Privacy notice

Data controller

The data controller is LOGIS, Italy. For any request about your data you can write to recruiting@logisplatform.com.

Who this notice applies to

• People who submit an application, for an open or spontaneous position, through the recruiting.logisplatform.com application, including when the form is embedded in the “Careers” page of logisplatform.com.
• Visitors to logisplatform.com (see the “Website” section).

It does not cover the operational application reserved for LOGIS customers, which is governed by the customer agreements.

What data we process

• Identification and contact data: first name, last name, email address (verified with a 6-digit code) and LinkedIn profile URL.
• Curriculum vitae: one PDF file up to 10 MB, with the information you choose to include.
• Answers to the role's questions: Yes/No and free-text questions defined for each role, including which ones are essential requirements.
• Chosen language (Italian or English), date and time of submission, version of the notice you read.
• Data generated during the selection: application stage (new, screening, interview, offer, hired, closed, withdrawn), internal owner, recruiter notes and evaluations (score from 1 to 5, strengths, concerns, recommendation), history of activities and emails sent.
• Technical data: your IP address is used as a temporary hash to limit abuse and automated submissions and is not linked to your application; the hosting provider keeps technical request logs. Hashing is a pseudonymisation measure and does not necessarily make the data anonymous.

Please do not include special categories of data in your CV or answers (health, ethnic origin, political opinions, religious beliefs, trade union membership, sexual orientation) or data about criminal convictions unless strictly necessary. Any such data you choose to share, for example membership of protected categories under Italian Law 68/1999, will be processed only for the purposes set out in employment law (Article 9(2)(b) GDPR).

Your data comes directly from you. Recruiters may view the LinkedIn profile you provide as a complement to your CV: we do not receive data from LinkedIn nor send yours to it.

Purposes and legal bases

Consent is not the legal basis for this processing: the “I have read the privacy notice” checkbox records that the notice was provided to you before submission (Article 13 GDPR and Article 111-bis of Legislative Decree 196/2003). We do not use your data for marketing and we do not sell it.

Providing your data

Fields marked as required (first name, last name, email, LinkedIn profile, CV and required questions) are necessary to assess your application: without them it cannot be submitted. Optional questions may be left blank. Our roles are open to adults only.

Essential requirements and automatic closure

For some roles a Yes/No question is marked as an essential requirement, for example holding a qualifying licence or being available to work at a given location. If you answer “No” to such a question, the application schedules the closure of your application after 72 hours and, once that time has passed, sends you an update email. During those 72 hours a recruiter sees the scheduled closure and can cancel it; if cancelled, that decision also applies to your later submissions.

This is the only automation in the selection: we do not use scoring algorithms, profiling or artificial intelligence to assess candidates, and every other decision is taken by a person. Under Article 22 GDPR you may contest the automatic closure, express your point of view and obtain human intervention by writing to recruiting@logisplatform.com or replying to the email you received.

Who can access your data and our providers

Your data is accessible only to LOGIS staff authorised for recruitment (recruiters and administrators), who sign in to the console with their company Google Workspace account; membership of the authorised groups is re-checked on every access. We do not disclose your data to third parties for their own purposes. We rely on the following providers, which process data on our behalf as processors (Article 28 GDPR):

LinkedIn Corporation is an independent controller for your public profile: we do not send it any data. Public authorities or legal advisers may receive your data only where required by law or to protect our rights.

Transfers outside the European Union

The application and the database run in the European Union. Some providers are based in the United States and may access data to deliver the service, for example to send emails or provide technical support. In these cases the transfer relies on the European Commission's adequacy decision for organisations certified under the EU-U.S. Data Privacy Framework and, as a complementary safeguard, on the Standard Contractual Clauses (Article 46 GDPR) included in our provider agreements. You can request a copy of the safeguards by writing to recruiting@logisplatform.com.

How long we keep your data

If the selection ends with a hire, the necessary data moves to the employment file, governed by a separate notice. In case of a dispute, data may be kept until the dispute is resolved.

How we protect your data

• Encrypted connections (HTTPS) between your browser, the application and our providers.
• CVs stored in a private space with no public URLs, readable only through an authenticated staff session.
• Console access only with a company Google Workspace account and membership of authorised groups, verified on every access.
• Email verification before every submission or update; the form does not require creating an account.
• Request limits and checks on the type, size and signature of uploaded files.
• Scheduled automatic deletion and export logs. Hosting logs may include the browsing data described in the “Website” section.
• Exports downloaded by staff are subject to the same access and retention rules.

Your rights

At any time you can:

• access your data and receive a copy;
• rectify it: you can also resubmit the form for the same role, and your data and CV will be updated;
• request its erasure or withdraw your application;
• restrict processing;
• object to processing based on legitimate interest;
• receive your data in a structured, machine-readable format where Article 20 GDPR applies (portability);
• contest the automatic closure and obtain human review.

Write to recruiting@logisplatform.com. We reply within one month of your request. Where complexity or the number of requests requires it, this may be extended by two months under Article 12 GDPR: we inform you of the extension and reasons within the first month. Where necessary, we may request proportionate information to confirm your identity.

If you believe the processing infringes the GDPR you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live.

Website logisplatform.com

• Browsing data: the hosting provider (Vercel Inc.) keeps technical logs (IP address, browser, requested page, date and time) needed to deliver the site and prevent abuse, retained for a limited period. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
• Analytics: Google Analytics is not active on this website, and we do not load analytics cookies or advertising pixels.
• Language is determined by the URL and does not require local storage. When optional analytics is configured, your acceptance or refusal is stored locally for 180 days; you can change it in the footer. Declining does not limit access.
• “Careers”: published announcements are read from the public API of recruiting.logisplatform.com. The application form can open on the website in an iframe from that separate application. CVs and candidate data are handled by the recruiting application, not the marketing website. The provisions above apply.
• The customer operational application is a separate service and is not embedded in the marketing website.
• “Book a demo”: the button opens a Google booking calendar. The data you enter (name, email, notes) is processed by Google under its own privacy policy and by us to organise the demo and reply to your request (Article 6(1)(b) GDPR).
• Contact: if you write to the addresses shown on the site, your data is used only to reply.
• The operational application reserved for customers is a separate service, not covered by this notice.

Changes to this notice

We may update this notice to reflect changes to the service or to the law. The current version is always published at this address with its date and version number; every application records the version read at the time of submission. Version 2026-09-30, updated 30 September 2026.