Abbiamo appena lanciato Wavi.io
(Website, ATS Platform and Related Services)
Last updated: 25/01/2025
This Privacy Policy explains how STEPS SRL, trading as StepsConnect (“StepsConnect”, “we”, “us”), processes personal data when you use:
hire.stepsconnect.com may host client career pages and application flows; the candidate-facing privacy notice is provided by each client company (as Controller).
app.stepsconnect.com is the end-user environment used for the application experience and related communications (where enabled by the client).
Important (Candidates): when you apply to a job posted by a company using StepsConnect, the data controller is the client company running the recruitment process. StepsConnect processes candidates’ data as a data processor on behalf of that client.
Controller: STEPS SRL trading as StepsConnect
Address: Via Luigi Galvani 24, 15121 Alessandria (AL), Italy
VAT: IT 02618180067
Email: admin@stepsconnect.com
PEC: steps.edu@legalmail.it
StepsConnect acts as Controller when it processes personal data for:
When a candidate applies to a job managed through the StepsConnect ATS, StepsConnect processes the candidate’s data as Processor on behalf of the client Controller.
The full candidate-facing privacy notice is provided by the client company via its application form/career page.
StepsConnect does not require the collection of special category data. Any fields and information requested from candidates are defined and managed by the client in accordance with applicable law.
Personal data may be collected from the following sources:
The table below summarizes the main processing activities where StepsConnect acts as Controller (website and user management).
For candidate data processed through the ATS, StepsConnect acts as Processor: purposes, legal bases and retention are determined by the client Controller.
Website / Contacts
Website / CRM
Website / Security
Platform / Client users
Platform / Support
Administration
ATS / Candidates (on behalf of client)
StepsConnect may offer AI-based support features (e.g., summaries, analysis, candidate-role matching) with human oversight. StepsConnect does not make automated decisions producing legal effects or similarly significant effects on candidates.
When using third-party AI providers, we apply data minimization and de-identification/pseudonymization where possible. Data is not used for training and is not retained by the provider according to the configurations and agreements in place.
StepsConnect may provide a WhatsApp-based feature (via Meta infrastructure) to support parts of the recruitment process, such as application-related communications, screening questions, and interview scheduling. This feature is disabled by default and must be explicitly enabled by the client company.
Where WhatsApp is used:
StepsConnect:
Clients select the job boards they use and with which they have contractual relationships; StepsConnect acts as a technical integrator within the ATS service.
To operate the website/portals and provide the service, StepsConnect may use service providers that process data as processors or, in some cases, as independent controllers, depending on the service and applicable terms.
An updated list of the main sub-processors is available upon request by contacting admin@stepsconnect.com or the PEC above.
As a rule, data is processed in the EU/EEA. If transfers outside the EU/EEA are necessary, StepsConnect implements appropriate safeguards (e.g., Standard Contractual Clauses) and supplementary measures where required.
The website uses cookies and similar technologies:
If you refuse non-essential cookies, marketing/analytics tools are not enabled and only technical, security and functional cookies remain active.
You can change your choices at any time via the “Cookie settings” link on the website.
For details (categories, duration and providers), please use the cookie banner/cookie center (“Cookie settings”) available on the website. A dedicated Cookie Policy page may be published/updated from time to time.
StepsConnect implements appropriate technical and organizational measures to protect personal data (e.g., access controls, logging/auditing, backups and incident management procedures). In the event of a personal data breach affecting processing carried out as Processor, StepsConnect will inform the client Controller in accordance with contractual timelines and procedures.
You may exercise your rights under the GDPR (access, rectification, erasure, restriction, objection and portability, where applicable) by contacting admin@stepsconnect.com or steps.edu@legalmail.it. We may request information to verify your identity before responding.
If you applied to a job managed through a company using StepsConnect, you must exercise your rights with the client Controller (the company). If StepsConnect receives a request directly, it will forward it to the client and support it within the scope of its Processor role.
If you believe the processing of your personal data violates applicable law, you may lodge a complaint with the competent supervisory authority. In Italy: Garante per la Protezione dei Dati Personali.
We may update this Privacy Policy to reflect legal requirements or service changes. The latest version will always be available on this page with the “Last updated” date.