Privacy Policy

Personal data processing policy pursuant to article 13 of (EU) Regulation 2016/679


Pursuant to article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter "GDPR" or "Regulation"), Rai Way S.p.A. provides this policy, regarding the processing of your personal data for the purposes indicated below, in compliance with the GDPR, Legislative Decree 196/2003, as subsequently amended and supplemented by Legislative Decree 101/2018 (the "Privacy Code") and the provisions of the Italian Data Protection Authority (hereinafter jointly referred to as the "Privacy Legislation").


a. Type of personal data processed

The processing referred to in this policy concerns personal data collected by sending a curriculum vitae during a spontaneous application, or in response to one of our job advertisements or during a job interview. In some cases we may obtain your data (such as biographical data; contact data; data on education and professional experience; other data typically contained in resumes, hereinafter jointly referred to as "Data") from recruitment companies to which you have given your consent to share your data with us.
With the exception of jobs reserved fot legally protected categories, it will not be necessary to include in the curriculum vitae any special data (i.e. data revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations of a religious, philosophical, political or trade-unionist character, as well as data disclosing health and sex life).


b. Data relating to the Data Controller

The data controller is RAI WAY S.p.A., tax code and VAT no. 05820021003, with registered office in Via Teulada, 66, 00195 - Rome, e-mail , e-mail raiway@postacertificata.rai.it (“Data Controller”);


c. Purpose, Legal Basis and Processing Methods

The collection and processing of your data is carried out in order to enable this Company to conduct its personnel search, selection and evaluation activities.

The processing carried out for this purpose does not require the consent of the data subject, since it is necessary for the execution of pre-contractual measures taken at the request of the data subject (art. 6(1)(B) of the GDPR), with the exception of the processing of special categories of personal data which, where provided, may only be processed by the Data Controller with the explicit consent of the data subject.

Your Data will be processed by authorised personnel in accordance with article 29 of EU Regulation 2016/679.

Data may also be collected from third parties, in which case we will promptly inform you, as provided for in article 14 of the GDPR.

Data treatment for the above reasons will take place by computer and manual means, on the basis of logical criteria compatible with and functional to the purposes for which the Data have been collected, in compliance with the rules of confidentiality and security laid down by law and the company's internal regulations. In particular, the Data will be processed by comparing, classifying and calculating them, as well as by producing lists. Some Data will also be processed on behalf of the Company by third companies, entities or professionals who, as outsourced data processors, perform specific processing services or activities complementary to ours.


d. Categories of Data Recipients

The Data may be used by third parties and/or companies that perform instrumental activities on behalf of the Data Controller such as:

  • external consultants for staff recruitment, selection and evaluation;
  • other Group companies, parents, subsidiaries or jointly controlled companies;
  • entities for whom access to the Data is expressly recognised by law, regulations or measures issued by the competent authorities.

These recipients, as the case may be, will process the Data in their capacity as data controllers, data processing managers or data processors.

Apart from the above-mentioned cases, your data will not be disseminated in any way.


e. Transfer of Data to a Third Country

Your data will not be transferred abroad.


f. Data Retention

Data collected through the submission of a curriculum vitae as an unsolicited application will be kept until the end of the calendar year following the year of receipt; Data collected during an interview may be kept for up to twenty-four months; if you are still interested in proposing your candidature once these terms have elapsed, you will have to resubmit it. Excluded from the above time limits are cases where it is necessary to retain the Data for a further period to defend or enforce a right or to fulfil any legal obligations or orders of the Authorities.


g. Rights of the Data Subject

Current legislation grants the person concerned numerous rights, which we invite you to consider carefully. These include,

We remind you of the rights of:

  • Access to the following information:
    a. purpose of the processing,
    b. categories of personal data concerned,
    c. recipients or categories of recipients to whom such personal data have been or will be disclosed, in particular if they are recipients from third countries or international organisations,
    d. existence of the data subject's right to request from the controller the rectification or erasure of personal data or restriction of the processing of personal data concerning him or her or to object to their processing;
  • Rectification, by which is meant:
    a. correction of inaccurate personal data concerning him/her without justified delay,
    b. supplementation of incomplete personal data, including by providing a supplementary declaration;
  • Deletion of data relating to you without undue delay, if:
    a. the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
    b. you withdraw your consent and there is no other legal basis for the processing,
    c. you object to the processing and there is no overriding legitimate ground for the processing,
    d. the personal data have been processed unlawfully,
    e. the personal data must be deleted in order to comply with a legal obligation,
    f. the personal data have been collected in connection with the provision of information society services;
  • Limitation of processing:
    a. where you contest the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of the personal data
    b. where processing is unlawful and you object to the deletion of the personal data and request instead that their use be restricted,
    c. when the personal data are necessary for the establishment, exercise or defence of a legal claim by the data subject, although the controller no longer needs them for the purposes of the processing,
    d. when you object to the processing by virtue of your right to object;
  • Receive notification in the event of rectification or deletion of personal data or restriction of processing;
  • Data portability, i.e. the right to receive personal data concerning you in a structured, commonly used and machine-readable format and the right to have such data transmitted to another data controller, where:
    a. the processing is based on your express consent for one or more specific purposes or takes place pursuant to a contract entered into with the data subject and
    b. the processing is carried out by automated means;
  • Object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.

You have the right to lodge a complaint with a supervisory authority if you feel that you have not been granted the rights set out herein.

To exercise the above rights, you may contact the Controller by sending a registered letter with acknowledgement of receipt to the address indicated or an e-mail to tutelaprivacy@raiway.it


h. Compulsory or optional nature of providing data and consequences

Providing data for the above-mentioned purposes is optional and it is up to you to submit your curriculum vitae. However, failure to provide Data, in whole or in part, may prevent the selection process from continuing.