Pursuant to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data (“GDPR”), Max Application S.r.l. (hereinafter the “Company” or the “Controller”) provides candidates with information regarding the processing of personal data (“Personal Data” or “Data”) collected during the recruitment and selection process. This process may include spontaneous applications or applications submitted in response to job postings published by the Controller, including postings on third-party platforms (e.g., LinkedIn, recruiting portals, specialized websites).

The Data Controller is Max Application S.r.l., with registered office at Via Bertodano 11, 13900 Biella (BI), Italy.

For any communication regarding the processing of personal data and for exercising the rights granted by the GDPR, you may write to the following PEC address: mailto:gdpr.maxapplication@pec.it.

You may also contact the Data Protection Officer (DPO) at: dpo@maxapplication.it

Personal Data provided by candidates will be processed for the following purposes:

• Management of the application: evaluation of the professional profile, organization of interviews and execution of pre-contractual measures (Art. 6(1)(b) GDPR).
• Verification of legal and professional requirements: checks on educational qualifications, certifications or licenses when required for the position (Art. 6(1)(c) GDPR).
• Potential retention for future recruitment processes: only with the candidate’s explicit consent (Art. 6(1)(a) GDPR).

• Identification and contact details (name, surname, e-mail address, phone number, LinkedIn profile).
• Information included in the CV (education, work experience, skills, references).
• Any special categories of data under Art. 9 GDPR (e.g., health-related information or status as a protected category), processed only when strictly necessary and within the limits allowed by law, based on Art. 9(2)(b) GDPR, solely for the purpose of complying with obligations and exercising rights in the field of employment law or establishing employment relationships with protected categories.

Personal Data may be processed using electronic or automated tools employing technical and organizational measures suitable to ensure security and confidentiality. Processing may include any operation necessary to manage the recruitment process.

Data may be communicated to:

• external companies or consultants supporting the recruitment process, appointed as Data Processors under Art. 28 GDPR;
• public authorities or bodies, where required by law.

Personal data will not be disclosed.

Data will be retained for the duration of the ongoing recruitment process and, in any case, no longer than 1 year from receipt of the application.

Pursuant to Articles 15–22 GDPR, the data subject has the right to:

• access their personal data;
• request rectification or updating;
• request erasure or restriction of processing;
• object to processing in the cases provided for;
• obtain data portability, where applicable;
• withdraw consent given, without affecting the lawfulness of processing based on consent before its withdrawal.

Requests may be submitted to gdpr.maxapplication@pec.it.

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): www.garanteprivacy.it