Information on the processing of personal data in accordance with Art. 13 of Regulation (EU) 2016/679

Pursuant to Art. 13 of Regulation (EU) 679/2016 (General Data Protection Regulation, hereinafter referred to as GDPR or Regulation for brevity), we inform you that your personal data freely provided by you, will be processed by Studio Bandera Legale – Societario – Tributario, with registered office in Via Carlo Maria Martini 1, 20122 – Milan; P.IVA 03631650987; mainly by computer or telematic means, exclusively for the performance of personnel selection and evaluation activities, in the interest of the Firm. Data is collected by sending information about one’s professional experience in the form of a Curriculum Vitae (“CV”) and possible cover letter by spontaneous application, filling in the form made available on the Firm’s website and attaching what is requested. The legal basis legitimizing the processing is Art. 6(1)(b) GDPR, insofar as the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject. Also under Art. 111-bis, Legislative Decree. 196/2003, consent is not required.

The provision of data is optional. It should be noted, however, that failure to provide such data will result in the Firm’s inability to consider the data subject’s application as part of any personnel selection and evaluation procedure. Curricula received will be discarded at the end of the calendar year following the one in which they were received; if you are still interested in proposing your candidacy to us, you will necessarily have to resubmit.

We also inform you that the data you freely provide will be processed only by personnel authorized by the Owner and will not be disseminated.

Current legislation grants the Data Subject numerous rights; these include the right to ask the Data Controller for access to the data and the rectification or erasure of the data or the restriction of processing concerning him or her or to object to its processing, as well as the right to data portability. You also have the right to revoke consent at any time, without affecting the lawfulness of the processing based on the consent given before revocation. To exercise the rights indicated, you can write an e-mail to or to the DPO at, or a registered letter to the Data Controller at the addresses given in this policy.

The Regulations also provide for the right to file a complaint with the Data Protection Authority.