Information on Personal Data Collected from the Interested Person (Art. 13 GDPR)

Dear Sir/Madam,

Pursuant to art. 13 of the GDPR (EU regulation 2016/679), we hereby provide the following information in accordance with the transparency principle, in order to make the user aware of the characteristics and methods of data processing:

a) Identity and Contact Information

ERQOLE S.r.l., with registered office in Monte Argentario (GR), Via Privata Cirio without street number, 58018 (District: Porto Ercole) and each of the Companies of the ERQOLE Group in Italy, listed at, each acting as Data Controller, depending on the job position, is committed to protecting the privacy of any individual who applies for employment or other position at ERQOLE (Candidates).

Below are the details concerning the collection, analysis, disclosure, and other use of Candidates’ personal information, as data subjects, by ERQOLE.

The following contact information is provided: email address:

b) Purpose of Processing and Legal Basis

ERQOLE collects information about Candidates during the selection process.

The processing of personal data requested to the data subject is carried out for the following purposes:  

The legal basis for the processing of personal data is your consent to complete the contract.

The processing is necessary for the pursuit of the Data Controller’s legitimate interest related to personnel selection for potential employment.

The lawfulness of the processing is based on what is provided in letter b of art. 6 of the GDPR and, specifically: the processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract. Any refusal, whether total or partial, to provide such data, or the provision of inaccurate or untruthful information, or the request for their deletion, will result in the impossibility for the Data Controller to proceed with the selection processor to contact the data subject in case there is a need for profiles compatible with that of the data subject, as they are essential for the aforementioned purposes.

c) Categories of data

In general, the processing will exclusively involve common data and will be limited to those strictly relevant and functional to achieve the purposes described in letter b.

Specifically, we will collect information regarding your employment and educational background, any roles you are applying for or considering, your personal interests, and other details you provide about yourself in a CV.

Except for belonging to protected categories, we kindly ask the data subject not to send the Data Controller any sensitive data.

“Sensitive data” refers to “personal data that can reveal racial or ethnic origin, religious or philosophical beliefs, political opinions, membership in political parties, trade unions, associations or organizations of a religious, philosophical, political, or trade union nature, as well as personal data that can reveal information about health or sex life”.

d) Recipients and any categories of recipients of personal data

The data will be processed by authorized individuals responsible for data processing under the Data Controller’s supervision, for the purposes stated above.

The personal data of the data subject will not be disclosed to any third parties.

However, the data may be communicated to external Data Processors who have entered into specific agreements, conventions, or protocols of understanding with the Data Controller.

Therefore, subject to the above, the data may be disclosed to the following categories of recipients:

e) Data Transfer to Third Countries

The Data Controller will not transfer the data to third countries or international organizations.

f) Data Retention Period

The personal data voluntarily provided by the data subject will be processed by the Data Controller for a period of 6 months. At the end of this processing period, the Data Controller will send a communication to verify whether the data subject intends to extend the processing and update their data. In the absence of an explicit response for the data subject, the processing will be considered terminated, and all information held by the Data Controller will be permanently deleted. However, the data subject may, at any time, request the Data Controller to cease processing their personal data, as described in the subsequent letter g.

g) Data Subject Rights

Please be informed that, regarding your personal data, you have the following rights:

For the exercise of the aforementioned rights, the data subject can write to:

h) Complaint

The data subject is informed that they have the right to lodge a complaint with the supervisory authority and may refer to the institutional website of the Privacy Guarantor at

i) Different Purpose of Processing

In the event that the Data Controller intends to process personal data for a purpose other than the one which they were collected, we will provide you with information about this different purpose and any other relevant information before such further processing takes place.

l) Profiling

The Data Controller does not use automated processes aimed at profiling.