Information on the processing of personal data

Pursuant to the terms and effects of articles 13 and 14 of (EU) Regulation 2016/679 on the protection of individuals relating to the processing of personal data (referred to below as “GDPR”), WYSER EOOD (also referred to below as “WYSER” or the “Company”) wishes to provide you with information on the purposes, methods and area of communication and disclosure of the personnel data supplied by candidates of adult age when they register through Wyser website (referred to below as the “Website”), the websites of other companies and social networks, by email or on the occasion of an interview with one of the agencies.

 

1. PURPOSE OF THE PROCESSING FOR REGISTRATION THROUGH GI WEBSITE, SEARCH AND SELECTION OF CANDIDATES AND LEGAL BASES
1.1. Your data is obtained in the following ways:
– when you register through Wyser website
– by email
– by our agencies
– through outside websites or social networks

1.2. Your data is processed for registration through Wyser website if you reply to a specific situation vacant announcement published on the website or present a voluntary application as a candidate through the website.

1.3. The legal base applicable to the processing of your personal data for the purposes described in point

1.2. is the execution of a contract pursuant to article 6, section 1 b), of the GDPR.

1.4. Your data will be processed if you reply to a specific situation vacant announcement and in the case of a voluntary application, for purposes of candidate search and selection, and more precisely:

b. for direct placement in our third party client company
c. for direct placement at WYSER

Your data will also be processed to enable us to send you messages by traditional or automated contact methods, including messages on training initiatives linked to a specific position, whether these are financed by a client company of ours or through inter-professional funding.
If you reply to a specific situation vacant announcement, your data may also be processed for future personnel search and selection processes, if you do not raise objections to such processing at the time when you supply the data or at a later date. If you should object to such processing, your data will only be processed in relation to the specific selection process for which you are a candidate.

1.5. The legal base applicable to the processing of your personal data for the purposes described in point

1.4. is the execution of pre-contractual measures adopted at your request pursuant to article 6, section 1 b), of the GDPR.

1.6. Your data may also be processed to ascertain, exercise or defend our rights in legal proceedings.

1.7. The legal base applicable to the processing of your personal data for the purposes described in point

1.6. is our legitimate interests pursuant to article 6, section 1 f), of the GDPR.
The legal base applicable to the processing of the special categories of personal data regarding yourself for the same purposes is to ascertain, exercise or defend a right in legal proceedings pursuant to article 9, section 2 f), of the GDPR.

 

2. FURTHER PURPOSES OF THE PROCESSING AND LEGAL BASES

2.1. Your data may also be processed, if you express your consent, for the following additional purposes:
а. the issue of information and promotional messages on the services offered by WYSER (including training initiatives, career development and coaching), or statistical studies and research and/or market surveys, by means of traditional (by post and phone calls through the operator) and automated contact methods (email, text message, multimedia message and instant messaging systems)
b. the issue of information or promotional messages on the services offered by the other group companies within and outside the EU (such as training initiatives, career development, coaching, transfer support, personnel search and selection and executive searches), and statistical studies and research and/or market research studies, by means of traditional (by post and phone calls through the operator) and automated contact methods (email, text message, multimedia message and instant messaging systems)

2.2. The legal base applicable to the processing of your personal data for the purposes described in point 2.1 is your consent pursuant to article 6, section 1 a), of the GDPR.

2.3. It is understood that your consent to the processing of your data for the purposes described above is entirely optional. For this reason, if you should refuse to agree to the processing for those purposes, your data will be processed for the purposes described in point 1 above only.

 

3. CATEGORIES OF DATA PROCESSED, DATA SOURCE AND PROCESSING OF SPECIAL CATEGORIES OF DATA

3.1. Merely by way of example, WYSER will obtain the following common categories of personal data: first name, middle name (if applicable) surname, password, date of birth, national identification code (if applicable), address, email address and telephone contact details, educational qualifications, work experience and any additional information entered by you in your CV and/or supplied during an interview at one of our branches.

3.2. WYSER will obtain the data in question from yourself and/or websites managed by third parties or social networks through which WYSER publishes the situations vacant (on behalf of its client companies or on its own account), or through which you may consult the candidate profiles.

3.3. If you respond to an advertisement or make a voluntary application, you will be given the opportunity to declare that you belong to a protected category in the data collection forms on the website or during a telephone interview or an interview at one of our branches. This information forms part of the special data categories pursuant to article 9, section 1, of the GDPR, and will be processed in line with the relevant regulations in force.

3.4. The legal base applicable to the processing of special data categories regarding yourself as described in point 1.2 is your explicit consent pursuant to article 9, section 2 a), of the GDPR.
If you do not express your consent, it will not be possible to process the data on the protected category to which you belong.

3.5. Please do not include any special data categories in your CV (personal data revealing your racial or ethnic origins, political opinions, religious or philosophical convictions, trade union membership, genetic details or biometric data used for the unequivocal identification of an individual, or data relating to your health, sex life or sexual orientation).

 

4. DATA STORAGE PERIOD

4.1. In the event of processing of data for registration through WYSER website and for search and selection purposes as described in section 1 in the case of a voluntary application, the data are entered in the company database and kept for a period of 30 months following such entry, or as of the date of your most recent interaction with the website (access, data updating or loading in your CV) or agencies, unless you should agree to an extended period of data storage upon being asked to do so prior to the expiry of the initial storage period.

4.2. In the event of processing of data for registration through WYSER website and for search and selection purposes as described in section 1 by way of a reply to a specific situation vacant advertisement, if you should raise objections to the storage of your data for future selection purposes, your data will be entered in the company database and stored throughout the duration of the selection process and, in the case of a negative outcome, until the closure of that process.

4.3. In the event of processing of data for purposes linked to ascertaining, exercising or defending a legal right, as described in section 1, the data will be entered in a historic archive and kept throughout the duration of the dispute and up to such time as the time limits for presenting challenging action expire.

4.4. In the event of processing of data for the additional purposes described in point 2.1, the data will be entered in the company database and stored for the period indicated in point 4.1, or until such time as you should withdraw your consent.

4.5. Upon expiry of the storage periods indicated above, the data will be destroyed or converted to an anonymous format.

 

5. NATURE OF THE SUPPLY OF DATA AND CONSEQUENCES OF REFUSAL TO DO SO

5.1. The supply of the data marked with an asterisk in the registration form in WYSER website is necessary to enable WYSER complete your registration as described in point 1. If you should refuse to supply the data required, it will therefore not be possible for WYSER to complete your registration through the Website

5.2. The supply of the data marked with an asterisk in the data collection form on the website or as requested by the agencies is necessary to enable WYSER to pursue the search and selection processes described in point 1. If you should refuse to supply the data required, it will therefore not be possible for WYSER to take your candidature into consideration.

5.3. The supply of the data described in point 2 above is optional. If you refuse to supply the data or do not express your consent, this will have no consequence for your registration through WYSER website and will not prevent WYSER from carrying out the search and selection processes.

 

6. PROCESSING METHODS
The data processing procedure is based on the principles of correctness, legitimacy, transparency and data minimisation (privacy by design). The data may be processed manually or by means of automated methods to enable them to be memorised, processed and transmitted, and will take place by means of suitable technical and organisational methods which guarantee the security, confidentiality, integrity, availability and resilience of the systems and services and prevent the risk of loss, destruction, unauthorised access or disclosure or illegal use of the data, in addition to reasonable measures to ensure the prompt cancellation or adjustment of data which are unsuitable for the purposes for which they are to be processed.

 

7. RECIPIENTS OF THE DATA

7.1. Your data may only be processed by employees of the company departments authorised to do so for the purposes indicated above. The employees in question have received suitable operating instructions on the tasks to be carried out by them.

7.2. WYSER may forward your personal data to the following parties for the purposes described in point 1 above:
– Client companies or entities
– The Ministry of Labour
– Public bodies in respect of active employment policies or measures
– Other market operators in the case of partnerships
– Legal consultants
– Training bodies
– Group companies in Bulgaria or abroad
WYSER may forward your personal data to group companies in Italy or abroad for the purposes described in point 3 above.

7.3. Your personal data may also be processed by outside parties expressly designated as data processors which provide WYSER with:
– Website management and maintenance services
– Candidate database management and maintenance services
– Filing services
– Message mailing services
– Market research services

7.4. The updated list of recipients is available from our registered office or by sending an email message to bg.privacy@gigroup.com.

7.5. The personal data supplied by candidates will not be subject to disclosure.

 

8. TRANSFER OF DATA OUTSIDE THE EU

8.1. Your data may be transferred to companies not belonging to the European Union, and more specifically to:
а. Argentina and Switzerland, whose data protection levels are deemed satisfactory by the European Commission pursuant to article 45 of the GDPR
b. Brazil, China, Colombia, Hong Kong, India, Montenegro, Russia, Serbia and Turkey, on condition that WYSER and the data importer sign standard contractual clauses adopted or approved by the European Commission pursuant to article 46, sections 2 c) and d), of the GDPR

8.2. The decisions on adequacy of protection levels may be consulted on the following links: Switzerland: http://eur-lex.europa.eu/eli/dec_impl/2016/2295/oj
Argentina: http://eur-lex.europa.eu/eli/dec/2003/490/oj

A copy of the standard contractual clauses signed by WYSER may be obtained by sending an email to: bg.privacy@gigroup.com

 

9. RIGHTS OF THE INTERESTED PARTY

9.1. The interested parties have the rights described in articles 15 to 22 of the GDPR, where applicable.

9.2. More precisely, the interested parties may ask the data controller for access to and cancellation of the data, the adjustment of imprecise data, additions to incomplete data and restriction of data transfers in the cases described in article 18 of the GDPR .

9.3. The interested parties have the right to object to the processing of the data necessary for the legitimate pursuit of the interests of the data controller, at any time and in whole or in part.

9.4. If the conditions for the transfer of the data pursuant to article 20 of the GDPR are satisfied , the interested parties also have the right to receive the data supplied to the data controller in a structured format for common use which is legible from an automatic device and, where technically feasible, to transfer such data to another data controller without impediment.

9.5. The interested parties have the right to present claims to the relevant supervisory authority (in their member state of normal residence or employment,or in the state in which the presumed violation occurred).

9.6. These rights may be exercised by writing to the address indicated below, or by sending an email message to the following address: bg.privacy@gigroup.com. It is understood that if the application to that effect is presented electronically the information will be supplied in an electronic format suitable for common use.

 

10. WITHDRAWAL OF CONSENT

10.1. The interested parties have the right to withdraw the consent expressed by them at any time sending an email to bg.privacy@gigroup.com.

10.2. The withdrawal of the consent does not affect the legitimate nature of the processing based on the consent which you expressed prior to the withdrawal.

11. DATA CONTROLLER CONTACT DETAILS
The personal data controller is WYSER EOOD, 84 Al. Stamboliiski blvd, fl. 6 – 1303 Sofia, Bulgaria, in the person of its legal representative.

12. DATA PROTECTION OFFICER (DPO) CONTACT DETAILS
The data protection officer [DPO] can be contacted at Piazza IV Novembre n. 5, 20124 Milan, email at dpo@gigroup.com

 

DATA CONTROLLER

If:
а). the interested party contests the precise nature of the personal data, for the period necessary to enable the data controller to check the precise nature of the data in question
b). the processing is unlawful and the interested party objects to the cancellation of the personal data and asks for its use to be restricted
c). even if the data controller no longer requires the data for processing purposes, when the interested party has to obtain the personal data to ascertain, exercise or defend a right in legal proceedings
d). the interested party objects to the processing pursuant to the terms of article 21, section 1, while awaiting checks on the prevalence of the legitimate motives of the data controller over those of the interested party
If the processing is based on consent pursuant to articles 6.1 a) or 9.2 a) or the contract pursuant to article 6.1 b) of the GDPR and takes place using automated instruments.