Information in Accordance with Article 13/14 of the General Data Protection Regulation
We are delighted that you are interested in EOS Matrix EOOD and that you have applied or are applying for a position in our company. We attach particular importance to the protection of your personal data. Your personal data will be processed in accordance with the current data protection regulations in accordance with the legal regulations in force from 25 May 2018, i.e. the General Data Protection Regulation. Below we would like to provide you the information for the processing of your personal data in connection with your application.
Identity of the controller:
EOS Matrix EOOD, company ID 131001375,
Address: 6 Racho Petkov Kazandjiata, Str. Sofia, 1766, Bulgaria
You can contact the Data Protection Officer via the above-mentioned postal address or by e-mail: DPO@eos-matrix.bg.
Additional information about our company, details about the empowered representatives and additional contact options is available on our website: https://bg.eos-solutions.com
- Purposes of data processing and legal basis for the processing
We process the data that you have sent us in connection with your application in order to check your suitability for the position (or other vacancies in our company, if necessary - if your consent is required by law, we will obtain it beforehand) and to carry out the application procedure for choosing appropriate candidates for vacant job positions in the company.
If further data are processed in the context of the current application process, we will inform you about this separately.
The legal basis for the processing of your personal data in this application procedure is primarily Article 6 (1) b GDPR – processing is need for initiating of steps for request of the data subject before the conclusion of the contract, as well as per Art. 6, para. 1 f) GDPR considering the legitimate interest of the company to choose employees, which meet the requirements for the respective job position and to enter into employment relationship with them.
Should the data be necessary for legal/judicial prosecution after completion of the application procedure, data may be processed on the basis of the requirements of Art. 6 para. 1 f) GDPR - to fulfil legitimate interests of the controller. Our interest is then to protect our rights and interests by filing or defending against claims or other pretenses, including within administrative procedures.
When the controller processes your personal data, you are not subject to automatic decisions, including profiling.
2. Data categories and data sources:
Within the application process for vacant positions in the company we process personal data provided by you in your CV and/or motivation letter, or during the job interview.
We process the following categories of data -
Personal master data (name, date of birth), address data, communication data and data for education and other qualifications and other data relative and necessary for the personnel selection process.
Your data might be received by a company specialized in intermediary services for employment, in case you apply via such company and you have provided your personal data to it.
- Recipients
Your application data will be reviewed by an employee from the Human Resources Department upon receipt of your application. Suitable applications are then forwarded internally to the department heads for the respective open position. In the company, only those persons have access to your data who need them for the proper handling of our application process on a need-to-know basis.
We can provide data to personal data processors and their sub processors, who provide services connected to personnel selection by meeting the requirements of Art. 28 GDPR.
Your data will be processed only within the EU. In case in the future the data is needed to be transferred to third countries or international organizations outside EU, this will be done by following the requirements of GDPR and only if the third country has been confirmed an adequate level of personal data protection by the European committee or if other appropriate level of security is presented (e.g. standard contractual clauses, approved according to GDPR or obligatory company rules).
- Duration of data storage
In case of rejection data of the applicant will be deleted after 6 months.
In the event that you have provided consent to further storage of your personal data, we will add your data to our applicant pool. There the data will be deleted after three years.
The company has the right to storage personal data of applicants in personnel selection procedure, which data is contained in the internal documents of the company compiled by its employees, regarding the personnel selection process for the purposes provided as per Art. 52 from the Protection against discrimination act for a period of 3 years.
If you have been approved for a respective job position during the personnel selection process and you sign an employment agreement with the company, your data will be processed on this legal ground.
5. Rights of the data subject:
In accordance with Art. 15–22 of the GDPR, you have the following rights if the legal requirements are met:
Right to access
As per Art. 15 GDPR you have right of access to your personal data processed by the Controller.
We notify you that if you file a non-written request, we could ask you to provide an additional proof for your identity.
Right to personal data rectification:
As per Ar. 16 GDPR you have the right to require rectification of non-correct personal data or supplementation of your personal data storage by us.
Right to erasure:
As per Art. 17 GDPR you have the right to erasure (right to be forgotten) of personal data which have been processed unlawfully or on expired legal basis (expired period of storage, withdrawn consent, fulfilled purpose for which the data have been collected etc.)
Right to restriction of processing:
As per 18 GDPR you have the right to restriction of processing of your personal data in case the accuracy of the data is being disputed or the processing is unlawful, but you do not want erasure, or in case we do not need the data, but you require establishment, exercising or protection of legal claims or you have filed objection against processing as per Art. 21 GDPR.
Right to data portability:
As per Art. 20 GDPR you require to receive your personal data, which you have provided to us in a structured, commonly used and machine-readable format or their transfer to another controller.
Consent withdrawal:
As per Art. 7, para 3 GDPR you can withdraw your consent for personal data processing which you have previously given to us at any time. In such case we would not be able to continue personal data processing, based on your consent.
Right to object:
In cases in which processing is based on legitimate interest of the company or processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller you have the right to object against processing meeting the requirements of Art. 21 GDPR.
Right to file a complaint:
Pursuant to Article 77 GDPR, you have the right to lodge a complaint before the competent court or a Data Protection Supervisory Authority, namely Commission for Personal Data Protection, address: 2 bul. Prof. Tzvetan Lazarov, Sofia, 1592, Republic of Bulgaria.
Date of this Information: July 2020