Privacy Policy

Privacy policy

Information letter pursuant to art. 13 of the 2016/679 EU Regulation.

Before providing data that pertains to you, it is necessary that you read the following information letter that can help you understand the reasons for which your personal data will be processed, what your rights are and how you can exercise them, in compliance with the provisions of the European Regulation on the protection of personal data 2016/679 and of Legislative Decree 196/2003 and subsequent amendments, so-called Privacy Code, the aim of which is to protect the fundamental rights and freedoms of individuals.

Data Controller
The Data Controller is Terzi&Partners Srl, Via San Paolo, 7 – 20121 Milano (MI) – Italy, Tel. +39 02 87085551, Email

Purpose of data processing
Personal data are processed within the normal activity of the Data Controller for the provision of the services offered.
If the organisation acquires your personal information, they will only be used to contact you in order to respond to your enquiry.
The legal basis of the processing is the contract signed with you or the execution of pre-contractual measures taken at your request.
Candidates’ data are used for selection, evaluation and recruitment purposes of the personnel for the organisation. The legal basis of the processing can be found in art. 6 p.1 lett. f) of the GDPR “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”; the nature of the provision is optional, in case of non-consent the Data Controller will not be able to proceed with the evaluation of the candidate’s profile. Your consent is expressed by the completely voluntary provision of the CV by email, fax or other means.
Your personal data are processed by the Data Controller and duly authorized persons in charge of the correct fulfillment of the aforementioned purposes through electronic tools and paper archives, as well as by means of security measures aimed to guarantee the confidentiality of personal data and to avoid undue access to unauthorized subjects. The data controller does not use automated processes, including profiling, to achieve the purposes set out in this privacy policy.

Recipients or categories of recipients to whom personal data may be disclosed
The data provided voluntarily will be stored in electronic format on the mail server within the organisation and are protected with adequate security measures to prevent the risks of loss, destruction and unauthorized access.
The designated personnel, as well as any tech support and/or consultants who manage the website, have access to the data; the data will not be disclosed to third parties, except by virtue of national laws.

International data transfers
The personal data collected or produce (process) in the context of our website will be stored exclusively in Italy/Europe.

Data retention and duration of data procesing

The personal data is stored for the time necessary to achieve the purposes for which it is collected, unless otherwise required by law. For the purpose of selecting, evaluating and searching for personnel, the data will be processed for the time necessary to fulfill the purpose and in any case for no more than 2 years from the collection, after which the owner or a designated person will proceed to delete the CV or to make the data anonymous.

Rights relating to personal data
The Data Subject has the right to obtain from the Data Controller confirmation that it is or is not undergoing treatment of personal data concerning him and in this case has the right to:

  • obtain access to personal data, request correction or deletion of personal data or limitation of the processing of personal data concerning him or oppose their processing;
  • to receive personal data relating to him in a structured, commonly used and readable form by automatic device and has the right to transmit such data to another data controller (data portability);
  • be informed of the existence of an automated decision-making process, including profiling;
  • if express, withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;
  • propose a complaint to the supervisory authority.

Nature of the data and consequence of the lack of communication
We inform you that the provision of these data is optional. However, failure or incorrect provision of the data may result in impossibility to follow up your requiry.