DATA PROTECTION POLICY
Which personal data do we collect and why?
We are RM Group Bulgaria EOOD, a solely owned limited liability company, UIC 206989014, with a seat and a registered office in Bulgaria, Sofia 1000, 23 Solunska Str., 3 floor, ap.6
The legal basis for the processing of personal data are:
- Consent of the data subject;
- Establishment, execution and termination of a contractual relationship;
- Fulfillment of a legal obligation;
- Protection of the vital interests of the data subject;
- Safeguarding a legitimate interest of our company or a third party.
In doing so, we comply with the GDPR.
However, this is only a legal basis, if the interests, fundamental rights and freedoms of the data subject do not outweigh the interests of our company. Legitimate interests can be in light of Art. 6 GDPR:
- Processing and transfer of personal data for internal or administrative purposes
- Ensuring compliance with legal requirements, contractual obligations and industrial standards
- Assertion, exercise or defense of legal claims
- Avoiding damage and / or liability to our company
Legitimate interests
Purpose of data collection
Prior entering our company or during the application process, we process your personal data exclusively for the purpose of communication and establishing a possible contractual relationship if the application is successful. During your employment, your personal data are mainly processed for the execution and / or termination of the contractual relationship.
Types of data that we process (Please note that the following list is not exhaustive):
- applicant data; name, date of birth, curriculum vitae, nationality / work permit, knowledge, skills, experience history for the selection and recruitment process, entry and exit management
- private contact details; address, telephone number, email (for the purpose of contacting)
- (optional) data in the context of personnel screening (e.g. police certificate of conduct, reliability check) – depending on the client and / or work location
- potential data subject to professional secrecy; e.g. health suitability data and any restrictions
- other data in personnel management: severe disability (if relevant), driver license holder
These types of data are also processed for employees:
- Identification / payment data; ID card data or work permit to identify and determine the legitimacy of employment, marital status (if required by law), etc.
- Health data e.g. for social security purposes, accident insurances (if applicable)
- Time registration and access data, vacation times, working times
You have the right
- to obtain information about your personal data processed by our company;
- to request the handout of your data in the restrictions of Art. 20 GDPR in a common electronic, machine-readable data format;
- to request us to correct your data if it is incorrect, inaccurate and / or incomplete;
- to ask us to delete your personal data immediately if one of the reasons listed in Art.17 GDPR applies. Unfortunately, we are not allowed to delete data that is subject to a statutory retention period;
- to revoke your previously given consent;
- to request us to restrict processing if one of the conditions listed in Art. 18 GDPR is met.
- to lodge a complaint with the supervisory authority in Bulgaria if you consider there is a breach of your rights under the GDPR;
Rights of the persons affected
In order to guarantee our clients and candidates the best possible service, we also maintain locations in other European countries. In particular, our employees in Berlin (Germany) and Sofia (Bulgaria) have access to personal data to the same extent as our Swiss employees. In addition, we work with software companies that have their server locations in the UK and Ireland.
If you apply for a position in our company, we process and store your personal data. Therefore, we would like to inform you about the handling of your applicant data. Should you want to transmit data via email, then we suggest to use an encryption method.
Personal data will only be disclosed if the data subject has given its consent or if there is a legal obligation to do so. Consent is given either by applying to one of our vacancies or by responding to a separate request. The RM Group is not responsible for compliance with data protection law by data recipients outside the company.
If you do not give your consent to the further storage and processing of your personal data in the event of an unsuccessful application, then these will be deleted. If accounting processes have been involved, such as reimbursement of travel expenses, the data required for this will be deleted, after taking into account the statutory retention periods (generally 10 years). If your profile is saved based on consent, the data will only be deleted after the consent has been withdrawn. You can withdraw your consent at any time after the employment relationship has ended. Your data will then be deleted unless the statutory retention periods haven’t come to an end yet.
Changes to this policy
Our privacy policy can be updated at any time. We therefore recommend that you check it regularly.
Status 10.04.2024
