Data Processing Notification
This email is to notify you that personal data about you has been collected by Nexttech (“Controller”) and/or its affiliates and subsidiaries, which has legal entities in Romania, 6-8 Calea Motilor, to evaluate your candidacy for employment. Your personal data was either obtained directly from you when you applied through our website or via email address, either from publicly available sources (e.g. LinkedIn) or provided to us by someone who referred you for potential employment.
Scope of processing
Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment or under Art. 6(1)(a) of Regulation (EU) 2016/679 (General Data Protection Regulation) should your application be sent directly by you (this would mean you would consent to the processing for the above-mentioned purposes).
Types of personal data
The types of data processed are the ones listed in your resume or on publicly available sources, they may include (but are not limited to) your name, image, phone number, work experience, education, address, email address, hobbies.
Transfer of personal data
Your personal data will be transferred or be accessible internationally as we are a global organisation. Any transfers of personal data from within the EEA (European Economic Area) will take place in accordance with applicable data protection legislation and applicable additional safeguards and supplementary measures; Any personal data transfers from non-EEA countries will take place in accordance with applicable data protection legislation.
Third party processors
Your personal data has been shared with TalentLyft, a cloud services provider incorporated in European Union, with infrastructure hosted in the United States, and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf, as such your personal data has been also transferred to the United States (if you are based outside the United States).
Retention period
Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment, however such a period should not be longer than 2 years.
Rights
Data protection legislation grants specific rights related to personal data, that could be different depending on your location and / or applicable data protection legislation, such as:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision making and profiling
- Right to file a complaint with the DPA (Data protection authority) - https://edpb.europa.eu/about-edpb/board/members_en
To find out what rights you have or exercise any of the above mentioned rights (dependent on the applicable legislation) you need to contact the Data Protection Officer.
Contact details
Controller can be contacted at contact@nexttech.ro
Controller’s data protection officer can be contacted at dataprotection@nexttech.ro
Best wishes !
