Candidate Privacy Notice

Version 1.0 – last updated: 20 October 2026

This notice explains how SINT Srl processes the personal data of people who apply for a job or send their CV, through the “Work with us” page of www.xgslab.com or by e-mail. It is provided under Article 13 of Regulation (EU) 2016/679 (GDPR) and Article 111-bis of Italian Legislative Decree 196/2003.

1. Data Controller

SINT Srl, Via Cristoforo Colombo 106, 36061 Bassano del Grappa (VI), Italy – VAT no. IT02324560248 – privacy@sint.eu.

2. Data we process

Your name and contact details, the content of your message and of your CV (education, work experience, skills, languages, expectations) and any information that emerges during interviews. Please do not send data revealing health, religious or political beliefs or other special categories of data unless strictly necessary, for example to apply for positions reserved for protected categories under Italian Law 68/1999.

3. Purpose and legal basis

We use your data only to evaluate your application for current or future positions and to contact you for interviews. The legal basis is the taking of steps at your request before entering into an employment or collaboration contract (Art. 6(1)(b) GDPR). Under Article 111-bis of Legislative Decree 196/2003, your consent is not required for CVs you send on your own initiative. Any special categories of data are processed only where necessary to comply with employment law obligations (Art. 9(2)(b) GDPR).

4. Retention

We keep your application for 12 months from receipt, so that we can consider you for other positions that open in that period. After that it is deleted, unless you are hired, in which case the data becomes part of your personnel file. You can ask us to delete it earlier at any time.

5. Who can see your data

Your application is received by the administrative staff who manage the general company mailbox and is forwarded to the person responsible for human resources and, where relevant, to the managers involved in the selection. All of them are authorised and instructed to process personal data. The data is stored on the systems of our e-mail and hosting provider, Aruba S.p.A. (Italy), acting as data processor. It is not disseminated or transferred outside the European Union.

6. Is providing data mandatory?

No, but without your contact details and CV we cannot evaluate your application.

7. Your rights

You can ask for access to your data, its rectification or erasure, the restriction of processing and data portability, and you can object to processing (Articles 15–22 GDPR) by writing to privacy@sint.eu. We will reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).