Candidate Privacy Notice

Data controller

The data controller is Interim Act BV, registered office at Poortland 66, 1046 BD Amsterdam (Netherlands), operating in Italy at Via del Commercio 7, 45100 Rovigo (RO). Email: info@interimact.net — PEC (certified email): interimact@legalmail.it. Interim Act is an authorised Employment Agency (Agenzia per il Lavoro), Section I, no. 0000299 of 24/06/2025.

Data we collect

Through the candidate form and any CV you submit, we collect: first and last name, email, telephone number, the role sought, industry, the content of your CV (experience, skills, contact details) and any messages. For technical and security purposes, we record the IP address and anti-abuse data (e.g. anti-bot verification tokens). We ask you not to include special categories of data in your CV (origin, health, opinions, etc.) unless strictly necessary. If you register by scanning one of our totems, we record the totem's code and the area (province) where it was located at the time of registration, to know where your application comes from and to offer you opportunities more relevant to your area. If you fill in the questionnaire in your area, we also collect the answers you give us: working hours and minimum weekly hours, how many minutes of travel you accept, the shortest contract length, the jobs you are looking for with your experience in each of them, your driving licences and, if you wish to answer, two preferences about how you work best. Answering is voluntary, and you can change or delete your answers at any time.

Purposes and legal basis

• to assess your application and offer you temporary agency work opportunities — legal basis: your consent and performance of pre-contractual measures (art. 6.1.a and 6.1.b GDPR);
• to contact you and manage the selection process and any temporary agency placement;
• to comply with legal obligations in our capacity as an Employment Agency;
• website security and abuse prevention — legitimate interest (art. 6.1.f).

Who we share the data with

The data may be disclosed to client companies interested in your profile, solely for selection purposes, and to our suppliers acting as data processors:

• Supabase: database and storage of the CV and documents;
• Vercel: website hosting;
• Cloudflare Turnstile: anti-bot service for the forms;
• Resend: email delivery;
• Cal.com: online meeting booking, activated only if you request an appointment from the Contact page;
• Sentry: error and security monitoring, configured not to collect identifying data;
• Google (Google Ireland Ltd.): Google Calendar, for our staff's appointment calendar — it receives the title, location and company of the appointment, and the title may contain your name if the appointment concerns you (for example an interview); notes remain on our systems — and Google Drive, for backup copies of our staff's internal assessments, in which profiles are identified by a code and not by name.

We do not sell your data and we do not use it for advertising profiling.

Transfers outside the European Union

The data is hosted on infrastructure located within the European Economic Area. Some suppliers, including Google, may also process data outside the EEA, in particular in the United States: these transfers take place on the basis of the EU-U.S. adequacy decision (EU-U.S. Data Privacy Framework), for certified suppliers, or of the Standard Contractual Clauses approved by the European Commission.

Retention

We retain the data for as long as necessary for the stated purposes and in any event for a maximum of 24 months from the last contact, unless otherwise required by law or unless you withdraw your consent, after which it is deleted or anonymised.

Your rights

You may exercise the rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent without affecting the lawfulness of prior processing, by writing to info@interimact.net. You also have the right to lodge a complaint with the supervisory authority (in Italy: the Garante per la protezione dei dati personali — the Italian Data Protection Authority; in the Netherlands: the Autoriteit Persoonsgegevens — the Dutch Data Protection Authority).

Provision of data

Providing the data requested in the form is optional but necessary to assess your application: without it, we cannot proceed.

Changes

We may update this notice; the current version is always published on this page.