Legal

Candidate privacy notice

This notice explains how Elsinor processes the personal data of people who apply for an open position or send a spontaneous application, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Please read it before sending us your CV or any other personal information.

Data controller

The data controller is Elsinor, with registered office at Via Margifaraci, 60, 90135 Palermo, Italy.

For any request regarding your data you can write to [email protected].

Data we process

We process the data you voluntarily provide in your application: first and last name, contact details (email, phone), CV, cover letter and any information about your professional experience and skills.

Please do not send us special categories of data (Art. 9 GDPR), such as data on health, religious beliefs or trade union membership, unless strictly necessary and required by law.

Purposes of processing

Your data is processed solely to manage the recruitment process: assessing your application, any interviews and related communications.

With your consent, we may keep your application on file to consider you for future positions that match your profile.

Legal basis

For managing an application to an open position, the legal basis is the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

For assessing spontaneous applications and keeping data on file for future opportunities, the legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

In some cases processing may rely on our legitimate interest in identifying suitable profiles (Art. 6(1)(f) GDPR), balanced against your rights.

Retention period

Without consent to retention, data relating to an unsuccessful application is deleted within 6 months of the end of the selection process.

Where you consent to retention for future opportunities, data is processed for a maximum of 12 months from collection, after which it is deleted or we ask you to renew your consent.

The data of hired candidates is transferred to their personnel file and managed under the dedicated employee privacy notice.

Your rights and erasure

You can exercise the rights under Articles 15-22 GDPR at any time: access, rectification, erasure (right to be forgotten), restriction of and objection to processing, and data portability.

To request the immediate deletion of your application or to withdraw consent, write to [email protected]: we will act without undue delay. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Recipients and transfers

Data is accessible to authorised staff involved in the recruitment process and may be processed by suppliers acting as data processors (e.g. email services or recruiting platforms), appointed under Art. 28 GDPR.

We do not disclose your data and do not transfer it to third countries without the appropriate safeguards provided for by the GDPR.

Contact

Elsinor — Via Margifaraci, 60, 90135 Palermo, Italy
Email: [email protected]

For any question about how we process your data as a candidate, contact us at the address above.

Last updated: May 2026