Candidate

Privacy Notice

Candidate Privacy Notice

 

SuperScale s. r. o., with its registered seat at Bottova 2A, 811 09 Bratislava, Slovakia, company ID No. (IČO): 47 523 697, registered in the Commercial Registry kept by Bratislava I District Court, Section Sro, insert No. 94037/B (“we” or “us” or “SuperScale”). Being based in the EU, we must comply with the EU general data protection regulation (the „GDPR“) and local legislation when processing the personal data. 

 

SuperScale are committed to protecting and respecting your privacy. This Privacy Notice for Candidates sets out the basis on which the personal data collected from you, or that you provide to Us, will be processed by Us in connection with Our recruitment processes. Please read the following carefully to understand Our views and practices regarding your personal data and how We will treat it as the controller pursuant GDPR.

 

We use “Workable”, an online applications provided by Workable Software Limited (https://www.workable.com/privacy).  and “LinkedIn Jobs” provided by LinkedIn, Inc. (https://www.linkedin.com/legal/privacy-policy) and “Stack Overflow” (https://stackoverflow.com/legal/privacy-policy) provided by Stack Exchange, Inc., to assist with our recruitment process we use these service providers as our processors. Where you apply for a job opening posted by us, these Candidate Privacy Notice provisions will apply to our processing of your personal information in addition to our  general Privacy Policy  which has been provided to you separately or is available on our Website (https://superscale.com/privacy-policy/) (“Privacy Policy”). In case of a conflict between a Candidate Privacy Notice and a Privacy Policy for the purpose of applying to a job position, the provisions of the Candidate Privacy Notice shall prevail in relation to fulfilling information obligations of the Controller pursuant Article 13 GDPR.

Where you apply for a job opening via the application function on a job site or similar online service provider (“Partner”), you should note that the relevant Partner may retain your personal data and may also collect data from us in respect of the progress of your application. Any use by the Partner of your data will be in accordance with the Partner’s Privacy Notice.

 

Your Personal Information

 

Information we collect from You or from Partner based on your consent:

 

We collect and process some or all the following types of information from you:

 

  • Information that you provide when you apply for a role. This includes information provided through an online job site, via email, in person at interviews and/or by any other method.
  • name, surname, email address, address, telephone number, date of birth, qualifications, experience, information relating to your employment history, skills experience that you provide to us, photo, as well as your video in case you conduct your interview using the Video Interview feature and other information included into your CV by you.
  • records related to our mutual  correspondence related to occupation of free job position in SuperScale.
  • A record of your progress through any hiring process that we may conduct.
  • Through cookies or similar tracking technologies, details of your visits to Workable’s website including, but not limited to, traffic data, location data, weblogs and other communication data, the site that referred you to Workable’s Website and the resources that you access.

Information we collect from other sources:

 

Workable provides us with the facility to link the data you provide to us, with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media public profiles from other social networks.

 

Workable’s technology allows us to search various databases or make direct integrations with databases of job offers provided by external providers (e.g. www.profesia.sk). We may also use www.pretlak.sk or similar job portals for collecting CVs of qualified job attendants with required specific IT skills. Such resources always need to be legal what typically means that you upload your CV there and provided consent for use of your CV for recruitment purposes also for us.

 

We may also receive your personal data from a third party who recommends you as a candidate for a specific job opening or for our business more generally (e.g. your former business partner, employer or friend). If the specific national law requires consent for providing personal data within such reference, we ask it from the person who is source of your personal data or we contact you directly without performing any processing operation with your personal data in GDPR regime. We would like to inform you also that during use of our professional LinkedIn account we process together with LinkedIn, Inc. your personal data as the joint controllers in relation to page insights. Fundamental parts of this joint controller´s agreement concluded pursuant Article 26 GDPR you can find here: https://legal.linkedin.com/pages-joint-controller-addendum

 

Purposes and legal basis for the processing of your personal data

 

We process your personal data on the personnel & payroll purposes. In relation to our internal staff, we are obliged to process certain limited data by the employment, commercial, social deductions and insurance regulations pursuant to the Art. 6(1)(c) of the GDPR. We also rely on contract performance pursuant to the Art. 6 (1)(b) of the GDPR when it comes to contracts with personnel and pre-contractual relationships with job seekers and candidates on work cooperation. Based on consent pursuant to the Art. 6(1)(a) of the GDPR we keep CVs and motivation letters of prospective candidates for periods after the applied position has been closed, to be able to get back to you in future.

 

Automated decision making/profiling

 

We may use Workable’s or LinkedIn Jobs technology to select appropriate candidates for us to consider based on criteria expressly identified by us, or typical in relation to the role for which you have applied, what can include common profiling based on fully automated analysis of your personal data to helps us select the best candidate for vacancy. The process of finding suitable candidates may be partially  automatic, however, any decision as to who we will engage to fill the job opening will be made by our qualified HR personnel, therefore we do not consider this processing of personal data as automated individual decision-making, including profiling in the meaning of Article 22 GDPR.

 

Cross-border transfers outside EU/EEA By default, we do not to transfer your personal data outside the European Economic Area where not necessary. As a rule, we seek to have all cloud and servers located in the EEA. However, some of our sub-contractors or the above-mentioned recipients of personal data might be based or their servers might be co-located in the United States of America (USA). After the Court of Justice of the EU abolished the EU-US Privacy Shield in July 2020, USA is again regarded a third party not ensuring adequate level of protection. Any transfer of personal data outside the European Economic Area is done by us only under strict compliance with the GDPR. We ensure the third-party recipients in non-adequate countries concluded the EU standard contractual clauses (EU SCC) with us or follow equivalent safeguards such binding corporate rules (BCRs). EU SCC are now concluded with all above US-based sub-contractors or recipients (such as Workable, LinkedIn). We may also use our processors mentioned in Privacy Policy (e.g. Google, Facebook, Amazon, Microsoft). All EU SCC concluded must not deviate from the template approved by the Commission (for controller-processor transfers). We seek to adopt additional safeguards where we believe the 3rd country partner might be subject to US surveillance laws that were viewed disproportionate by the Court of Justice of the EU.

 

For transparency and more detailed information related to appropriate legal safeguards, please see the following:

Supplier

Supplier’s privacy policy

Transfer mechanism and appropriate safeguards

Workable

https://www.workable.com/privacy

https://www.workable.com/static/downloads/workable_bridge_service_data_processing_agreement.pdf

Stack Overflow

https://stackoverflow.com/legal/privacy-policy

https://stackoverflow.com/legal/data-processing-addendum-business

LinkedIn

https://www.linkedin.com/legal/privacy-policy

https://www.linkedin.com/legal/l/dpa

Supplier

Workable

Supplier’s privacy policy

https://www.workable.com/privacy

Transfer mechanism and appropriate safeguards

https://www.workable.com/static/downloads/workable_bridge_service_data_processing_agreement.pdf

Supplier

Stack Overflow

Supplier’s privacy policy

https://stackoverflow.com/legal/privacy-policy

Transfer mechanism and appropriate safeguards

https://stackoverflow.com/legal/data-processing-addendum-business

Supplier

LinkedIn

Supplier’s privacy policy

https://www.linkedin.com/legal/privacy-policy

Transfer mechanism and appropriate safeguards

https://www.linkedin.com/legal/l/dpa

How long We keep your personal data

 

We will hold all the data until the end of recruitment procedure what you participate in or maximally until the expiration of the 24 months in our internal applicant database if you provide us with consent covering such longer period.

 

Your rights

 

The GDPR regulates the rights of data subjects in Articles 12 to 22. In general, as a data subject, you have in particular following rights:

 

  • The right to request access to personal data under Article 15 of the GDPR that we process about you. This right includes the right to confirm whether we process personal data about you, the right to access this data and the right to obtain a copy of the personal data we process about you, if technically feasible; 
  • The right to correct and supplement personal data according to Article 16 of the GDPR, if we process incorrect or incomplete personal data about you;
  • The right to delete your personal data according to Article 17 of the GDPR;
  • The right to restrict the processing of personal data under Article 18 of the GDPR;
  • The right to data portability under Article 20 of the GDPR, if the processing of personal data is based on a legal basis of consent under the performance of the contract; The right to object under Article 21 of the GDPR, if the processing is based on a legal basis of legitimate interest, the public interest or if it is for the purposes of direct marketing, including profiling;
  • The right to object to automated individual decision-making under Article 22 of the GDPR.

 

If we process your personal data on the basis of your consent to the processing of personal data, you have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal. Nevertheless, you have the right to object at any time to the processing of personal data on the basis of a legitimate as well as for the purposes of direct marketing, including profiling.

 

If you would like to exercise any of those rights, please:

 

  • contact us using our contact details below,
  • let us have enough information to identify you,
  • let us have proof of your identity and address, and
  • let us know the information to which your request relates.

 

How to complain

 

We hope that We can resolve any query or concern you raise about our use of yourpersonal data. .

 

GDPR gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the Slovakia is the Office for the Protection of Personal Data of Slovak Republic who may be contacted at address: Hraničná 12, 820 07 Bratislava 27 Slovak Republic, Secretariat: +421/2/32313214 E-mail: [email protected]

 

Contact

 

All questions, comments and requests regarding this Privacy Notice should be addressed to [email protected]