Formula SAE Italy 2026

Information on the processing of personal data – Candidates (Recruiting)

Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”), Dallara provides candidates who submit their applications with the following information on the processing of personal data.

For the purposes of recruiting and selecting resources, Dallara Group Srl also operates on behalf of the Dallara Group companies mentioned above. Therefore, in the case of applications for open positions at a specific Group company, the data controllers will be Dallara Group Srl and the Group company concerned by the application. This privacy policy informs you about the categories of personal data we collect, the purposes for which we use them and how we process your data when you apply for a job with us.

 

Joint Controllers

The Joint Controllers are:

- Dallara Group Srl, with registered office in Varano de' Melegari (PR), Via Provinciale, no. 33, Italy

- Dallara Automobili Spa, with registered office in Varano de' Melegari (PR), Via Provinciale, no. 33, Italy

- Fabbrica Dallara Srl, with registered office in Varano de' Melegari (PR), Via Marconi, no. 18, Italy

- Dallara Compositi Srl, with registered office in Stradella di Collecchio (PR), Via Primo Levi, no. 6, Italy.

They can also be contacted by sending an email to privacy@dallara.it (together referred to as the “Joint Controllers” or “Dallara”).

In fact, for the purposes of recruiting and selecting resources, Dallara Group Srl operates not only for its own open positions, but also for open positions at companies within the Dallara Group, including Dallara Automobili Spa, Fabbrica Dallara Srl and Dallara Compositi Srl. Therefore, in these cases, the data controllers will be both Dallara Group Srl and the Dallara Group company for which the application is submitted/evaluated.

 

Type of data processed

As part of its personnel selection activities, Dallara processes the personal data provided by candidates through:

- the completion of application forms available on company websites or dedicated portals;

- the submission of a curriculum vitae;

- any communications sent by the candidate;

- the registration and creation of a personal account on the application management portal.

In particular, the following categories of data may be processed:

- identification data (name, surname, date of birth);

- contact details (address, e-mail, telephone number);

- data relating to educational and professional background;

- information contained in the curriculum vitae or attachments sent by the candidate;

- data relating to the management of the candidate's account on the recruitment portal.

Curriculum vitae and information entered by candidates are managed through the Ncore application management platform, which allows candidates to create their own personal account.

Candidates are advised not to include specific data in their CVs pursuant to Article 9 of the GDPR (for example data relating to health, religious or political beliefs), unless this is strictly necessary for the application.

 

Purpose and legal basis

Candidates' personal data is processed for the following purposes:

 

1. Management of applications and selection activities

- evaluation of applications received;

- management of the recruitment process;

- contact with candidates;

- organization of interviews and selection activities.

Legal basis: Article 6, paragraph 1, point b) GDPR – implementation of pre-contractual measures taken at the request of the data subject.

 

2. Management of candidate accounts

A personal account is only created if the candidate selects the “Remember me” option during the application process. In this case, the system allows the login details to be stored and the applications submitted to be viewed, modified and updated later.

The creation of an account is optional and is intended to simplify the management of applications by the data subject.

The data may be processed to allow candidates to:

- register on the recruitment portal;

- create and manage their personal account;

- update their data and submitted applications.

Legal basis: Article 6, paragraph 1, point b) GDPR.

 

3. Improvement of selection processes and statistical analysis

Data may also be processed for internal statistical analysis and sector analysis relating to recruitment processes and labor market trends.

During the analysis phase, such analyses are carried out exclusively on aggregated data and do not allow for the identification of candidates.

Legal basis: Article 6, paragraph 1, point f) GDPR – legitimate interest of the data controller in improving organizational and selection processes.

 

Nature of data provision

Any data subsequently requested by Dallara is used to assess suitability for recruitment and/or to start working with the company and it is provided on a voluntary basis. The provision of data is optional but necessary to allow the application to be assessed; failure to provide data will make it impossible to proceed with the selection process.

 

Automated decision-making processes

Dallara does not use decision-making processes based solely on automated processing, including profiling, which produce legal effects on candidates.

 

Methods

The processing of personal data sent will be based on principles of correctness, lawfulness and transparency, protecting the confidentiality and rights of the data subject. The data is processed using IT tools and, where necessary, paper forms, by authorized and suitably trained personnel.

 

Data Communication

Any communication to third parties is only intended for the purpose of carrying out selection and evaluation activities related to job offers and the possible establishment of an employment relationship. Where necessary, these parties operate as Data Processors pursuant to Article 28 of the GDPR.

Please note that Dallara Group Srl also operates on behalf of companies in the Dallara Group, including Dallara Automobili Spa, Fabbrica Dallara Srl and Dallara Compositi Srl; therefore, data may also be shared with these companies in the Dallara Group. The data collected will not be disclosed.

 

Retention periods

Candidates' personal data will be retained for the time necessary to manage the application and, in any case, for a maximum period of 36 months from the date of collection, unless further retention is required by applicable law or the data subject updates their application.

 

Rights of the data subject

Pursuant to Articles 15-22 of Regulation (EU) 2016/679 (“GDPR”), data subjects may exercise their rights under personal data protection legislation at any time. In particular, they have the right to obtain confirmation of the existence or otherwise of personal data concerning them and, if so, to access their data and receive information on its processing. Data subjects may also request the rectification of inaccurate data or the integration of incomplete data, the erasure of data in the cases provided for by law, and the restriction of processing where the conditions are met.

In the cases provided by the GDPR, data subjects also have the right to receive personal data concerning them in a structured, commonly used and machine-readable format and to transmit it to another data controller (right to data portability), as well as to object to the processing of personal data concerning them.

To exercise their rights or to receive further information on the processing of personal data, data subjects may contact the Joint Controllers by writing to the e-mail address privacy@dallara.it.

Furthermore, the data subject retains the right to lodge a complaint with the Data Protection Authority, pursuant to Article 77 of the GDPR, if they believe that the processing of their personal data violates applicable legislation.

 

Changes to this policy

Dallara may change this privacy policy at any time. Any material changes to this privacy policy will be posted on the official channels used to collect applications and, where appropriate, communicated through other channels.

Types of Data collected

Among the Personal Information collected by this Site through the contact form and the form for spontaneous applications there are: Cookies, Usage Data, Email, Password, Name, Surname.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed together with the collection of the Data.

Personal Data is entered voluntarily by the User.

Any use of Cookies - or other tracking tools - by this Site, unless otherwise specified, has the purpose of identifying the User and recording the related preferences for purposes strictly related to the provision of the service requested by the User.

Failure to provide the User with some Personal Data may prevent this Site from providing its services.

The User assumes the responsibility of the Personal Data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Purposes of the processing of collected data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analytics, Contacting the User, Optimizing and distributing traffic.

The types of Personal Data used for each purpose are indicated above.

Communication and dissemination of data

The data collected using cookies may be processed by employees and collaborators of nCore HR, as persons in charge and responsible for data processing.

The list of data is constantly updated and is available upon request by sending a communication to the address below or an e-mail to ----

The data collected using cookies will not be disclosed.

Your rights

At any time you can request information on the processing of your personal data, obtain the update, correction or integration of the same, as well as obtaining the cancellation, transformation into anonymous form or blocking of data processed in violation of the law and oppose the processing of You according to the provisions of art. 7 of Legislative Decree no. 196/2003 reported in full at the end of this policy.

To exercise your rights you can contact the Data Controller by sending a written notice to the address below or an e-mail to ----

Owner and manager of the treatment

Holder of the treatment is ----

Internal manager of the treatment is ----

Last updated: July 2015

Art. 7 D.Lgs 196/2003. Rights attributed to the interested party.

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form.
The interested party has the right to obtain the indication:
the origin of personal data;
of the purposes and methods of processing;
of the logic applied in case of treatment carried out with the aid of electronic instruments;
of the identifying details of the holder, of the responsible and of the designated representative according to article 5, paragraph 2;
the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
The interested party has the right to obtain:
updating, rectification or, when interested, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves a use of means manifestly disproportionate to the protected right.
The interested party has the right to object, in whole or in part:
for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of the collection;
to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Changes to this information

The Data Controller reserves the right to make changes to this privacy statement at any time by giving notice to Users on this page. Please therefore consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this statement, the User is required to cease using this Site and may request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected until then.

Information on this privacy policy

The Data Controller is responsible for the privacy policy.

Last updated: July 2015