Privacy notice for candidates

Who processes your data

Data controller: Abinsula s.r.l..
Data protection contact: career@abinsula.com.

What data

The CV you send us and the information it contains: personal and contact details, education, work experience, technical skills, languages, certifications. Plus whatever you write in the form.

We ask you not to include in the CV data that is not needed to assess your application, in particular the data covered by art. 9 (origin, beliefs, trade union membership, health, sex life) and criminal-record data. If it is there, it is not used for the assessment.

Why

To assess your application against our open positions.

Legal basis: art. 6.1.b, steps taken at your request prior to entering into a contract. We do not ask for your consent, because for this purpose it would not be the correct basis.

For how long

365 days from submission. At the deadline the document and the text extracted from it are deleted automatically, without anyone having to remember.

If you consented to being contacted about future opportunities (the optional box on the form), we keep your profile for 24 months. It is a consent, so you can withdraw it whenever you like by writing to the address above, and the application returns to the ordinary term.

Who sees it

The staff in charge of hiring, and the technical colleagues expressly invited to give an opinion on the single application. Outside the company: the provider hosting the server and, for the automated analysis described below only, the provider of the artificial intelligence model.

Your CV is not passed on to third parties nor used for commercial purposes.

Automated analysis: what it does and what it does not

To organise the information in the CV we rely on automated systems, including artificial intelligence models. They serve to extract and order what is written there (skills, experience, languages, certifications), to make the profile searchable and to point out to the reader where it matches what we are looking for.

Before sending the text to the model provider we strip out first name, last name, contacts and links. The professional content remains: this is pseudonymisation, not anonymisation, and we say so plainly because from the content of a CV a person can still be identifiable.

No decision is automated. These systems do not reject applications, do not assign scores and do not draw up rankings. Every assessment and every decision about the hiring process is made by authorised people.

How they are protected

The CV is encrypted on the server disk (AES-256-GCM), the connection is always encrypted, the database is not reachable from the internet, access is limited to authorised staff and every consultation leaves a trace.

Your rights

At any time you can ask to access your data, correct it, delete it, restrict its processing or object to it, and to receive it in a readable format.

How: by writing to career@abinsula.com. We reply within one month (art. 12.3).

You may also lodge a complaint with the Italian data protection authority: garanteprivacy.it.

Back to the form