Recruitment and Selection Privacy Notice

Recruitment and Selection Privacy Notice

The personal data collected are processed by Onetag Ltd. (hereinafter “Onetag” or the “Company”) in compliance with the UK GDPR (hereinafter also “UK GDPR”).

Onetag, as data controller, undertakes to protect your confidentiality and rights and, in accordance with the principles dictated by the aforementioned law, the processing of the data provided will be based on the principles of correctness, lawfulness and transparency.

This information notice describes for what purposes we will process the personal data voluntarily provided by the candidate, how it will be processed and what rights the data subjects have.

DATA CONTROLLER AND DATA PROTECTION OFFICER

The data controller is Onetag Ltd., with registered office in 5th Floor North Side 7/10 Chandos Street, Cavendish Square, London, United Kingdom.

For further information on this policy or on any privacy issue, or to exercise your rights, you may contact the Data Controller at the following e-mail address: privacy@onetag.com.

You may also contact our DPO at the following e-mail address: dpo@onetag.com.

PURPOSE OF THE TREATMENT AND LEGAL BASIS

The collection and processing of personal data takes place exclusively for the research, selection and evaluation of the candidate.

The legal basis of the processing is represented by Onetag’s legitimate interest in evaluating the candidate's curriculum vitae and any information provided to proceed with the selection and evaluation process of the candidate (art. 6.1 letter f UK GDPR).

In the event that the selection process is concluded positively, the processing of personal data provided by the candidate, together with any further personal data that may be requested or acquired, will be carried out for purposes related to the management of the employment relationship and to fulfill the obligations established by law or other regulation (e.g. for administrative-accounting purposes, etc.).

The data collected will be processed based on principles of correctness, lawfulness, transparency and protection of the candidate's privacy and of their rights.

PERIOD OF RETENTION OF PERSONAL DATA OR CRITERIA USED TO DETERMINE THIS PERIOD

The candidates' personal data will be stored, starting from their receipt/update, for a maximum period of 18 months for the management of the application, after which they will be canceled or made anonymous.

MODALITIES FOR PROCESSING

The processing of data for the purposes set out takes place with both automated methods, on electronic or magnetic support, and non-automated, on paper support, in compliance with the confidentiality and security rules established by law, by the consequent regulations and by internal provisions.

RIGHTS OF THE DATA SUBJECT

At any time, the candidate can exercise the following rights, recognized by the UK GDPR:

right of access (art. 15): right to obtain confirmation from the data controller as to whether or not personal data is being processed and, in this case, to obtain access to personal data and further information on the origin, purpose, category of data processed, recipients of communication and/or data transfer, etc.;
right to rectification (art. 16): right to obtain from the data controller the rectification of inaccurate personal data without undue delay, as well as the integration of incomplete personal data, also by providing a supplementary declaration;
right to erasure (art. 17): right to obtain from the data controller the erasure of personal data without undue delay in the event that: (i) the personal data are no longer necessary with respect to the purposes of the processing; (ii) the consent on which the processing is based is revoked and there is no other legal basis for the processing; (iii) the personal data have been processed unlawfully; (iv) the personal data must be erased to comply with a legal obligation;
right to restriction of processing (art. 18): right to obtain from the data controller the restriction of treatment, in cases where the accuracy of personal data is disputed (for the period necessary for the data controller to verify the accuracy of such personal data), if the processing is unlawful and/or the interested party has opposed the processing;
right to data portability (art. 20): right to receive personal data in a structured, commonly used and automatically readable format and to transmit such data to another data controller, only for cases where the treatment is based on consent or on a contract and only for data processed by electronic means;
right to object to processing (art. 21): right to object at any time to the processing of personal data which have a legitimate interest of the owner as their legal basis;
right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial appeal, the interested party who believes that the processing that concerns him violates the UK GDPR has the right to lodge a complaint with the supervisory authority of the Member State in in which he habitually resides or works, or of the State in which the alleged violation occurred;
right to withdraw consent (art. 7): the interested party has the right to withdraw consent at any time, without prejudice to the lawfulness of the treatment based on consent before the revocation.

For any clarifications or comments regarding this information or to exercise your rights, you can contact the Data Controller at the following references: Onetag with registered office in 5th Floor North Side 7/10 Chandos Street, Cavendish Square, London, United Kingdom; email: privacy@onetag.com.

The DPO of the Company can be contacted at the following address: dpo@onetag.com.