such data will be immediately removed, unless it concerns data necessary to the evaluation of the candidacy (for example belonging to protected categories on the placement of disabled people, in relation to which it is specified not to indicate any pathology but only to meet these requirements).


The Data Controller will process the personal data you have submitted solely for the purpose of personnel selection and recruiting.

The application and any related information are entirely voluntary and optional, but the failure to communicate the requested data will preclude the possibility of evaluating your Profile for the purpose of any recruitment.

Please note that it will not be possible to submit your application, send the CV and fill the Job Application in the absence of confirmation that you have read this information.

The legal basis of the aforementioned processing can be found in art. 6, par. 1, lett. b) GDPR, as the processing of personal data is necessary for the execution of a contractual or pre-contractual obligation which the data subject is part.

The legal basis can also be found in art. 6, par. 1, lett. f) GDPR, given that the collection of the above information is necessary for the pursuit of the legitimate interest of the Controller with reference to their organizational and operation needs, and for compliance with regulatory requirements. In fact, it is in the interest of the Controller that their employees work impartially, independently and in the absence of conflicts of interest.

Shall the data subject provide special categories of personal data strictly functional to the evaluation of the application, the legal basis can be found in art. 9, par. 2, lett. b) GDPR, given that the processing is necessary to fulfill the obligations and exercise the specific rights of the Controller or of the data subject himself in the field of labor law and social security or protection.


Your personal data will be processed by the Controller according to art. 5 GDPR and in compliance with the principles of lawfulness, fairness and transparency.

The processing of your personal data is carried out by means of the following operations: collection, registration, organization, structuring, profiling, conservation, consultation, adaptation or modification, use, communication, extraction, comparison, interconnection, limitation, cancellation and destruction of data. Your personal data will be processed both on paper and electronically.
Your personal data will be kept for a period of time strictly necessary to evaluate your candidacy for recruiting purposes, and for a period of time not exceeding 24 months from the collection, after which they will be eliminated both from the IT systems and from any paper archive, unless your express renewal of consent before the expiry of the 24 months, which will cause the terms to run again.

In any case, technical and organizational measure adequate to guarantee the security of personal data pursuant to the GDPR are adopted.


Your data will be communicated to subjects appointed Data Processor pursuant to art. 28 GDPR and to those designated Authorized Persons pursuant to art. 29 GDPR who have the need to process them to fulfil their roles and the functions entrusted to them. You may request the list of Data Processor by contacting the DPO at the email

In detail, your data may be communicated for the purposes referred to in point 3 to the following recipients:

– to the external entity that manages the online platform for the personnel recruitment and selection process;

– to the subjects who can be contacted for the purpose of verifying the truthfulness of the information you provide (for example, schools and universities, previous employers, etc.)

– to any third party involved in the selection of personnel and the establishment of the contractual relationship.

Your personal data may also be disclosed to public subjects, for the fulfillment of legal obligations or to satisfy requests from the judicial or public security authorities.