PRIVACY POLICY FOR JOB APPLICANTS

This document aims to provide information to job applicants of The Burgiss Group Ltd (Sofia) (the “Applicants”) about their personal data and the way it is processed by the controller pursuant to article 13 and article 14 of the Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) as follows:

  1. Controller of Personal Data

    The Burgiss Group Ltd, UIC 204641692, with seat and registered address: 1407 Sofia, Srebarna str. 2, MobiArt building, 5th floor, is controller of the Applicants’ personal data (the “Controller”).

    In case of any questions or in case Applicants wish to exercise any of their rights as per the GDPR, the Applicants may contact the Generalist of Human Resources and Administrative Activity of the Controller (the “HR Generalist”):

    (M) +359 877 552 696

    e-mail: beredzheb@burgiss.com

    Categories of Personal Data

    The Controller collects and processes the following personal data of the Applicants: name, picture, personal information including but not limited to personal identification number, address, ID’s data, place of birth, telephone, interests, education, work experience, and other type of data provided by the Applicant in his/her CV.

  2. Purpose of the Personal Data Processing and Legal Basis

    The Controller processes personal data of the Applicants for the purposes of selecting employees according to the legal requirements and qualification requirements of the respective job position for which the applicant applies (Employment and HR related matters).

    The personal data of the Applicants is processed, primary, on the legal basis of article 6 para 1 (b) of the GDPR in order the Controller to take steps at the request of Applicant prior to entering into an agreement. However, some personal data might be processed by the Controller on the legal basis of article 6 para 1 (c) of the GDPR for compliance with a legal obligation to which the Controller is subject or on article 6 para 1 (f) of the GDPR for the purposes of the legitimate interests pursued by the Controller.

  3. Persons who Provide the Personal Data

    The Controller receives personal data from the Applicants and recruitment agencies, depending on the case.

  4. Categories of Recipients

    The Controller may provide some or all of personal data, depending on the case, to the Applicant, The Burgiss Group, LLC (USA), The Burgiss Group (PTY) LTD. (RSA) and recruitment agencies which support the Controller in the selection process.

  5. Transfer of Personal Data to Third Country of International Organization

    The Controller transfers Applicants’ personal data to USA where the mother company of the Controller - The Burgiss Croup LLC, is located, in order proper candidates for the respective job position depending on its qualification requirements and the need of Burgiss Group to be selected. In order to guarantee the personal data in the transfer we have signed a Standard contractual clauses document for the transfer of personal data from the Community to third country. The Controller transfers Applicants’ personal data to Republic of South Africa (RSA) as well, namely to The Burgiss Group (PTY) LTD. (RSA) – a company within the The Burgiss Group, LLC (USA) for employment and HR related matters. A Standard contractual clauses document for transfer of personal data from the Community to third country is signed on 12.12.2022.

  6. Periods for Storing Personal

    The Controller stores Applicants’ personal data for a period of 6 (six) months as of the selection procedure’s end in which the Applicant participated or for a period which applicant agreed explicitly with.

  7. Right of Applicants Related to Personal Data

    7.1. Every Applicant has right, at any time and without delay:

            i. To withdraw consent, if the processing of personal data is based on consent;

        ii. To get access to his/her personal data and information about personal data concerning him/her and the way it is processed as well as to receive copy of his/her personal data;

          iii. To request Controller to rectify inaccurate personal data and to store it in accurate and actual form;

       iv. To obtain from the Controller the erasure of personal data concerning him/her when personal data have been processed on no legal grounds and/or personal data are no longer necessary for the purposes for which they were collected;

           v. To obtain from the Controller restriction of processing;

          vi. To object to processing of his/her personal data;

    7.2. The Controller has to reply to the Applicant’s request under item 8.1 above not later than one month as of the day when the request is received. The Controller may delay its reply with additional two months depending on the complexity and number of requests. The Controller will inform the Applicant about the delay and the reasons for that not later than one month as of the request’s receipt.   

     

  8. Complaint with Supervisory Authority

    Applicants have the right to lodge a complaint with a supervisory authority which in the common case will be:

    Bulgarian Commission for Personal Data Protection

    2 Prof. Tzvetan Lazarov Blvd., 1592 Sofia, Bulgaria

    e-mail: kzld@cpdp.bg

    Website: http://www.cpdp.bg

  9. Automated Decision-Making

    The Controller does not use automated decision-making with respect to the Applicants’ personal data.