JOB APPLICATION INFORMATION PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 ON DATA PROTECTION

1.THE IDENTITY OF AND THE CONTACT DETAILS FOR THE CONTROLLER AND THE PROCESSOR (IN TERMS OF DATA PROTECTION)
In accordance with the applicable Privacy Regulations and for the purposes indicated below, the personal data of the Data Subjects will be processed by one of the following Companies belonging to the Snaitech Group, in their capacity as Data Controller:

  • SNAITECH S.p.A, with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address snaispa@snaitech.legalmail.it, email privacy@snaitech.it, Business Register and Tax Code No. 00754850154, VAT number 01729640464. The Data Protection Officer (DPO) can be contacted at the following e-mail address: dpo@snaitech.it;
  • EPIQA S.R.L. Unipersonale (natural person – legal representative), with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail addressepiqasrl@legalmail.it, e-mail privacy@snaitech.it, Business Register and Tax Code 01913970206, VAT 01779230463. The Data Protection Officer (DPO) can be contacted at the following e-mail address: dpo@epiqa.it;
  • SNAI RETE ITALIA S.R.L. Unipersonale (natural person – legal representative), with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address snaireteitalia@snaitech.legalmail.it, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 02388410462. The Data Protection Office (DPO) can be contacted at the following e-mail address: dpo@snaireteitalia.it;
  • SNAITECH SMART TECHNOLOGIES S.R.L. (natural person – legal representative), with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address snaitechsmarttechnologies@snaitech.legalmail.it, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 10130820961;
  • GIOBET S.r.l. (natural person – legal representative), with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address giobetsrl@snaitech.legalmail.it,e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 02236870743. The Data Protection Office (DPO) can be contacted at the following e-mail address: giobet@snaitech.it;
  • U4LINE S.r.l., with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail addressu4linesrl@legalmail.it, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT number 12465100969;
  • IZIPLAY S.r.l. (natural person – legal representative), with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address iziplaysrl@legalmail.it,e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 12588580964. The Data Protection Office can be contacted at the following e-mail address: iziplay@iziplay.it;
  • The GAMING COMPANY S.r.l., with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail addresslacompagniadeigiochi@pec.net, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 08982101001;
  • ITALBET S.r.l., with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address info@pec.puntosnaitortona.it, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT number 01969520061;
  • NEWCO BET S.r.l., with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address newcobetsrl@snaitech.legalmail.it, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 13409540963;
  • VOGHERA BETTING S.r.l., with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address info@pec.puntosnaivoghera .it, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 02150630065;
  • START GAMES S.r.l., with registered office in Via Vittor Pisani 22, 20124 Milano, certified e-mail address startgamestortona@pec.it, e-mail privacy@snaitech.it, Business Register, Tax Code and VAT No. 02150620066;
2.PURPOSES FOR WHICH PERSONAL DATA IS COLLECTED                                                                                                                               
Personal data are processed for the purposes of recruitment and selection of personnel for the Group companies, including all activities that are preparatory and necessary for a possible recruitment and/or the start of a collaboration.
3.LEGAL BASIS FOR PROCESSING PERSONAL DATA
The legal basis related to the aforementioned processing is as indicated in the contract.
4.METHODS BY WHICH PERSONAL DATA IS PROCESSED
Personal data will be processed in paper form and/or with electronic tools in compliance with the regulations concerning the protection of personal data and, in particular, with specific security measures ensuring that all the precautionary measures which also guarantee the confidentiality of personal data are observed. The acquisition of personal data may take place through the use of the contact channels made available by the Data Controller, which may also require the possible creation of an account. Personal data will not be subject to automated processing nor to profiling algorithms except where required by the law.
5.TYPES OF DATA
General personal data (e.g. identification, contact details, work-related data, curriculum vitae, etc.);
Special data (e.g. data that may disclose the state of health or belonging to protected categories), only in the event that the latter must be known due to the possible establishment of the employment relationship. Therefore, apart from the aforementioned scenario, the candidate is invited not to provide special data classified as such by art. 9 of Reg. 2016/679, under penalty of cancellation of the latter by the Data Controller.
If necessary for the above purpose, the data processed may also concern other subjects related to the candidate (e.g. family members, etc.); in this case, the candidate undertakes, under their sole responsibility, to communicate the content of this information to these subjects.
6.SCOPE OF DATA COMMUNICATION AND RECIPIENTS OF DATA
Personal data may be disclosed to the following recipients or categories of recipients, strictly in relation to the aforementioned purposes: accounting, tax and legal professionals and consultants; external service/IT support companies, including for assistance in relation to the account that may have been created for the sending of certain applications; service providers specifically appointed for the recruitment, selection and evaluation of personnel (head-hunters); management consultants.
The aforementioned recipients act as independent Data Controllers or Data Processors, in the latter case specifically appointed pursuant to art. 28 of Regulation (EU) 2016/679 (a correct and updated list of which is available from SNAITECH and can be expressly requested from the contacts indicated above) or authorised to process data pursuant to art. 29 of Regulation (EU) 2016/679.
In addition, the data may be disclosed to company employees and/or collaborators of the Data Controller or other Group Companies who have been specifically trained and appointed to process the data. Personal data will not otherwise be disclosed.
With regard to the position of interest to the candidate, the Data Controller may be one of the above-mentioned group companies, on behalf of which SNAITECH, under an inter-group agreement, assumes the role of external Data Processor for the management of the activities referred to in this information.
7.FONTI DEI DATI PERSONALI
The data subject to processing by the Data Controller may be obtained:

  1. directly from the Data Subject in response to recruitment advertisements (e.g. published on Group or third-party websites) or in response to unsolicited applications;
  2. at the request of the Data Controller during any subsequent phases of evaluation of the application;
  3. through head-hunters;
  4. through Group employees as part of the “Referral Program”;
  5. through interaction with social networks.
8.THE MANDATORY OR OPTIONAL NATURE OF PROVIDING PERSONAL DATA
The provision of personal data is mandatory for the aforementioned purposes and in relation to the channel used for the application. Failure to provide this information will make it impossible for you to submit your application and participate in any subsequent selection and evaluation process.
9.TRANSFERRING PERSONAL DATA OVERSEAS
Personal data will not be transferred to any country, other than Member States of the European Union, unless they can guarantee adequate levels of protection.

 

10.RIGHTS OF THE DATA SUBJECT
The Data Subject may, at any time, exercise the rights provided for by the law, if the necessary conditions are met, using the contact details above; said rights include:

  • the right to access their personal data, obtaining evidence of the purposes, the categories of data involved, the recipients to whom they may be disclosed, the applicable storage period, the existence of automated decision-making processes (art. 15 GDPR 2016/679);
  • the right to obtain the rectification of inaccurate personal data or to have incomplete data completed (art. 16 GDPR 2016/679);
  • the right to obtain the erasure of the data (art. 17 GDPR 2016/679); if an account exists, the data subject may also request that it be closed;
  • the right to obtain the restriction of processing (art. 18 GDPR 2016/679);
  • the right to receive in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, if the conditions required by law are met (art. 20 GDPR 2016/679);
  • the right to object to the processing and to withdraw their consent, without affecting the lawfulness of processing based on consent before its withdrawal (art. 21 GDPR 2016/679);
  • the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her (art. 22 GDPR 2016/679).

In addition, the Data Subject has the right to lodge a complaint with the Supervisory Authority, pursuant to art. 77 of GDPR 2016/679, following the procedures and instructions published on the official website of the Authority at www.garanteprivacy.it, as well as to appeal to the competent courts, pursuant to articles 78 and 79 of GDPR 2016/679.
Exercising any of these rights is not subject to any formal constraint and is free of charge. If the requests of the Data subject are manifestly unfounded or excessive, in particular because of their repetitive nature, the Controller may:

  • charge a reasonable fee taking into account the administrative costs incurred in providing the information or communication or taking the action requested; or
  • refuse to act on the request.

In accordance with art. 12, paragraph 3, GDPR 2016/679, the Data Controller will provide feedback to the Data Subject without undue delay and, in any case, at the latest within one month of receipt of the request. This period may be extended by two months, if necessary, taking into account the complexity and number of the requests (in this situation, the Controller will inform the Data Subject of any such extension within one month of receiving the request, together with the reasons for the delay).
Without prejudice to Article 11 of European Regulation 2016/679, if the recipient Data Controller has reasonable doubts about the identity of the natural person making the request referred to in Articles 15 to 22 GDPR 2016/679, it may request additional information necessary to confirm the identity of the Data Subject.

11.STORAGE PERIOD
The data will be kept for the time necessary to carry out the aforementioned purpose and subsequently deleted or irreversibly anonymised. In particular, in the event of: i) the conclusion of a contract, they will be kept for the duration of the contract and for 10 years after its termination; ii) the “rejection” of the application, they will be kept for a maximum of 3 years after the completion of the evaluation activity carried out as part of the recruitment and selection procedure. In the event that the right of erasure is exercised, personal data will be erased immediately only if the evaluation activity has not yet started, otherwise the deadlines indicated for “rejection” will apply. Any application account will be deactivated:

  • at the request of the user, provided that there are no conditions that could affect the processing; or
  • 12 months after the last use.
12. CHANGES TO THE PRIVACY POLICY
The Data Controller reserves the right to revise, modify or update this information at any time, also in the light of changes and/or new national and European legislation on the protection of personal data. Therefore, please consult the PRIVACY section of the Company’s website regularly to check the most recent version of the document, referring to the date of the last revision at the bottom of the document.

SNAITECH GROUP_JOB APPLICATION INFORMATION REV. 0.0_GENNAIO 2025