Privacy policy

Pending legal review. This text is a working draft built around the processing that actually takes place on this site. Before publication it must be reviewed by a privacy adviser and completed with the controller's details, marked below as [TO BE CONFIRMED].

With the job board, the site collects CVs and introduces candidates to other companies: under Italian law this is employment intermediation, a regulated activity (Legislative Decree 276/2003). Before publishing, it must be checked whether an authorisation is required and how it should be stated here.

Data controller

The data controller is [TO BE CONFIRMED] BVH Consulting S.r.l., registered office at [TO BE CONFIRMED], VAT number [TO BE CONFIRMED]. For any request concerning the processing of your data, write to [TO BE CONFIRMED].

What data we collect

Data you give us. When you fill in the contact form we collect your name, email address, company and — if you provide them — your role and phone number, together with the content of your message.

Technical browsing data. Our servers log IP address, browser type, requested page and request time. This data is necessary to deliver the site and to protect it against abuse.

Data from applicants. Through the job application form we collect your name, email address, phone number if you give one, the CV you attach and, if you send one, your cover letter. You write the CV yourself, so it may contain other data: please do not include special category data — health, religious or political beliefs, trade union membership — because we do not need it and will not use it. The form asks for no date of birth, gender or photograph.

Technical data about the application. We record the IP address the submission comes from, to limit abuse of the form, and the date on which you gave consent.

The text of your CV. We extract its text when you send it and keep it alongside the application: it lets us find you by searching for a word — a qualification, a language — instead of reopening hundreds of documents by hand. If your CV is a PDF we read the text it contains; if it is a photograph, or a scan inside a PDF, we recognise the text in that image, with software running on our own server that sends nothing to anyone. It is the same content you sent us, not new data, no machine uses it to decide anything in our place, and it is deleted together with the application.

Why we process it and on what basis

Who we share data with

Data is processed by authorised staff and by suppliers acting as processors: the site's hosting provider and the email service that delivers contact form messages. We do not sell or transfer personal data to third parties for marketing purposes.

Applications follow a rule of their own. Your CV stays on our servers and is shared with one of the companies we recruit for only if we introduce you for that role: it does not circulate, it is not added to shared databases and it is not passed to anyone else. When that happens, the company becomes an independent controller for its own selection process. You can ask us to delete your CV at any time, and we do it without asking why: every email we send you carries a link that deletes it in one click, with nobody in between. Opening the link deletes nothing — it shows you what will go, and you are the one who presses.

Where a supplier processes data outside the European Economic Area, the transfer takes place under the standard contractual clauses approved by the European Commission.

Your rights

At any time you may request access to your data, its rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.

Requests should be sent to [TO BE CONFIRMED]. If you believe the processing breaches data protection law, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

How long we keep a CV

Twelve months from submission. After that, the application and the attached files are deleted by an automatic program, with nobody having to remember: the expiry date is written on each application the day it arrives, so what applies is the period you were told, even if we later change the rule.

Applications are read only by the staff handling recruitment, and every time a CV is opened we record who did it and when.

When we reply to you — including to say that we went with a different profile for that search — we keep the date of our reply and the text we sent you alongside your application: it stops us telling you something different if you write again, and it is deleted together with everything else.

Changes

If the processing described here changes, we update this page and record the revision date at the bottom.