Dear Candidate,

this is to inform you, pursuant to articles 12 and 13 of the EU Regulation n. 2016/679 on the “Protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter “Regulation”), that, in the context of the Call powered by Fondazione Istituto Italiano di Tecnologia (hereinafter “IIT”), IIT process a set of personal data concerning you.

    1. Identity and contact details of the Data Controller
      The Data Controller is IIT, having its registered office in Genoa, Italy, Via Morego 30, tel: (+39) 010.71781, fax: (+39) 010.720321.
    1. Contact details of the DPO
      The Data Protection Officer is the Responsible of the Data Protection Department, Rödl&Partner, Milan - email:
    1. Purposes of the processing
      The processing of your personal data by IIT will be for the purpose of management of the selection activities.
      In particular, the processing of personal data may be performed for:
      1. Acquisition of data in the screening phase of your application;
      2. Evaluation of your curriculum;
      3. Performing interviews;Reference checks.
    1. Purposes in relation to special categories of personal data
      In regards to special categories of data, when present within the curriculum and/or acquired during the selection activities (such as, for example, data concerning health, data revealing racial or ethnic origin or trade union membership, etc.), in accordance with the provisions of art. 9 of the Regulation, they will be processed only if you give your explicit consent to the processing for the purposes related to the selection and pre-employment activities.
    1. Legal basis of the processing
      The legal basis of the processing is represented by:

      - the art. 6, let. b) of the Regulation

      Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
      - the art. 9 let. a) of the Regulation

      a) The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject.
    1. Methods of processing
      Your data will be processed both by computerized and paper based methods, observing the rules on the protection of personal data, including those relating to data safety.
    1. Categories of parties to whom personal data will be disclosed
      The personal data you provide will be also released to non-IIT scientists whom IIT has appointed as Evaluators under the Call and that this will be done only to the extent required by the selection procedures applied by IIT.
      It is understood, moreover, the obligation of IIT to release information to the Judicial Authority, whenever required.
    1. Retention of personal data
      The retention of your personal data will be carried out in compliance with security measures used by
      IIT with regard to the protection of data, and the access to these data will be allowed only to subjects involved and designated for their processing.
      Anyway your personal data will be kept until the limitation period of the rights deriving from the selection activities and in any case for a period not exceeding eighteen months (unless you renew the consent to the processing).
    1. Rights of data subjects
      You can exercise in every moment the rights of art. 13, letter b) and art. 15, 16, 17, 18 and 20 of the Regulation, addressing to Data Protection Officer, at the contact provided in point n. 2 of this information.

      In particular, as a data subject, you will require:
      1. The access to the personal data concerning you, according with the art. 15 of the Regulation;
      2. The rectification of inaccurate personal data concerning you, according with the art. 16 of the Regulation;
      3. The erasure of personal data concerning you (“right to be forgotten”), according with the art. 17 of the Regulation;
      4. The restriction of processing of data concerning you, according with art. 18 of the Regulation.

      We inform you, finally, that you will have the right to object in every moment, according with the art. 21 of the Regulation, if one of the situations described by the art. 6, paragraph 1, letters e) and f) of the same Regulation occurs.

    1. Consent and Withdrawal
      You can withdraw your consent at any time by contacting the Data Protection Officer.
    1. Complaint to the supervisor authority
      With regard to art. 77 of the Regulation, we remind you that you have the right to lodge a complaint to the supervisor authority if you think that the processing of your data is performed in violation of the provisions of the Regulation.
    1. Nature of the processing and obligatoriness of personal data conferment
      Many of the processed data are required to perform the obligations arising from legal requirements and to fulfil respective contractual obligations. In some cases, the lack of consent to the processing of personal data may make it impossible for IIT to continue the working relationship established.
    1. Existence of automated individual decision making in the processing
      It is specified that, for the processing of the data, there is NOT any kind of automated individual decision-making, according with the art. 22 of the Regulation.