This notice explains how Hotiday handles the personal data of people who apply to work with us, as required by Article 13 of the GDPR (Regulation (EU) 2016/679).
Who is responsible for your data
The data controller is Hotiday S.r.l., registered office Via G. Porzio 4, 80143 Napoli, VAT number IT10011061214.
For anything about your data, write to careers@hotiday.it.
Why we use your data
We use your data to evaluate your application for the role you applied for, and to run the selection process for that role (reading your CV, tests and cases, interviews, and keeping in touch with you).
On what legal basis
- Steps taken at your request before a possible contract (Article 6(1)(b) GDPR): handling your application is necessary to consider you for the role.
- Our legitimate interest (Article 6(1)(f) GDPR): running a fair, documented and efficient selection process, and keeping a record that lets us show how decisions were made.
- If you send us a CV on your own initiative, without applying to a specific role, we may use it to evaluate you without asking for your consent (Article 111-bis of the Italian Privacy Code).
We do not ask for your consent to process your application. We will ask for it separately if we ever wish to keep your profile for future roles after the retention period below.
Which data we use
- Identity and contact details (name, e-mail address, phone number, city).
- The content of your CV and any documents you send us (for example a transcript or cover letter).
- Results of tests and cases you take as part of the process.
- Interview scorecards and notes written by the people who meet you.
- Our e-mail correspondence with you.
Please do not send us special categories of data (for example health, religion or political opinions) unless you want us to arrange an adjustment for you.
Who receives your data
- The People team, the hiring manager of the role, the interviewers (including external advisors who help us with an interview) and the CEO, only to the extent needed for the process.
- Service providers acting on our behalf as data processors: hosting in the European Union (Amazon Web Services, Paris region) and Google Workspace for e-mail.
We do not sell your data.
How long we keep it
We keep your data for 12 months after the selection process for the role closes. After that we anonymise your record and delete your files; we keep only aggregate statistics that no longer identify you. If you are hired, your data moves to your employment file under separate rules.
Your rights
You can ask us at any time to:
- access your data and receive a copy;
- correct data that is wrong or incomplete;
- erase your data;
- restrict how we use it;
- receive the data you gave us, including your test scores, in a portable format;
- object to processing based on our legitimate interest.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
How to use your rights
Use the self-service link in the e-mails we send you, or write to careers@hotiday.it. We answer within one month.
Automated decisions
No decision about you is taken solely by automated means (Article 22 GDPR). A person always decides. We do not use AI in our hiring process; see our AI-use notice.