Job Candidate Privacy Policy

---

Personal Data Protection Information for job candidates
Publisher: ORBICO TRGOVINA I USLUGE DOO BEOGRAD, Partizanske avijacije 4, registration number: 17321323
Use: 01.03.2020.

1. In general

1.1. These Job Candidate Privacy Policy(hereinafter „Candidate Privacy Policy“) governs the protection of your personal information, as well as your privacy, if you have applied for a job with the aim of employment in our company (hereinafter „You“). This Privacy Policy  of the candidate is issued by  Orbico Trgovina i usluge DOO, Partizanske avijacije 4, 11000 Beograd, registration number: 105564523  (hereinafter   „Company“ or „We“). In this sense, the company has the position of controller of the processing of your personal data.

1.2. The Company has the Rulebook on personal data protection which regulates the obligations of the Company and its employees regarding the collection and processing of personal data. These privacy rules further regulate the privacy and protection of your personal data as a job candidate , and provide you with information in accordance with Articles 23 and 24 of the  Law on Personal Data Protection(„ Official Gazette of RS“, No. 87/2018).

1.3. Please read this Candidate  Privacy Policy. If you do not agree with our actions, please do not provide us with your personal information.

1.4. The range of  activities of the Company  is wide and therefore there are several types of privacy rules. These apply to you as a job candidate , but other privacy policies may also apply to you (if applying for a particular job is not the only reason for our communication).

2. What personal data do we process?

2.1. We process your personal data that you provided to us as part of the job application, as well as your data that we collected during the hiring process. In this regard, we process your following personal data:

2.1.1. Your basic information: Name, surname, address and citizenship, age;
2.1.2. Your contact information: phone number,  e-mail address;
2.1.3. Academic and professional qualifications contained in the curriculum vitae and/or cover letter (level of education, titles, skills, work experience, knowledge of foreign languages, training, employment history, etc);
2.1.4. Data on test results (if testing is performed as part of the recruitment process) as well as interviews conducted (relevant resume for the position for which we are considering you);
2.1.5. Other data that may be relevant to the workplace , e.g. certificates and other skills.

3. For what purpose do we process your personal data?

3.1. We process your personal data for the following purposes:

3.1.1. If you have applied for a job, we process your information to find out if you are a suitable candidate. In that case , the basis for the processing of your personal data is our legitimate interest;
3.1.2. If we belive that you could be a suitable candidate, we process your personal data in order to give you an offer and enter into a relevant contract. In that case, the basis for the processing of your personal data is the processing necessary for the conclusion of the contract;
3.1.3. If you have  applied for a job, but we have not given you an offer or you have rejected the offer, we may process your personal data for future jobs in the Company. In that case, we will specifically inform you about such processing and you will be given the opportunity to object. If you do not object, the basis for the processing of your personal data is the legitimate interest of the Company. 
3.1.4. We may process your personal information for other purposes, such as verifying that the information you provided to us was true, in  order to respond  to your request, or to protect our interest in court or other proceedings. In that case, the basis for the processing of your personal data is the legitimate interest of the Company.

4. How do we protect your personal data?

4.1. All employees of the Company who have access to your personal data must comply with internal rules and and processes regarding the processing of personal data in order to protect and ensure the confidentiality of your personal data. Employees are also required to follow all technical and organizational security measures in place to protect your personal information. 

4.2. We have also implemented appropriate technical and organizational measures to protect your personal data from unauthorized , accidental or unlawful destruction, loss, alteration, misuse, disclosure or access as well as against all other unlawful forms of processing. These security measures shall be implemented taking into account the state of the art , their cost of implementation, the risks posed by the processing and the nature of personal data , with particular attention to sensitive data.

5. Who has access to your personal data?

5.1. Within the Orbico Group

5.1.1. If necessary, we may provide access to the personal data of other Orbico companies to serve the purpose stated in the previous section. Access to personal data will be provided only to authorized persons, such as HR managers or IT administrators. Certain executives , managers and employees of other Orbico companies may also have access to certain personal information, only if necessary and if there is a legitimate business purpose. 

5.2. Outside the Orbico Group

5.2.1. We may also consider it necessary to transfer pesonal data to third parties outside the Orbico Group in order to fulfill the purposes set out in the previous section or which may be  required by law including:
• Third party service providers, such as our Company`s  IT service providers, our Company`s  hosting service providers, cloud service providers, database providers, consultants (including lawyers, accountants, employment consultants) and third parties performing pre-employment or pre-employment checks potential employees-each listed service provider has signed contracts to protect your personal data and is obliged to use personal data only for certain purposes specified by the Company. 
• Is my personal data transferred to other countries?
5.2.2. We do not transfer your personal data to other countries.

6. How long do we keep your personal data?

6.1. Personal data that we process on the basis of the existence of a legitimate interest, we keep as long as there is legitimate interest and we delete them within one year from the termination of the same.

6.2. We store personal data that we process on the basis of your consent as long as your consent exists. In case of withdrawal of consent , we delete them as soon as posible. If the consent is given for a certain period of time, after the expiration of that period, we will delete your personal data as soon as possible, within a reasonable time. 

7. Your rights

7.1. If you choose to exercise one or more of your rights below , the Company has the right to verify your identity , all for the purpose of protecting personal information.

7.2. You exercise your rights for free. Exceptionally, if your request is obviously unfounded or excessive(e.g. you are asking for personal data that you have), and especially if the same request is repeated frequently (e.g. less than 6 months have passed since the last request), the Company has the right to charge necessary costs to act on your request or to refuse to act on your request.

7.3. Access to your personal data:
You have the right to ask us for information on whether we process your personal data, access to that data, as well as information on processing in accordance with Article 26 of the Law. Please send questions and requests , in writing and signed, to   privacy.orbicors@orbico.com.  We will respond to your request immediately, and within a month at the latest, unless the exceptional complexity of an individual case does not require an extension of the specified deadline. 

7.4. Correction of inaccuracies, additions, deletions, restrictions, on the use of personal data:
You have the right to request the correction of your inaccurate personal data , as well as the right to suplement , delete and limit the use of your personal data. Please send questions and requests, in writting and signed, to privacy.orbicors@orbico.com. We will respond to your request immediately , and at the latest within a month, unless the exceptional complexity of the individual case requires an extension of the specified deadline. 
Portability of personal data
You have the right to download and request the transfer of your personal data. Please send questions and requests, in writing and signed , to the adress privacy.orbicors@orbico.com. We will respond to your request immediately, and at the latest within a month, unless the exceptional complexity of the individual case requires an extension of the specified deadline.

7.5. The right to withdraw consent and forget
You have the right to withdraw your consent to the processing of personal data as well as to request that your personal data that we have processed on the basis of your consent be permanently deleted. Please send questions and requests , in writing and signed, to the adress privacy.orbicors@orbico.com.  We will respond to your request immediately, and at the latest within a month, unless the exceptional complexity of a particular case requires an extension of the specified deadline.

7.6. Complaint against the processing or handling of your personal data:
You have the right to object to the processing of your personal data as well as to our way of handling your personal data in general. Send your request by e-mail to the adress privacy.orbicors@orbico.com. Where in the title of the message you state the Objection against processing and in the message itself you explane the reason for the objection and your request. 
The right to complain to the Commissioner for Information of Public Importance and Personal Data Protection
As a Client, at any time you have the right to complain to the competent authority for personal data protection-the Commissioner for Information of Public Importance and Personal Data Protection ( https://www.poverenik.rs/) 

8. Changes in the Candidate Privacy Policy

8.1. The candidate`s privacy policy may be subject to change (amendments, additions or the like). You will be notified of any future changes in the way your personal information is described in the Candidates Privacy Policy through the appropriate channel, depending on how we normally communicate with you. 

9. Contact

9.1. If you have any questions regarding the processing of your personal data or if you belive that your privacy rights have been violated, please submit your request to the following address: privacy.orbicors@orbico.com.
Orbico Trgovina i Usluge DOO, Partizanske avijacije 4, 11000 Beograd.