Privacy Notice
Dear Candidates,
Kesea consists of a powerful team of experienced professionals, who are characterized by dedication, innovation and motivation to always provide high quality consulting services. Our company always follows the General Data Protection Regulation (GDPR) and the applicable regulation in Cyprus, and collects and processes private data. KESEA Ltd reassures that it will always act in accordance with the protection of the personal data it maintains.
Type of data we collect from candidates:
- Name and surname of the candidate
- Email and phone number
- Abilities relevant to the job position
- Education of the candidate
- Work experience of the candidate
- Candidate’s employment history
- Personality traits
Why do we collect these data and the legal basis on which we collect them:
- We reassure you that we collect this information for recruitment purposes only and we will never use this information and process it without your consent for the aforementioned purpose.
How do we collect the above data:
- CVs
- Face-to-face interviews with the candidates
- Psychometric tools
- From previous employers or Universities, after the consent of the candidate
Where do we store data:
- Data stored in cloud system of the company, in a certain folder which only the relevant people can access.
- Note: Our company only collects data in a digital format.
Who can access the data:
- The director of the company
- The consultants undertaking the project
We will not share your data with any third parties, but in the case of your success and selection as the most suitable candidate to fill in the job vacancy we will probably ask, after you give your consent, for references from previous employers or universities.
Our company during the completion of the recruitment processes uses services from third parties such as email addresses. The company in such situations, operates as the responsible party to process the data and therefore demands from the person in charge of data processing to fully reassure the protection of private data and to always follow the GDPR.
Ways of data protection:
Our company understands the seriousness and the significance of the protection of the candidates’ private data. Candidates’ data are stored in a digital format only, at the company’s Cloud system, which is in accordance with the GDPR for data storing and disaster recovery purposes. Only the people in charge of recruitment can access this folder.
For how long we keep these data:
In the case that you are not selected for the certain job vacancy our company will store your data upon the completion of the recruitment process for 6 months and then your data will be deleted. If you allow us, we will store your data in the already existent folder we have for an additional period of one year (additional to the 6 months) upon the completion of the relevant recruitment procedure in order to process them for future job vacancies that may appear. You will be asked to submit along with your CV, if you wish to, your consent to keep your data for an extended period of one year. At the end of that period, or in the case you wish we delete your data, your data will be deleted.
In case you are selected to fill in a certain job vacancy, the company will transfer your data to the data processing folder of employees’ private data which will be stored there for the period of your employment. During your employment, you will receive a new privacy notice regarding data storing and processing relevant to our company’s personnel.
We remind you of your following rights according to GDPR regulations:
The right to access - You have the right to receive from us confirmation regarding whether or not your private data have been processed, and in case this happens you also have the right to access this information. The above right includes your right to be given a copy of your data that we store and process.
The right of correction – You have the right to demand the correction of any incomplete or inaccurate private information that we store for you.
Right to erasure/ right to be forgotten – You have the right to ask for the erasure of your private data.
The right to object – You have the right to object towards processing your private data unless mandatory legal purposes regarding data processing override your advantages, rights and freedoms.
The right to limit the processing – You have the right to ask to limit the processing of your private data.
The right to data portability – You have the right to request the transmission of your private data.
The right to object to automated individual decision making – In the case of automated private data processing and decision making based only on this data processing, you have the right to request that decisions that involve you will not be made only based on this automated process.
Right to withdraw your consent – You have the right to withdraw the consent that you gave for data processing at any time.
Right to state a complaint – You have the right to state a complaint to the relevant supervisory authority if you believe that our company did not comply with its resulting obligations by the law regarding the protection of your personal data and in case that we do not respond to your complaint one month after you state it (assuming that it is not complicated).
Right not to provide personal data – You have the right not to provide us with your personal data, however, we note that in such situation we may not be able to provide our services.
Procedure for candidates to exercise their rights:
If you wish to exercise one or more of your rights regarding data processing which are mentioned above, you need to send an email to careers@kesea.com.cy expressing your request which us as KESEA are obliged to process within 30 days. In case that we do not respond within 5 days that we have received your request you will need to call to 22817900 in order to reassure you that our company has received it.
If you believe that our company did not comply with its obligations under the law regarding the protection of your private data then you have the right to contact the Personal Data Protection Commissioner.
What happens in the case that you do not provide us with the personal data that we need:
We reassure you that you are not obliged to provide us with the data that we ask for. However, unfortunately, in such situation where you do not wish to provide us with your personal data which may facilitate us to evaluate your request, we may not be able to move on with the effective evaluation of your request.
Other useful information:
We inform you that our company’s data processing base is Cyprus.
We reassure you that we do not use the profiling method during the recruitment process.
Company contact details:
Company name: KESEA Ltd
Contact Number: (+357 22817900)
Email address: central@kesea.com.cy
Website: www.kesea.com.cy
