This privacy policy includes important information on the protection of your personal data processed by us through our website (“Website”), as data controller, pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation “GDPR”).

Data Controller

The data controller is AG Digital Media S.p.A., with registered office at Corso Italia, No. 22, 20122, Milano, Italy, company number (Codice Fiscale) 09568760962, e-mail address (“Data Controller” or “FREEDA”).

Data Protection Officer (DPO)

The Data Controller appointed a Data Protection Officer (“DPO”) who can be contacted via e-mail at

Personal data processed

For the purposes listed in the below section, the Controller will process the personal data that you voluntarily provide through:

Further details:

Purposes and legal basis for the processing

Your personal data will be processed to respond to your requests, to manage your job applications, to allow your navigation on the Website and to check its proper functioning, as well as for the purpose of protecting our rights before the judicial authorities or in legal proceedings. In relation to the purposes, the legal grounds for the processing are the performance of a contract or pre-contractual measures, and our legitimate interest

Further details:

Methods of processing and data retention period

The processing of your personal data will be based on the principles of lawfulness, fairness, transparency, purpose limitation and storage limitation, data minimisation, accuracy, integrity and confidentiality, in accordance with the GDPR. Your data will be processed through computer and telematic means and are protected by adequate technical and organizational security measures to ensure the respect of the abovementioned principles.We retain personal data only for the time necessary for the purposes for which they were collected or for any other legitimate related purposes. Therefore, if personal data are processed for different purposes, we will retain the data until the purpose with the longer-term ends. In any case, we will no longer process personal data for that purposes for which the retention period has expired. Personal data that are no longer necessary, or for which there is no longer a legal basis for its retention, will be irreversibly anonymised (and thus can be retained) or deleted.

Further details:

Categories of data recipients

Your personal data will be processed by persons authorized and trained to process data, who will operate in accordance with the applicable principles and will protect the confidentiality of your data. In some cases, your personal data will be communicated to third parties who/which will act on our behalf as data processors (e.g. companies that provide us with IT support services, cloud services, etc.). You can request the list of the abovementioned third parties to the Data Controller writing to

Further details:

Extra-EU Data transfers

The Controller stores personal data on servers located within the European Union. Your data may be transferred in the UK (Third Country considered adequate by the European Commission) if you are applying for an open position based in the UK.

Further details:
The Data Controller does not transfer personal data outside the European Union, in any case, where the Data Controller, due to any requirements related to the location of service providers, needs to transfer data outside the European Union to Countries for which the European Commission has not issued an Adequacy Decision, the Data Controller undertakes to ensure adequate levels of protection and safeguards, including contractual ones, compliant with the GDPR, including the adoption of standard contractual clauses (SCC) pursuant to art. 46, par. 2, letter c) of the GDPR, supplemented if necessary by additional technical, legal and organisational measures necessary to ensure that the level of protection of personal data is equivalent to the one of the European Union.For any further information on the transfer of your personal data, you can send an e-mail to the following address:

Rights of Data Subjects

In relation to the processing of your personal data you will always be able to exercise your rights under the GDPR (Articles 15-21):

In addition, you have the right to object in whole or in part to the processing of your data (right to object), provided that you meet the requirements of the data protection law.

Should you exercise any of the above mentioned rights, it will be the responsibility of the Data Controller to verify if you are entitled to exercise them, and you will be replied within one month. To exercise the above rights and obtain further information on the processing of your data, you may send an e-mail to

Further Rights

If you consider that the processing of your personal data through the Website is in breach of the provisions of the law on the protection of personal data, you always have the right to lodge a complaint with the Italian Data Protection Authority for the protection of personal data (“Garante”).