Data Privacy Notice for Recruitment
1. Introduction and Scope
KKLegal has issued this Data Privacy Notice, in compliance with the legislation.
This Notice applies to all those who may be employed by KKLegal as employees or associates (either by entering into an employment contract or as independent contractors) and either have applied for a job in KKLegal or have been selected as candidates by a recruitment Agency acting on our behalf, which leads us to find the most suitable candidates to fill positions in KKLegal.
2. Lawful basis for processing personal data
KKLegal will process your personal data as it is necessary for the execution of recruitment procedures and to comply with its legal obligations. The processing of your personal data is necessary to assess your eligibility for filling in the position you applied for.
Our recruiters are subject to duty of confidentiality. Your personal data is stored securely on our email system and servers. We do not transfer your personal data outside the European Economic Area.
3. Retention of your personal data
By submitting your CV, you give us consent for our further data processing activity and to retain your personal data you provided to us for one year. The purpose of the one-year retention is to assess your eligibility during further recruitment processes, if we do not offer you the position we first contacted you for.
If later on, you wish to withdraw your consent, you are free to do that. If you withdraw your consent, we will delete your personal data, and will not be able to invite you to participate in future recruitment process(es). If you withdraw your consent, there will be no further detrimental consequences.
4. Sources of personal data
If you are applying to a job advertisement published by us, we obtain your personal data from you or from other data controllers (such as professional data base providers or recruiters). After your application, we may obtain information about you from professional social media websites (such as LinkedIn) and other sources on Internet. We only contact your previous or current employer and colleagues, if you allow us to do so by providing contact details.
The recruitment process may be initiated by us by contacting you directly. We contact potential job applicants directly based on publicly available information, information from professional social media platforms, (such as LinkedIn) or recommendations, referrals.
5. Types of personal data we process
If you are applying to a job advertisement published by us or by a recruitment agency acting on our behalf, we process the personal data you share in your CV and during interviews (especially contact data, education, qualification and employment history), proofs of your eligibility to be hired for the job, and publicly available personal data. If we contact your previous or current employer and colleagues, we also process the personal data they share with us. You will be informed in advance if we wish to carry out any background or criminal checks.
If the recruitment process is initiated by us by contacting you directly, we only process your publicly available data, name and contact details and until you express your interest for the position we are hiring for, or the lack of it.
If you express that you are interested, your personal data is then processed as if you applied directly for a job. If you express that you are not interested, or we cannot reach you, your personal data will be immediately erased.
6. Purposes for processing personal data
We process personal data only for the purposes of the recruitment process. During recruitment, we will process your personal data to review and assess your skills and experience. We will set up interviews, conduct the interviews, run background and or professional qualification checks, get references from your previous employers, colleagues.
Should you be successful, and we offer you a job, a new data privacy notice will be issued for the term of your employment. The new data privacy notice will contain the relevant information and lawful basis under which we process your personal data during the term of your employment.
7. Who we share your personal data with
We share your personal data regarding the position you applied for (covering the job and required skills and experience) with the referees you provided. We are at your disposal to provide you further information about this. Should you accept our offer for a position, we share your personal data with the competent tax and social security authorities to allow your start in your new job.
8. Your data protection rights
Under data protection legislation you have the following rights.
a. Right to request access to your personal data. It means that you are entitled to obtain a confirmation that your data is being processed and you have admittance to your personal data processed by us and other supplementary information.
b. Right to request rectification of your data. It means that you are entitled to have your personal data corrected, completed if it is inaccurate or incomplete.
c. Right to request erasure of your data. It means that you are entitled to have your personal data deleted in specific circumstances, if there is no for lawful reason for continuing our processing.
d. Right to object to us processing your data. It means that in some cases you have the right to challenge the processing of data KKLegal carries out.
e. Right to request us to restrict the processing. It means that you may request to ‘block’ or suppress processing of your personal data. Your valid request is leading to that we will be permitted to store your personal data, but not further process it.
f. Right to data portability. It allows you to obtain and reuse your personal data for your own purposes across different services. You are entitled to move, copy or transfer personal data easily in a safe and secure way, without hindrance to usability.
9. Contact Details
We inform you that you can contact our Company for any matter concerning the security of your personal data at the following phone number: 210-8224775 and email: email@example.com.
You have the right to make any complaint to the Competent Supervisory Authority [which is the Hellenic Data Protection Authority, Leoforos Kifisias 1, 11523, Athens, Greece], however, we encourage you to raise any issues with us in the first instance.