Information Notice on the Processing of Personal Data of Candidates
pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter "GDPR").
Aeroitalia S.p.A. (hereinafter also "Aeroitalia" or the "Company"), in its capacity as Data Controller, provides you with information regarding the use of your personal data.
This information notice is addressed to you as the "data subject" (the individual whose personal data is being processed), either as an applicant for employment positions at Aeroitalia or in the event of a spontaneous application via the Company's email addresses.
1. Data Controller
The Data Controller is Aeroitalia S.p.A., with registered office at Via Andrea Mantegna 8, 00054, Fiumicino (RM), Italy.
If the data subject wishes to contact the Data Controller to exercise the rights listed below, they may do so via the following email address: privacy@aeroitalia.com.
2. Purpose, methods, and legal basis of data processing
Aeroitalia S.p.A., as Data Controller, holds your data, normally provided directly by you and occasionally obtained from third parties. Specifically, the data includes:
- Identification and contact details: first name, last name, address, tax identification code, phone number, email;
- Educational background information;
- Professional background information.
Through your CV or subsequently, Aeroitalia may become aware of "special categories of personal data" (Art. 9 GDPR) concerning you, such as data relating to your state of health (e.g., belonging to protected categories), membership in a trade union or political party or movement, and membership in religious, philosophical associations or organizations, etc. Regarding the processing of such data, we remind you that your consent is not required by law if the processing is necessary to comply with specific obligations or tasks under employment law, legislation, regulations, EU rules, or collective agreements (including company agreements).
Additionally, any judicial data will be acquired in full compliance with the regulations pursuant to Article 10 GDPR and Article 2-octies of Legislative Decree 196/03 as amended, and only when strictly necessary for the position to be filled.
Your personal data is processed lawfully, fairly, and transparently, using computer, telematic, and manual tools, with logic strictly related to the purposes stated, in a way that ensures their security and always in compliance with legal provisions, for the following purposes:
To evaluate the suitability of your application for job positions open within the Company (execution of pre-contractual measures (art. 6.1.b GDPR)), as well as for purposes related or instrumental to recruitment and personnel selection activities.
Regarding this processing, providing your data is mandatory. Failure to provide such data, in whole or in part, may prevent the company from following through with personnel selection or properly fulfilling related obligations.
3. Categories of recipients of personal data or those who may become aware of them as Data Controllers/Processors/Authorized personnel
To carry out some activities related to processing your personal data, Aeroitalia uses trusted external companies or entities that operate as independent Data Controllers (e.g., Employment Agencies in the case of temporary employment) unless they have been appointed as "external processors" for their specific area of responsibility. These particularly include:
- External collaborators (e.g., consultancy firms or administrative service companies), such as those responsible for accounting and tax processing;
- Employment Agencies involved in personnel search and selection on behalf of the Company;
- Entities or Authorities to whom your personal data must be communicated pursuant to legal provisions or orders from authorities.
The list of subjects to whom data may be communicated is regularly updated and can be consulted by contacting the following email address: privacy@aeroitalia.com.
4. Exercise of rights by the data subject
You are informed that you may at any time exercise your rights concerning your data, within the limits and conditions set by Articles 13 and 15-22 of the EU Regulation. To exercise these rights, described below, please contact the Data Controller at the email address: privacy@aeroitalia.com. Your request will be addressed promptly, without undue delay, and within the timeframe set by the EU Regulation.
Specifically, the data subject has the right to:
- request access to personal data concerning them and information about their processing (right of access);
- request rectification, anonymization, or deletion of data under the conditions of Article 17 of the Regulation and compatible with other retention obligations (rights of erasure and rectification);
- withdraw previously provided consent (right of withdrawal);
- obtain restriction of processing under certain conditions specified in Article 18 GDPR (right to restriction);
- data portability, i.e., the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit this data to another Data Controller without hindrance (right to data portability);
Any rectification, deletion, or restriction of processing carried out at the data subject's request—unless impossible or involving disproportionate effort—will be communicated by the Data Controller to each recipient to whom the personal data has been disclosed. Upon request, the Data Controller will inform the data subject of these recipients.
Exercise of the right to object
The data subject has the right to object at any time to the processing of their personal data when such processing is carried out to pursue the legitimate interests of the Data Controller by submitting an objection to the DPO. The Data Controller will cease further processing of personal data unless demonstrating compelling legitimate grounds overriding the data subject's rights or for legal claims.
The data subject also has the right to lodge a complaint with the Data Protection Authority if they believe their rights have not been respected, following the procedures indicated on the official website www.garanteprivacy.it.
6. Transfer of personal data to third countries
No transfer of personal data to third countries is foreseen.
7. Data retention periods
Personal data processed by Aeroitalia will be used for the time necessary to achieve the purposes specified herein and retained for a period not exceeding 36 months (3 years) from the receipt of your application and/or interview. In case of a positive assessment and integration into the Company's structure, data will be retained for the duration of the employment or collaboration relationship. After the retention period, your data will be deleted or anonymized in accordance with legal requirements.