Purpose of the processing, research and selection of candidates and legal basis
Your data is collected in the following ways:
submission of an application through the Site;
at the company;
through third-party sites or social networks.
Your data are processed both in the case of an application responding to a specific announcement and in the case of unsolicited applications when searching for and selecting candidates, in particular where entered directly in Jobtome.
Your data are also processed in order to send you service communications closely linked to the search for and selection of candidates, through traditional or automated contact methods.
To guarantee you a job placement, your data may be processed for all searches and selections of personnel that match your profile, if you do not oppose such processing at the time you provide the data or subsequently. If you object to such processing, your data are processed only within the specific selections for which you have applied.
The legal basis applicable to the processing of your personal data for the purposes referred to in point 1.2 is the performance of steps taken at your request prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR.
Your data may also be processed for the establishment, exercise or defense of legal claims.
The legal basis applicable to the processing of your personal data for the purpose referred to in paragraph 1.4 is the legitimate interests of the Company (exercise or defense of legal claims) pursuant to Article 6(1)(f) of the GDPR. The legal basis applicable to the processing of special categories of personal data that apply to you for the same purposes is the establishment, exercise or defense of legal claims pursuant to Article 9(2)(f) of the GDPR.
Categories of data processed, data source and processing of special data categories
Jobtome will collect the following categories of common personal data, including but not limited to: first name, last name, date of birth, address, email address and telephone contacts, qualifications, work experience and any further data you enter in the curriculum vitae and/or provided during an interview at the company or remotely.
Jobtome will collect the above data from you and/or from websites operated by third parties or social networks through which Jobtome publishes the ads or through which it can consult candidate profiles.
Please do not indicate any special data categories in your curriculum vitae (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation).
Data storage period
In the case of data processing for the purposes of the research and selection referred to in paragraph 1, the data shall be kept for 30 months from the date of their entry, without prejudice to your freely given indication for further retention of your data.
In the case of the processing of data for purposes related to the establishment, exercise or defense of legal claims referred to in paragraph 1, the data shall be entered in a historical archive and kept for the duration of the dispute until the time limits for the admissibility of the actions of appeal have been exhausted.
After the above storage period, the data are destroyed or rendered anonymous
Nature of the provision of data and consequences of refusal
The provision of the data marked with an asterisk in the data collection form is necessary to allow Jobtome to pursue its research and selection mentioned in point 1 above; therefore, any refusal to provide the requested data will prevent Jobtome from carrying out the research and selection activity and will mean that your application is not taken into consideration.
The processing of data is based on the principles of fairness, lawfulness and transparency and data minimization (privacy by design). It can be carried out both manually and through automated methods suitable to store, process and transmit data and will be carried out by means of appropriate technical and organizational measures, mutatis mutandis and in the state of the art, to guarantee, inter alia, security, confidentiality, integrity, availability and resilience of systems and services, avoiding the risk of unauthorized loss, destruction, access or disclosure or, in any event, unlawful use, and by means of every reasonable step to ensure that data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
Recipients of the data
Your data can only be processed by the employees of the company departments authorized for their processing, as they are responsible for the pursuit of the above-mentioned aims. These employees have received appropriate instructions in this regard.
For the purposes of paragraph 1 above, your personal data may be disclosed by Jobtome to Group Companies, in Switzerland or abroad.
Your personal data may also be processed by external subjects, expressly appointed to be responsible for processing, who provide Jobtome with:
Management and maintenance services of the Site;
Management and maintenance of the candidate database;
Communication mail services.
The updated list of recipients is available by sending an email to firstname.lastname@example.org.
Personal data provided by the candidates will not be disclosed.
Non-EU data transfer
Your data are processed in Switzerland, where the level of data protection has been deemed adequate by the European Commission in accordance with Article 45 of the GDPR. Your data may be transferred to other EU Member States.
Any transfers to non-EU Member States or international organizations are allowed, in the absence of the above-mentioned adequate guarantees, on the basis of the exemptions provided for under Article 49(1)(b) and (c). Specific notice of such transfers will be given to the data subject.
Adequacy decisions can be found at the following links: Switzerland: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016D2295
Rights of the data subject
Data subjects shall be granted the rights referred to in Articles 15 and 22 of the GDPR, where applicable.
In particular, data subjects may ask data controllers for access to their data, their erasure, rectification, the completion of incomplete data as well as the restriction of processing in the cases provided for in Article 18 of the GDPR. 
The data subjects have the right to object, at any time, in whole or in part, the processing of the data necessary for the legitimate pursuit of the interests of the controllers.
Moreover, the data subjects, in the case of the conditions for exercising the right to portability referred to in Article 20 of the GDPR , have the right to receive the data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and, where technically feasible, have the right to transmit those data to another controller without hindrance.
Data subjects have the right to lodge a complaint with the competent supervisory authority (in particular in the Member State of their habitual residence, place of work or place of the alleged infringement).
These rights can be exercised by means of a written notification sent to the address indicated below, or by email to the following address: email@example.com. It is understood that, where the request is made by electronic means, the information will be provided by a commonly used electronic means.
Withdrawal of consent
Data subjects have the right to withdraw their consent at any time by sending an email to firstname.lastname@example.org.
The withdrawal of consent shall not affect the lawfulness of processing based on consent you have given before its withdrawal.
Contact details of the data controller
The data controller is Jobtome International S.A. - Via Gaggiolo 46/A Stabio - Switzerland, in the person of the Legal Representative.
Contact details of the data protection officer (DPO)
The following contact details may be used for the Data Protection Officer (DPO): Via Gaggiolo 46/A Stabio – Switzerland, for the attention of the Data Protection Officer, and email email@example.com.
THE DATA CONTROLLER
 Namely if:
the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
the data subject has objected to processing pursuant to Article 21(1) pending the verification of whether the legitimate grounds of the controller override those of the data subject.
 Namely, where the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) of the GDPR and is carried out by automated means.