Privacy Notice on the Processing of Candidates’ Personal Data

The purpose of this notice is to inform you of how Global Remote Services SRL (GRS) collects, uses and processes your personal data in the context of recruitment processes, when you apply for a position within the company or when your data is included in the candidate database, regardless of the source from which it was obtained.

This notice is addressed to candidates, potential candidates and persons referred for a position within GRS.

For information on the processing of personal data in connection with your use of the company website, please refer to the Website Privacy Policy, which applies separately.

1. Who we are

The controller of your data is Global Remote Services SRL (GRS), Șoseaua Pipera 43, Building B, 1st floor, Sector 2, Bucharest, Romania. Telephone: +40-215.280.482, e-mail: info@globalremoteservices.com.

For any question or request regarding your data, please contact our Data Protection Officer (DPO): dpo@globalremoteservices.com or by post at the address above.

2. What data we process

• Identification and contact data: surname, first name, telephone number, e-mail address, town/city (where applicable).
• Professional data: your CV and the information it contains (education, qualifications, work experience, language skills), the position you applied for, and the results of tests and interviews during the recruitment process.
• Data about your relationship with GRS: the source of the data, the date of the last interaction, and the choice you expressed regarding retention of your data or your objection.

We do not request data concerning health, ethnic origin, religious or political beliefs, or any other special categories of data. Please do not include such data in your CV; if we receive it by accident, it will be erased.

3. Where the data comes from

• From you: when you apply via the form on our website, by e-mail or directly to GRS, during interviews or in telephone conversations with our team (for example, an e-mail address provided during a call).
• From online recruitment platforms on which you have published your CV or through which you have applied: eJobs, BestJobs, Hipo, OLX and similar platforms.
• From professional and social networks: LinkedIn, Facebook, Instagram, YouTube, from your profile or from the job advertisement you responded to.
• From referrals: from GRS employees who referred you.
• From GRS records, if you were previously employed by GRS.

4. Why we process the data and on what legal basis

You may at any time request details of the legitimate interest assessment by writing to dpo@globalremoteservices.com. We do not take decisions based solely on automated processing regarding your application: the selection is made by recruiters.

5. How long we keep the data

• Candidate database: 24 months from our last interaction with you (application, interview, telephone call, correspondence). At the end of this period, the data is erased or we contact you to ask whether you wish to remain in the database.
• If you are hired: the data from your application is transferred to your personnel file and retained in accordance with the statutory retention periods applicable to employees.
• If you object: your data is permanently erased from the candidate database and you will no longer be contacted on the basis of it. If you subsequently send us a new application, it will be treated as a new application.

6. Who has access to the data and to whom we disclose it

The data is accessed only by the Human Resources team, by the managers involved in the selection process and by the persons designated to carry out the information campaigns, all of whom are bound by a duty of confidentiality. We do not disclose your data to GRS clients and we do not sell it.

Access may be granted, strictly for the services provided to GRS and on the basis of a data processing agreement (Art. 28 GDPR), to providers of: hosting and IT services, telephony, e-mail and candidate assessment platforms. The data may be disclosed to public authorities or courts only where required by law.

The data is stored in the European Economic Area (EEA). Should a provider involve a transfer outside the EEA, such a transfer will take place only on the basis of an adequacy decision of the European Commission or standard contractual clauses.

7. Your rights

Right to object. You may object at any time to the retention of your data in the candidate database and to being contacted about positions, without having to give any reason. GRS honours your objection unconditionally: your data is erased and you will no longer be contacted.

You also have the right:

• of access to your data and to receive a copy of it;
• to rectification of inaccurate or incomplete data;
• to erasure of your data (“right to be forgotten”);
• to restriction of processing;
• to portability of the data you have provided to us, in the cases provided for by law;
• to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro.

8. How to exercise your rights

• Write to us at dpo@globalremoteservices.com or by post at Șoseaua Pipera 43, Building B, 1st floor, Sector 2, Bucharest. To object, it is sufficient to reply to any e-mail received from GRS or to tell us during a call.
• We may ask you for additional information, solely to confirm your identity.
• We will respond within one month at the latest. This period may be extended by a further two months for complex requests, in which case we will inform you.

Exercising your rights is free of charge.

9. Updates to this notice

This notice is reviewed at least annually and whenever the way we process data changes. The version in force is published on the GRS website, together with the date of the last update.