PRIVACY NOTICE FOR CANDIDATE PERSONAL DATA PROCESSING
&nbsp;
Dear Candidate,
&nbsp;
This notice aims to inform you about how Dr. Sch&auml;r SpA/AG processes your personal data.
Information about the Data Controller and the Data Protection Officer. The Data Controller is Dr. Sch&auml;r SpA/AG, with registered office at Winkelau 9, 39014 Postal (BZ), Italy. The Data Controller has also appointed a Data Protection Officer (DPO). To exercise your rights under applicable legislation, you may contact the Data Controller at its registered office, by calling +39 0473 293300, or by writing to privacy@schaer.com. You may also contact the DPO by writing to dpo@schaer.com.
Purpose and Legal Basis of Processing. Your data are processed for the purpose of conducting recruitment and selection procedures and managing obligations related to any subsequent employment. The processing will involve: a) Personal data (e.g., name, surname, address, tax code, IBAN, and all information necessary to evaluate your profile); the legal basis is the execution of pre-contractual measures requested by the data subject, as well as compliance with legal obligations. b) Where required by law, special categories of data (e.g., health status, religious beliefs, etc.); the legal basis is compliance with legal obligations.
With your specific and optional consent, we may include your contact details in our mailing list to send you newsletters with updates on open positions and ongoing recruitment processes. Lack of consent will not affect the selection process initiated through your application.
Nature of Data Provision and Consequences of Refusal. Providing the data necessary for the recruitment process or required by laws, regulations, or public authorities is mandatory. Failure to provide such data will prevent us from evaluating your application. Providing additional data not strictly related to the selection process is optional and refusal will not affect the procedure or the evaluation of your application.
Processing Methods, Automated Decision-Making, and Data Retention. Your data may be processed on paper or electronically, in compliance with the technical and organizational security measures required by the EU General Data Protection Regulation (GDPR 2016/679). No automated decision-making processes will be used. Your data will be retained for the duration of the recruitment process and for a period of two years (in cases where this is not compatible with the legal restrictions of individual countries, the respective local laws shall apply).
Data Disclosure (Recipients). Your data may be disclosed to third parties assisting Dr. Sch&auml;r SpA/AG in recruitment and selection procedures and, after the process, to third parties managing employment-related obligations on our behalf. These third parties may include, but are not limited to, recruitment and assessment firms, labor consultants, occupational physicians, workplace safety training providers, tax or accounting consultants, social security and welfare institutions, banks or insurance companies, and other training organizations.
Transfer of Data to Third Countries or International Organizations. Your data will not be transferred by us to third countries or international organizations outside the EU. However, we use services provided by companies based in the USA. Although we have chosen to store personal data in data centers located in Europe, we cannot exclude that these providers may access such data. This potential access, which would constitute a data transfer, is justified by the existence of an adequacy decision (i.e., the Data Privacy Framework). Additionally, in the case of applications for positions at group companies located outside the EU, your data will be shared with those entities.
In general, any transfer of personal data outside the EU will be based on an adequacy decision and/or the signing of standard contractual clauses.
Please note that if you apply for positions at group companies located outside the EU, we will share your data with them. The guarantees for such transfers include the presence of adequacy decisions or the signing of standard contractual clauses.
Group companies located outside the EU declare that, within their scope of responsibility, they will process your personal data in accordance with the following policies:
&nbsp;
<ul>
<li style="text-align: justify; line-height: 107%; font-size: 12pt; font-family: Montserrat;">Dr. Sch&auml;r USA, Inc. <a rel="noopener" href="https://www.drschaer.com/sites/default/files/2025-11/Privacy%20Notice_USA.pdf" target="_blank">Privacy Notice_USA.pdf</a></li>
<li style="text-align: justify; line-height: 107%; font-size: 12pt; font-family: Montserrat;">Dr. Sch&auml;r Turkey&nbsp;<a rel="noopener" href="https://www.drschaer.com/sites/default/files/2025-11/Privacy%20Notice_Turkey.pdf" target="_blank">Privacy Notice_Turkey.pdf</a></li>
<li style="text-align: justify; line-height: 107%; font-size: 12pt; font-family: Montserrat;">Dr. Sch&auml;r Brazil Ltda&nbsp;<a rel="noopener" href="https://www.drschaer.com/sites/default/files/2025-11/Privacy%20Notice_Brazil.pdf" target="_blank">Privacy Notice_Brazil.pdf</a></li>
</ul>
&nbsp;
Candidate Rights and Complaints to the Privacy Authority. You have the right to request access to your data at any time, as well as its correction, integration, or deletion, or to request restriction or object to its processing, where legitimate reasons exist. You may also lodge a complaint with the supervisory authority if you believe your data has been processed unlawfully.&nbsp;