Information Notice on Personal Data Processing for Job Applicants

in accordance with Art. 13 of the General Data Protection Regulation (GDPR 2016/679)


Pursuant to Art. 13 of the UE 2016/679 Regulation, the company E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI), the Data Controller, shall provide you with the following information on personal data processing concerning natural persons.

Purposes and legal basis for the processing

Personal data provided in your CV shall be processed for the following purposes:

  • assessing if your profile meets our requirements (e.g. job vacancies), and more generally, managing the selection of employees and collaborators, and/or
  • contacting you to plan and conduct job interviews or for selection tests if needed, by using the contact detail you have provided.

The legal basis for processing personal data for the above-mentioned purposes is the implementation of the pre-contractual measures adopted upon your request. Provision of your personal data for these purposes is optional. However, refusal to provide such data may result in our company not being able to evaluate your profile and therefore proceed with the selection process.

However, through your curriculum we could collect special (sensitive) data as defined in art. 9 of the Regulations, such as data revealing, by way of example, racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership in parties, trade union, or in religious, philosophical or trade union associations or organizations, as well as personal data revealing your health status and sexual life. In this regard, should it not be strictly necessary, unless we believe that this type of data is useful for better classifying your position, especially in relation to belonging to protected groups, please do not provide this type of information; however, if you decide to give it to us, we shall ask you to fill out the consent that you can freely express in the attached form. Should you provide your particular data without the relevant consent, we shall not be able to consider your application. The legal basis of the processing. in case you decide to enter your particular data, is your consent.

For the same purposes, you will also be required to express your specific consent to provide your data to the companies “Esa engineering UK” and “ESA Middle East FZ-LLC”, that together with our company form part of Esa Group (please refer to the final part of this information). In this instance, should you not provide your consent, your application can be considered only by our company and not by the other companies belonging to ESA Group.

Method of Processing

Data shall be processed by using suitable tools and procedures to ensure security and confidentiality, and shall be performed either by paper, or with electronic tools. To have the complete list of the Processors, you can contact the Data Controller and the Data Protection Officer at any time at the addresses provided below.

Scope of Data Processing and Communication

Personal data will be processed by our authorized personnel, and by our consultants within the limits necessary to carry out their professional assignment on behalf of our Company, and identified as the Processors.

To have the complete list of the Processors, you can contact the Data Controller at any time at the addresses provided below

We shall not “disseminate” your personal data, i.e. we shall not made it available to unspecified parties; we may “communicate” it to public and private third parties, that can access the data by virtue of the provisions of law or regulation and within the limits imposed by these rules.

Automated Data Processing

The company does not carry out data processing based on an automated decision-making process, including profiling that produces legal effects concerning a person or that may significantly affect him or her.

Data retention period

Your data shall be retained for 24 months as from the date you have provided it, and may be used to contact you and to arrange interviews. At the end of this period, your data shall be deleted permanently.

Rights of the Data Subject

As data subject, natural person, you can enforce your rights as per art. 15 to 21 of the RGPD 2016/679, summarized below, by contacting the data controller at any time.

Specifically, you may access your personal data, request rectification or erasure of your personal data, or restriction of processing of your personal data, data portability, or object to such processing.

Right to complain

Each data subject that believes that the processing infringes the Regulation has the right to lodge a complaint with the Garante (Italian Data Protection Authority), as provided for by art. 77 of the Regulation, or to start judicial proceedings (Article 79 of the Regulation).

Contact details for the Data Subject to enforce his or her rights

Data Controller, E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI), Italy, Tel. +39 055 373949, Fax +39 055 9029994, email:

Data Protection Officer,

Kind regards.

The Company E.S.A. Engineering Srl

Data Controller