Privacy Statement

based on Article 13 Regulation (EU) 2016/679 (“GDPR”)

Dear Lady/Sir,

We inform you that Enea Tech Foundation (hereinafter “Enea Tech”), as Controller, will process – for the purposes and by the methods listed below – the personal data provided by sending the curriculum vitae et studiorum, filling in the appropriate form of the “Work with us” section of the institutional website www.eneatech.it, or collected during the interview aimed at possible recruitment, and in particular:

a) Personal data

b) City, State

c) E-mail and telephone contacts

d) Past and present work experiences

e) Curricular data

1. Legal basis and purpose of processing.

The processing is based on Article 6.1 point b) GDPR and is aimed at evaluating your curriculum vitae et studiorum as part of the personnel selection.

2. Methods of processing

The processing of your personal data is performed, also by automated means, in accordance with article 4.2) GDPR and precisely: the processing of personal data may consist in the collection, recording, organization, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data.

3. Mandatory nature of the provision

The provision of data requested for the purposes under point 1 is mandatory: failure to provide them could prevent Enea Tech from evaluating your application.

4. Scope of data disclosure

Your data will be communicated to, or may in any case be known by, the Director of the Investment Team related to your project, the staff of Enea Tech authorised to process your personal data, the IT company that manages the IT procedures, appointed as Processor.

5. Transfer of data abroad

5.1. Personal data are stored on servers located in Italy. In any case, it is understood that the Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Controller already assures that the transfer outside the EU will take place in accordance with the applicable legal provisions and in particular those referred to in Title V GDPR.

5.2. Apart from the cases referred to in point 5.1., your data will not be transferred outside the EU.

6. Data retention period

Your data will be stored for the period necessary to achieve the purposes for which they were collectedand in any case no later than one year from sending of the curriculum or from the interview aimed at possible recruitment.

7. Controller

Enea Tech Foundation

Lungotevere Thaon di Revel, 76, 00196 – ROME

E-mail: info@eneatech.it

Pec: fondazioneeneatech@pec.it

8. Data Protection Officer

ENEA Tech has designated a Data Protection Officer, who can be contacted at the following email address: dpo@eneatech.it

9. Rights of the data subject

At any time you will be able to know the data concerning you, know how they were collected, check if they are accurate, complete, updated and safely stored, request their rectification or erasure pursuant to articles 16 and 17 GDPR.

In accordance with Art. 21 GDPR, you will have the right to object in whole or in part to the processing of data on grounds related to your particular situation; if the data are processed for direct marketing purposes you will have the right to object at any time to the related processing for this purpose.

These rights can be exercised through a specific request to be addressed by registered letter or pec to the Controller.

You also have the right to lodge a complaint with the Italian Data Protection Authority.

Rome, 15/02/2021

The Controller