Candidate Privacy Policy

Information (2) provided pursuant to art. 13 of EU Regulation no. 2016/679

[https://abrakadabraitaly.com/pages/abk-team-lavora-con-noi]

I. Why are you receiving this information?

Because ABK Experience s.r.l. intends to process some of your personal data through the form 'Want to work with us?!' (on the website 'https://abrakadabraitaly.com/') for the purposes and in the manner described below, and the law requires that you be informed of this in advance and adequately. All of this is distinct from the content of the Personal data protection policy and the Cookies policy.

II. Who is providing you with this information?

The data controller is (according to the law) the entity that has independently decided both these purposes and these methods, controlling the website in question, and the law requires that you know who it is and, above all, how it can be contacted.

In this case, it will be ABK Experience s.r.l., a capital company with VAT number and tax code no. 04783490404, registered with the Business Register under no. RN-440772, located in via Monte Rosa, 11 - Riccione (RN), 47838, and contactable via the corporate e-mail 'compliance@abrakadabraitaly.com'.

III. What are the aforementioned processing purposes?

The primary task of the data controller is (according to the law) to declare what objectives it intends to achieve through the processing of your personal data.

The first [1] [main] purpose is to define the structure of the suitable subordinate employment, para-subordinate employment or internship relationship for you, in light of what you have requested, so as to allow for more efficient planning of its selection activities and your maximum satisfaction: with reference to any processing of special categories of personal data, in addition, this will be limited to what is strictly necessary to fulfill a legal obligation and/or exercise a legal right in labor law matters of which the data controller is the recipient and/or holder. If you want to know more about the data controller because you are convinced of the added business value you can help create, this is the purpose for you.

The second [2] [ancillary] purpose is to comply with personal data protection regulations, conforming to one or more relevant legal obligations: with reference to any processing of special categories of personal data, in addition, this will be limited to what is strictly necessary to pursue a significant public interest attributable to personal data protection regulations. Please read section (n. IV.c.) regarding your rights carefully to understand what the data controller will be required to do.

The third [3] [ancillary] purpose is to potentially protect - even if it is hoped that it will not be necessary - its economic interests in extra-judicial and/or judicial proceedings [legitimate interest]: with reference to any processing of special categories of personal data, in addition, this will be limited to what is strictly necessary to establish, exercise or defend the data controller's rights in extra-judicial or judicial proceedings. Don't worry, it's just the legislator who imposes such a clarification on us...

IV.a. Who will help pursue the processing purposes?

The second task of the data controller is (according to the law) to declare what methods it intends to adopt for the processing of your personal data: here, in particular, who will have access to your personal data. Please note that a service provider in this context is not a mere software reseller, but the entity that hosts your personal data involved in the use of the same software on its servers.

Internally, with regard to the first [1], second [2], and third [3] purposes, only the sole director (general management area) will be involved.

Externally, with regard to the first [1] purpose, the website hosting service provider (A), the secretarial - commercial and technical, conformity, commercial and technical assistance service provider (B) and - eventually - the labor law assistance service provider (C) will be involved, all authorized to act as data processors.

Externally, with regard to the second [2] purpose, the website hosting service provider (A), the secretarial - commercial and technical, conformity, commercial and technical assistance service provider (B), - eventually - the labor law assistance service provider (C), - eventually - the corporate email hosting service provider (D), - eventually - the certified corporate email hosting service provider (E) and - eventually - the specially selected lawyer(s) (F) will be involved, all authorized to act as data processors, as well as - eventually - the specially selected lawyer(s) (I), acting as independent data controller(s).

Externally, with regard to the third [3] purpose, - eventually - the corporate email hosting service provider (A), - eventually - the secretarial - commercial and technical, conformity, commercial and technical assistance service provider (B), - eventually - the certified corporate email hosting service provider (C) and - eventually - the specially selected lawyer(s) (D) will be involved, all authorized to act as data processors, as well as - eventually - the specially selected lawyer(s) (I), acting as independent data controller(s).

Please note that the corporate website hosting service provider, for the pursuit of the first [1] and second [2] purposes, will - in case of detection of its operational needs - transfer your personal data to Canada (CA) and - potentially - to one or more other non-EU member states, which can in any case be qualified as third countries, adopting as adequate safeguards the adequacy decisions regarding the individual relevant national legal systems concerning personal data protection, pursuant to art. 45, p. 1 of the GDPR and/or the standard contractual clauses for the transfer of personal data referred to in dec. ex. (European Commission) no. 2021/914, pursuant to art. 46, p. 2, l. c) of the GDPR, as stated at 'https://www.cloudflare.com/it-it/cloudflare-customer-dpa/' (section "6. Data transfers from the EEA, Switzerland, and the UK"), unfortunately not currently available in Italian.

Please also note that the secretarial - commercial and technical, conformity, commercial and technical assistance service provider, for the pursuit of the first [1] and second [2] purposes, will - in case of detection of its operational needs - transfer your personal data to Canada (CA) and - potentially - to one or more other non-EU member states, which can in any case be qualified as third countries, adopting as adequate safeguards the adequacy decisions regarding the individual relevant national legal systems concerning personal data protection, pursuant to art. 45, p. 1 of the GDPR and/or the standard contractual clauses for the transfer of personal data referred to in dec. ex. (European Commission) no. 2021/914, pursuant to art. 46, p. 2, l. c) of the GDPR, as stated regarding its distinct hosting assistant (corporate email) at 'https://www.cloudflare.com/it-it/cloudflare-customer-dpa/' (section "6. Data transfers from the EEA, Switzerland, and the UK"), unfortunately not currently available in Italian.

IV.b. How long will it take to pursue the processing purposes?

The second task of the data controller is (according to the law) to declare what methods it intends to adopt for the processing of your personal data: here, in particular, for how long it will have access to your personal data.

Regarding the first [1] purpose, the necessary personal data will be retained until the conclusion date of the definition of the subordinate employment, para-subordinate employment or internship contractual relationship, even if the outcome is negative.

Regarding the second [2] purpose, moreover, the necessary personal data will be retained until the conclusion date of the definition of the subordinate employment, para-subordinate employment or internship contractual relationship, but subsequently - in a separate and secure location, to ensure the pursuit of the third [3] purpose - for another 10 years thereafter.

Regarding the third [3] purpose, finally, the necessary personal data will be retained for a period of 10 years from the conclusion date of the definition of the subordinate employment, para-subordinate employment or internship contractual relationship.

IV.c. What rights can you exercise before, during, and after processing?

The second task of the data controller is (according to the law) to declare what methods it intends to adopt for the processing of your personal data: here, in particular, what you can ask the data controller to do.

Regarding the first [1], second [2] and third [3] purposes, you may access your processed personal data, obtaining information on the processing similar to what you find in this policy, as well as a copy of the same, rectify your processed personal data, for example if you have changed your email contact, have your processed personal data erased, for example if you consider the processing unlawful, have the processing of your processed personal data restricted, instead of having them erased, for example if you consider the processing unlawful: all this can be done by writing to 'compliance@abrakadabraitaly.com'.

Furthermore, only with regard to the third [3] purpose, you may object to the processing of your processed personal data: this too can be done by writing to 'compliance@abrakadabraitaly.com'.

However, finally, with regard to the first [1], second [2] and third [3] purposes, you may lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali) at 'https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524’ or with the national supervisory authority operating within the territory of the European Union state where you reside and/or work, qualified in any case as a competent supervisory authority: this will be very useful if at any time you consider the processing of your personal data unlawful.

IV.d. Is it mandatory to communicate your personal data to the data controller?

The second task of the data controller is (according to the law) to declare what methods it intends to adopt for the processing of your personal data: here, in particular, whether there is a pre-contractual or contractual and/or legal obligation that requires the data controller to collect your personal data.

Regarding the first [1] purpose, a pre-contractual obligation applies, and therefore the data controller would not otherwise be able to effectively define the nature of the subordinate employment, quasi-subordinate employment or internship contractual relationship.

Regarding the third [3] purpose, there is no pre-contractual or contractual and/or legal obligation, and therefore the data controller acts only to satisfy its legitimate interest linked to this purpose, ensuring all necessary guarantees.

Date: 12/01/2026

The legal representative of the data controller: Mr. Valerio MONTANARI