Spontaneous applications
For spontaneous applications, the Data Controller is not required to provide any privacy notice. Under Legislative Decree 196/2003 and GDPR 679/2016, when the Data Controller receives CVs sent spontaneously by the persons concerned, it is not required to provide a notice or to ask the candidate for consent to process the personal data (including sensitive data) contained in the documentation received.
The purpose of processing related to CV management concerns activities strictly linked to the assessment, recruitment or selection of staff, for collaboration, fixed-term or permanent employment, or internships.
