Privacy Policy

Privacy Notice on the Processing of Personal Data

#

Pursuant to Arts. 12, 13, and 14 of Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection legislation, we inform you about the processing of personal data provided through the forms on the Qualibit srl website:

• the contact form (“Request information”);
• the application forms (“Work with us” / “Internships”);
• communications sent spontaneously via email.

1. Data Controller and contacts

#

The Data Controller is:

Qualibit srl — Registered office: via Cjavecis, 3 – 33100 Udine (UD), Italy VAT/Tax Code: 02337550301 Phone: +39 0432 151 1889 Email: info@qualibit.it PEC: qualibit@pec.it

Any requests regarding the processing of your personal data (including the exercise of rights set out in section 8) can be sent to privacy@qualibit.it .

2. Types of data processed

#

Contact form (Request information)

#

Through the contact form, the following data may be collected and processed:

• identification data (first and last name);
• company name (optional);
• contact data (email address, phone number);
• the content of the message and any other information freely provided by the user.

Application forms (Work with us / Internships)

#

As part of the selection and evaluation process, the following data may be collected and processed:

• personal identification data (e.g. name, surname, date and place of birth, residence);
• contact data (e.g. email address, phone number);
• education and training data (e.g. qualifications, certifications, technical skills);
• professional experience data (e.g. roles held, classification, current salary, references);
• any other information contained in the curriculum vitae and submitted documentation (cover letter, portfolio, links to professional profiles, etc.).

The applicant’s CV or communications may also contain special categories of data as per Art. 9 GDPR (e.g. data revealing health status or belonging to protected categories). Qualibit srl invites applicants not to include such data unless strictly necessary. If provided nonetheless, they will be processed within the limits of Art. 9(2)(b) GDPR.

3. Purposes and legal bases

#

A. Handling information requests

#

1. Responding to contact requests — Processing and responding to commercial, technical or other enquiries submitted through the contact form or via email.

   Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR); legitimate interest of the Controller in responding to received communications (Art. 6(1)(f) GDPR).

2. Protection of the Controller’s rights — Management of disputes or pre-litigation matters.

   Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

B. Recruitment and internships

#

1. Recruitment and Selection — Evaluating the applicant’s profile against open positions, scheduling and conducting interviews and technical assessments, communicating with the applicant.

   Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR); legitimate interest (Art. 6(1)(f) GDPR).

2. Establishment of employment or internship relationship (if selection is successful) — Preparation of contractual documentation and compliance with legal obligations (tax, social security, insurance).

   Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR); performance of a contract (Art. 6(1)(b) GDPR).

3. Retention of CV for future opportunities (optional) — With your express consent, your CV may be retained to evaluate your profile for future openings.

   Legal basis: consent (Art. 6(1)(a) GDPR). Consent is optional and may be withdrawn at any time.

4. Protection of the Controller’s rights — Management of disputes or pre-litigation matters.

   Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Processing methods

#

Processing is carried out in compliance with the principles of lawfulness, fairness, transparency, data minimization, and storage limitation, using manual and electronic means, with appropriate technical and organizational measures to ensure security and confidentiality. No automated decision-making pursuant to Art. 22 GDPR is carried out.

5. Scope of data disclosure

#

Data may be processed exclusively by personnel authorized by the Controller. Data may also be disclosed to third parties only when strictly necessary:

• consultants and professionals (e.g. labour consultants, accountants, lawyers) for administrative, accounting, and tax purposes, appointed as data processors under Art. 28 GDPR where required;
• promoting bodies (schools, universities, training institutions) exclusively for the activation of internships;
• public bodies (e.g. INPS, INAIL, Employment Centre) in case of hiring or internship activation.

Third-party services used on the website

#

• Google Analytics (GA4) – statistical analysis service by Google LLC. Activated only with user consent. Google Privacy Policy .
• Google Ads – conversion tracking service by Google LLC. Activated only with user consent. Google Privacy Policy .
• Google reCAPTCHA v2 – spam protection service by Google LLC, used in the website forms. Google Privacy Policy .
• Static Forms (staticforms.dev) – form data transmission service, acting as data processor.

For more details on cookies and tracking technologies, please see our Cookie Policy .

Data will not be publicly disseminated.

6. Data transfers outside the EU

#

As a general rule, your data will be processed within the European Economic Area (EEA).

Where, for specific technical reasons, processing involves transfer of data to countries outside the EU, such transfer will comply with Arts. 45 et seq. of the GDPR (Adequacy Decisions or Standard Contractual Clauses).

In particular, Google services (Analytics, Ads, reCAPTCHA) involve data transfer to the United States. The legal basis for this transfer is the EU-US Data Privacy Framework (European Commission Adequacy Decision of 10 July 2023), to which Google LLC has self-certified.

7. Data retention period

#

Upon expiry of the applicable period, data will be deleted or anonymised.

8. Data subject rights

#

You may exercise at any time the rights under Arts. 15-22 GDPR:

• right of access, rectification, erasure, restriction of processing;
• right to data portability;
• right to object to processing based on legitimate interest;
• right to withdraw consent (where applicable).

To exercise these rights, please contact the Controller at the addresses indicated in section 1 or write to privacy@qualibit.it .

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it ).

9. Nature of data provision

#

Providing the data marked as mandatory in the forms is necessary to process the request or evaluate the application. Failure to provide such data will make it impossible for Qualibit srl to follow up on the request or proceed with the selection.

Providing optional data (e.g. phone number, company name) is at the data subject’s discretion.

Last updated: 17/03/2026.