Privacy Notice for Referees in accordance with the General Data Protection Regulation (EU GDPR) 2016/679
The companies ManpowerGroup Slovensko s.r.o. and ManpowerGroup Solutions s. r. o., with headquarters in Landererova 12, 811 09 Bratislava, Slovak Republic, as Data Controllers, hereby provide the following information, in compliance with General Data Protection Regulation (EU) no. 679 of 27 April 2016 (hereinafter referred to as “the Regulation”), regarding the use of your personal data (hereinafter “Data”), collected from the candidates who applied for open job positions managed by the Controllers.
A. PERSONAL DATA PROCESSING PRINCIPLES
The Regulation establishes the rules on the protection of natural persons with regard to personal data processing and the rules concerning the free flow of personal data. It protects the fundamental rights and freedom of natural persons and especially their right to personal data protection. Your personal data will be collected only as far as compatible with the purposes described in the following paragraph and their processing will be based on the principles of fairness, lawfulness and transparency.
B. PROCESSING PURPOSES AND LEGAL BASIS
Your personal data (name, surname, email address and/or phone number) will be processed only for the purpose to contact you in order to collect the work reference of your former employees or of ManpowerGroup candidates that you may have known for other reasons.
The processing of your personal data by the Companies for the purpose above is necessary for the pursuit of the legitimate interests of the Data Controllers, pursuant to art. 6 c. 1 letter f of the Regulation.
If the Companies intends to use the personal data it has collected for any other purpose which is incompatible with the purpose for which the personal data were originally collected, the Companies will inform the data subject in advance.
C. DATA PROCESSING METHODS
Your data may be processed by the Controllers in accordance with articles 4-6 of the GDPR, both manually and using IT methods and procedures.
In our companies, data are processed by employees and staff as part of their functions and in compliance with the instructions received, always and solely for achieving the specific purpose indicated in this privacy information notice.
Personal data are not disclosed.
In performing their processing operations, the Companies undertake to:
- guarantee the accuracy and updating of the processed data, and promptly implement any corrections and/or additions requested by the data subject;
- adopt security measures to ensure adequate data protection, taking into account the potential impact of the processing operations on the respect for the data subject’s rights and fundamental freedom;
- inform the data subject, according to the deadlines and cases provided for by law, of any violations of personal data;
- guarantee that the processing operations comply with applicable legal requirements.
D. SCOPE OF PERSONAL DATA CIRCULATION AND DISCLOSURE
The employees of the Data Controllers who need the data to perform their duties or as a result of their position, or other entities that provide services for the Data Controllers and have been specifically appointed as Data Processors or Persons in charge of Data Processing, may have access to your Data. Such persons, in relation to their duties will only have access to Data related to their job.
You data will not be transferred outside the EEU.
E. RETENTION PERIOD
Your data will be available for the Controllers for up to twenty-four months and will then be deleted automatically.
You may request your information to be deleted earlier by contacting the Controllers to the contacts below.
F. EXERCISE OF RIGHTS
According to the Regulation (articles 15-22), the data subject may exercise the following rights vis-à-vis the Data Controllers:
- Right of Access: The data subject has the right to access the personal data regarding him or her that are being processed in order to check whether his or her personal data have been processed in compliance with the law.
- Right to Rectification: The data subject has the right to obtain the rectification of any inaccurate or incomplete data regarding him or her in order to ensure the accuracy of such information based on the purposes of the processing operations.
- Right to Erasure: The data subject has the right to request that the Data Controllers erase information regarding him/her and no longer process such data.
- Right of Restriction of Processing: The Data Subject has the right to request that the Data Controllers restrict the processing of his or her data.
- Right to Data Portability: The data subject has the right to receive personal data in a structured, commonly used and machine-readable format and has the right to transmit those data to another Data Controller.
- Right to object to the processing: The data subject has the right to object to the processing of his or her data in the cases referred to in the GDPR, at any time and with no need to justify his/her decision.
- Right not to be subject to automated decision-making: The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her.
If the data subject believes that the processing that concerns him violates the Regulation, he/she has the right to lodge a complaint with the Supervisory Authority of the Member State in which he/she resides or works, or of the State in which the alleged violation occurred.
G. CONTACT
If you wish to exercise the rights listed in the previous section, or wish to receive more information about the processing of your personal data, please contact the Data Controllers at Landererova 12, 811 09 Bratislava, Slovak Republic, via email at gdpr@manpower.sk or via online form Submission of data subject request available on website www.manpower.sk