Personal data of careers website visitors
What data do we process?
We may process the following personal data of careers website visitors:
Purpose of the processing:
All processing of personal data of careers website visitors is based on our legitimate interest to facilitate recruitment.
Your video and its related content - such as images and sound - will also be processed in case you're an applicant who decided to submit a video application. You can always take back your consent for us holding this data by sending an email to firstname.lastname@example.org as stated below.
Personal data of job applicants
What data do we process?
Purpose of the processing:
If you apply for a job, then we will process your personal data to facilitate the entire job application procedure on the grounds of our legitimate interests for recruiting. After the application procedure is finished, you can request your data to be deleted, otherwise we will keep your information on file for the period of one year in order to possibly contact you for future job openings. If you are hired to work for us, however, deletion might not be possible as some of your information needs to be stored for up to 7 years due to legal requirements.
Under European data protection law, we are required to inform you that withholding personal data in your job application can give you a disadvantage in comparison to other candidates who are applying for the same role.
Recipients of personal data
We store your personal data in a secure and complianthosted by our service provider in the EU. Internally, only recruitment professionals and staff involved in the recruitment process have access to your personal data.
As a data subject under GDPR you have the following rights:
Right of Access
You have the right to know whether we process personal data of yours or not and to request to access this information.
Right to Rectification
If there is information of yours which is incorrect or inaccurate, like if for example, your address changed, you can request that we modify or update this in our system.
Right to be forgotten
You have the right to have your personal data deleted by us without any undue delay. This right is limited to specific grounds, for example, if you have withdrawn your consent, or if you object and there are no overriding legitimate grounds for us to maintain the processing.
Restriction of processing
You have the right to request that we restrict the processing of your personal data based on specific grounds. These are (1) the time for us to verify the accuracy of your personal data on your request; (2) instead of erasure of unlawful processing, you request restriction of use instead; (3) you need personal data in legal proceedings; or (4) we are verifying whether our legitimate grounds override your objection to the processing.
Right to object
You have the right to object at any time to our processing of your personal data if such processing is (1) based on our legitimate interest; or (2) necessary for the performance of a task carried out in the public interest or exercise of official authority vested in us. We shall cease to process your personal data based on your objection, unless we demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms or if we need your personal data in legal proceedings.
You also have the right to receive your personal data from us so that you can transmit that data to another controller. This will contain all your personal data from your candidate profile but will not include any device data, including data that was transmitted to us in a log file.
Lodging a complaint
We advise you to contact us first atif you have any complaints regarding the processing of your personal data. But you have the right to lodge a complaint with the relevant supervisory authority about our processing of your personal data.
As stated above, we may transfer your personal data to a subsidiary or third party that is located in a different country than where 5CA is located. If such country does not provide for an adequate level of protection by domestic law according to the European Commission, we have ensured this adequate level of protection by agreeing on additional appropriate safeguards with that subsidiary or third party through the Standard Data Protection Clauses adopted by the European Commission, or through the EU-US Privacy Shield. A list of countries that have ensured an adequate level of protection according to the European Commission can be found here. Alternatively, we may ask you for your explicit consent to the proposed transfer.
Requests or questions
Feel free to contact us if you have any questions regarding your personal data. You can also contact us with requests to exercise your rights – mentioned above - under European data protection law.
If you have any requests or questions with regard to your personal data you can contact our Data Protection Officer:
Details of the controller
5CA will be the controller responsible for processing your personal data according to laws and regulations. The address of 5CA is:
Catharijnesingel 30E, 3511 GB, Utrecht, the Netherlands