DATA PROCESSING NOTICE – CANDIDATES

1. Introduction

The company PULSEC d.o.o Belgrade (hereinafter referred to as the Company) in accordance with this privacy policy (Privacy Policy) sets out the ways in which the Company may collect and process your personal data.

The Company may collect and process your personal data when interacting with you in relation to employment/recruitment or for other purposes, or during your visit to our website. Acting in accordance with applicable laws, especially the Personal Data Protection Act (hereinafter: the Act), including the General Data Protection Regulation (hereinafter: “GDPR”), we are highly committed to protecting data and preserving the privacy of all collected information.

2. Contact

Address: Belgrade, New Belgrade, Ul. Tošin bunar 272b

Email address: [email protected]

3. Data Collection

We may collect and process your personal data when you have provided them to us, when we have obtained them from publicly available sources, and based on recommendations.

The category of individuals whose data are processed – Candidates, whether they apply during an active job selection process or have provided personal data to the Data Controller in their resume (CV) in any way (in paper form, via email, through platforms where the Data Controller has posted job openings, etc.), in order to potentially be considered in a job selection process.

4. Purpose of Processing and Information Processed

We may collect and process your personal data for the following purposes:

• To fulfill our contractual obligations to you. This information may include your name, address, email address, phone number, occupation, job title, company, type of cooperation with us;

• For recruitment and selection of new employees, for specific job positions or potential future positions; this information may include your name, address, email address, phone number, date of birth, education and experience information, CV, data collected for processing tests in the selection process, a photograph (if provided by you), and other relevant information;

• To comply with legal obligations.

5. Legal Basis for Processing and Data Retention in accordance with the Personal Data Protection Act (Official Gazette of RS 87/2018) and GDPR Regulation

We will process personal data in accordance with the following legal bases::

• To perform a contract with you, in accordance with Article 12, paragraph 1, point 2) of the Act and Article 6(1)(b) of the GDPR Regulation;
  
  
• Our legitimate interest in accordance with Article 12, paragraph 1, point 6) of the Act, and Article 6(1)(f) of the GDPR Regulation when you communicate with us regarding potential employment opportunities or to improve our website;
  
  
• When we have your consent in accordance with Article 12, paragraph 1, point 1) of the Act and Article 6(1)(a) of the GDPR Regulation, where necessary;
  
  
• To comply with legal obligations we are subject to, in accordance with Article 12, paragraph 1, point 3) of the Act and Article 6(1)(c) of the Regulation.

We may share your personal data with our affiliated companies and in other cases regulated by the Act and the GDPR Regulation.

6. Transparency of Personal Data Processing – In accordance with Article 23, paragraph 2 of the Act, additional information that the data subject should be aware of is:

a) Your personal data processed for the purpose of potential employment will be retained for as long as necessary for the purpose for which they were collected, or as long as necessary to fulfill all applicable legal obligations, but no longer than 2 years. As a data subject, you have the right to request the deletion of your personal data, which you can exercise by submitting a deletion request.

b) The data subject retains all rights provided by the applicable Act, including the right to access, correct, or delete their personal data, the right to restrict processing, the right to object, and the right to data portability. If the data subject requests the deletion of their personal data from the Data Controller, they may be prevented from participating in the candidate selection process, and their application may not be considered for future job openings.

c) The data subject has the right to withdraw consent for the processing of their personal data at any time, but the withdrawal of consent does not affect the legality of data processing before the formal withdrawal of consent. Similarly, if consent is withdrawn, the data subject may be prevented from further participating in the selection process and may not be considered for future job openings.

d) If the data subject believes that their rights guaranteed by the applicable Act have been violated, they have the right to address the Commissioner for Information of Public Importance and Personal Data Protection (address: Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia) by filing a complaint through the prescribed procedure.

e) Providing personal data for the purpose of conducting a candidate selection process by the Data Controller is not a legal or contractual obligation of the data subject. In case of refusal to provide personal data for this purpose, the data subject may be prevented from further participating in the candidate selection process and may not be considered for future job openings.

f) The Data Controller does not apply methods for automated decision-making or profiling in cases of personal data collection and processing for candidate selection purposes or for the selection of candidates for employment, who have submitted their personal data outside of an announced job opening.

g) In accordance with Article 23, paragraph 3 of the Act in conjunction with Article 6, paragraphs 1 and 2 of the Act, for each processing of personal data for purposes other than the one for which the data were collected, the data subject shall be adequately informed before commencing data processing, with notification of all legally prescribed information and rights accruing therefrom.

7. Data Protection and Security

We take all precautions to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. We have implemented appropriate technical and organizational measures to protect information systems where your personal data is stored, and we require our data processors to protect your personal data through contractual means.

8. Contact for Exercising Rights

If you wish to exercise any of your rights as described above or have any questions, please contact us at the email address [email protected] or by mail to the address specified in section 2 of this notice. 

The person responsible for data protection will respond to each request as soon as possible, depending on the nature of the request, but no later than 30 days from the date of receipt of the request. This period may be extended for an additional two months if necessary, taking into account the complexity and number of requests.

9. Changes to the Privacy Policy

In case of changes to the Privacy Policy, a new, updated version of the Privacy Policy will be published on the relevant website, and it may also be provided to you upon request.