Privacy Policy & Legal Notices

PRIVACY NOTICE FOR JOB APPLICANTS

Effective as of 1 of November 2022

As part of any recruitment process, Huvepharma collects and processes personal data relating to job applicants. For the purposes of this notice Huvepharma refers to Huvepharma EOOD (having its seat and registered address at 3a, Nikolay Haytov Str., 5th floor, 1113 Sofia, Bulgaria) and its global group of related legal entities and affiliates (“Huvepharma”, “we”, “us”). Please read this privacy notice carefully to learn why and how we process your personal information.

Who is responsible for data processing?

For the purpose of the applicable EU Data Protection law, including but not limited to Regulation (EU) 2016/679 or the General Data Protection Regulation (GDPR), the company responsible for your personal data as a data controller is the Huvepharma entity that considers your profile for the respective position.

If you have any questions regarding this privacy notice or the processing of your personal data, please contact our Data Protection Officer by sending an e-mail to [email protected].

Personal data we collect

In the context of the evaluation of your job candidacy, we may collect and further process the following personal data of yours:

• Identification information, such as: names, citizenship, date and place of birth, photo
• Contact details, such as: email address and/or postal address, and/or phone number
• Details of your education, professional experience, foreign language proficiency, skills and any certifications or other professional qualifications you have
• Specific data collected in the context of evaluating your suitability for working with us: notes taken by the interviewer, test results and/or results of personality assessment questionnaires (where applicable) carried out as a part of the recruitment process
• Other information about you that you have voluntarily provided to us in your CV, cover letter or shared during the interviews (current or desired salary, professional memberships, general interests, hobbies, etc.)

Why do we collect your personal data?

• To perform a preliminary selection, review, and evaluation of your suitability for a role and position at Huvepharma
• To communicate with you during the recruitment process
• To manage the recruitment procedure and to make hiring decisions
• To prepare a proposal for concluding an employment contract with us, in case you are assessed as a suitable candidate for the relevant position
• In addition, we may be required to share information with competent state authorities to comply with the law

What is the legal basis for data processing?

We need to process your data to take steps at your request prior to entering an employment contract with you.

We may also rely on Huvepharma legitimate interest to recruit suitable and capable candidates for open positions in our organization.

In some cases, we need to process data from job applicants to respond to and defend against legal claims.

Based on your consent, we might keep your data to contact you for further job opportunities within the organization or future job openings.

We also rely on your consent to process your data when you submit your CV to our email and wish to join our team without applying for a specific open position (spontaneous application).

With whom do we share personal data?                                                                                                           

For the purposes of the recruitment procedure your personal data may be shared internally with members of the HR team, interviewers involved in the recruitment process and hiring managers in the department with a job opening in the relevant Huvepharma entity or affiliate.

We may share your personal data with trusted third parties such as companies that support our IT infrastructure, providers of hosting services or cloud-based software services who sometimes need to access personal data for the provision of their services. These third parties process personal data on our behalf and based on our instructions after signing a written agreement which provides for appropriate organizational and technical measures and safeguards to ensure the security of personal data.

Since Huvepharma is a global organization, your personal data may be disclosed internally within the group of Huvepharma entities and affiliates where this is appropriate for the purposes described in the section “Why do we collect your personal data?”. In case your data is transferred outside of the European Economic Area then such transfer will take place only in the case that the obligations as stipulated by the General Data Protection Regulation for such transfers are fulfilled.

For how long do we retain your data?

Your personal data shall be retained by us until the fulfilment of data processing purposes described in this privacy notice. If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. In case your job candidacy is unsuccessful, the respective Huvepharma entity will retain your personal data for the legally defined period upon the completion of the recruitment procedure under the applicable national data protection legislation.

The internal documents created by Huvepharma in the recruitment procedure for a specific role and position that may contain your personal data will be stored within the statutory term upon completion of the respective procedure to defend our legal interests under the applicable national anti-discrimination law.

Based on your explicit consent, we will keep your personal data for consideration for future employment opportunities for a period of 1 (one) year upon completion of the respective recruitment procedure or submission of a spontaneous application. After this period expires or once you withdraw your consent, your data will be erased from our records.

How do we collect personal data, and do you have an obligation to provide it to us?

We usually collect most of the personal data processed in the recruitment process directly from you. We may also collect personal data about you from third parties, such as current or former employers and points of reference if you have provided us with your consent to contact such parties.

The provision of personal data is voluntary but necessary in the recruitment process. You are not obliged under applicable legislation to provide us with your personal data. However, in the event you don’t provide us with sufficient information, we may not be able to proceed with your job candidacy.

What are your rights?

As a data subject and in the context of the recruitment procedure, you have and can exercise the following rights:

• the right to access your personal data, as well as to receive information about their processing
• the right to request the correction of any inaccurate or completion of any incomplete personal data
• the right to deletion ("right to be forgotten")
• the right to restrict the processing of your personal data
• the right to data portability in a structured, commonly used, and machine-readable format
• the right to withdraw any consent you have previously given at any time and free of charge. This will not affect the lawfulness of any processing carried out before you withdraw your consent

If you are located in the EU, you also have the right to lodge a complaint about the way we handle your data with the competent supervisory authority in the relevant country. The name and contact details of the competent supervisory authorities in the EU are available at the following link: 

http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

For further questions or suggestions concerning data protection and for making use of your individual rights as a data subject please contact the Data Protection Officer of Huvepharma by sending an email to [email protected]. You can expect a response to such a request within one (1) month following receipt thereof and, in any case, within two (2) additional months, if this is required by the complexity of the request or the total number of requests received.

Automated decision-making

Recruitment processes at Huvepharma are not based on automated decision-making.

How do we protect your personal data?

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused, or disclosed, and is not accessed except by our employees in the proper performance of their duties.

Updates of this Privacy Notice

To apply the most up-to-date measures for protection and with a view to complying with the effective legislation, we will update this Privacy Notice on a regular basis. Should the changes we introduce be significant, we can publish a notice of the changes made on our website or inform you in any other suitable manner.