Политика за защита на личните данни на СЕПА Кибер Технологии ЕАД

Data Protection Notice
In applying to join the SEPA Cyber Technology EAD team, you will be providing us with certain personal data about yourself. This policy sets out how we will process this data and comply with the various laws to which SEPA Cyber Technology EAD is subject to ensure that we deal with your personal data in an appropriate manner.

Who are we?
Your personal data is processed by SEPA Cyber Technology EAD you apply to, and this company will be the data controller of that personal data. We may pass your data between other SEPA Cyber Technology EAD group companies for the purpose of your recruitment selection and if you are taken on, as part of your employment. Where reasonably necessary or required to do so, we may disclose these details to third parties in relation to law enforcement or regulatory investigation and also for the purpose of conducting any pre-employment checks (to the extent legally permitted).

What personal data may we collect about you and why?
As part of your recruitment process we may collect:
• your contact details, CV or résumé, application form details, interview notes, national insurance, as well as documentation regarding your visa, passport or work permit, certificates, diplomas, certificates of professional qualification, valid driving license;
• health details in relation with the employment;
We may also invite you to complete tests or participate in assessment activities and we will keep their results.
We do not conduct any vetting of applicants aside from ascertaining an applicant’s legal ability to work. We short list applicants using a manual selection process, considering appropriate experience and skills for the job.
If you are taken on to work at SEPA Cyber Technology EAD we will collect other personal data in accordance with the internal rules of the company.

What legal basis do we have for using your personal data?
We process your personal data in order to assess your application prior to entering into an employment contract with us and pursuant to laws to which SEPA Cyber Technology EAD is subject. If you are unable to provide us with the information requested, we are unable to assess your appropriateness for the job applied for or to communicate with you.

When do we send your personal data abroad?
We hold your personal data in the country in which you apply for a role. However, it is sometimes necessary for us to provide details about your application to our other SEPA Cyber Technology EAD group companies situated outside the European Economic Area for the purposes of your selection.
When we do so, we will ensure that such transfers ensure that an appropriate level of protection is given to the personal data (and we use EU approved “Model Clauses” where appropriate in order to ensure this).

How long do we keep your personal data for?
We keep records of your data for no longer than is necessary for the purpose for which we obtained them and any other permitted linked purposes. We will ask you if you want us to keep your details on file for the purposes of further job opportunities if your application is not successful.
What are your rights in relation to the personal data we collect?
If you are based in the EU, or we process your personal data in the EU, you have certain rights in SEPA Cyber Technology:
(a) Rectification: You can ask us to have inaccurate personal data amended.
(b) Erasure: You can ask us to erase personal data in certain circumstances pursuant to Art. 17 GDPR and we will take reasonable steps to inform other controllers that are processing the personal data that you have requested the erasure of any links to, copies or replication of it.
(c) Withdrawal of consent: You can withdraw any consents to processing that you have given us and prevent further processing if there is no other ground under which SEPA Cyber Technology EAD can process your personal data.
(d) Restriction: You can require certain personal data to be marked as restricted whilst complaints are resolved and also restrict processing in certain other circumstances.
(e) Portability: You can ask us to transmit the personal data that we hold about you to a third party electronically.
(f) Raise a complaint: You can raise a complaint about our processing with the data protection regulator - the Commission for protection of personal data.

Your contact for any queries
SEPA Cyber Technology EAD has a designated Data Protection Officer who should be contacted if you have any queries regarding the interpretation of this notice. The contact details are set out below:
• Location: town of Varna, district Mladost, Zapadna promishlena zona, office building “Granite”
• Email: dataofficer@sepa-cyber.com