In compliance with the provisions of D.Lgs 196/03, as amended, and of Regulation (EU) 2016/679 of the European Parliament and Council (hereinafter also “General Data Protection Regulation” or “GDPR”), Stefano Boeri Architetti S.r.l., with registered office at Via Donizetti 4 – 20122 Milano, VAT Registration No. 07526210963, acting in its capacity as Data Controller, informs you of the procedures and purposes of the processing of your personal data.

1. Data collection

The CV received by Stefano Boeri Architetti S.r.l. can be sent either by the job candidates directly, through the specific section of the website www.stefanoboeriarchitetti.net, or transmitted by recruiting companies engaged by Stefano Boeri Architetti S.r.l. for research and selection of personnel.

2. Data which are subject to the Processing

Stefano Boeri Architetti S.r.l. only collects the following “common” personal data of the data subjects who send their curricula vitae: name, surname, address, telephone number, e-mail, professional experience details, and any photo and invites candidates not to communicate their personal data which may be categorised as “special” pursuant to Articles 9 et seq. of European Regulation 2016/679.

If in the CV sent to Stefano Boeri Architetti S.r.l. are contained special data such as, for example, data that could reveal the ethnic origin of the subject or that person’s health (i.e. personal data referring to membership in one of the protected categories), Stefano Boeri Architetti S.r.l. shall process exclusively those data which are relevant to evaluation of the candidate’s professional qualification, and within the limits for which the acquisition of that information is strictly necessary to establish the employment relationship and provided that, with reference to the processing of such data, the candidate has given explicit consent.

3. Legal basis and purpose of processing

The above-mentioned Common and Special Data shall be processed for the selection and evaluation of personnel for a possible working relationship or collaboration with Stefano Boeri Architetti S.r.l..

The legal bases of the processing for the aforementioned purpose are the execution of pre-contractual measures (art. 6, paragraph 1, letter b) of the GDPR), and the explicit consent to the processing of data belonging to particular categories (art. 9, paragraph 2, letter a) of the GDPR).

The provision of your personal data for the aforementioned purpose is optional, but failing that it will not be possible to correctly evaluate your professional qualities.

Please note that it is not strictly necessary to provide particular categories of data. However, should you decide to provide them, you are required to issue a specific consent in compliance with the current legislation on the protection of personal data, in the absence of which, such data cannot be considered for the purposes of your candidacy.

4. Processing procedures

Your personal data shall be processed both manually and with the aid of information technology tools, while protecting the security and confidentiality of the data themselves. That processing shall be performed exclusively by the staff members of the Office assigned to process the data and on specific instruction by the Controller.

5. Duration of the processing

The processing shall not last longer than 12 months from the collection date, after which personal data shall be deleted. Before this period, they shall be deleted on your specific request.

The Controller reserves the right to destroy the curricula or any document containing personal data found to be not in compliance with the purposes indicated in Article 3 hereinabove.

6. Distribution of the data

The personal data transmitted by the interested candidates shall not be distributed.

7. Transfer of the data

The personal data transmitted by the interested candidates shall not be transferred to other persons or entities and shall be kept on servers owned by Stefano Boeri Architetti S.r.l., located in Milan and within the European Union. Regardless, it is agreed that the Controller may also move the servers within or even outside the European Union if necessary. In that case, the Controller hereby assures that the data shall be transferred outside the European Union in compliance with the provisions of applicable laws, after stipulating the standard contractual clauses required by the European Commission.

8. Nature of the provision of data and consequences of failure to provide them

Provision of the data and issuance of the consent to processing for the processing indicated at Article 3 hereinabove are absolutely necessary to accomplish the purposes described hereinabove. Failure to provide the data will render it impossible for Stefano Boeri Architetti S.r.l. to consider the candidate in any staff recruitment and evaluation process.

9. Data subject’s rights

In connection with the purposes of processing, you may exercise the rights envisaged in Articles 15 et seq. GDPR, and in particular the right to:

• access, or to obtain confirmation whether or not information concerning you exists, to know their origin, and the logic and purposes on which the processing is based, the recipients or categories of recipients to whom the data may be transmitted, and determination of the data retention period, if that can be defined;
• correction of inexact data;
• deletion (“right to be forgotten”), when the data are no longer necessary for the purposes of the data collection, or when the data subject has revoked his/her consent to the processing (when that consent is envisaged as optional or when there are no legal grounds for the processing);
• limitation, the right to have the Controller limit access to the personal data by all those parties who have a service agreement or employment agreement with the Controller. In all cases, the Controller guarantees access to his or her special category and judicial personal data to a restricted number of persons to guarantee the security, integrity, and accuracy of those data;
• portability, the right to receive the personal data concerning the data subject in a structured and commonly used format that can be read by an automated device, with the possibility of transmitting them to another Controller. This right shall not apply to non-automated processing (e.g. archives or paper records). Moreover, only the data that are processed with the data subject’s consent may be processed, and only if the data have been provided by the data subject himself or herself;
• opposition, i.e. the right to oppose processing for reasons connected with your own particular situation;
• complaint, to be sent to the personal data protection authority: Garante per la Protezione dei dati personali, Piazza di Monte Citorio n. 121 – 00186 Roma ([email protected]; telephone + 39 06 69677.1; fax + 39 06 69677.3785).

Moreover, pursuant to Article 7, paragraph 3, GDPR, you are granted the right to revoke your consent at any time. The revocation of consent does not prejudice the legality of the processing based on your consent before revocation.

10. Procedure for exercising rights

The data subject may exercise his or her rights at any time, as provided at clause 9 hereinabove, by sending:

– a certified letter with return receipt to Stefano Boeri Architetti S.r.l., Via Donizetti 4 – 20122 Milano, VAT Registration No. 07526210963

– an e-mail to [email protected].

11. Controller, data processors, and persons in charge of the processing

The Controller is Stefano Boeri Architetti S.r.l. with registered office at Via Donizetti 4 – 20122 Milano, VAT Registration No. 07526210963.

The updated list of categories of data processors and persons in charge of the processing is kept at the registered office of the Controller.