1.Introductory provisions
B2 KAPITAL d.o.o. Privacy rules for candidates for employment at B2 KAPITAL d.o.o. (hereinafter: the „Rules“) B2 KAPITAL d.o.o. (hereinafter referred to as the “Company”) explains in more detail the manner in which the personal data of the candidates for employment (hereinafter referred to as the “Candidate”, “Data Subject/Data Subjects”) are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter: the “Regulation”), laws governing the protection of personal data and other by-laws.
By these Rules, the Company provides information about the Data Controller, the Data Protection Officer, the data collected and processed by the Company, to which purpose and on which legal basis, the recipients of personal data, the period of storage of your personal data, data protection as well as the rights of the Data Subjects in relation to the personal data in question.
These Rules shall apply from the day the Regulation enters into force
2.Who is responsible for the processing of your personal data and who you can contact?
Responsible for data processing:
B2 KAPITAL d.o.o.
Verovškova ulica 64A
1000 Ljubljana
Telephone: +386 (0) 590 81 720
In relation to the processing of your personal data, you can contact the Data Protection Officer:
Verovškova ulica 64A
1000 Ljubljana
Telephone: +386 (0) 590 81 720
e-mail: vop@b2kapital.si
3.Personal data we collect and process
These Rules relate to the personal data of the candidates that the Company collects during the execution of the employment process received through an open recruitment application and/or recruitment application for an open competition either personally and/or through the official web site of the Company and/or by post; and/or by e-mail. This includes, but is not limited to, the following data:
During the selection process, we can invite you to interviews, to fill out certain texts and questionnaires.
If it is prescribed by a special law, the Company processes data on criminal history from criminal and/or misdemeanor records. Said data is collected by the Company directly from the candidate. For this purpose, the Company may request from the candidate the delivery of an appropriate document (e.g. to provide a certificate issued by the competent authority attesting the absence of any criminal record).
4.Purpose and legal basis of personal data processing
Personal data from point 3 of the Rules are processed for the purpose of selecting the most suitable candidate for our team in the recruitment selection process which includes:
In case of entry into employment contract, your personal data is processed to the extent needed for that purpose, as well as for regulating the rights and obligations that arise from employment, as is explained in the B2 KAPITAL d.o.o. Privacy Rules for employees working through an employment contract, students working at the employer through authorized student centers, persons with the employer for training without entry into employment and those with concluded copyright agreements or freelance contracts.
Legal basis for personal data processing:
The candidate can withdraw the consent at any time. The withdrawal of consent does not affect the lawfulness of consent-based processing that was executed before its withdrawal.
The consent can be withdrawn in the same way in which it was given. The aforementioned right applies to the withdrawal of consent given prior to the Regulation coming into force on May 25th 2018.
The Company does not, in the recruitment process, seek and collect special categories of personal data such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data concerning health or data concerning a natural person’s sex life or sexual orientation.
5. Who has access to your personal information and to whom do we provide your information?
Within the Company
Within the Company, access to your personal data is granted to those organizational units that are involved in the selection process (e.g. Human resources management department, the department with a declared vacancy etc.).
Outside the Company
For certain positions of interest for the Company, the Company delivers (transfers) your data to companies associated with the Company as well (e.g. B2KAPITAL GmbH, B2HOLDING ASA and other member companies of the B2HOLDING group). During the data transfer, the Company takes particular care of protecting your data. The Company pays special attention to data transfer to associated companies and members of the third country group in terms of the Regulation, i.e. transfer to associated companies and group members not established in the European Union or the European Economic Area.
The data transfer is based on a contract containing standard EU contractual provisions on compliance with regulations on personal data protection.
6.How we protect your data?
The protection of your personal data is extremely important to us. Some of the protective measures we take are as follows:
7.How long are the data stored?
If employment is not established, your personal data are deleted after the end of the selection process.
If you have given consent to store your personal data for the purpose of possible future employment needs in a workplace that would fit your qualifications and interests, the Company will store your personal information in its database for a period of 24 months.
8.Your rights
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed and access to the personal data we process. The same rights can be exercised by filling out a Request for exercising a right (hereinafter: the “Request”)
You have the right to obtain from us the rectification or completion of your personal data. We will reply to your request as soon as possible, without undue delay.
You have the right to obtain from us the erasure of your personal data if: (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) you withdraw consent on which the processing is based and where there is no other legal ground for the processing; (iii) you object to the processing and there are no overriding legitimate grounds for the processing ; (iv) the personal data have been unlawfully processed; (v) the data have to be erased for compliance with a legal obligation in Union or Member State law to which the Company is subject. You can exercise your right by filing a Request.
You have the right to request for your personal data not to be erased, but rather to keep said data processed in a restricted manner (according to the restrictions you specify) if this is needed for exercising your other rights.
You have the right to request from us the transfer of your personal data. You can exercise said right by filling out a Request. You have to mark the categories of personal data interests, as well as mark the time period to which your request pertains.
The Data Subject has the right to complain at any time about the processing of personal data relating to him/her.
You have the right to lodge a complaint at any time with the competent Information Commissioner (https://www.ip-rs.si/) in connection to the protection of your personal data.
9.Instructions on exercising rights towards the Company
The application form is available on the Company’s website. Please send the completed request as per the instructions to the Request. We will respond to your request as soon as possible, but no later than one month from the receipt of a correct Request.
In the case of a large number of requests, as well as in the case of the complexity of your query, it might be possible for us to need additional time for an answer. In that case, we will notify you in a timely manner and you will receive our reply no later than 3 months from the receipt of an orderly Request.