Information on Curriculum Vitae received in the institutional website La Maisonnette according to the art. 13 and 14 Reg. 2016/679/UE

  • CVs Collection

    La Maisonnette S.r.l., informs all candidates that in accordance and for the purposes of (i) Legislative Decree 30 June 2003, n. 196, the “Privacy Code”, art.13, (ii) of the Regulation UE 2016/679 concerning the “protection of natural persons in respect to the treatment of personal data, and the free circulation of such data”, the “GDPR”, art.13 and art. 14, (iii) of the later national legislation within the legislative framework, jointly referred as “Privacy Legislation”, provides for a series of obligations for all those in charge with processing personal data (collecting, registration, processing, storage, communication, dissemination, etc.)  referring to other subjects (”Data Processing”).

    In this respect, it is necessary to provide some information regarding the manner and purpose of the processing of personal data spontaneously reported. Through the Curriculum Vitae the Company that receives it, in its capacity of the data controller, can collect personal and  particular data (e.g. data related to state of health, union membership, or legally protected status).

    According to the above mentioned legislation, the processing of personal data must be based on principles of fairness, lawfulness, transparency and protection of the privacy and rights of those involved.

    1. Data controller

    The data controller is La Maisonnette S.r.l. with headquarters in Viale dell’Umanesimo n. 72-74, IT-00144, Rome (E-mail:, PEC:, phone number +39 06.5910339). Later, if authorized by the person concerned, the data controller will be the company that manages the specific headquarters of La Maisonnette Affiliated Center in search of personnel with whom La Maisonnette S.r.l. shares the same privacy policy. To know the other Data Controllers please refer to the page concerning the affiliated centres within the website

    1. Purpose of data processing

    Personal data will be processed from the company that receives the CV without the express consent (GDPR, art. 6, n.1, lett. b, e) for the following purposes:

    1. a) reply to requests for information;
    2. b) manage the recruitment and selection of personnel, and the business networking;
    3. c) exercise the rights of the Data Controller, e.g. the right of legal defence in court proceedings.


    Where the Controller intends to process data with a different purpose than the ones described above, it is required to inform the potential candidate of those purposes before processing the data.

    1. Legal bases for the processing of data

    The legal bases lay in the art. 6 p.1 lett. b e f) of the Regulation: “the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; and “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”; the nature of the data processing is optional, and in its absence, the controller cannot evaluate the profile of the candidate. The consensus of the data subject is explicit by transferring the cv via e-mail, fax or the recruiting section in the website

    If the CV is submitted by e-mail, fax or by hand the information on the data processing will be communicated to the first useful contact after sending the curriculum. If the CV is sent via the website, the information on the processing of the data is immediately available on the Privacy Policy page and must be read before sending.

    When there is the intention to enable the communication of the data, especially if there are sensitive data in the CV, within the Affiliated Centres of La Maisonnette, it is necessary to include the following indication in the CV:

    “Hereby I authorize the processing of my personal data and particular data included in my cv according to the Legislative Decree 30 June 2003, n. 196 “Rules on the protection of personal data” and the GDPR (UE Regulation 2016/679) to be communicated within the network of the Affiliated Centres of La Maisonnette”.

    In the absence of the specific authorization to this regard, it will not be possible to share the CV received with the Affiliated Centres  and therefore to meet possible demands within the circuit.

    1. Modalities of the processing

    The personal data are processed by the controller and responsible persons authorized for the adequate fulfilment of the purposes indicated in point 2) through electronic instruments and paper archives, as well as the use of security measures designed to ensure the confidentiality of personal data and to avoid unauthorized access. The controller shall not put into act automated processing, including profiling, for the achievement of the purposes included in the present document.

    1. Communication of data

    The data concerning means of communication (telephone, e-mail, etc.) will be used by internal parties duly appointed. Data communication and dissemination (e.g. social networks, Internet websites, etc.,) with third parties outside of the E.U. is not envisaged.

    1. Duration of the treatment

    The controller will keep the personal data for as long as it is necessary to fulfil the purposes described above and not longer than 2 years of their collection, after which the controller or an appointed person will remove the CV.

    1. Rights of the data subject

    Data subjects have the right to ask the controller to access their personal data, to ask to rectify it, to cancel, to limit the processing or to oppose for their data to be processed, as well as the right to require the portability of the data itself.

    The request can be addressed to the controller to whom the CV has been sent via e-mail, fax or registered letter with the text: “PRIVACY-Requirement on behalf of the subject” specifying the right that the subject wants to exercise (cancellation, rectification, portability, forgotten), adding a valid email address where to send a feedback.

    The Controller, or the person who has been appointed by the Controller, will comply with the demand within 30 days from the moment it was received. If the answer is complex, the time can increase to other 30 days, previously informing the subject. Whenever the data had been communicated to the Affiliated Centres La Maisonnette, it will be responsibility of the first receiver of the CV, as controller, to inform the circuit of the request received.

    If candidates believe it is necessary to assert their rights, they can present a complaint to the Competent Supervision Authority, in this case the National Privacy Supervisor, based in Piazza di Montecitorio, 121, 00186 Roma.

    1. Data Protection Officer (DPO)

    The Person Responsible for the protection of personal data, according to art. 37 del Reg. 2016/679/UE, is Luca Galasso based in Rome, e-mail:

    The appointment instrument is attached to the registry of data processing prepared by the controller.