The Concentrix Affiliate located in Czech Republic, Web help Enterprise Sales Solutions Czech Republic S.r.o.,that will be recruiting you for a specific job position will be the Controller responsible for the use of your PersonalData (Web help CZ or "Concentrix Affiliate", "we", "us" or "our"). Concentrix Affiliate provides this Recruitment Data Protection Notice ("Notice") to explain our practices of the collection, processing and use of personal data relating to candidates or other prospective employees of Concentrix Affiliate in connection with the recruitment and hiring activities.
This Notice covers the provisions of the new European General Data Protection Regulation (" GDPR ") and the local data protection legislation. The Notice replaces any existing Recruitment Data Protection Notice Where a material change is made to the content of this notice, such changes shall be communicated in an amendment or supplement to this notice. The term personal data in a broad sense can be understood as any information relating to an identifiable or non identifiable natural person. An identifiable person is one who can be identified directly or indirectly, in particular by reference to an identifier such as name, an identification number (e.g. IP address, employee ID) or location data.
The term "processing" refers to all uses or operations carried out on personal data. The term covers all actions related to the processing of personal data such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, transfer or any other way of making available, aligning or combining, restricting, erasing or destroying. The processing includes requesting information from a person, logging and analyzing network traffic, and accessing databases.
Content overview
1. Perimeter
2. Categories of personal data
3. Purposes of processing, legal bases for processing and consequences
4. Categories of recipients
5. International Transfers
6. Retention Period
7. Your rights
8. Questions & Contact Information
1. Perimeter
This notice applies to you if you are a job applicant or other potential employee of Concentrix Affiliate.
2. Categories of personal data
Concentrix Affiliate collects, processes and uses the following categories of personal data about you, from you or from authorized third parties (e.g., individuals you have designated as references, your former employers, schools, authorities or public resources) in connection with recruitment and hiring activities (collectively,"Recruitment Data "):
• General information about the applicant, including full name, academic title(s), gender, email address;
• Additional personal information, including former surnames, date and place of birth, marital status, private contact information (e.g., home address, home telephone number), photo, language skills;
• Passport and similar information (only if necessary and to the extent required by law), including information regarding national identity card, passport information, nationality or citizenship, work permit information (e.g., type and status, validity date), visa information (e.g., type and status, validity date), student status;
• General contract and employment information, including type of contract (e.g., permanent, temporary, fixed-term), employment start date, educational background, work experience and abilities(e.g., resume, previous education), job applications, employment history, references, expected compensation, any correspondence with you (e.g., mail, emails);
• Additional information that you provide on a voluntary basis, including information contained in the materials you provide.
Should you be successful in the application process and be granted the position, we may also process sensitive about you (only if required in the course of the recruitment process and to the extent permitted by applicable law), such as information regarding disability (voluntary; for additional days off) and/or information on religious beliefs and/or information about criminal convictions and offences (collectively, "Sensitive Data "). A dedicated Employee privacy Notice will be provided to you to further detail how we use your personal data as an employee.
3. Purposes of processing, legal bases for processing and consequences
Recruitment Data and Sensitive Data are collected, processed, and used for the following purposes (collectively, "Processing Purposes"). In addition, Concentrix Affiliate relies on the following legal bases for the collection, processing and use of personal data:
The provision of Recruitment Data and Sensitive Data as described in this notice is partly a legal requirement, partly a (pre-)contractual requirement under our recruitment website, and partly a requirement to carry out the recruitment and hiring process with you. Generally, you are required to provide this Recruitment Data, except in limited cases where we indicate that certain information is provided freely (e.g., in connection with employee benefits). Failure to provide Recruitment Data and Sensitive Data may prevent Concentrix from carrying out recruitment and hiring activities as they relate to you and may cause Concentrix Affiliate to terminate and disregard your application for potential employment with Concentrix.
4. Categories of Recipients and International
You should expect us to transfer your Recruitment Data and Sensitive Data (in particular with respect to SensitiveData only to the extent permitted by applicable law) to third parties for processing as follows:
• Within the Concentrix Group: Our parent company, Concentrix Corporation (44111 Nobel Drive,Fremont, California 94538, USA) and each of its subsidiaries and affiliated entities (Concentrix Corporation and each of its subsidiaries and affiliated entities, including the Concentrix Group, referred to as the " Concentrix Affiliates/Subsidiary Entities"; as a whole, the "Concentrix Group") may receive your personal data if this is necessary for the purposes of the processing set out above, in particular for general human resources management, monitoring and in the course of the recruitment process. A detailed list of Concentrix Affiliates that may have accessed your personal data can be provided upon request.
• With certain entities in the process of being acquired or already acquired: If Concentrix Affiliate, as an entity where you are seeking employment, is sold or transferred in whole or in part, or if the Concentrix Group acquires and integrates the entity where you are seeking employment (or if a transaction of this nature is contemplated), your personal data will be transferred to that other entity(e.g., the prospective new employer, newly acquired entity or prospective acquired entity) prior to the transaction (e.g., during the due diligence phase) or after the transaction, subject to rights under applicable law, including in jurisdictions where the other entity is located.
• With Data Processors: Certain third-party service providers, such as affiliated or unaffiliated IT support or HR support providers, will receive your personal data to process such data under the appropriate instructions (“ Processors “) necessary for the purposes of the processing, in particular to conduct recruitment and hiring activities, comply with applicable laws and employment-related requirements, as well as other activities. Processors will be subject to contractual obligations and must implement appropriate technical and organizational security measures in order to protect personal data, and to process it only as instructed.
Access to your personal data is limited to those who need to know it in order to carry out their job responsibilities.Concentrix will also disclose your personal data, to the extent required or permitted by law, to legal or business consultants, government authorities and courts.
5. International Transfers
You should expect that the recipients identified above, who will receive or have access to your personal data, will be located inside or outside the European Economic Area (“ EEA “).
• With regard to Concentrix Affiliates/Subsidiary Entities recipients located outside the EEA, some are located in countries that have adequacy decisions in accordance with Art. 45 GDPR (“hereafter“Adequate Countries”) such as the UK. For Concentrix Affiliates/Subsidiary Entities located in nonEEA countries or non “Adequate Countries”, the transfers of your personal data is based on an IntraGroup Data Transfer Agreement embedding the local EEA Authorities standard contractual clauses or on Binding Corporate Rules formally approved by the European data protection authorities. The relevant Concentrix recipients using the BCRs are listed in Appendix 1 of the BCR available if you click here).
• Other recipients involved n the recruitment process (which are not part of the Concentrix Group), are located in non-EEA and non Adequate Countries (e.g., our IT Workday storing the data in the US, potential recruitment agencies). In such case we have implemented all necessary steps to ensure that transfers out of the EEA are adequately protected in accordance with applicable data protection legislation. Such transfers are based on the standard data protection clauses adopted by theEuropean Commission or by a supervisory authority (Article 46(2)I or (d) of the GDPR).
6. Retention Period
Your personal data is stored by Concentrix Affiliate and/or our service providers, to the extent strictly necessary for the performance of our obligations and exclusively for the time necessary to achieve the purposes for which the information is collected, in accordance with applicable data protection laws. When Concentrix Affiliate no longer needs to use your personal data, we will delete it from our systems and records and/or take appropriate steps to anonymize it so that it no longer identifies you (unless we need to retain your information to comply with legal and regulatory obligations to which we are subject).
As a general rule, Concentrix Affiliate may retain your personal data for 2 years if you consent to this in order to be considered for other positions at Concentrix Affiliate or at another company of the Concentrix Group. In case of unsuccessful application, we will delete your Recruitment Data and Sensitive Data 6 months after a negative hiring decision by Concentrix Affiliate or after you have rejected an offer from Concentrix Affiliate.
If you accept an offer from Concentrix Affiliate, your Recruitment Data and Sensitive Data will be retained for the duration of your employment with Concentrix Affiliate.
7. Your Rights
Right to withdraw your consent: If you have declared your consent regarding certain types of processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. You can withdraw your consent as followsDPO@Concentrix.com.
Additional data privacy rights: Pursuant to applicable data protection law, you have the right to: (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data. Below please find further information on your rights to the extent that the GDPR applies. Please note that these rights might be limited under the applicable local data protection law.
• Right to request access to your personal data: As provided by applicable data protection law, you have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.You also have the right to obtain a copy of the personal data undergoing processing free of charge. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
• Right to request rectification: As provided by applicable data protection law, you have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
• Right to request erasure (right to be forgotten): As provided by applicable data protection law, you have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.
• Right to request restriction of processing: As provided by applicable data protection law, you have the right to obtain from us and we may be obliged to we restrict the processing of your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes. As Concentrix processes and uses your personal data primarily for purposes of carrying out the (pre-)contractual recruitment relationship with you, Concentrix will in principle have a legitimate interest for the processing which will override your restriction request, unless the restriction request relates to marketing activities.
• Right to request data portability: As provided by applicable data protection law, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those personal data to another entity without hindrance from us, where the processing is carried out by automated means and is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b)GDPR.
• Right to object: Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we are required to no longer process your personal data.If you have a right to object and if you exercise this right, your personal data will no longer be processed for such purposes by us. You may exercise this right by contacting us as stated in Section 8 below.6Such a right to object may, in particular, not exist if the processing of your personal data is necessary to take steps during the hiring process.
To exercise your rights please contact us as stated in Section 8 below.
You also have the right to lodge a complaint with the competent data protection supervisory authority in the relevant Member State (e.g., the place where you reside or of an alleged infringement of the GDPR).
8. Questions & Contact Information and/or Exercising your Rights
If you have any questions about this Notice or would like to exercise your rights as set out above in Section 7, please contact us at: dpo@concentrix.com
Concentrix Services Slovakia s.r.o, Polus Tower 1, Vajnorska 100/A, 831 04 Bratislava, Slovakia ("Concentrix"or "we" or "our") provides this Recruiting Data Protection Notice ("Notice") to explain our practices as the responsible controller regarding the collection, processing, and use of personal data relating to job applicants or other potential employees of Concentrix in connection with recruiting and hiring activities.
The Notice considers the requirements of the new European General Data Protection Regulation ("GDPR") and shall replace any existing recruitment data protection notices. Where a material change is made to the content of this notice, said changes shall be communicated in an amendment or supplement to this Notice.
The broad term personal data can be understood as any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number (e.g., IP-address, employee ID) or location data.
The term processing can be understood as any use or operation which is performed on personal data. That means, anything one can do with personal data, such as collection, recording, organizing, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, transfer or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing includes asking a person for information, logging and analyzing network traffic and accessing a database.
Content Overview
1. Scope
2. Categories of Personal Data
3. Processing Purposes, Legal Bases for the Processing, and Consequences
4. Categories of Recipients
5. International Transfers
6. Retention Period
7. Your Rights
8. Questions and Contact Information
9. Exhibit A – Concentrix Affiliates
1. Scope
This Notice applies to you if you are a job applicant or other potential employee of Concentrix.
2. Categories of Personal Data
Concentrix collects, processes, and uses the following categories of personal data about you, from you or from authorized third parties (e.g., people you have named as your references, previous employers, schools, public authorities, or public resources) in connection with recruiting and hiring activities (collectively, "Recruiting
Data"):
• General applicant information, such as full name, academic title(s), gender, email address;
• Additional personal information, such as former names, date and place of birth, marital status, private contact information (e.g., private address, private phone no.), photo, language skills;
• Passport and similar information, such as national ID card information, passport information, nationality or citizenship, work permit information (e.g., type and status, valid until), visa information (e.g., type and status, valid until), student status;
• General contract and employment related information, such as contract type (e.g., regular, temporary, limited), employment start date, educational background, professional experience and abilities (e.g., CV, former training), employment applications, previous work history, references, expected compensation, any correspondence with you (e.g. letter, emails);
• Additional information you provide on voluntary basis, such as information contained in documents
you provide.
We may also process special categories of data about you (only as permitted by applicable law), such as information concerning disability (voluntary; for additional vacation days), information on religious beliefs, information concerning a natural person's sex life or sexual orientation, information relating to criminal
convictions and offences (collectively, "Sensitive Data").
3. Processing Purposes, Legal Bases for the Processing, and Consequences
Recruiting Data and Sensitive Data is collected, processed, and used for the following purposes (collectively, "Processing Purposes"). Furthermore, Concentrix relies on the following legal grounds for the collection, processing, and use of personal data:
The provision of Recruiting Data and Sensitive Data as described in this Notice is partly a statutory requirement, partly a (pre-) contractual requirement under the terms of our recruiting website, and partly a requirement to carry out the recruitment and hiring process with you. In general, you are required to provide the Recruiting Data, except in limited instances when we indicate that certain information is voluntary. Not providing the Recruiting Data and Sensitive Data may prevent Concentrix from carrying out recruiting and hiring activities as they relate to you and may require Concentrix to terminate your application and cease consideration of you for potential employment with Concentrix.
4. Categories of Recipients and International Transfers
You should expect that we will transfer your Recruiting Data and Sensitive Data (especially with regard toSensitive Data only as permitted by applicable law) to third parties for the Processing Purposes as follows:
• Within the Concentrix group: Our parent entity, Concentrix Corporation (44111 Nobel Drive,Fremont, California 94538, USA) and each of its affiliates and subsidiaries (Concentrix Corporation and each of its affiliates and subsidiaries, including us, referred to as a "Concentrix Affiliate"; collectively, the "Concentrix Group") within the global Concentrix Group Exhibit A- Concentrix Affiliates may receive your personal data as necessary for the processing purposes set out above, in particular to conduct recruiting and hiring activities, and respond to and comply with requests and legal demands.
• With certain acquiring or acquired entities: If Concentrix, being the entity for which you are seeking employment, is sold or transferred in whole or in part or if the Concentrix Group is acquiring and integrating another entity into Concentrix, being the entity for which you are seeking employment, (or any similar transaction is being contemplated), your personal data will be transferred to the other entity(e.g., the new potential employer, the new acquired entity, or potential new acquired entity) prior to the 4transaction (e.g., during the diligence phase) or after the transaction, subject to any rights provided by applicable law, including jurisdictions where the other entity is located.
• With data processors: Certain third party service providers such as IT support or HR support providers, whether affiliated or unaffiliated, will receive your personal data to process such data under appropriate instructions ("Processors") as necessary for the Processing Purposes, in particular to conduct recruiting and hiring activities, comply with applicable laws and employment-related requirements, and other activities. The Processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process the personal data only as instructed.
Any access to your personal data is restricted to those individuals that have a need-to-know in order to fulfill their job responsibilities. Concentrix will also disclose your personal data as required or permitted by applicable law to legal or business consultants, governmental authorities and courts.
5. International transfers
You should expect that the recipients identified above which will receive or have access to your personal data, are located inside or outside the European Economic Area ("EEA").
• For recipients located outside of the EEA, some are located in countries with adequacy decisions pursuant to Art. 45 GDPR. Those recipients are located in Canada (incl. Nova Scotia) (for non-public organizations subject to the Canadian Personal Information Protection and Electronic Documents Act),and, in this case, the transfer is thereby recognized as providing an adequate level of data protection from a European data protection law perspective.
• Other recipients are located in countries which do not adduce an adequate level of protection from aEuropean data protection law perspective (in particular, the USA), Australia, China, Colombia, Egypt,El Salvador, Honduras, India, Indonesia, Malaysia, Mauritius, Nicaragua, Philippines, Singapore,Tunisia). We will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law.
o With respect to transfers to countries not providing an adequate level of data protection, we will base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority (Art. 46(2)(c) or (d)GDPR), approved codes of conduct together with binding and enforceable commitments of the recipient (Art. 46(2)(e)), or approved certification mechanisms together with binding and enforceable commitments of the recipient (Art. 46(2)(f) GDPR). You can ask for a copy of such appropriate safeguards by contacting us as set out in Section 8 below.
o The data transfer to Concentrix Affiliates is protected by standard data protection clauses adopted by the European Commission (Art. 46(2)(c) or (d) GDPR).
o The data transfer to Processors which are not located in a country with other adequacy decision will typically also be protected by such standard data protection clauses.
6. Retention Period
Your personal data is stored by Concentrix and/or our service providers, strictly to the extent necessary for the performance of our obligations and strictly for the time necessary to achieve the purposes for which the information is collected, in accordance with applicable data protection laws. When Concentrix no longer needs to use your personal data, we will remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which Concentrix is subject).
In principle, we will delete your Recruiting Data and Sensitive Data 6 months after a negative hiring decision by Concentrix or after you reject an offer from Concentrix. Concentrix may retain your personal data for 2 years if you consented thereto in order to be considered for other positions at Concentrix or another company of the Concentrix Group.
If you accept an offer from Concentrix, your Recruiting Data and Sensitive Data will be retained for the duration of your employment with Concentrix.
7. Your Rights
Right to withdraw your consent: If you have declared your consent regarding certain types of processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. You can withdraw your consent as followsDPO@Concentrix.com.
Additional data privacy rights: Pursuant to applicable data protection law, you have the right to: (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data. Below please find further information on your rights to the extent that the GDPR applies. Please note that these rights might be limited under the applicable local data protection law.
• Right to request access to your personal data: As provided by applicable data protection law, you have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.You also have the right to obtain a copy of the personal data undergoing processing free of charge. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
• Right to request rectification: As provided by applicable data protection law, you have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
• Right to request erasure (right to be forgotten): As provided by applicable data protection law, you have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.
• Right to request restriction of processing: As provided by applicable data protection law, you have the right to obtain from us and we may be obliged to we restrict the processing of your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes. As Concentrix processes and uses your personal data primarily for purposes of carrying out the (pre-)contractual recruitment relationship with you, Concentrix will in principle have a legitimate interest for the processing which will override your restriction request, unless the restriction request relates to marketing activities.
• Right to request data portability: As provided by applicable data protection law, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those personal data to another entity without hindrance from us, where the processing is carried out by automated means and is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b)GDPR.
• Right to object: Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we are required to no longer process your personal data.If you have a right to object and if you exercise this right, your personal data will no longer be processed for such purposes by us. You may exercise this right by contacting us as stated in Section 8 below.6Such a right to object may, in particular, not exist if the processing of your personal data is necessary to take steps during the hiring process.
To exercise your rights please contact us as stated in Section 8 below.
You also have the right to lodge a complaint with the competent data protection supervisory authority in the relevant Member State (e.g., the place where you reside or of an alleged infringement of the GDPR).
8. Questions and Contact Information
If you have any questions about this Notice or if you want to exercise your rights as stated above in Section 7, please contact us at:Eva MatejkaVajnorská 100/B, Bratislava, Slovensko, eva.matejka@concentrix.com
Exhibit A
List of Data Exporters/Importers (Affiliates of Concentrix Corporation provide hosting services and other support services)
Section A – Exporters and ImportersEU/EEA Entities
Section B – Non-EU/EEA Entities