Information provided by Profili srl on the purposes and methods of processing Personal Data pursuant to Article 13 of the REG. EU 2016/679 “European Regulation concerning the protection of individuals with reference to the processing of personal data” (“Regulation”).

Pursuant to and for the purposes of art. 13 EU Regulation 2016/679 “European Regulation concerning the protection of individuals with reference to the processing of personal data” – Profili srl, with registered office in Brescia 25124, via Rodi 27, Tax Code and VAT number 03230400172 ( the “Company”), in its capacity as data controller (subject to which the decisions regarding the purposes, methods of processing of personal data and the tools used, including the security profile), makes known the following information in relation to to the provision of personal data.


The processing of the candidates’ data will be carried out by collecting, recording, organizing, storing, consulting, processing, modifying, selecting, extracting, comparing, using, interconnecting, blocking, communicating, canceling and destroying and will be carried out by the holder, by the data processors. where existing and by the persons authorized to the treatment.

The data will be processed lawfully, correctly and transparently; will be collected for specific, explicit and legitimate purposes and treated in a way that is not incompatible with those purposes; they will be adequate, relevant and limited to what is necessary with respect to the purposes for which they are processed, exact and updated; will be treated with the utmost confidentiality, mainly with electronic and computerized tools and stored both on computer media and on paper, in compliance with the principles dictated by the Regulation, the instructions given by the Control Authority and in any case in such a way as to ensure adequate security , including protection, with adequate technical and organizational measures, from unauthorized or illicit treatments or even accidental loss. The data will be stored in a form that allows the identification of the data subject for the time strictly necessary to achieve the purposes for which they were processed.


The holder of the processing of personal data is: Profili srl, with registered office in Brescia 25124, via Rodi 27, Tax Code and VAT number 03230400172. For the purposes of exercising the rights provided by the Regulation and for any request relating to your personal data , you can contact the Data Controller by sending a notice to the email address


The collection and processing of personal data are aimed at the performance, by the holder, of the research, selection and evaluation of personnel, as an institution authorized by the Ministry of Labor, in the interest of the candidate and of the client on specific assignment of bodies , organizations, sole proprietorships, professionals and client companies, for the purpose of establishing a working relationship or collaboration. The candidate’s data are collected and processed in relation to the specific research and selection action for which they were transmitted, but also to ensure the candidate future employment opportunities created by assignments conferred in the future by customers to the holder.

As a company authorized by the Italian Ministry of Labor for personnel search and selection activities, the Data Controller carries out the processing to identify candidates suitable for covering one or more job positions within the client organization and therefore needs to perform a plurality of activities such as: analysis of the organizational context of the client organization; the identification and definition of its needs; the definition of the profile of skills and capacity of the ideal candidacy; the planning and implementation of the candidate search program through a plurality of recruitment channels; the evaluation of the candidates identified through appropriate selective tools; the formation of the most suitable list of candidates. In particular, the need to select a plurality of candidates makes it appropriate to maintain the data relating to the candidates in the database of the holder for a reasonable time.

The data may also be processed for administrative and accounting purposes and for the fulfillment of legal obligations.


4.1. Execution of contract or pre-contractual measures

The legal basis for the processing of your personal data is mainly that provided by the art. 6, lett. b) of the Regulation: “the processing is necessary for the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same”.

4.2. Legitimate interest of the owner and clients

This treatment is also supported by the legal basis provided by the art. 6, paragraph 1, lett. f) of the Regulation, pursuant to which the data controller may process the data if “it is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or the fundamental rights and freedoms of the data subject do not prevail; require the protection of personal data”.

It is believed that none of the processing activities of your personal data can harm people in any way; in reality, the processing of the candidate’s data for the purpose of research and selection allows the owner to offer the client a personalized, timely and effective service, beneficial to the owner, the client and the candidate. The holder, as an authorized body for the research and selection of personnel, and third parties have in fact the legitimate interest in carrying out the processing activities set forth in this information, including the preservation of the curriculum vitae of the candidates for a period sufficient to guarantee a plurality of potential candidates for each new position requested by the client. Moreover, the processing activities carried out respond to a significant interest of the candidate, who can count on the possibility of being contacted also for new professional opportunities. The maintenance of the candidates’ data in the owner’s database, carried out with appropriate technical and organizational measures, favors an effective and constant research and selection action and also contributes to the pursuit of public interest in full employment.

It is always guaranteed the candidate’s right to object to the processing of personal data.

4.3. Consent

The legal basis of the processing in some cases may also be that provided by the art. 6, lett. a) of the Regulations: “the interested party has given his consent to the processing of his personal data for one or more specific purposes“, for example when the candidate also communicates particular categories of personal data as defined in art. 9 of the Regulation (in particular, data relating to health in relation to belonging to protected categories, but also data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometrics, data relating to sexual life or sexual orientation) or transmit their CV with a photograph. The holder does not acquire its own initiative such special categories of data, except in cases where this is strictly necessary to the establishment of an employment relationship or collaboration and not conflict with the provisions of Law n. 300/1970 (so-called Statuto dei Lavoratori / Workers’ Statute), of Law no. 135/1990, of Legislative Decree n. 276/2003 (“Legge Biagi”) and with the rules on equal opportunities or aimed at preventing discrimination. The data controller processes this data only if communicated by the data subject and only on the basis of legitimately expressed consent. In such cases, in the absence of consent, the holder will not be able to proceed with any evaluation of the professional profile in view of a response with the needs to which the application refers.


5.1. Mode of transmission

Data collection takes place by transmission to the holder (by post, fax, e-mail, letter by hand, as well as through the special form on the website of the owner, using IT tools at third party websites used by the owner, directly at the interested party during the selection and interview phase) from the interested parties of information relating to their professional experience, in the form of a curriculum vitae (“CV”).

The sending of the CV by the interested party can represent:

  • a spontaneous application. In this case, the candidate is nevertheless invited to give the CV at the bottom of having read the present information and to express its explicit consent to the processing and communication of the data, using, in the CV or in the accompanying letter, a statement of the following word: “The undersigned declares to have read the information on the site and to give his consent to the processing of his personal and sensitive data for the purposes specified therein.
  • the response to specific announcements of search and selection of personnel for third parties published by the owner on any means of communication, on its website or on third-party websites. Also in these cases, the holder adopts the means necessary for the transmission of the information and for the collection of consent.

To guarantee the protection of maximum confidentiality and to avoid unpleasant contact with companies or groups or unwelcome subjects, candidates are in any case always invited to report, together with the submission of their candidacy, the subjects with whom they do not wish to contact. , clearly specifying the word “RESERVED”.

5.2. Type of data transmitted

The collection normally concerns only the so-called common personal data (different from the data that fall into the particular categories referred to in article 9, paragraph 1 of the Regulation), which will be processed for the purposes of the present information. Without prejudice to the freedom in the conferment of personal data by the candidate, it should be noted that failure to communicate the data could make it impossible for the owner to consider the candidacy as part of any personnel selection and assessment procedure.

The candidate, unless this is expressly provided for by a research announcement in relation to the membership of protected categories to which he or she responds, must not disclose data relating to health, data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic, biometric data, data relating to sexual life or sexual orientation, and all information in any case attributable to the particular categories referred to in art. 9 paragraph 1 of the Regulation. In the case in which the CV held by the holder is in any case also contained data included in these categories (for example, typically, data suitable to reveal the belonging to protected categories) or unnecessary data (for example, the photo of the candidate), the holder, unable to separate unnecessary data from those relevant for the purpose of assessing professional aptitude, proceeds to process the data only if the candidate has given his consent.


In order to achieve the aforementioned purposes, personal data may be communicated to public or private client subjects, who will have given the owner the mandate to carry out research, selection and evaluation of personnel and interested or potentially interested in establishing a employment relationship.

For the purposes referred to in this statement and as strictly required in relation to the selection procedure or in-depth assessment of personnel, the personal data of the interested party may be communicated to subjects in charge of other offices of the owner, to external managers and persons in charge of processing of the owner, to subjects, also external to the Company, involved in the management and maintenance of electronic instruments, to external consultants of the holder charged with carrying out specific personnel selection activities.

The right of the interested party to indicate the subjects or categories of subjects to whom the data must not be communicated is in any case reserved.

The personal data processed are not subject to disclosure.


The holder does not transfer the candidates’ personal data to third countries, belonging or not belonging to the European Union, and ensures that the data processors do the same. Personal data may in the future be transferred, for the purposes referred to in this information notice and for storage and preservation purposes, both to European Union countries and to third countries with respect to the European Union. In this case, the Holder will verify that the conditions prescribed by the Regulation are respected and the principles of lawfulness established in articles 44 et seq. observed.


The data will be kept for the period of time strictly necessary for the pursuit of the purposes for which they were collected, therefore at least until the conclusion of the selection and research procedure for which they were conferred. The data controller may also keep the data subsequently, if he considers that processing requirements connected with:

  • the search and selection procedure concluded, also for the purpose of preserving probative evidence regarding the correct execution of the contract, concerning research and selection activities carried out, with the client. In this regard, reference is made to the 10-year limitation period established by art. 2946 c.c. for contractual liability;
  • further research and selection purposes relating to the candidate. In order to achieve the purposes indicated in paragraph 3 of this information notice, and also considering the legitimate interests of the owner and customers, in particular that of guaranteeing effective and effective research and selection activities that can promptly rely on a sufficiently large data base of candidates, also in consideration of the sectors of activity of the customers and the limited local areas in which the owner operates, it is considered reasonable to keep the data of the candidates for 10 years from the time of acquisition. This period may be extended or renewed for further equal periods following a communication in which the holder asks the candidate to confirm the data and / or update the curriculum and the candidate expressly communicates it.

In any case, the holder reserves the right to destroy the CVs or any document containing personal data that is judged to be non-compliant with the purposes set out in this statement, notifying the interested party.

In any case, the data will be processed according to logics strictly related to the purposes indicated and in ways that guarantee the security and confidentiality of the data. In particular, the holder usually keeps the data of the candidates in a database, using cloud services provided by third parties equipped with the necessary characteristics of competence and security, designated as data controllers on behalf of the owner.


The concerned person has the right to obtain from the data controller access to his personal data, including the confirmation of the existence or not of personal data concerning him and the provision of the same in an intelligible and portable form. In particular, the interested party has the right to obtain:

a) the indication of the origin of personal data;

b) the indication of the purposes and methods of processing;

c) an indication of the logic applied in the case of processing carried out with the aid of electronic means;

d) updating or rectification and integration of data;

e) the deletion of data or the limitation of the processing of data concerning them (transformation into anonymous form, blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data are been collected or subsequently processed);

f) the right to obtain the attestation that the updating, rectification, integration and cancellation operations have been brought to the attention, also with regard to their content, of those to whom the data have been communicated, except in the case where such data fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right.

The data subject is also entitled to oppose the processing, even in relation to specific purposes, and to request data portability.

The candidate has the right to withdraw consent to the processing of personal data at any time, by simple written communication. In cases where consent is the only legal basis for processing, revocation of consent will no longer permit the use of personal data for search and selection purposes and the data subject will therefore not be able to receive any service aimed at finding a position working. In any case, the withdrawal of consent to treatment does not affect the lawfulness of the processing based on the consent given before the revocation.


The concerned person has the right to lodge a complaint with the Autorità di Controllo, represented in Italy by the Garante per la Protezione dei Dati Personali, based in Rome, Piazza Monte Citorio, 121. The complaint may be presented by the interested party in the manner deemed most appropriate appropriate: by hand, by registered mail, by fax or by mail. For information the interested party is invited to consult the website of the Guarantor at


The holder does not use automated decision-making processes.


Profili srl leads the staff selection processes by pursuing equality between male and female workers and not discriminating against candidates of either sex, in accordance with local regulations.


Profili srl operates in compliance with the code of professional ethics adopted by C.R.E.SC.IT.A. – Associazione italiana fra Società e Studi per la Ricerca e Selezione di Personale (, available on its website.


Profili srl is a company authorized by the Italian Ministry of Labor and Social Policies to carry out Personnel Research and Selection on 01/29/2007 with Protocol 2862 / RS.


Information on the processing of personal data of users of our website pursuant to art. 13 of the Regulation (EU) 2016/679

Pursuant to Regulation (EU) 2016/679 (hereinafter the “Regulation”), this page describes the methods of processing the personal data of users who consult our website. This information does not relate to other sites, pages or online services that can be reached through hypertext links published on our site but referring to resources external to our domain.

Data controller

Following consultation of our site, data relating to identified or identifiable natural persons may be processed.

The data controller is Profili SRL, via Rodi 27, Brescia P.IVA (VAT number) 03230400172 mail

Legal basis of the processing

The personal data indicated on this page are treated by the owner in his own legitimate interest to offer users the consultation of the contents and, where freely chosen by the user, the communication with the interested party. The processing also takes place on the basis of the user’s consent, expressed through the tools on the home page of our site (options on the banner).

Types of data processed and purpose of processing

Navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers and terminals used by users, the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

Data provided by the user

The optional, explicit and voluntary sending of messages to the contact addresses of the holder involves the acquisition of the contact details of the sender, necessary to respond, as well as all the personal data included in the communications.

Cookies and other tracking systems

For our cookie policy and to know the types of cookies we use, we invite you to read the appropriate section below “Cookie Policy”.

Data recipients

Some designated parties may become recipients of the data collected following the consultation of our site, pursuant to article 28 of the Regulation, as data processors. For the list of these subjects, you can contact the holder by any means of written communication.

The personal data collected are also processed by the staff of the holder, who acts on the basis of specific instructions provided for the purposes and methods of the processing.

Rights of interested parties

Concerned parties have the right to obtain from our company, in the cases provided, access to personal data and the correction or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 and following of the Regulation), by sending a specific communication to the data controller.

Right to complain

Concerned parties who consider that the processing of personal data referring to them carried out through this site is in violation of the provisions of the Regulations have the right to lodge a complaint with the Supervisory Authority, represented by the Privacy Guarantor, as envisaged by art. 77 of the same Regulation, or to take the appropriate judicial seats (art. 79 of the Regulation).


What are cookies

Cookies are small text files that the sites visited by users send to their terminals, where they are stored to be re-transmitted to the same sites on subsequent visits. Cookies are used for different purposes, have different characteristics, and can be used both by the owner of the site you are visiting and by third parties. Below you will find all the information on the cookies installed through this site, and the necessary information on how to manage your preferences regarding them.

For more information on cookies and their general functions, visit an informative website such as

Cookies used by this site

The use of cookies by the owner of this site, Profili Srl company with headquarters in Via Rodi 27 – 25124 Brescia is part of the Privacy Policy of the same.

Technical cookies that do not require consent:

This website uses technical cookies that are strictly necessary for the site to function, as well as cookies for saving user preferences.

Statistical cookies used directly by the site manager to collect information in aggregate form:

The site also uses third-party statistical cookies (Google Analytics) to collect information in aggregate form, set as a technical cookie or without tracking the user’s IP (non-profiled user data at IP level) and without sharing data with the Third Part.

Access to Third Party Information:

Privacy Policy:

Cookie Policy:


All technical cookies do not require consent, so they are automatically installed following access to the site.

Other technologies (eg plugins, widgets, local storage, etc)

Interaction with external social networks and platforms

Plugin: it is a program that interacts with another program to expand or extend its original features. The most used plugins are those of social networks, which allow the user to follow a page or a social profile with a click, to indicate with a click that he liked a web content and to share it on his social network profile, etc

Widget: it is a graphical user interface component of a program, which has the purpose of making it easier for the user to interact with the program itself. The most used widgets are those of social networks, which allow users to easily open social networks in a separate browser window.

These services allow interactions with social networks, or other external platforms, directly from the pages of a site. The interactions and any information acquired by the site are subject to the privacy settings of the third party who created the aforementioned technologies. To receive detailed information pursuant to art. 13 of the Regulation regarding the use of personal data processed when you use these technologies, we invite you to visit the websites of the third party operators of the aforementioned technologies.

You will find below the references of these third parties, and next to each of them you will find the link to the page where you can receive information on the treatment and, where envisaged by the law, express or deny your consent:

-Linkedin Widgets

Privacy Policy:

-Twitter Button and Twitter social widgets (Twitter):

Privacy Policy:

Remember that you can also manage your cookie preferences through the browser

If you do not know the type and version of browser you are using, click on “Help” in the browser window at the top, from which you can access all the necessary information.

If you know your browser, click on the one you are using to access the cookie management page.

Internet Explorer
Google Chrome
Mozilla Firefox

For more information, visit

25th May 2018