This document describes the rights and obligations of on the part:
GrowSocial LTD, a limited liability company registered and existing under the laws of Malta, bearing registration number C79065, hereinafter referred to as “GrowSocial”, “Controller”, “us” or “we”.
And, of the other part:
Any natural person and/or a legal entity applying for, and performing, work for GrowSocial, either as a freelancer, consultant or employee, hereinafter referred to as “Worker” or “Applicant”.
GrowSocial is the “Controller” as defined by the European Union’s GDPR law.
In accordance with current privacy legislation, the Worker’s personal data is processed with the purpose of managing and facilitating the application process, and if hired, how data is processed to perform standard business processes.
GrowSocial is responsible for the processing of the personal data that the Worker provides to us, or for the personal data that GrowSocial in other ways collects.
When and how we collect personal data
We collect personal data about Workers when Workers;
The types of personal data collected and processed
The categories of personal data that can be collected can be used to identify natural persons from names, e-mails, pictures and videos, answers to questions asked through the recruiting process. Only data that is relevant for the recruitment process is collected and processed.
Purpose and lawfulness of processing
The purpose of the collecting and processing of personal data is to manage the application process, and if the applicant is hired for the duration of their work for GrowSocial.
The Applicant also consents to the Controller to collect publicly available information about the Worker and compiles them for use in recruitment purposes.
The lawfulness basis of the processing of personal data is our legitimate interest to be able to perform standard tasks.
During application process:
When hired as a consultant, freelancer or employee:
The Worker has the right to withdraw his or her consent at any time, and ask to have his/her personal data removed without any cost, within 3 business days, by contacting the Controller through “contact points” below.
Storage and transfers
The personal data collected through the Service is stored and processed inside the EU/EEA, or such third country that is considered by the European Commission to have an adequate level of protection, or processed by such suppliers that have entered into such binding agreements that fully complies with the lawfulness of third country transfers (as Privacy Shield) or to other supplies where adequate safeguards are in place to protect the rights of the data subjects whose data is transferred.
How long the personal data will be processed
If a Worker/Applicant does not object, in writing, to the processing of their personal data, the personal data will be stored and processed by us as long as we deem it necessary with regards to the purposes stated above. Note that an applicant may be interesting for future recruitment and for this purpose we may store Applicants’ Personal Data until they are no longer of value as potential recruitments. If you as an Applicant wish not to have your personal data processed for this purpose (future recruitment) please contact us.
Workers have the right to request information about the personal data that is processed by us, by notifying in writing, us using the “contact points” from section 2.
Workers have the right to, if necessary, rectification of inaccurate personal data, via a written request, using the “contact points”.
The Worker has the right to demand deletion or restriction of processing, and the right to object to processing based on legitimate interest under certain circumstances.
The Worker has the right to revoke any consent to processing that has been given by the Worker to the Controller.
Worker has the right to lodge a complaint to the supervisory authority regarding the processing of personal data relating to him or her, if the Worker considers that the processing of personal data infringes the legal framework of privacy law.
However, transfers of information over the internet and mobile networks can never occur without any risk, so all transfers are made on the own risk of the person transferring the data. It is important that Workers also take responsibility to ensure that their data is protected.
We will not sell or otherwise transfer Workers’ personal data to third parties.
We may transfer Workers’ Personal Data to:
We will only transfer Workers’ personal data to third parties that we have confidence in. We carefully choose partners to ensure that the Worker’s personal data is processed in accordance with current privacy legislations and other laws.
Then the Workers work for GrowSocial has ended, regardless of who initiated the termination, and the circumstances thereof, GrowSocial will keep the following data types for a reasonable period of time:
The Worker may ask GrowSocial to discard data, information and communications which is considered to be private or personal in nature.
GrowSocial has the right to discard data it considers to not have relevance for the present or future business operations.
For questions, further information about our handling of personal data or for contact with us in other matters, please send an email to our Data Protection Officer at firstname.lastname@example.org