Loading
We use technical cookies needed to run the site and, with your consent, analytics and marketing cookies. You can accept all, reject non-essential ones, or choose in detail. For more information, see our cookie policy and privacy policy.
The Data Controller is COMPLIANCE STUDIO SARDEGNA S.R.L., with registered office in Sassari (07100), Via Pasquale Paoli no. 40, VAT No. 02747990907.
To exercise your rights or for any questions regarding this Privacy Notice, you can contact us at info@abinsula.com.
This website collects personal data only when you provide it to us, and through the cookies you accept.
When you contact us through the form, we collect your first name, last name, email address and — if you choose to provide them — your phone number and company name, together with the content of your message and the language in which you are browsing the website. We use this information only to review your request and respond to you. The legal basis for this processing is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR). We do not store your IP address or browser information when you submit the form.
The “Work with us” form is provided through our recruitment platform, including when it is displayed within the pages of this website, and the data you submit is sent directly to that platform. Before submitting your application, we ask you to read the dedicated privacy notice for candidates (https://skillhub.labs.abinsula.com/lavora-con-noi/informativa), which provides further details on the information summarised here.
When you apply, we collect your first name, last name, email address and the CV you attach and, if you choose to provide them, your phone number and a cover message. From your CV, we extract the information relevant to assessing your application, such as professional experience, skills, languages, certifications, education and city of residence. During the recruitment process, we also record the status of your application, notes and comments from the people assessing it, and the messages we send you. We also record which version of the privacy notice you have read and when, and whether you have given your consent to be contacted again. We do not store your IP address when you submit an application (see the Security section).
We ask you not to include in your CV any information that is not necessary for assessing your application, such as your date of birth, marital status, photograph, health information or other special categories of personal data under Article 9 GDPR. If such information is included, we do not use it for the assessment of your application.
We use this data to assess your application against our open positions and to respond to you. The legal basis for this processing is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR). If you tick the optional checkbox, or subsequently authorise us by replying to one of our emails, we will retain your profile for a longer period so that we may contact you when a suitable position becomes available. For this purpose only, the legal basis is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
We use automated systems, including artificial intelligence models, to assist us in reviewing CVs. These systems extract skills and experience from the text and indicate to recruiters how closely a profile matches the requirements of our open positions. Before sending the text to the model provider, we remove email addresses, phone numbers, links and any name that we are able to identify in the document. Professional information remains, however, so this process constitutes pseudonymisation rather than anonymisation. These systems do not make decisions: no application is automatically rejected, and every assessment is carried out by a person.
Your application can be accessed by the people involved in the recruitment process and, solely in relation to that application, by technical colleagues invited to provide their assessment. When an application is received, we send a notification to the recruitment team’s email inbox, with the CV attached.
See the dedicated section below and our Cookie Policy at https://abinsula.com/it/cookie.
Your data remains on our systems and is not sold or disclosed to third parties for their own purposes. To operate these systems, we rely on service providers that act as data processors on our instructions:
Your data may also be disclosed to public authorities where required by law.
Our backups contain a copy of the database and are retained for approximately two weeks. This means that data that has been deleted may remain in backup copies until the end of that period, after which it is automatically removed.
Job applications are stored on a separate platform, whose encrypted backups are retained for 30 days. In this case as well, deleted data may remain in backup copies until the end of that period.
When you first visit the website, we ask for your consent through a banner. Technical cookies are always active because the website would not function properly without them. Analytics and marketing cookies are installed only if you accept them, and you can refuse or withdraw your consent at any time through the “Manage cookies” link at the bottom of every page.
The complete list — including the name, purpose, duration and provider of each cookie — is available in our Cookie Policy: https://abinsula.com/it/cookie.
To protect access to the restricted area, we temporarily retain in memory the IP address associated with unsuccessful login attempts for up to 15 minutes and limit the number of attempts allowed. The legal basis for this processing is our legitimate interest in protecting the website against unauthorised access (Article 6(1)(f) GDPR). This data is not stored in a database or used for any other purpose.
The job application form also limits repeated submissions. To do so, it temporarily retains in memory the IP address of users who open or submit the form, without storing it in a database or associating it with the application.
The technical server logs of the platform record the IP address and the requested page for each visit and are retained for [retention period to be defined]. The legal basis is the same: our legitimate interest in protecting the website against misuse and abuse (Article 6(1)(f) GDPR).
You may ask us at any time to access your personal data, correct or delete it, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interests. Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of any processing carried out before the withdrawal.
You can contact us at info@abinsula.com. We will respond within one month, which may be extended by a further two months if the request is particularly complex.
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it.
Last updated: 24 September 2026.
If the processing activities described in this notice change, we will update this text accordingly. Where a change affects cookies, we will ask for your consent again.