Privacy and Data Processing Policy
Data Controller
CROZ d.o.o. takes due account of the safety and privacy of your personal data. This policy is here to explain how and why we collect your personal data and how we process it. The legal basis of data processing is the freely given consent of the Data Subject, which you give us freely according to this Privacy Policy, if you agree to it.
In the context of GDPR (General Data Protection Regulation), the Data Controller is:
CROZ d.o.o.
Lastovska 23, 10 000 Zagreb, Croatia
PID: 86132384544
Tel: +385 (0)1 6184831
Fax: +385 (0)1 6184833
Email: croz-info@croz.net
For all possible inquiries and complaints regarding the security and privacy of your personal data, please contact our Data Protection Officer: dpo@croz.net
Data Privacy
CROZ uses TalentLyft, an application owned by AdoptoTech d.o.o. (hereinafter “TalentLyft”) for the purposes of carrying out the recruitment process.
TalentLyft – as the Data Processor – processes personal data in accordance with the business cooperation agreement concluded with CROZ, as well as the data processing agreement which regulates the safety and protection of all personal data you provide us with. The Data Processor uses the following organizations as another Data processor: Intercom R&D Unlimited company, Stephen Court, 18-21 Saint Stephen&'s Green, Dublin 2, Ireland; Mailgun Technologies, Inc., 535 Mission St., 14th Floor, San Francisco, CA 94105; Microsoft Ireland Operations Ltd, Dublin, Ireland; Braintree, PayPal Pte. Ltd, Chicago, USA; HireAbility.com, LLC, 25 Nashua Road, Suite C6, Londonderry, NH 03053, United States.
The collected data can be used for further development and improvements of the website, adjusting and improving the content of and the services offered by the website, as well as informing the Candidate of the content and other services offered on the website.
The data provided by the Candidate during registration, as well as creation and changes to the Candidate’s personal profile on the website, will be available only to persons authorized to access the data and for the purposes defined by this Privacy Policy.
By accepting this Privacy Policy, you are giving consent to the Data Controller to store your data for 5 years from the moment you delivered your data. If the Candidate explicitly withdraws consent at any given point in time, the Data Controller is obliged to delete all personal data, even before the expiry of this period, without affecting the lawfulness of processing based on consent before its withdrawal.
You have the right to ask CROZ for a restriction of processing your data as a Data Subject, as well as the rights to data portability and the right to object to data processing.
You have the right to lodge a complaint with a supervisory authority.
The provision of personal data is not a statutory or contractual requirement nor is it a requirement to enter into a contract. However, not giving us access to your personal data may possibly affect our objective perception of you as a potential employee at CROZ.
Personal Data We Collect (Categories of Personal Data)
- The data you submit when applying for an open position, which can include: your name, surname, title, personal photo, job title, links to your social media, address, email address, Skype username, phone number, education history, employment history, resume;
- IP address;
- Browser data you’re using;
- Cookies, which allow us to track how you use TalentLyft websites;
- All other data delivered by the Data Subject personally.
Data Collection Purposes
The collected data will be used exclusively for the recruitment process. The process may include the following:
- verification of the data accuracy;
- references’ verification;
- assessment of qualifications and skills required for the position;
- communication-related to the process (email, phone calls, SMS…);
- completion of questionnaires and tests;
- fulfilling legal requirements;
- including your application in the selection process for the position you applied for;
- including your application in the selection process for a similar position
After you have applied, you will gain access to a portal where you will have insight into the personal data you have provided us with, as well as the possibility of requesting deletion, updating and downloading the data. A link to the portal will be sent to you in a confirmation email after you have successfully completed the registration process.
You may request correction or updates of your data at any point in time, as well as withdraw consent or request full deletion of your personal data, without it affecting the lawfulness of processing based on consent before its withdrawal.
Data Access
The access to your data is restricted to authorized persons who are taking part in the selection process and possibly persons authorized for maintaining and improving the TalentLyft application.
We will store your data for 5 years, during which period we may inform you about the future employment possibilities.
The data will be stored within the territory of the European Union and secured under the highest technical standards. CROZ will not transfer your data to third countries or international organizations. There is no automated decision-making.
Consent
By accepting this Privacy and Data Processing Policy, you certify that:
- you are over the age of 16, have the unrestricted legal capacity and are submitting your own data (source of personal data: candidate).
- you accept that CROZ as the Data Controller and Data Processors well as others data processors may process your personal data in accordance with this Privacy Policy, as well as that you accept to be contacted after the end of the recruitment process with similar positions.
