UPMC Italy S.r.l. (“UPMCI”)  is the Italian division of UPMC (University of Pittsburgh Medical Center) with offices in Rome, Palermo, Chianciano Terme and Mirabella Eclano, and is active in the areas of patient care, biomedical research and telemedicine, development of new technological solutions, and providing support to areas directly and indirectly related to its medical and research institutional scopes.

Pursuant to art. 13, EU Regulation 2016/679 (“Regulation”), in its role of data controller UPMCI provides you with the following information.

Personal data included in your CV and any other information obtained during the selection (e.g., certifications, documents, and candidate application form) will be processed for the sole purpose of assessing your possible collaboration with, or hiring by UPMCI. Data will be processed using electronic tools and hard copy forms with appropriate modalities that guarantee its security and confidentiality, thus complying with the provisions of the Regulation. The legal basis of your data processing is described in art. 6.1-b of the Regulation (“Performance of a contract to which the data subject is party”).

The conferment of your data is mandatory to evaluate your application. Failure to provide this data can preclude this evaluation. We ask you enter in your CV only data necessary to assess your professional profile, restraining from including any information defined by the Regulation as “sensitive data” (e.g., information on your state of health, political opinions, trade union membership), which requires your explicit consent as legal basis for their processing (art. 9.2-a of the Regulation, “Consent of the data subject to the processing”). If you are included in a protected category and wish to avail yourself of the benefits under Law 68/99, or should you deem necessary to include additional sensitive data, you must agree to the processing of your said information. Should you decide to not provide your consent to the processing of these data, you may submit your application without stating your inclusion in a protected category, or any other sensitive data. All sensitive data provided by applicants with no consent to their processing will be deleted from the data controller’s archives.

In the event of an unsolicited job application, your personal data will be stored for a maximum of 12 months from the date of receipt of your CV or of its latest update. In the event of a participation to a selection, the documentation (e.g., evaluation forms, tests, CVs, candidate application forms, etc.) will be stored by the data controller for a maximum of 10 years after the end of the selection process, in separate archives to which candidates will be granted access to protect their own rights, only when and if necessary (the legal basis of the processing is art. 9.2-f of the Regulation, “Processing is necessary for the establishment, exercise or defense of legal claims”). This period will start from the end of the year in which the call for application was published. Your personal data will be processed by employees and collaborators of the data controller in charge of staff recruitment, acting in compliance with specific instructions on objects and purposes of the data processing. Your data may also be shared with third parties appointed data processors (e.g., staffing agencies) and providing ancillary or instrumental services to the data controller operations, or to other companies of the UPMC Group (the legal basis of the processing is art. 6.1-f of the Regulation “Legitimate interests pursued by the controller”. Collected data will under no circumstance be disclosed.

The data controller is UPMC Italy, registered offices in Via Discesa dei Giudici 4, 90133, Palermo, Italy.

You may contact UPMCI’s data protection officer at the following addresses: UPMC Italy S.r.l. – Responsabile della Protezione dei dati, Via Discesa dei Giudici 4, 90133, Palermo, Italy; email:

In your quality of data subject, you also have the right to obtain from the data controller authorization to access, delete, and to limit or deny the processing of your personal data (art. 15 et seq., Regulation). The request must be filed to UPMCI’s DPO (UPMC Italy S.r.l. – Responsabile della Protezione dei dati, Via Discesa dei Giudici 4, 90133 Palermo; email:  or to the Data processing reference person – HR, at the same address of the data controller or to the following e-mail address: A template of the request is available from the Italian Data Protection Authority website.

Should you deem that your personal data has been processed in breach of the Regulation, you have the right to file a complaint to the Italian Data Protection Authority (art. 77, Regulation) or to start judicial proceedings (art. 79, Regulation).

Last update: February 2019