Playamedia S.L. is meant when the terms ‘we’ or ‘us’ are used.
Job applicant/data subjects are meant when the terms ‘Candidate’ and ‘you/yours’ are used.
This Privacy Notice provides an overview of the processing of a candidate’s personal data in the context of the recruitment process (hereinafter referred to as the ‘Service’), including information about a candidate’s rights. We have always taken the protection of personal data very seriously and continuously take appropriate organisational, contractual and technical measures to protect personal data from unauthorised or unlawful processing and against accidental loss, destruction or damage.
Details of the Controller
The data controller is Playamedia S.L., Carrer de la Mestrança, 59, Planta 5, 08003 Barcelona, Spain. Our data protection officer can be contacted at: email@example.com.
Information on the Types of Data Processed and Their Origin
When using the Service, we process personal data provided by a candidate by email, postal mail, or other means. The exact types of data depend on how a candidate uses the Service, typically these are master data of a CV, contact details and any certificates or references. In case the data provided covers special categories of personal data (pursuant to Art. 9 No. 1 GDPR), the candidate gives his consent to their processing by making these available. To evaluate your candidacy for employment with us, we might also process data collected not directly from you but from third parties. In these cases, your personal data will either be obtained from publicly available sources (e.g. LinkedIn) or provided to us by someone who referred you for potential employment, such as a former co-worker or boss, a recruiting agency or an external recruiter.
Processing Purposes & Legal Bases
We process a candidate’s data exclusively for the following defined Purposes:
– To review an application in order to assess suitability for current job offers
– To allow the candidate to use the Service
– To provide a candidate with additional Services that he has expressed an interest in, e.g. retaining personal data for future job openings as part of a Talent Pool, communication / interviews via chat services etc.
– To keep a candidate up to date with relevant information about our Service
– To send information about our Service to the provided email address
– To adapt the provision of the Service to the candidates’ needs
– To assert legal claims and to defend against legal disputes
In doing so, we rely on various legal bases in accordance with the so-called General Data Protection Regulation, a European Union legal framework for the standardisation of data protection law (‘GDPR’ for short). We refer in detail to the following
Your consent (Art. 6 (1) lit. a & Art. 9 (2) lit. a GDPR)
If we process your personal data, it is because you have expressly allowed us to do so when you disclosed this to us. Your consent is therefore the most important legal basis for the processing of your personal data by us. If you provide us with special categories of personal data (pursuant to Art. 9 No. 1 GDPR), we will process these data exclusively on the basis of your consent.
Purposes of recruitment, performance of the contract of employment, Art. 88 (1) GDPR (as transposed by the implementing law in your EU Member State)
At the same time, the processing of personal data takes place also for the provision of the Service when processing is necessary for the performance of a (future) employment contract to which you are party or in order to take steps at your request prior to entering into a contract (in other words, the recruitment process).
We transfer data to affiliated companies which form part of the same group of companies as us within the framework of strict protection requirements, and only if relevant for the candidate screening or candidate placement process for the position in question. This includes companies based in Hong Kong and China, therefore transmission to countries outside the European Economic Area (‘EEA’) may take place in such cases. China is a so-called ‘Third Country’ in which no adequate level of data protection can be guaranteed in principle; there is no corresponding adequacy decision and no specific guarantees to compensate for this deficit. This means that, from a European perspective, personal data and data subjects enjoy less protection and rights there, as would be the case, for example, with processing operations in Australia, Russia or India. If we transfer data to such a third country, we generally guarantee an adequate level of data protection by ensuring that the transfer is based on approved standard contractual clauses thereby guaranteeing an adequate level of data protection.
Should contact details (email address, WhatsApp/WeChat numbers, Skype username or similar) be used for communication, these will be transferred to the respective Service in order to communicate and engage with a candidate.
If we do not hire you following your application, we process and store candidates’ personal data for six months, starting from the day you have received a communication from us letting you know that we have gone for another candidate, unless it is necessary to extend this period due to legal obligations.
Information on the Voluntary Nature of the Information Provided
You are not legally obliged to provide any data.
Information About Your Rights
You can assert the following rights:
If you have any questions in this regard, please contact firstname.lastname@example.org.
You can revoke your consent to the processing of personal data at any time.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority.
Information About Your Right of Objection
Right of Objection in Individual Cases
Please be aware that we will process your data based on your consent. However, there might also be situations (not described in this document) where we process data on the basis of Article 6 (1) lit. f, or 9 (2) lit. a GDPR. In these situations, in addition to the rights already mentioned, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you on the basis of Article 6 (1) lit. f GDPR or Article 9 (2) lit.a GDPR. If you object, we will no longer process your personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
Right to Object to the Processing of Data for Advertising Purposes
You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing. If you object, we will no longer process your personal data.
The objection can be made in each case form-free and should be addressed to email@example.com if possible.