Privacy Notice

Candidate Privacy Notice

SuperScale s. r. o., with its registered seat at Bottova 2A, 811 09 Bratislava, Slovakia, company ID No. (IČO): 47 523 697, registered in the Commercial Registry kept by Bratislava I District Court, Section Sro, insert No. 94037/B (“we” or “us” or “SuperScale”). Being based in the EU, we must comply with the EU general data protection regulation (the „GDPR“) and local legislation when processing the personal data. 

SuperScale are committed to protecting and respecting your privacy. This Privacy Notice for Candidates sets out the basis on which the personal data collected from you, or that you provide to Us, will be processed by Us in connection with Our recruitment processes. Please read the following carefully to understand Our views and practices regarding your personal data and how We will treat it as the controller pursuant GDPR.

We use “Workable”, an online applications provided by Workable Software Limited (https://www.workable.com/privacy).  and “LinkedIn Jobs” provided by LinkedIn, Inc. (https://www.linkedin.com/legal/privacy-policy) and “Stack Overflow” (https://stackoverflow.com/legal/privacy-policy) provided by Stack Exchange, Inc., to assist with our recruitment process we use these service providers as our processors. Where you apply for a job opening posted by us, these Candidate Privacy Notice provisions will apply to our processing of your personal information in addition to our  general Privacy Policy  which has been provided to you separately or is available on our Website (https://superscale.com/privacy-policy/) (“Privacy Policy”). In case of a conflict between a Candidate Privacy Notice and a Privacy Policy for the purpose of applying to a job position, the provisions of the Candidate Privacy Notice shall prevail in relation to fulfilling information obligations of the Controller pursuant Article 13 GDPR.

Where you apply for a job opening via the application function on a job site or similar online service provider (“Partner”), you should note that the relevant Partner may retain your personal data and may also collect data from us in respect of the progress of your application. Any use by the Partner of your data will be in accordance with the Partner’s Privacy Notice.

Your Personal Information

Information we collect from You or from Partner based on your consent:

We collect and process some or all the following types of information from you:

• Information that you provide when you apply for a role. This includes information provided through an online job site, via email, in person at interviews and/or by any other method.
• name, surname, email address, address, telephone number, date of birth, qualifications, experience, information relating to your employment history, skills experience that you provide to us, photo, as well as your video in case you conduct your interview using the Video Interview feature and other information included into your CV by you.
• records related to our mutual  correspondence related to occupation of free job position in SuperScale.
• A record of your progress through any hiring process that we may conduct.
• Through cookies or similar tracking technologies, details of your visits to Workable’s website including, but not limited to, traffic data, location data, weblogs and other communication data, the site that referred you to Workable’s Website and the resources that you access.
  
  

Information we collect from other sources:

Workable provides us with the facility to link the data you provide to us, with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media public profiles from other social networks.

Workable’s technology allows us to search various databases or make direct integrations with databases of job offers provided by external providers (e.g. www.profesia.sk). We may also use www.pretlak.sk or similar job portals for collecting CVs of qualified job attendants with required specific IT skills. Such resources always need to be legal what typically means that you upload your CV there and provided consent for use of your CV for recruitment purposes also for us.

We may also receive your personal data from a third party who recommends you as a candidate for a specific job opening or for our business more generally (e.g. your former business partner, employer or friend). If the specific national law requires consent for providing personal data within such reference, we ask it from the person who is source of your personal data or we contact you directly without performing any processing operation with your personal data in GDPR regime. We would like to inform you also that during use of our professional LinkedIn account we process together with LinkedIn, Inc. your personal data as the joint controllers in relation to page insights. Fundamental parts of this joint controller´s agreement concluded pursuant Article 26 GDPR you can find here: https://legal.linkedin.com/pages-joint-controller-addendum

Purposes and legal basis for the processing of your personal data

We process your personal data on the personnel & payroll purposes. In relation to our internal staff, we are obliged to process certain limited data by the employment, commercial, social deductions and insurance regulations pursuant to the Art. 6(1)(c) of the GDPR. We also rely on contract performance pursuant to the Art. 6 (1)(b) of the GDPR when it comes to contracts with personnel and pre-contractual relationships with job seekers and candidates on work cooperation. Based on consent pursuant to the Art. 6(1)(a) of the GDPR we keep CVs and motivation letters of prospective candidates for periods after the applied position has been closed, to be able to get back to you in future.

Automated decision making/profiling

We may use Workable’s or LinkedIn Jobs technology to select appropriate candidates for us to consider based on criteria expressly identified by us, or typical in relation to the role for which you have applied, what can include common profiling based on fully automated analysis of your personal data to helps us select the best candidate for vacancy. The process of finding suitable candidates may be partially  automatic, however, any decision as to who we will engage to fill the job opening will be made by our qualified HR personnel, therefore we do not consider this processing of personal data as automated individual decision-making, including profiling in the meaning of Article 22 GDPR.

Cross-border transfers outside EU/EEA By default, we do not to transfer your personal data outside the European Economic Area where not necessary. As a rule, we seek to have all cloud and servers located in the EEA. However, some of our sub-contractors or the above-mentioned recipients of personal data might be based or their servers might be co-located in the United States of America (USA). After the Court of Justice of the EU abolished the EU-US Privacy Shield in July 2020, USA is again regarded a third party not ensuring adequate level of protection. Any transfer of personal data outside the European Economic Area is done by us only under strict compliance with the GDPR. We ensure the third-party recipients in non-adequate countries concluded the EU standard contractual clauses (EU SCC) with us or follow equivalent safeguards such binding corporate rules (BCRs). EU SCC are now concluded with all above US-based sub-contractors or recipients (such as Workable, LinkedIn). We may also use our processors mentioned in Privacy Policy (e.g. Google, Facebook, Amazon, Microsoft). All EU SCC concluded must not deviate from the template approved by the Commission (for controller-processor transfers). We seek to adopt additional safeguards where we believe the 3rd country partner might be subject to US surveillance laws that were viewed disproportionate by the Court of Justice of the EU.

For transparency and more detailed information related to appropriate legal safeguards, please see the following: