Candidate Employee’s Privacy Notice

Resolute Cepal Greece S.A.

Thank you for showing an interest in working with RESOLUTE CEPAL GREECE SA.

1. Data Controller

“RESOLUTE CEPAL GREECE ANONIMI ETAIRIA”, with the distinctive title “RCG.” with registered seat at 8 Xenofontos Str., Athens, PC 10557, Greece, (“RCG”, “Company”, “We”) is the Data Controller of your personal data.

This Policy provides information about how we collect, use, protect or otherwise process your personal data in connection with our resourcing and recruitment processes.

2. Legal basis for the processing

The legal basis for the processing of personal data during the Company’s recruitment processes is:

Processing is necessary in order to take steps at your request to evaluate your job application and the possibility of your recruitment by the Company and entering into a contract [article 6.1(b)GDPR].
Processing is necessary for the purposes of the legitimate interests pursued by RCG. Our legitimate interests are the recruitment of employees for RCG [article 6.1(f)GDPR].
Your prior consent (which is subject to withdrawal) where appropriate, for example when you request us to retain your data for a longer period [article 6.1(a)GDPR].

3. Categories of personal data and how we collect and process them

We collect and process information provided by you when you apply for a position or send us your CV either in hard copy by filling out the job application form or in electronic form, via the online employment application form on the corporate website or through the Company's LinkedIn account.

The categories of personal data we process regarding our candidates may include, inter alia, the following: name, surname, telephone (and/or mobile), email address, postal address, date of birth, work experience and previous employment, education and skills (ex. foreign languages) and any other information included in your CV and/or your personal statement to the Company.

In case you are invited to an interview, we may also collect other personal data if this is strictly necessary in order to assess your suitability for specific positions. In addition, we may retain the feedback information we received from the persons who interviewed you.

Any data you may have provided to the Company regarding other persons (ex. your affiliates, dependents, etc.) will be processed by us in accordance with the terms of this Privacy Notice. You are responsible for the accuracy of this data and information, and you also need to ensure that the aforementioned subjects are aware of the personal data provided by you and how they will be processed by the Company.

We may also receive personal data related to you through the Company’s account in LinkedIn in the context of promoting the Company's jobs offers. This data will be processed by us in accordance with the terms of the present Privacy Notice. In addition, we encourage you to read the privacy policy and terms and conditions of use of each application you visit and use, in order to be aware of how your personal data is processed by each application, as we are not responsible for the policies and practices of third-party application providers.

4. Purposes of processing

We will use your personal data in order to consider your application, decide whether you are suitable to work for the position you have requested or for other relevant roles, including the evaluation and ranking of your skills and experience, and in order to keep you up to date on your progress.

If your application is approved, we will process your personal data for personnel management purposes as well as for the required checks, in particular to confirm your details and history.

After the expiry of the data retention period, as provided for in section 7 of the present Privacy Notice, the Company may anonymize your personal data and use it for statistical reasons.

5. Recipients of your personal data

In order to fulfill the above purposes, the Company may disclose some absolutely your personal data to the extent this is necessary to its employees or third party recipients. In particular, we may disclose your personal data to:

Affiliated entities which have an interest in recruiting for the role you have applied for
The duly authorized employees of the Company during the performance of their duties.
Third party service providers, such as internet service providers, hosting services, cloud providers, technical support, legal services and accounting services. Each third-party provider collaborating with the Company is contractually bound by contractual clauses for the processing of personal data in accordance with the GDPR, regarding the secure processing and confidentiality of your data.
Regulatory authorities, only if there is a statutory obligation to do so, or we are obliged by decision/order of a judicial, regulatory or other public authority. Please note that in the future we may decide for strategic or other business purposes, to sell or transfer our business in whole or in part. In the context of such a sale or transfer, we may transmit information that we have collected and stored, including the information concerning your name, surname and email address, to any party involved in the sale or transfer.

6. International transfers

The personal data we collect are stored on secure servers located within the European Union (EU).

7. Retention of your personal data

We will retain your personal data for as long as is strictly necessary in order to achieve the purpose of their collection, i.e. the evaluation of your application for a specific job offer.

The personal data of candidate employees who will not be selected to work with RCG are retained for the purposes of the legitimate interests pursued by RCG for a period of one (1) year from the conclusion of the recruiting process and the filling of the position for which they applied.

In case you wish us to delete your data earlier or in case you wish us to keep your data for more than one year for possible employment opportunities in the future, please let us know by sending us an email to dpo@res-cep.com

If you accept to work with us, personal data collected prior to your recruitment will form part of your employee personal record kept by the Company and will be maintained on the basis of the RCG employee’s privacy notice, which is communicated to all employees.

8. Data subjects' rights

Subject to applicable legislation, you have the right to access, i.e. to be informed, upon your request, whether or not your personal data are subject to processing and to receive further information on such processing. In addition, you have the right to request the rectification of any inaccurate personal data, in case there is a change concerning your skills and /or the specific circumstances. In addition, as long as the requirements under the applicable legislation are met, you have the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing. You can also, at any time, withdraw your consent, provided in accordance with the above.

You may exercise these rights by contacting us at dpo@res-cep.com. The Company will take every measure to respond to your request within 30 days of receipt. Τhat period may be extended by two further months taking into account the complexity of the request and/or the number of requests. The Company will inform you of any such extension within one month of receipt of your request, together with the reasons for the delay.

If such a request places us in breach of our obligations under applicable laws, regulations or codes of practice of the Company or in case the provision of information would result in disclosing personal information of other individuals, then we may not be able to comply with your request, but you always have the right to ask the restriction of the processing of your personal data.

Finally, if you believe that we have not handled your personal data in accordance with the applicable data protection legislation, or that your rights are infringed, you can lodge a complaint with the Hellenic Data Protection Authority through its web portal by filling the respective online form depending on the type of complaint (Offices: 1-3 Kifissias Str., PC 115 23, Athens, Call Center: + 30-210 6475600).

9. Personal data security

We apply technical and organizational security measures to protect the integrity and security of all our information, including personal data we retain. Please refer to the website’s Privacy Policy for more information.

10. Contact us

In case of any questions or concerns on the processing of personal data or if you wish to exercise one of the rights you have as data subject, please contact us via email at: [dpo@res- cep.com](dpo@res- cep.com)