NOTICE OF PROCESSING OF PERSONAL DATA OF CANDIDATES FOR EMPLOYMENT AT THEMELIA

This Notice of processing of personal data of candidates for employment at Themelia (“Notice“) applies to the processing of personal data of candidates for employment (“candidates“) carried out by THEMELIA d.o.o., Zagreb, Palmotićeva 26 (“Themelia“). Themelia is the data controller of candidates’ personal data. In this Notice, we describe who we are, which categories of your personal data we process, how and for what purposes we process them, how we protect your personal data, and what rights you have in connection with our processing of your personal data.

WHAT CATEGORIES OF PERSONAL DATA DOES THEMELIA COLLECT AND PROCESS FROM CANDIDATES?

Themelia collects the following categories of personal data from candidates:

Themelia generally does not collect special categories of personal data from candidates for employment. However, it is possible that some candidates may provide us with personal data that fall under special categories, such as a photograph or a note indicating that the person has a disability.

FOR WHAT PURPOSES DOES THEMELIA PROCESS CANDIDATES’ PERSONAL DATA?

Themelia processes candidates’ personal data for the following purposes:

a. For selecting a candidate for employment: Themelia primarily processes candidates’ personal data to verify if they meet the requirements for the job position they have applied for and to assess candidates’ abilities through job interviews. Depending on the job position, the job interview may include assessments of language skills, computer skills, or other specific knowledge and skills. These checks enable Themelia to hire candidates who meet all the requirements stated in the job posting and have performed well in the job interview.

b. For communicating with candidates about their job application: If a candidate has applied for a job at Themelia, Themelia will use their personal data to communicate with the candidate and provide updates on the status of their job application. Themelia may also use candidates’ personal data to respond to their inquiries.

c. For establishing an employment relationship with a candidate: If Themelia decides to hire a candidate, the personal data collected during the job application process will be used to prepare and sign an employment contract with the candidate. After the employment contract is signed, the candidate’s data will be stored in accordance with Themelia’s legal obligations regarding employee records.

d. To fulfill Themelia’s legal obligations: Sometimes, Themelia processes candidates’ personal data to comply with laws and regulations or to fulfill its legal obligations as the data controller. These obligations may relate to human resources management, record-keeping, and similar activities. Themelia may also be required by law or other regulations to disclose candidates’ personal data to government and/or regulatory authorities.

HOW LONG DOES THEMELIA RETAIN CANDIDATES’ PERSONAL DATA?

Themelia retains candidates’ personal data for as long as necessary to achieve the purposes described above, i.e., until a candidate is selected for a specific job position and an employment contract is signed with the selected candidate, but no later than 30 days after the end of the job posting or the signing of the employment contract with the selected candidate.

If Themelia does not hire a candidate, the candidate may request that Themelia return the documentation submitted during the job application.

The deadlines and other rules for retaining personal data are determined in Themelia’s Personal Data Retention Policy.

After the specified period required or prescribed for processing personal data has elapsed, Themelia will securely delete or destroy the personal data.

WHO HAS ACCESS TO CANDIDATES’ PERSONAL DATA?

Employees of Themelia who are involved in the hiring process and who have limited access and processing rights for data for the purpose of performing their job duties, especially those employed in managerial roles, have access to candidates’ personal data.

Employees of Themelia who are involved in the hiring process and who have limited access and processing rights for data for the purpose of performing their job duties, especially those employed in managerial roles, have access to candidates’ personal data.

In cases where it may be necessary for hiring candidates at Themelia or to fulfill Themelia’s legal obligations, personal data of candidates may be provided to third parties, such as the Croatian Employment Service, and others.

HOW ARE CANDIDATES’ PERSONAL DATA PROTECTED?

To protect candidates’ personal data, Themelia takes appropriate security measures in accordance with applicable privacy and data protection laws. This includes requiring Themelia’s service providers to implement appropriate measures to protect the confidentiality and security of candidates’ personal data.

In its operations, Themelia has implemented technical, physical, and organizational measures to protect candidates’ personal data from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access, and from all other forms of unlawful and/or excessive processing.

WHAT ARE THE RIGHTS OF CANDIDATES AND HOW CAN THEY BE EXERCISED?

Within the framework of personal data protection, candidates have the following rights:

a. The right to access their personal data: Candidates have the right to request confirmation of whether their personal data is being processed and, if so, to request access to and information about the processing and a copy of the personal data being processed.

b. The right to access their personal data: Candidates have the right to request confirmation of whether their personal data is being processed and, if so, to request access to and information about the processing and a copy of the personal data being processed.

c. The right to erase personal data: Candidates have the right to request the deletion of personal data, especially if such data is no longer necessary for the purposes for which it was collected, if it is being processed unlawfully, if there is an obligation to delete it to comply with legal obligations, or if the candidate has withdrawn their consent.

d. The right to restrict the processing of personal data;

e. The right to object to the processing of personal data: Candidates have the right to object to the processing of their personal data.

f. The right to file a complaint with the Personal Data Protection Agency.

Themelia will take all necessary measures to allow candidates to exercise the rights listed above, but in certain cases, the exercise of these rights may be limited or excluded.

WHO CAN YOU CONTACT WITH QUESTIONS ABOUT PERSONAL DATA PROTECTION?

For any additional information, please feel free to contact Themelia via email at:
themelia@themelia.hr.

AMENDMENT OF THE NOTICE AND CLEAN VERSION

This Notice is effective as of July 20, 2018, and may be amended from time to time. The latest version of this Notice, which will always be the relevant version for the processing of candidates’ personal data, is available at Themelia’s premises.