Privacy Policy

POLICY PRIVACY

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Pursuant to the terms and effects of articles 13, 14 and 26 of (EU) Regulation 2016/679 on the protection of individuals relating to the processing of personal data (referred to below as ”GDPR”), GI GROUP STAFFING COMPANY S.R.L. and BARNETT MCCALL RECRUITMENT S.R.L., as Gi Group companies (also referred to below as ”GI””BMR” or the “Companies”) acting as Joint Controllers, wishes to provide you with information on the purposes, methods and area of communication and disclosure of the personnel data supplied by candidates of adult age when they upload a CV with GI website (referred to below as the “Website”), the websites of other companies and social networks, by email, on the occasion of an interview with one of the agencies or directly in other cases or locations.

1. PURPOSE OF THE PROCESSING, SEARCH AND SELECTION OF CANDIDATES AND LEGAL BASES

1.1     Your data are obtained in the following ways:

– when you upload a CV with GI Website;
– by email;
– by our agencies;
– through outside websites or social networks;
– directly, in other cases, locations or actions organized by the Companies.

1.2     Your data are processed for uploading a CV through GI website or if you reply to a specific situation vacant announcement published on the website or present a voluntary application as a candidate through the website, in our agencies or in other locations.

1.3     The legal base applicable to the processing of your personal data for the purposes described in point 1.2 is the execution of a contract or in order to take steps at your request to entering into a contract pursuant to article 6, section 1 b), of the GDPR.

1.4     Your data will be processed if you reply to a specific situation vacant announcement and in the case of a voluntary application, for purposes of candidate search and selection, and more precisely:

– for placement as temporary worker in our client user companies

– for direct placement in our third party client company

– for direct placement at GI or BMR

– in relation to active employment policies or measures or collaboration and/or partnership agreements with public and private market operators

Your data will also be processed to enable us to send you messages by traditional or automated contact methods, including messages on training initiatives linked to a specific position, whether these are financed by a client company of ours or by Companies.

If you reply to a specific situation vacant announcement, your data may also be processed for future personnel search and selection processes, if you do not raise objections to such processing at the time when you supply the data or at a later date. If you object to such processing, your data will only be processed in relation to the specific selection process for which you are a candidate.

1.5     The legal base applicable to the processing of your personal data for the purposes described in point 1.4 is the execution of pre-contractual measures adopted at your request pursuant to article 6, section 1 b), of the GDPR.

1.6     Your data may also be processed to ascertain, exercise or defend our rights in legal proceedings.

1.7    The legal base applicable to the processing of your personal data for the purposes described in point 1.6 is our legitimate interests pursuant to article 6, section 1 f), of the GDPR.
The legal base applicable to the processing of the special categories of personal data regarding yourself for the same purposes is to ascertain, exercise or defend a right in legal proceedings pursuant to article 9,section 2 f), of the GDPR.

2. FURTHER PURPOSES OF THE PROCESSINGAND LEGAL BASES

2.1     Your data may also be processed, if you express your consent, for the following additional purposes:

2.1.a.    the issue of information and promotional messages on the services offered by GI and BMR (including training initiatives, career development and coaching), or statistical studies and research and/or market surveys, by means of traditional (by post and phone calls through the operator) and automated contact methods (email, text message, multimedia message and instant messaging systems)

2.1.b.     the issue of information or promotional messages on the services offered by the other group companies within and outside the EU (such as training initiatives, career development, coaching, transfer support, personnel search and selection and executive searches), and statistical studies and research and/or market research studies, by means of traditional (by post and phone calls through the operator) and automated contact methods (email, text message, multimedia message and instant messaging systems)

2.2     The legal base applicable to the processing of your personal data for the purposes described in point 2.1 is your consent pursuant to article 6,section 1 a), of the GDPR.

2.3    It is understood that your consent to the processing of your data for the purposes described above is entirely optional. For this reason, if you should refuse to agree to the processing for those purposes, your data will be processed for the purposes described in point 1 above only.

3. CATEGORIESOF DATA PROCESSED, DATA SOURCE AND PROCESSING OF SPECIAL CATEGORIESOF DATA

3.1     Merely by way of example, GI and BMR will obtain the following common categories of personal data: first name, surname, date of birth, address, email address and telephone contact details, educational qualifications, work experience and any additional information entered by you in your CV and/or supplied during an interview at one of our branches or in other locations.

3.2     GI and BMR will obtain the data in question from yourself and/or websites managed by third parties or social networks through which the Companies publishes the situations vacant (on behalf of its client companies or on its own account), or through which you may consult the candidate profiles.

3.3     If you respond to an advertisement or make a voluntary application, you will be given the opportunity to declare that you belong to a protected category in the data collection forms on the website or during a telephone interview or an interview at one of our branches or in other locations. This information may describe your state of health or your statute of person with disabilities or may be one of the special data categories pursuant to article 9, section 1, of the GDPR, and such case will be processed in line with the relevant regulations in force.

3.4    The legal base applicable to the processing of special data categories regarding yourself as described in point 1.2 is your explicit consent pursuant to article 9, section 2 a), of the GDPR.
If you do not express your consent, it will not be possible to process the data on the protected category to which you belong.

3.5    Please do not include any data belonging to a special data categories in your CV (Ex: personal data revealing your racial or ethnic origins, political opinions, religious or philosophical convictions, trade union membership, genetic details or biometric data used for the unequivocal identification of an individual, or data relating to your health, sex life or sexual orientation).

4. DATA STORAGE PERIOD

4.1     In the event of processing of data for search and selection purposes as described in section 1 the data are entered in the Companies database and kept for a period of 30 months following such entry, or as of the date of your most recent interaction with the website or agencies, unless you should agree to an extended period of data storage upon being asked to do so prior to the expiry of the initial storage period.

4.2     In the event of processing of data for search and selection purposes as described in section 1 by way of a reply to a specific situation vacant advertisement, if you should raise objections to the storage of your data for future selection purposes, your data will be entered in the Companies database and stored throughout the duration of the selection process and, in the case of a negative outcome, until the closure of that process.

4.3     In the event of processing of data for purposes linked to ascertaining, exercising or defending a legal right, as described in section 1, the data will be entered in a historic archive and kept throughout the duration of the dispute and up to such time as the time limits for presenting challenging action expire.

4.4     In the event of processing of data for the additional purposes described in point .1, the data will be entered in the Companies database and stored for the period indicated in point 4.1, or until such time as you should withdraw your consent.

4.5    Upon expiry of the storage periods indicated above, the data will be destroyed or converted to an anonymous format.

5. NATURE OF THE SUPPLY OF DATA AND CONSEQUENCES OF REFUSAL TO DO SO

5.1    The supply of the data marked with an asterisk in the data collection form on the website or as requested in the agencies or in other location is necessary to enable GI and BMR to pursue the search and selection processes described in point 1. If you should refuse to supply the data required, it will therefore not be possible for GI and BMR to take your candidature into consideration.

5.2    The supply of the data described in point 2 above is optional. If you refuse to supply the data or do not express your consent, this will have no consequence for and will not prevent GI and BMR from carrying out the search and selection processes.

6. PROCESSING METHODS

The data processing procedure is based on the principles of correctness, legitimacy, transparency and data minimisation (privacy by design). The data may be processed manually or by means of automated methods to enable them to be memorised, processed and transmitted, and will take place by means of suitable technical and organisational methods which guarantee the security, confidentiality, integrity, availability and resilience of the systems and services and prevent the risk of loss, destruction, unauthorised access or disclosure or illegal use of the data, in addition to reasonable measures to ensure the prompt cancellation or adjustment of data which are unsuitable for the purposes for which they are to be processed.

7. RECIPIENTS OF THE DATA

7.1    Your data may only be processed by employees of the Companies departments authorised to do so for the purposes indicated above. The employees in question have received suitable operating instructions on the tasks to be carried out by them.

7.2    GI and BMR may forward your personal data to the following parties for the purposes described in point 1 above:

• Client companies or entities

• The Ministry of Labour

• Public bodies in respect of active employment policies or measures

• Other market operators in the case of partnerships

• Legal consultants

• Training bodies

• Group companies in Romania, Italy or abroad

GI and BMR may forward your personal data to group companies in Romania, Italy or abroad for the purposes described in point 3 above.

7.3    Your personal data may also be processed by outside parties expressly designated as data processors which provide GI and/or BMR with:

• Website management and maintenance services

• Candidate database management and maintenance services

• Filing services

• Message mailing services

• Market research services

7.4    The updated list of recipients is available from our registered office or by sending an email message to privacy@gigroup.com .

7.5    The personal data supplied by candidates will not be subject to disclosure.

8. TRANSFER OF DATA OUTSIDE THE EU

8.1    Your data may be transferred to companies not belonging to the European Union, and more specifically to:

• Argentina and Switzerland, whose data protection levels are deemed satisfactory by the European Commission pursuant to article 45 of the GDPR

• Brazil, China, Colombia, Hong Kong, India, Montenegro, Russia, Serbia and Turkey, on condition that GI and/or BMR and the data importer sign standard contractual clauses adopted or approved by the European Commission pursuant to article46, sections 2 c) and d),of the GDPR

8.2    The decisions on adequacy of protection levels may be may be consulted on the following links:

Switzerland: http://eur-lex.europa.eu/eli/dec_impl/2016/2295/oj

Argentina: http://eur-lex.europa.eu/eli/dec/2003/490/oj

8.3    A copy of the standard contractual clauses signed by GI and/or BMR may be obtained by sending an email to: ro.privacy@gigroup.com

9. RIGHTS OF THE INTERESTED PARTY

The interested parties have the rights described in articles 15 to 22 of the GDPR, where applicable.

• More precisely, the interested parties may ask the Joint Controllers for access to and cancellation of the data, the adjustment of imprecise data, additions to incomplete data and restriction of data transfers in the cases described in article 18 of the GDPR[1].

• The interested parties have the right to object to the processing of the data necessary for the legitimate pursuit of the interests of the Joint Controllers, at any time and in whole or in part.

• If the conditions for the transfer of the data pursuant to article 20 of the GDPR are satisfied[2], the interested parties also have the right to receive the data supplied to the Joint Controllers in a structured format for common use which is legible from an automatic device and, where technically feasible, to transfer such data to another data controller without impediment.

• The interested parties have the right to present claims to the relevant supervisory authority (in their member state of normal residence or employment, or in the state in which the presumed violation occurred).

• All these rights may be exercised in relation with the Joint Controllers by writing to the address indicated below, or by sending an email message to the following address: privacy@gigroup.com. Is understood that if the application to that effect is presented electronically the information will be supplied in an electronic format suitable for common use.

10. WITHDRAWAL OF CONSENT

10.1     The interested parties have the right to withdraw the consent expressed by them at any time by sending an email to privacy@gigroup.com

10.2     The withdrawal of the consent does not affect the legitimate nature of the processing based on the consent which you expressed prior to the withdrawal.

11. JOINT CONTROLLERS CONTACT DETAILS

Controller – GI GROUP STAFFING COMPANY S.R.L., registration number with the Trade Registry of Bucharest J40/6080/2009, fiscal identification number RO 25578361, in the person of its legal representative

Controller – BARNETT MCCALL RECRUITMENT S.R.L., registration number with the Trade Registry of Bucharest J40/2768/1999, fiscal identification number RO 11577960, in the person of its legal representative

same contact address : Romania, Bucharest, Arh. Louis Blanc St., 5th Floor, 1st District, phone +4 021 231 53 24

12. DATA PROTECTION OFFICER (DPO) CONTACT DETAILS

The data protection officer can be contacted on email at dpo@gigroup.com address via Piazza IV Novembre 5, 20124 Milano, Italia in attention of „Data protection officer”.

JOINT CONTROLLERS
GI GROUP STAFFING COMPANY S.R.L.
BARNETT MCCALL RECRUITMENT S.R.L.

[1] If:

  1. the interested party contests the precise nature of the personal data, for the period necessary to enable the joint controllers to check the precise nature of the data in question
  2. the processing is unlawful and the interested party objects to the cancellation of the personal data and asks for its use to be restricted
  3. even if the joint controllers no longer requires the data for processing purposes, when the interested party has to obtain the personal data to ascertain, exercise or defend a right in legal proceedings
  4. the interested party objects to the processing pursuant to the terms of article 21, section 1, while awaiting checks on the prevalence of the legitimate motives of the joint controllers over those of the interested party

[2] If the processing is based on consent pursuant to articles 6.1 a) or 9.2 a) other contract pursuant to article 6.1 b) of the GDPR and takes place using automated instruments.

PRIVACY CLIENTS

INFORMATION ON THE USE OF PERSONAL DATA
ARTICLE 13 AND ARTICLE 26 OF THE 2016/679 (EU) REGULATION (“GDPR”)
(Marketing)

JOINT CONTROLLERS:

– GI GROUP STAFFING COMPANY S.R.L., registration number with the Trade Registry of Bucharest J40/6080/2009, fiscal identification number RO 25578361, in the person of its legal representative (“Gi”)
– BARNETT MCCALL RECRUITMENT S.R.L., registration number with the Trade Registry of Bucharest J40/2768/1999, fiscal identification number RO 11577960, in the person of its legal representative (‘BMR”)

Both acting as Gi Group companies (“Companies”)

Same contact addressRomania, Bucharest, Arh. Louis Blanc St., 5th Floor, 1st District;

Same phone: +4 021 231 53 24 Same fax: +4 021 231 53 25 Same e-mail addressro.privacy@gigroup.com

DATA PROTECTION OFFICER (DPO)

Address: Piazza IV Novembre 5, 20124 Milan, Italy – in attention of DPO

E-maildpo@gigroup.com

WHY IS YOUR PERSONAL DATA BEING USED AND

WHAT IS THE CONDITION THAT MAKES ITS USE LEGAL?

IS THE CONFERMENT OF THE DATA OBLIGATORY?

1. Regular candidate notification communications

Sending regular communications notifying candidates in administration or for direct information with automated contact procedures (e-mail, sms).

The legal basis that legitimates the use is consent. It remains the intention that consent to the use of the data for the above purposes are completely optional.

2. Marketing the Companies

Sending informative and promotional communications for the services offered by the Companies (temporary work, search and selection) to complete studies and statistical and/or market research or for events organized by the companies, all with traditional contact procedures (letter post, operator calls) and with automated contact procedures (e-mail, sms, mms, instant messaging systems),

The legal basis that legitimates the use is consent. It remains the intention that consent to the use of the data for the above purposes are completely optional.

3. Marketing the other companies of Gi Group

Sending informative and promotional communications for the services offered by the other companies of the Group – located in the EU and outside – (in particular HR consultancy and training, HR administration outsourcing, relocation support, search and selection of personnel, executive search, field marketing), or to complete studies and statistical and/or market research, or for events organized by the companies all with traditional contact procedures (letter post, operator calls) and with automated contract procedures (e-mail, sms, mms, instant messaging systems).

The legal basis that legitimates the use is consent. It remains the intention that consent to the use of the data for the above purposes are completely optional.

Once the conservation periods indicated above have elapsed (the consent is withdrawn), the personal data will be destroyed, deleted or made anonymous, compatible with the technical deletion and back-up procedures.

ADDRESSEES OF THE DATA

The personal data can only be used by the employees of the company departments authorized to use it in that they are engaged in the pursuit of the above activities. These employees have received adequate operating instructions in this regard.

Your personal data may be communicated by the Companies for the pursuit of the purposes set out in point 3 above to the companies of the Group, in Romania or abroad.

Your personal data may also be used by external bodies, expressly nominated as data Processors, which provide the Companies with:

– consultancy services;
– customer database management and maintenance services
– filing services;
– services to enable communications to be posted;
– market research services.

The up to date list containing the addressees is continuously updated and can be made available at our head office or by sending an e-mail to ro.privacy@gigroup.com .

RIGHTS OF THOSE CONCERNED

Those concerned can ask the Joint Controllers for access to the data, its deletion, the correction of incorrect data and the addition to incomplete data as well as the limitation of the use in the cases set out in article 18 of the GDPR.

Those concerned have the right to object at any time in whole or in part to the use of the data needed for the legitimate pursuit of the interests of the Joint Controllers.

Those concerned are also entitled, if the conditions for exercising the right of portability as referred to in article 20 of the GDPR are in place, to receive the data provided to the Joint Controllers in a structured format in common use that can be read by automatic devices, as well as if technically feasible to transmit it to other controllers without hindrance.

These concerned have the right to submit complaints to the appropriate control Authority (particularly in the Member State in which they habitually reside or work or the State in which the alleged violation took place).

These rights may be exercised by writing by post, to the address indicated above, or by e-mail to the following e-mail address: ro.privacy@gigroup.com. It remains the intention that, when the request is submitted by electronic means, the information will be provided in an electronic format in common use.

RIGHT TO OBJECT TO DIRECT MARKETING PURPOSES

Those concerned have the right to object at any time to the use of the personal data that they consider to be used for direct marketing purposes, by writing by post to the address indicated above and/or by e-mail to the following e-mail address: ro.privacy@gigroup.com and/or by clicking on the appropriate links contained in the communications that will be sent to them.

WITHDRAWAL OF THE CONSENT

Those concerned have the right to object at any time to the use of the personal data that they consider to be used for direct marketing purposes, by writing by post to the address indicated above and/or by e-mail to the following e-mail address: ro.privacy@gigroup.com and/or by clicking on the appropriate links contained in the communications that will be sent to them.

Withdrawal of the consent does not prejudice the legality of the use based on the consent that you provided before the withdrawal.

COOKIE POLICY

The www.wyser.ro (hereafter called the “Site”) uses cookies. Cookies are strings of text created by a server and stored on the hard disc of the computer or on any device employed by the user to access Internet (smartphone, tablet, etc.) which are then retransmitted upon subsequent accesses to Internet of the user.

The cookies allow information to be gathered about the navigation conducted by the user on the Site, for example to record the language preferences or the currency chosen by the user for a purchase, and to offer them on the subsequent visit to make the Site easier to use.

The cookies can be stored permanently on the computer of the user and can have a variable duration (so-called persistent cookies), but can also vanish upon closing the browser or have a limited duration (so-called session cookies).

The cookies can be installed from the Site being visited (so-called 1st-party cookies) or can be installed from other web sites (so-called 3rd-party cookies).

The Site uses 1st-party cookies, 3rd-party cookies and other similar technologies, as described in more detail below.

Navigation cookies

The Site uses cookies that guarantee efficient navigation and use of the Site, as well as function cookies that enable the users to exploit personalization offered by the Site, such as automatically entering the password to access the reserved areas of the Site and recognising the navigation language or other preferences chosen during the previous visits.

Analytics cookies

The Site uses Google Analytics cookies to gather information, in an aggregated form, on the number of users that visit the Site and on the way of using it, in order to produce general statistics on the service and on site use, without the possibility of tracing the identity of the individual user. Google Analytics settings allow the data to be shared with Google in order to use the following services: i) Benchmarking, namely taking part in the collection of anonymous data that makes the state of the data easier to understand; ii) Technical assistance, to enable Google to provide assistance and iii) Account experts, in order to allow Google marketing experts to provide suggestions for improving configuration and analysis.

For more details and information visit the page of the provider here.

Through predefined setting, the analytics cookies use the entire IP address of the users of the web site to provide geographical data of a general nature in the processes.

Google Analytics cookies can be disabled by downloading a specific plug-in of the browser that can be accessed here.

Social cookies

The Site uses 3rd-party cookies that allow the users to interact with social networks (Facebook, Twitter, You Tube, etc.) and in particular to share the contents of the site by means of the above-mentioned social networks.

Profiling cookies

The Site does not use profiling cookies with which it is possible to note the preferences declared during each visit and to create profiles that enable messages to be sent targeted at the preferences and interests of the user.

The right to object to or refuse cookies

Typically, cookies are classified as «temporary» or «permanent».
The «temporary» cookies do not stay on the computer after leaving the Site or after closing the browser.

The Site uses «temporary» cookies. The aggregate information collected enables the traffic models of the Site to be analysed. In this way it is possible to improve the Site by modifying it or by personalising its contents and thereby making it easier to use.

The Site also uses «permanent» cookies that, by virtue of their nature, remain however on the computers of the visitors to be retransmitted to the Site upon the next visit of the users themselves. These cookies enable the Site to be navigated and its functions to be personalised, keeping a record of the services requested and the pages visited on previous sessions.

The «permanent» cookies are stored on the device of the user, connected to the IP address of the device, for a maximum period of 30 days. The user can remove the «permanent» cookies manually.

Most of the browsers automatically accept cookies in a predefined manner. However if the preferences of the browser are set in an appropriate way, it is possible to refuse them or accept them selectively.

The procedures offered by the main browsers to object to cookies being recorded on the user’s hard disc, by configuring the navigation browser in such a way as to disable the cookies, are shown below:

After this operation, however, some functions of the web pages might not be performed correctly.

For information on the use of cookies by FacebookYou TubeTwitter and LinkedIn, please consult  FacebookGoogleTwitter and LinkedIn sites.

To keep track of the collection of data for the purposes of the analysis conducted by Google Analytics cookies, users are invited to visit the page of Google Analytics opt-out browser add-on or, if they want to, they can disable these cookies by downloading the specific plug-in of the browser that can be found therein.

The data collected by using cookies is processed by Barnett McCall Recruitment Srl and Gi Group Staffing Company Srl.

This data may also be used by companies in our confidence that carry out tasks of a technical and administrative nature. These companies collaborate with us directly and take the role of processor.

The information collected by using Google cookies will not be transferred outside the European Union. The data collected by using the cookies will not be distributed.