Privacy Policy – Candidates

Privacy Policy to be provided to candidates, pursuant to articles 13 and 14 – EU Reg. 2016/679 (GDPR)

Italian Wine Brands S.p.A., in conjunction with the selection of professional figures to be included in its staff, in full compliance with the rules on the protection of personal data (EU Regulation no. 2016/679, called GDPR), invites you to read the following information.

Identity and contacts of the data controller

The Data Controller is Italian Wine Brands S.p.A., with registered office in Viale Abruzzi, 94 – 20131 Milan and VAT number 08851780968.

A Data Protection Officer (DPO) is also in charge and can be consulted by writing to the e-mail address

The complete and up-to-date list of the persons in charge appointed by our company can be obtained by sending a written request by e-mail to, or by registered letter.

Category of personal data and processing methods

The processing of the data in question will concern, for example:

– First name

– Surname

– place and date of birth

– address of residence and domicile

– telephone number

– E-mail address

– marital status

– whether you have a car

– professional training

– specific technical knowledge

– previous occupations

– current occupation (company, location, from, duties, classification, Annual Gross Salary, special benefits and facilities, notice of resignation, willingness to relocate)

– Membership of CP (L. 68/99)

All the documentation that you have provided us with on this occasion is kept by our Company, at our head office in Milan or, alternatively, at the head office of the subsidiary Giordano Vini S.p.A., located in Valle Talloria di Diano D’Alba (CN).

The processing of the data in question is also carried out with the aid of electronic and automated means, by means of terminals and personal computers connected to the network and, in any case, by means of instruments suitable to guarantee security and confidentiality. The methods applied also guarantee non-interference between the processing operations relating to the various purposes and limited access only to the persons in charge of each of the purposes relating to your selection process with the undersigned.

The personal data processed are those provided voluntarily by the candidate when sending the curriculum, during the assessment interviews or through direct contacts, for example at trade fairs or exhibitions, and are recorded on paper, electronic or telematic media. Of the data received, Italian Wine Brands S.p.A. will take care:

– the exact registration, so that they correspond to what has been declared by the interested party;

– the updating at every communication of variation by the candidate;

Purposes of the processing, legal basis and retention times

The collection and processing of personal data is carried out by our company exclusively within the scope of carrying out personnel search, selection and assessment activities. The data may come to the attention of the data processors or persons in charge of processing appointed by our company within the entities involved in personnel selection activities.

The processing is necessary for the execution of pre-contractual measures taken at the request of the data subject (art.6 lett.b, GDPR). Therefore the data will be processed by Italian Wine Brands S.p.A. for purposes related or instrumental to the performance of the activity of search and selection of candidates.

The provision of personal data by the interested party is optional and therefore there is no legal obligation.

The data shall be kept in a form that allows the identification of the candidate for a period of time not exceeding that necessary for the purposes for which they were collected, and in any case not exceeding 24 months.

Scope of data communication

The data may be used by personnel of Italian Wine Brands S.p.A. who have been assigned a specific role of data processor. There is no circulation of the personal data of the interested party outside the EU.

Particular data

Considering the possibility that the information provided to Italian Wine Brands S.p.A., relevant for the specified purposes, contain data of a sensitive nature (i.e. data revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations of a religious, philosophical, political or trade unionist nature, as well as data disclosing health and sex life) such data may be processed by Italian Wine Brands S.p.A. only after explicit consent from the person concerned (art.9, c.2 lett.a, GDPR).

Decision making process based on automated treatment

In the treatment that Italian Wine Brands S.p.A. will carry out on the personal data of the candidate there is no automated decision making process.

Rights of the interested parties under articles 15-22, GDPR

In relation to the processing of personal data, according to the following articles of the GDPR 2016/679: You have the right to ask Italian Wine Brands S.p.A.:

Art.6 – withdrawal of consent: you may withdraw your consent at any time;

Art.15 – access: the interested party may ask for confirmation that there is or is not a processing of data concerning him, as well as further clarification of the information referred to in this statement;

Art.16 – rectification: the interested party may ask to rectify or supplement the data he has provided us with, if inaccurate;

Art.17 – cancellation: the interested party may request that his/her data be cancelled if it is no longer necessary for our purposes, in case of revocation of consent or his/her opposition to processing, in case of unlawful processing, or if there is a legal obligation to cancel or refer to persons under sixteen years of age.

Art.18 – restriction of processing: the data subject may request that his or her data be processed only for storage purposes, to the exclusion of other processing, for the period necessary to rectify his or her data, in the event of unlawful processing for which he or she objects to the deletion, if he or she has to exercise his or her rights in court and the data stored by the Controller may be useful to him or her and, finally, if he or she objects to the processing and a check is being carried out as to whether the Controller’s legitimate reasons prevail over his or her own.

Art.20 – portability: the data subject may request to receive his data, or have them transmitted to another data controller indicated by him, in a structured, commonly used and machine-readable format.

Art.21 – objection to processing: the data subject may object at any time to the processing of his or her data, unless there are legitimate reasons for the Controller to proceed with the processing that override his or her own, e.g. to exercise or defend himself or herself in court.

Art.22 – Opposition to automated decision-making: the data subject may oppose automated decision-making if the Controller carries out this type of processing.