PRIVACY NOTICE FOR CANDIDATES

The company named «IFANTIS SA» based at Seneka 4, N.Kifisia151 24, 14564 (hereinafter the” Company”, “us”), intends to inform its candidates about the processing of their personal data, according to the General Data 2016/679 (EU), the Greek Law 4624/2019, the Decisions, Instructions and Opinions of the Hellenic Data Protection Authority and in general the national and union legislation for the protection of personal data (hereinafter as “Existing Legislation”). This Privacy Notice concerns the personal data of candidates, submitting CVs to the Company (the “candidate” and /or “you”).

1.TERMS
‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

‘special categories of personal data’ means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

2.PROCESSING OF PERSONAL DATA
The Company collects your personal data such as name, surname, date of birth, gender, phone, email, address, postal code, city, country, website / blog, type of employment, job title, duration, organization and education level, professional skills, language certificates and diplomas professional experience, tasks and responsibilities in previous companies / departments where you were employed as well as other personal details included in your CV. The Company does not seek to collect special categories of personal data at that stage.

3.PURPOSE & LEGAL BASIS OF PROCESSING
The purpose of processing the personal data of prospective employees is to evaluate their suitability for a specific job position. The legal basis for processing the personal data of prospective employees is the Company’s legitimate interest in recruiting the appropriate candidate for the job/work position. When prospective employees and prospective associates/experts send resumes or personal information to the Company on their own initiative, without the Company having advertised a specific open job position, the candidates provide their consent for the processing of their data, in accordance with what is defined by the applicable legal framework.

4.SECURITY
Taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for rights and freedoms of natural persons posed by the processing, the Company  both at the time of the determination of the means for processing and at the time of the processing itself, implements appropriate technical and organisational measures, such as pseudonymisation, which are designed to implement data-protection principles, such as data minimisation, in an effective manner and to integrate the necessary safeguards into the processing in order to meet the requirements of this Regulation and protect the your rights.

For this purpose, the Company has adopted Policies and Procedures for the protection of personal data and has implemented important data protection measures, which include secure storage of data, classified access, etc.

The Company may transmit your personal data to the relevant staff members or to external partners to whom it has entrusted the processing of personal data on its behalf. In any case, the third parties to which candidate data may be transmitted, are contractually bound towards the Company to ensure the required confidentiality obligation as well as all the obligations provided for by the Existing Legislation. The Company will under no circumstances transmit your personal data to unauthorized third parties, nor to countries/organizations outside the EU/EEA.

5. STORAGE AND RETENTION OF PERSONAL DATA
Your personal data are kept in the Company’s electronic databases (cloud server and in laptops), and also may be kept in a physical file, for a period of one (1) year from the date of receipt by you, as long as the Company does not proceed with your recruitment. In case of recruitment, the time of keeping the personal data of the employees is determined in the “Privacy Notice for Employees” which is sent to every employee of the Company. In case the Company wishes to retain your CV for future openings, the Company may reach out to you to adhere to your consent.

6. DATA PROTECTION RIGHTS
According to the Existing Legislation, you have the right to:

• request information about your stored personal data and the way it is processed. If you so wish, we shall provide a copy of your personal data undergoing processing, free of charge (Right of Access).
• request rectification of inaccuracies or errors, correction of incomplete data or an update of your data (Right to rectification).
• request erasure of personal data, if no longer retained for specific, legal or stated purposes (Right to erasure or Right to be forgotten).
• request restriction of processing a) when the accuracy of the personal data is contested, b) when the processing is unlawful (but they oppose the erasure of the data), c) when the data is no longer needed for the purposes of the processing, and d) for as long as the verification whether the legitimate grounds of the controller override those of the data subject are still pending.
• object on grounds relating to your particular situation, at any time, to processing of personal data, especially when this data is processed for direct marketing purposes or profiling. More specifically, you may object to a decision based solely on automated processing. In such a case, you may exercise your right of intervention (Right to object – Automated individual decision-making).
• receive your personal data in a structured, commonly used and machine-readable format or transmit this data to another controller, where technically feasible and at all times under the specific conditions of the law (Right to data portability).
• revoke your once granted consent for your data processing at any time. As a result, the Company will not be allowed to continue the data processing based on your consent in the future.

In case of exercising one or more of the above-mentioned rights, the Company will endeavor to respond immediately and, in any case, no later than one (1) month from the submission of the request and the identification of the candidate. This deadline can be extended by two (2) more months, if necessary, if the request is complex or there is a large number of requests. In the event that candidates believe that their personal data has been violated in accordance with the Existing Legislation, they have the right to submit a complaint to the Hellenic Data Protection Authority.

7.COMMUNICATION
If you have any questions or queries regarding the way the Company processes your personal data, or wish to exercise your rights referred to in Article 6 hereof, you may contact the Company’s DPO by email at: dpo-custom@revivalsa.gr.