Notice regarding personal data processing 

(Pursuant to Art. 13 EU Regulation 2016/679 – GDPR)

This privacy notice is provided for, pursuant to Art. 13 of EU Regulation 679/2016 (hereinafter the “GDPR”), those who send spontaneous applications to Alfa Group on the following website:

Categories of data processed:

For the purposes indicated hereinafter, the Data Controller will process:

  • common personal data, such as but not limited to, identifying data such as name, surname, residence address, nationality, date of birth, e-mail address, telephone number, data related to candidate’s education and work experience and/or further data voluntarily inserted by the candidate.
  • data potentially belonging to particular categories listed in Art. 9 of the GDPR. 

Therefore, the Data Controller recommends avoiding to report, provide or indicate personal data that you want to remain confidential in your CV. In any case, the Data Controller will not process personal data exceeding the purposes indicated hereinafter and will process any data belonging to particular categories listed in Art. 9 of the GDPR in a way that strictly complies with that established by the Personal Data Protection Authority in the Provision containing requirements related to processing particular categories of data, pursuant to Art. 21, paragraph 1 of the Legislative Decree of 10 August 2018, n. 101.

Purposes of the processing:

In particular, your data will be processed in order to proceed with the selection and evaluation of your candidature, in order to search for and select personnel, present and/or future and in line with your professional profile, to potentially establish a working relationship.

The legal basis for this processing is found, pursuant to Art. 111bis Legislative Decree 196/2003, in Art. 6 par. 1 lett. b) Regulation (EU) 2016/679.

Nature of personal data conferment

The conferment of your personal data for the aforementioned purposes is optional but any missing communication of the same would result in the Data Controller being unable to evaluate your profile and/or plan interviews.

Furthermore, the Data Controller communicates that any missing and/or incorrect communication of mandatory information can result in the Data Controller being unable to guarantee the consistency of the same processing. 

Processing Method:

The Data Controller, for the same purposes and/or, in any case, for purposes strictly functional to those cited above, could communicate your data to other companies belonging to the same Group, by virtue of the legitimate interest in the processing for internal administrative purposes, and/or to third-parties, nominated by the Company as Data Processors pursuant to Art. 28 of the GDPR, which will carry out or supply specific services such as, for example: accounting; payments, invoicing, administration, etc. You can request a complete list of these Data Processors from the Data Controller at any moment. 

The Data Controller will process your personal data with appropriate manual procedures or electronic instruments, in accordance with the principles of correctness, lawfulness, minimization, transparency and protection of data confidentiality, in compliance with obligations provided for by laws, regulations or European Union legislation.  

Retention Time

The Data Controller, reserves the right to retain your personal data for a maximum period of 12 months from conferment, for the purpose of considering your profile for any positions that could subsequently become available.


Your personal data will not be disseminated in any way, beyond the scope strictly tied to evaluating your CV for the aforementioned purposes. 

Data Controller: 

The Data Controller is Alfa Group S.p.A., headquartered in Via Fiume Giallo, 3 – 00144 Rome, VAT Number and Fiscal Code: 05174111004. The Data Controller has appointed a Data Protection Officer (DPO) that you can contact to exercise your rights, as well as to receive any information related to the same and/or this Notice, by writing an e-mail to the following address:


Data Subjects have the right to obtain from the Data Controller, when provided for by law: access to their personal data and the rectification or deletion of the same or the limitation of the processing that regards them or to oppose the processing (Art. 15 and ss. of EU Regulation 2016/679) by writing to the following address:

How can we help? Let us know!