Purposes of processing, data processed and legal basis
Register on the portal if you are interested in applying for FIDIA job vacancies.
If you decide to do so, we will process the personal data you provide for the purposes of recruitment and selection, such as: your name and personal details, residential/domicile address and contact details, email address, educational background, professional experience, and the updating or uploading of any attachments related to your profile in which you voluntarily include your data, including details of any membership of protected categories of workers, for the purposes expressly provided for by applicable employment legislation.
The provision of data marked as mandatory on the portal is necessary in order to consider your application; without this information, it will not be possible to proceed.
Your access to the portal, as a user, will be governed by individual login details, which you will set up upon registration.
Please remember to keep the password you have chosen confidential.
We will process your data to enable you to activate and access your user account on our portal (your identification and contact details, technical data necessary to enable your technical connection to the portal) and to follow up on your request to activate your user profile, as well as to apply appropriate security measures to protect your data, in accordance with our legitimate interests and as required by law.
You can manage your data and information from your account at any time, keeping them up to date.
We also inform you that, in order to assess the candidate’s suitability and their purely professional skills as part of the recruitment process, the selection process takes place via a dedicated platform, which may use Artificial Intelligence (AI) algorithms, such as: mapping and classification of skills, analysis of the professional profile, indicators of consistency with the role, grouping by professional/skill areas, and descriptive summaries of the profile.
These results serve to support the assessment of your professional profile and are always subject to human supervision; no fully automated decisions with legal or significant effects on you are made. Therefore, the purposes pursued do not involve any decision-making process based solely on the automated processing of personal data, including profiling.
The use of these tools is based on the Data Controller’s legitimate interest in ensuring effective selection processes that are consistent with organisational needs.
Data Controller
The Data Controller for the data processing described in this notice is FIDIA, the company publishing the job vacancies for which you are applying. Where you have not applied for specific job vacancies, the Data Controller is Fidia Farmaceutici S.p.A., Via Ponte della Fabbrica 3/A – 35031 Abano Terme (PD), Tax Code/VAT No. 00204260285 (FIDIA HQ). The full list of all FIDIA companies can be found here https://www.fidiapharma.com/our-group/where-we-are/.
Retention periods
For each job vacancy applied for, once the selection process has been completed, the accounts of those who have been hired will be closed on the portal and their data anonymised (including the results generated by the digital tools used, such as skills mapping and classification, and descriptive profile analysis), whereas for those who have not been selected, their data will be retained for six months from the date the job vacancy closes; this is to enable us to manage any cases where the vacancy is reopened or to carry out checks in the event of difficulties with placements.
Please note that our quality system classifies certain job vacancies as “sensitive,” which are therefore subject to a specific control regime; for this reason, the data of those who attend an interview for such sensitive job vacancies will be retained for a period of six years in accordance with regulations requiring specific checks from the recruitment stages onwards.
Whenever you update certain details in your profile, excluding your email address, the six-month period will restart from the date of your update.
As this retention period nears its end, you will be sent a notification asking for your consent to retain your data on the portal for a further twelve months, so that you are ready to express your interest in new job vacancies that may be published over time; if you give your consent, you may revoke it at any time: to do so, simply log in to the portal and close your account. Withdrawing this consent does not affect the lawfulness of processing based on consent given prior to withdrawal, nor does it affect the data retention period in accordance with legal obligations. Once the retention period has expired, your account will be closed and your data anonymised.
Data transfer
If you intend to apply for a job vacancy in a country other than that of the FIDIA website from which you are registering on the portal, you are aware that this constitutes your consent for your data to be processed by the FIDIA company operating in that foreign country.
Your data will be processed by personnel responsible for recruitment activities in relation to the job vacancies for which you are applying. The management of the portal is a service provided by FIDIA HQ, acting as Data Processor for the companies of the FIDIA Group that publish job vacancies.
The data may also be disclosed to the platform provider, which uses Artificial Intelligence (AI) tools and acts as a Data Processor for activities carried out on behalf of the Company, with the exception of purposes relating to training, algorithm improvement, and research and development in the field of Artificial Intelligence (AI), for which the provider will process anonymised data as an independent Data Controller on a private cloud server exclusively owned by them, located within the European Economic Area.
Such processing will not be carried out on behalf of our Company and will not influence the selection processes currently underway.
For the purposes indicated above, your data may be disclosed to other companies within the FIDIA Group. Any transfer of your personal data will take place if necessary to carry out pre-contractual measures adopted at your request, or where the transfer is necessary to establish, exercise or defend a legal claim.
In the event of any transfers of your personal data necessary for the management of the portal and/or as part of the function supporting the assessment of your profile, these will always be carried out in compliance with the applicable legislation on personal data protection. In particular, in the case of data transfers outside the European Union (EU), these will be carried out:
- to third countries outside the EU for which the European Commission considers that an adequate level of personal data protection exists; or
- if the recipient of the data has obtained adequate certification or has adhered to a specific code of conduct ensuring that the processing of personal data is carried out with adequate guarantees equal to those provided for by European legislation; or
- if adequate safeguards are in place to protect personal data, through the conclusion of contracts incorporating the so-called Standard Contractual Clauses drawn up by the European Commission or by the relevant national Data Protection Authority.
Further information on the safeguards adopted for such transfers may be requested by contacting the Data Protection Officer (DPO) at the following email address:dpo@fidiapharma.it.
Exercise of privacy rights
For data processing for which a FIDIA company established in the EU is the Data Controller
In accordance with current data protection legislation, by writing to the DPO at the email address dpo@fidiapharma.it, you may exercise the rights provided for by European Regulation 2016/679 (the Regulation) as applicable to your case:
Access: the right to obtain confirmation as to whether or not your personal data is being processed and, if so, the right to request access to such data and obtain a copy thereof.
Rectification: the right to report any inaccuracies in your personal data in order to have them rectified or supplemented. In this regard, please note that you may update your data as necessary by logging into your account on the portal.
Right to erasure: the right to obtain the erasure of your personal data in the cases provided for in Article 17 of the Regulation.
Right to restriction: the right to have processing restricted in the cases provided for in Article 18 of the Regulation.
Right to Data Portability: the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format, and the right to transmit such data to another data controller without hindrance, under the conditions set out in Article 20 of the Regulation.
Right to object: the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, in the cases provided for in Article 21 of the Regulation.
You may also exercise your right to lodge a complaint with the supervisory authority responsible for personal data protection, specifically in the EU Member State where you habitually reside, work, or where the alleged infringement occurred.
For data processing where the data controller is a FIDIA company established in a non-EU country
You may exercise your rights as provided for by the local legislation in force regarding personal data protection by writing to helpdeskhris@fidiapharma.it and, where provided for by the legislation, you may exercise your right to lodge a complaint with the local supervisory authority for personal data protection.
Date of publication of this policy: 15/06/2026
Previous policy published on 31/03/2023