1.Introduction
State the company's name and purpose of the privacy policy.
Mention compliance with relevant data protection laws, e.g., GDPR, CCPA, etc.
2.Types of Data Collected
Personal Identification Data: Name, email address, phone number, date of birth, etc.
Professional Data: CV/resume details, qualifications, certifications, work experience, and job preferences.
3.How Data Is Collected
Through forms on the company’s website or job portals.
Direct submissions via email, social media, or job application platforms like LinkedIn.
Automatically through website interactions (cookies, analytics).
4.Purposes of Data Collection
To assess candidate eligibility for job opportunities.
To match candidates with relevant job vacancies.
To communicate with candidates about potential job opportunities or updates.
5.Legal Basis for Processing
Consent: Candidate explicitly agrees to the collection and processing of their data.
Contract: Data is necessary for the performance of a contract or to take steps prior to entering into a contract (e.g., job placement).
Legitimate Interest: To assess, shortlist, and recommend candidates to clients.
6.Data Sharing
With Clients: Candidate data may be shared with potential employers or third-party service providers as part of the recruitment process.
7. Data Retention
Specify how long data is retained (e.g., resumes for 2 years).
Mention the process for data deletion or anonymization after the retention period.
8.Candidate Rights
Access: Right to access personal data held by the company.
Rectification: Right to request correction of inaccurate data.
Deletion (Right to be Forgotten): Right to request deletion of data when it is no longer necessary for the purpose collected.