Global Projects Services AG

Information notice regarding the processing of Personal Data of Candidates

in accordance with the Swiss Federal Data Protection Act (FDPA) and Regulation (UE) 2016/679 (GDPR), if applicable

Data Controller and Contact Point

Your personal data are processed by Global Projects Services AG, Uetlibergstrasse 134a, 8045 Zürich, Switzerland (GPS or Company) as data controller and the persons or legal entities which process these data on GPS' behalf as data processors.

The contact point within GPS for Candidates who want to exercise their rights under the Federal Data Protection Act (FDPA) and any other data protection laws that may be applicable, in particular the European General Data Protection Regulation (GDPR), the Federal Data Protection and Information Commissioner (FDPIC) and any other data protection authorities competent for the data processing by the Company can be contacted under privacygps@saipem.com.

Personal Data Processed

This Information Notice on the Processing of Personal Data of Candidates (Information Notice) applies to all personal data that you (you or Candidate) provide or that are provided to or collected by or on behalf of GPS in connection with your application for a job position with GPS and your evaluation for that position.

Please note that all of the personal data will be processed in accordance with the FDPA, in the version applicable and any ordinances, guidelines and information sheets issued thereunder by the FDPIC or any other competent public authority, and any other data protection laws that may be applicable, in particular the GDPR. The Company undertakes to process your personal data in accordance with the principles of fairness, lawfulness and transparency, in compliance with the purposes set out below and only insofar as necessary for these specified purposes. Only authorized and properly trained personnel will be allowed to process your data.

The Company will collect, record, consult and generally process your personal data, among others name, surname, address, phone number, e-mail-address, place and date of birth, educational qualifications, prior activities and professional affiliations, name of reference persons, testimonials, and any other data provided by you or collected lawfully by or on behalf of GPS, including sensitive personal data.

GPS may ask you to provide a medical certificate stating whether you are fit for the job for which you apply.

The GPS recruitment officers may ask you for additional information necessary for the application and evaluation process. A refusal to provide data requested may mean that your application cannot be considered.

GPS will process any personal data, including sensitive personal data, insofar as necessary for the application and evaluation process. Any personal data submitted through the communication feature of social media platforms and applicant tracking system/website, is subject to the data privacy policy of the respective social media platform/applicant tracking system/website in addition to this Information Notice.

Purpose of the processing

1. Registration for a job application through our web-based online application tool, by e-mail to GPS or any of its affiliates, via our external agencies, or through the communication platforms.

2. Recruitment and selection for open positions (including positions in an internship program) and, in case of a positive decision, negotiation and conclusion of an employment contract.

3. Internal controls to ensure that your application is handled and decided upon in compliance with the hiring and selection standards of GPS and the applicable laws.

4. Participation in training and information events initiating your employment.

5. Asserting or defending against a right or claim of or against the Company in court, in arbitration, in conciliation procedures, or in criminal or administrative procedures.

Legal basis of the processing

The processing of personal data is lawful because it is necessary to take steps at your request prior to entering into a contract (art. 6 para. 1 lit. (b) GDPR) and for the purposes of the legitimate interests of GPS to evaluate your candidacy for an open job position at GPS (art. 6 para. 1 lit. (f) GDPR).

The processing of personal data is lawful because it is necessary to take steps at your request prior to entering into a contract (art. 6 para. 1 lit. (b) GDPR), for the purposes of the legitimate interests pursued by GPS or a third party to evaluate your candidacy for an open job position at GPS (art. 6 para. 1 lit. (f) GDPR). The processing of sensitive personal data is lawful, because it is necessary for the purposes of carrying out the obligations and exercising the rights of GPS as data controller in the field of employment, accounting, tax, social security and social protection laws (art. 9 para. 2 lit. (b) GDPR).

The processing of personal data is lawful because it is necessary for compliance with legal obligations to which GPS is subject (art. 6 para. 1 lit. (c) GDPR) and for the purposes of the legitimate interest of GPS to evaluate our application and evaluation processes for compliance with applicable laws and internal standards (art. 6 para. 1 lit. (f) GDPR).

The processing of personal data is lawful because it is necessary to take steps at your request prior to entering into a contract (art. 6 para. 1 lit. (b) GDPR), for compliance with legal obligations to which we as data controller are subject (art. 6 para. 1 lit. (c) GDPR), and for purposes of the legitimate interests of GPS to train and inform the candidates before they start their employment (art. 6 para. 1 lit. (f) GDPR).

The processing of personal data is lawful because it is necessary for compliance with legal obligations to which we as data controller are subject (art. 6 para. 1 lit. (c) GDPR), and for the purposes of the legitimate interest pursued by GPS to assert or defend a right or claim of or against the Company in judicial, arbitration, conciliation, criminal or administrative proceedings (art. 6 para. 1 lit. (f) GDPR).

With regard to sensitive personal data, their processing is lawful because it is necessary to establish, exercise or defend against legal claims of GPS, the Candidate or third parties, or whenever courts are acting in their judicial capacity (art. 9 para. 2 lit. (f) GDPR).

Retention period of data

The normal retention period is 12 months from your last update of your CV or other application documentation. In case of a negative decision, after this period, all data will be deleted except that GPS may maintain your name, address, nationality, position for which you applied and your contact detail, and, separately and unrelatedly, some application data in an anonymized format. In case of a positive decision, after this period of 12 months, your personal data exclusively related to the application and evaluation will be deleted, and certain other personal data will be retained pursuant to the Information Notice regarding the Processing of Employees’ Personal Data of GPS.

The normal retention period is 12 months from your last update of your CV or other application documentation. In case of a negative decision, after this period, all data will be deleted except that GPS may maintain your name, address, nationality, position for which you applied and your contact detail, and, separately and unrelatedly, some application data in an anonymized format. In case of a positive decision, after this period of 12 months, your personal data exclusively related to the application and evaluation will be deleted, and certain other personal data will be retained pursuant to the Information Notice regarding the Processing of Employees’ Personal Data of GPS.

The normal retention period is 12 months from your last update of your CV or other application documentation. In case of a negative decision, after this period, all data will be deleted except that GPS may maintain your name, address, nationality, position for which you applied and your contact detail, and, separately and unrelatedly, some application data in an anonymized format. In case of a positive decision, after this period of 12 months, your personal data exclusively related to the application and evaluation will be deleted, and certain other personal data will be retained pursuant to the Information Notice regarding the Processing of Employees’ Personal Data of GPS.

The normal retention period is 12 months from your last update of your CV or other application documentation. In case of a negative decision, after this period, all data will be deleted except that GPS may maintain your name, address, nationality, position for which you applied and your contact detail, and, separately and unrelatedly, some application data in an anonymized format. In case of a positive decision, after this period of 12 months, your personal data exclusively related to the application and evaluation will be deleted, and certain other personal data will be retained pursuant to the Information Notice regarding the Processing of Employees’ Personal Data of GPS.

Longer retention periods apply if GPS is under a legal requirement or has a legitimate interest to retain certain data for longer periods, in particular for the purposes set out in points 3 below.

3 Personal data can be retained longer than the period of 12 months (a) in cases in which a claim has been asserted or appears likely to be asserted by or against GPS for which these personal data may become relevant where processing is necessary for compliance with legal obligations to which GPS as data controller is subject [(art. 6 para. 1 lit. (c) GDPR)], and for the purposes of the legitimate interests of GPS to assert or defend a right or claim of or against GPS (art. 6 para. 1 lit. (f) GDPR) or (b) for the purposes of other legitimate interests pursued by GPS or by a third party (art. 6 para. 1 lit. (f) GDPR). Personal data retained for the assertion of or defence against a right or claim of or against GPS (para. 3 lit. (a)) may be retained in general until the end of the term of prescription of the respective claim, plus an additional period for instituting, submitting or receiving a claim, pre-procedural negotiations and/or the duration of any possible litigation and arbitration until final and binding adjudication or of any negotiations in view of settlement until settlement in full, which will normally not exceed 11 years.

After the normal retention period of para. 1 above, access to the personal data will be restricted in order to make sure that they are processed exclusively for the purposes that justify their longer retention.

During the period of lawful retention, the data will be retained in accordance with standard data security, storage and backup procedures.

Once the period of lawful retention has elapsed, the data will be erased or made anonymous in accordance with standard data erasure and anonymization procedures compatibly with normal technical and routine erasure and backup procedures.

Way of processing and provision of data

The processing of personal data will be carried out on digital, paper and other media, using methods and tools aimed at ensuring maximum security and confidentiality, by persons specifically appointed and qualified for this purpose.

In case of an online application through the Company's website, the provision of data in the fields marked with an asterisk (*) is necessary to take your application into consideration in the recruitment and selection process.

In case of an online application through the Company's website, your acknowledgment of this Information Notice is necessary to take your application into consideration in the recruitment and selection process.

In case of an application submitted via e-mail, you will be redirected to the Company’s website as described in the paragraphs above. This confirmation e-mail is necessary to take your application into consideration in the recruitment and selection process.

Recipients and data transfer

The Company may transfer your personal data to other parties for the purposes set out above, for example:

• Other Saipem Group companies as data processors for GPS (including the company for which the

 selected employee will perform work) in order to carry out certain activities as part of the application and   selection process;

• Third parties (e.g., consultants, IT service providers, recruiting agents, applicant tracking system operators, etc.), who carry out certain activities and thereby process personal data on behalf of GPS as its (direct or indirect) data processors;

• Third parties (e.g., other companies for which the employee, if selected will perform work, insurance carriers, brokers and other independent intermediaries), which determine the purposes and means of processing your personal data, including special sensitive personal data, as independent data controllers based on their relationship with you,

• Administrative authorities, courts and arbitral tribunals, auditors, insurances etc., to whom disclosure of these personal data is required by law or necessary for the purposes of the legitimate interests of GPS. These subjects will process the data in their capacity as independent data controllers.

Personal data are transferred to third parties only under contractual or otherwise binding conditions that the data may only be used for the specific purposes for which they are transferred and not for any purpose s for which GPS could not process them.

GPS may transfer personal data to any country outside Switzerland where any other Saipem Group companies have their seat or registered office or any establishment, or anywhere in the world also to any country where no other Saipem Group Company is present.

Personal data will only be transferred to countries outside Switzerland and the EU only if data privacy is guaranteed by adequacy decisions by the Federal Council (or the European Commission under the GDPR), by data protection provisions of a contract between the controller or the processor and its contracting party, standard model clauses, or binding corporate rules.

Data Subjects rights

You have the right to ask GPS as the data controller for access to your personal data, and for rectification, erasure, and hand-over of your personal data in a structured, commonly used and machine-readable (portable) format, completion of incomplete personal data, restriction of processing in the cases provided for by art. 18 GDPR, as well as the right to object to any processing that is not in compliance with the applicable laws, or for reasons related to your particular situation in cases where data processing is necessary for the purposes of the legitimate interests of GPS as the data controller or a third party, stating explicitly which interests or fundamental rights and freedoms of yours requiring protection of personal data override the legitimate interests of GPS or the third party, or restriction of disclosure to third parties that is not in compliance with the applicable laws and this Information Notice. In addition, only in case the data are processed on the basis of your consent, you may revoke your consent at any time with effect for the future.

These rights may be exercised at any time against GPS as the Data Controller by sending a specific request in writing to the e-mail addresses privacygps@saipem.com. You can also write to the Company at the address given in the letterhead above.

You are aware that a deletion, hand-over in a portable format, restriction of processing or of disclosure to third parties or revocation of your consent for processing of your personal data may mean that your application can no longer be considered.

You also have the right to lodge a report or complaint with the FDPIC or any other competent Supervisory Authority and to use other means of protection, as provided by the FDPA and other applicable laws.

This Information Notice on data processing is available on the GPS website at www.gpsag.ch.

Types of Data collected

Among the Personal Information collected by this Site through the contact form and the form for spontaneous applications there are: Cookies, Usage Data, Email, Password, Name, Surname.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed together with the collection of the Data.

Personal Data is entered voluntarily by the User.

Any use of Cookies - or other tracking tools - by this Site, unless otherwise specified, has the purpose of identifying the User and recording the related preferences for purposes strictly related to the provision of the service requested by the User.

Failure to provide the User with some Personal Data may prevent this Site from providing its services.

The User assumes the responsibility of the Personal Data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Purposes of the processing of collected data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analytics, Contacting the User, Optimizing and distributing traffic.

The types of Personal Data used for each purpose are indicated above.

Communication and dissemination of data

The data collected using cookies may be processed by employees and collaborators of nCore HR, as persons in charge and responsible for data processing.

The list of data is constantly updated and is available upon request by sending a communication to the address below or an e-mail to ----

The data collected using cookies will not be disclosed.

Your rights

At any time you can request information on the processing of your personal data, obtain the update, correction or integration of the same, as well as obtaining the cancellation, transformation into anonymous form or blocking of data processed in violation of the law and oppose the processing of You according to the provisions of art. 7 of Legislative Decree no. 196/2003 reported in full at the end of this policy.

To exercise your rights you can contact the Data Controller by sending a written notice to the address below or an e-mail to ----

Owner and manager of the treatment

Holder of the treatment is ----

Internal manager of the treatment is ----

Last updated: July 2015

Art. 7 D.Lgs 196/2003. Rights attributed to the interested party.

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form.
The interested party has the right to obtain the indication:
the origin of personal data;
of the purposes and methods of processing;
of the logic applied in case of treatment carried out with the aid of electronic instruments;
of the identifying details of the holder, of the responsible and of the designated representative according to article 5, paragraph 2;
the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
The interested party has the right to obtain:
updating, rectification or, when interested, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves a use of means manifestly disproportionate to the protected right.
The interested party has the right to object, in whole or in part:
for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of the collection;
to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Changes to this information

The Data Controller reserves the right to make changes to this privacy statement at any time by giving notice to Users on this page. Please therefore consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this statement, the User is required to cease using this Site and may request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected until then.

Information on this privacy policy

The Data Controller is responsible for the privacy policy.

Last updated: July 2015