If you apply for a job, professional traineeship, internship, etc., with companies that form part of the MEDICEM Group (the “MEDICEM Group”), below you will find information about how we will handle your personal data that we have requested or received from you in connection with the above (the “data”). We can guarantee that your data will be handled with due care and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; the “GDPR”), and other national regulations and laws being in effect.
-
General Information
-
Which Personal Data Do We Usually Process?
-
Purpose and Legal Basis for the Processing of Personal Data, Term of Processing
-
Data Subject’s Rights
Your data will neither be abused by us in any manner nor sold to any third parties. In each and every case, the controller of your data will be that company of the MEDICEM Group which organises the selection procedure to fill the particular position; nevertheless, the data may also be actually processed by another company of the MEDICEM Group. You can find the current list of members of the MEDICEM Group, including the contact information of the individual companies of the MEDICEM Group here. We will process your data in various manners, but always only to the extent that is strictly necessary for the given purpose. We will not perform any automatic processing, profiling or other similar manners of processing; we will also not process any special categories of personal data.
The MEDICEM Group has adopted and permanently maintains the necessary organisational and technical measures to secure your data and your privacy. Only selected recipients, employees in charge of the recruitment and HR management matters and managers will have access to your data. The data will be secured against loss, abuse, or incidental or unauthorised access by third parties, irrespective of in what form they are stored.
In addition to the data received directly from you, we may also process data and other information that we have collected within the MEDICEM Group as well as public data or data received from third parties. In such a case, we will always respect the restrictions stipulated by the applicable legal regulations. Therefore, we usually process:
-
Identification data (in particular, your name, surname, academic degree, date of birth and sex);
-
Contact data (in particular, your contact address, telephone number and e-mail address);
-
Data related to the performance of the job (in particular, your education, completed courses and trainings, previous experience and skills, references and information about your integrity and criminal records (if any), if this is required for the given position); and
-
Data about the assessment of your suitability (in particular, the assessment of your suitability for the given position).
Your data will be processed and shared within the MEDICEM Group on the basis of:
-
The steps aimed at the execution of a contract, namely for the purpose of assessment of job applicants and completion of the recruitment process. Specifically, for the purpose of us being able to invite you for interviews and communicate with you and to be able to assess your suitability for the particular position on the basis of the materials provided. We process the personal data for these purposes for the term of duration of the recruitment process;
-
The controller’s legitimate interests, namely for the purpose of the protection of legal rights of the company with which you apply for the job. You may object to such processing at any time (see below). We will process the data for the duration of the recruitment process and for a period of one year after its completion. Should any judicial, administrative or other proceedings be initiated, we will process your personal data, to the necessary extent, for the entire term of duration of any such proceedings.
If you wish to exercise your rights (see below) or if you have any queries regarding how your personal data are collected and used, please do not hesitate to call or write to: (i) the contact person(s) specified in relation to the particular recruitment process (if communicated to you); and/or (ii) the contact person(s) specified for this purpose at the websites of the individual companies of the MEDICEM Group (if the given company has its own website); and/or (iii) directly to the following e-mail address: gdpr@medicem.com.
-
Right of access: You can ask us for confirmation of whether or not your data are processed, as well as for access to your data and to the following information: purpose of processing; categories of the personal data concerned; planned period of processing; existence of the right to request from the controller rectification or erasure of the data or restriction of processing or to object to such processing; the right to lodge a complaint with a supervisory authority (see below); where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling, and information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.
-
Right to a copy of the data: You can ask us for a copy of your data. If you file your application electronically, we will provide you with the information in electronic, commonly used, form, unless you ask us for another manner of provision. The first copy is provided free of charge. For any further copies requested by you, a reasonable fee based on administrative costs will be charged.
-
Right to rectification, right to have incomplete data completed: You can ask us at any time to rectify any inaccurate data concerning you. You can also complete any incomplete data of yours at any time, including by means of providing a supplementary statement.
-
Right to erasure (“to be forgotten”): You can ask us at any time to erase your data, provided that certain prescribed conditions are met, i.e. (a) the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; or (b) the data have been processed unlawfully. If your request is legitimate, we will arrange for the liquidation of your data to the necessary extent. Liquidation of the data will not be performed if the processing is necessary for the establishment, exercise or defence of legal claims of the MEDICEM Group or if their storage is required by legal regulations.
-
Right to restriction of processing: You can ask us at any time to restrict the processing of your data, provided that certain prescribed conditions are met, i.e. (a) the accuracy of the data is contested by you, for a period enabling us to verify the accuracy of the data; (b) the processing is unlawful and you oppose the erasure of your data and request the restriction of their processing instead; (c) we no longer need your data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of your legal claims; or (d) you have objected to processing, pending the verification whether the legitimate grounds of the MEDICEM Group override those of yours. If your request is legitimate, we will arrange for the restriction of processing of your data to the necessary extent; nevertheless, we can continue to use those data for the establishment, exercise or defence of legal claims of the MEDICEM Group.
-
Right to data portability: In relation to the data which we have received directly from you, you can ask us to hand over the data to you in a structured, commonly used and machine-readable format and transfer those data to another controller. You can also request that we directly transfer those data to another controller on your behalf; if this is technically feasible, we will act on your request. You can exercise your rights specified in preceding paragraphs (1) – (6) in any form (in writing, by e-mail, by telephone, etc.), if we are allowed to sufficiently identify you. We will act on legitimate requests without undue delay. Complaint: If you have any doubts as to how we handle your data, please contact us. You also have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.