hello@itglobalconsult.it
Certified reliability: ISO/IEC 27001:2022 – Cert. no. IT347116 (Bureau Veritas). Find out more

Privacy notice for job applicants

pursuant to Art. 13 of Regulation (EU) 2016/679 (“GDPR”) and Art. 111-bis of Italian Legislative Decree 196/2003

This notice explains how IT Global Consulting S.r.l. processes the personal data of anyone who applies for an open position or sends a speculative application, through the form linked from the “Careers” page of www.itglobalconsult.it or through other channels (for example email or LinkedIn).

1. Data controller

IT Global Consulting S.r.l. (single-member company) – Via Vincenzo Foppa 7, 20144 Milan, Italy – Tax code and VAT no. IT07885620968. For any request about the processing of your data: privacy@itglobalconsult.it.

2. What data we process

  • first and last name;
  • contact details: email, phone number and, if provided, LinkedIn profile;
  • date of birth;
  • home address: street, postcode, town or city, province and country;
  • the position you are applying for;
  • CV and professional information: certifications, technical skills, willingness to relocate, salary expectations, preferred contract type and notice period;
  • only if you choose to state it, membership of a protected category under Italian Law 68/1999.

We do not ask for a photograph. Please do not include in your CV data that is not needed for the assessment, in particular health data or other special categories of data (Art. 9 GDPR): if present, we will not use it for recruitment. Any membership of a protected category is processed only for the purpose set out in section 3(c).

3. Why we process your data and on what legal basis

a) Assessing your application and managing the recruitment process (contacts, interviews, any technical tests, offer of employment or engagement). Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Consent is not required for speculative applications (Art. 111-bis of Legislative Decree 196/2003).

b) Presenting your profile to the client: positions normally involve work at clients of IT Global Consulting; if you pass the selection stages, your profile may be presented to the client concerned, only for that position and when this is necessary to continue the selection. We send the client only the necessary identification and professional data (normally your CV), not data about your health or protected-category membership. Legal basis: Art. 6(1)(b) GDPR.

c) Considering your application also for hiring under Italian Law 68/1999 (targeted employment) and complying with the related obligations, if you tell us you belong to a protected category. Legal basis: Art. 6(1)(c) and Art. 9(2)(b) GDPR; Italian Law 68/1999.

d) Considering your profile for other suitable positions, within the retention period set out in section 7. Legal basis: IT Global Consulting’s legitimate interest in identifying suitable candidates (Art. 6(1)(f) GDPR); you may object at any time. We do not reuse protected-category data for this purpose.

e) Establishing, exercising or defending legal claims. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and, for any special categories of data, Art. 9(2)(f) GDPR, limited to the data needed.

4. Providing your data

The data marked as mandatory in the form are needed to assess your application: first and last name, date of birth, email, phone number, town or city, province and country, position, CV and the professional information requested. Without them we cannot consider your application.

Your LinkedIn profile, street and postcode, salary expectations and protected-category membership are optional. If you do not state that you belong to a protected category, your application is assessed in the normal way, but we cannot consider it for hiring under Italian Law 68/1999.

We do not make decisions based solely on automated processing, including profiling.

5. Who may access your data

  • IT Global Consulting staff involved in recruitment (management, human resources, recruiters and technical leads taking part in interviews), who are authorised, instructed and bound by confidentiality;
  • providers processing data on our behalf as processors (Art. 28 GDPR): Formagrid Inc. (“Airtable”), which provides the application form and the application records, and Microsoft Ireland Operations Limited (Microsoft 365: email and document storage), used for CVs received by email and for communications with candidates;
  • in the case described in section 3(b), the client where the work would take place, which processes the data as an independent controller.

An up-to-date list of processors is available on request at privacy@itglobalconsult.it. Your data are not disclosed to the public.

6. Transfers outside the European Union

Formagrid Inc. (Airtable) is based in the United States. The transfer is based on the standard contractual clauses approved by European Commission Implementing Decision (EU) 2021/914 (Module 2), included in the data processing agreement with the provider (Art. 46 GDPR). For Microsoft 365 services, any transfers to the United States are based on the EU-US adequacy decision (Data Privacy Framework) or on the standard contractual clauses included in Microsoft’s terms. You can request a copy at privacy@itglobalconsult.it.

7. How long we keep your data

If your application does not lead to employment or an engagement, we keep your data for 24 months from receipt and then delete it; you can ask for earlier deletion at any time. If you are hired or start working with us, the necessary data are transferred to your personnel file and processed under the notice for employees and contractors. In the event of a dispute, the necessary data are kept until it is resolved.

8. Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability of the data you provided, and you can object to processing based on legitimate interest (Arts. 15–22 GDPR). To exercise your rights, write to privacy@itglobalconsult.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU Member State where you live or work.

9. Updates

This notice may be updated; the version in force is the one published at www.itglobalconsult.it/en/candidate-privacy-notice. Last updated: 1 November 2026.