Source: https://talent-outpost.com/privacy/
Timestamp: 2019-04-22 11:10:20+00:00

Document:
Where you apply for a job opening posted by Us, these Privacy Notice provisions will apply to Our processing of your personal information in addition to Our Candidate Privacy Statement which has been provided to you separately or is available on Our Website.
A. What data do We collect and process for you?
Information contained in correspondence: information contained in any correspondence by email or phone between you and Us. We will keep a record of that correspondence.
Website usage and other technical data: information about your interactions to our website including, but not limited to, traffic data, location data, weblogs and other communication data, the site that referred you to Talent Outpost’s Website and the resources that you access. This information may be collected by a third-party website analytics service provide on our behalf and may be collected using cookies or similar technologies.
B. How do We collect and process data from you?
Submit a resume or CV or job application to a job vacancy. This includes information provided through an online job site, via email and phone, in person at interviews and/or by any other method.
Attend an interview including interview notes and records, including contact details (if provided).
Employers and referees: if you are an applicant, we may contact with your written consent your current and former employers and/or referees, who may be based inside or outside of the EU, to provide information about you and your application. The consent can be withdrawn at any time.
Service Providers: we may collect personal information from our third-party service providers, such as our email verification service provider, background check service providers, and other compliance providers as required by local law. Our database provider, Crelate, allows Us to search various databases, which may include your personal data, to find possible candidates to fill Our job openings. Where We find you in this way we will obtain your personal data from these sources.
Publicly available sources: we use publicly available sources to carry out identity and compliance checks.
To communicate with you in respect of the recruitment opportunities and process.
To enhance any information that we receive from you with information obtained from third-party data providers.
To help Crelate improve their services.
Insofar as we obtain the consent of the data subject for the processing of personal data, art. 6 para. 1 let. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, art. 6 para. 1 let. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, art. 6 para. 1 let. c GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first interest, art. 6 para. 1 let. f GDPR serves as the legal basis for processing. Our legitimate interest in data processing pursuant to art. 6 para. 1 let. f GDPR lies in the purposes.
We take appropriate measures to ensure that all personal data is kept secure including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorized way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality.
We will hold all the data for recruitment purposes only for as long as necessary to provide services to you and to comply with our legal obligations.
Where we store your personal data in our own systems, it is stored on secure servers by Talent Outpost or by a third-party hosting infrastructure company located in within Switzerland and the EEA.
The data that We collect from you and process using Crelate’s Services may be transferred to, and stored at, a destination outside the Switzerland and the EEA. It may also be processed by staff operating outside the Switzerland who work for Us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your orders, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.
In particular, your data may be accessible to i) Crelate’s staff in the USA or ii) may be stored and hosted by Crelate’s in accordance to the EU GDPR compliant US Privacy Shield Framework. A Data Processor Agreement has been signed between Crelate, Inc and its overseas group companies, and between Crelate, Inc and each of its data processors. These data processor agreements are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal data.
If you would like further information, please contact Us (see ‘Contact Us’ below).
The data is also stored in the log files of our system but is not stored together with other personal data concerning you.
The legal basis for the temporary storage of personal data and log files is art. 6 (1) (f) GDPR.
The temporary storage of your IP address by the system is necessary to enable the web-site to be delivered to your computer. For this the IP address must remain stored for the duration of the session.
The personal data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
Your personal data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, the data will be deleted when the respective session has ended.
The collection of personal data for the provision of our website and the storage of personal data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection.
In this context, the personal data will not be transmitted to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of data is art. 6 (1) (a) GDPR.
The legal basis for the processing of personal data transmitted in the course of sending an e-mail is art. 6 (1) (f) GDPR. If the e-mail contact aims at the conclusion of a contract, then the additional legal basis for the processing is art. 6 (1) (b) GDPR.
The processing of personal data from the contact form and the e-mail sent to us serves us only for the treatment of the establishment of contact. The personal data collected in the course of sending an e-mail represent also our legitimate interest in processing of personal data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected.
To offer a good user experience and to safeguard our ability to comply with our contractual obligations, we need to have access to all user communication. Consequently, the personal data from the contact form or the personal data that is sent by e-mail will be erased not earlier than after 10 years.
You have the possibility to withdraw your consent to the processing of personal data concerning you at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In this case, the conversation cannot be continued.
the existence of automated decision-making, including profiling, in accordance with art. 22 (1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to art. 46 GDPR relating to the transfer.
You have the right to obtain from us the rectification and/or completion of incorrect or in-complete personal data concerning you.
you have objected to processing pursuant to art. 21 (1) GDPR and it has not yet been determined whether our legitimate grounds override those of you.
Where processing of personal data concerning you has been restricted, such personal data may only be processed – with the exception of storage – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
the personal data concerning you was collected in relation to the offer of information society services referred to in art. 8 (1) GDPR.
Where we have made your personal data public and where we are obliged pursuant to art. 17 (1) GDPR to erase your personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, the personal data.
In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The freedoms and rights of others shall not be affected by this.
The right to data portability shall not apply to processing necessary for the performance of a task carried out of a public interest or in the exercise of official authority assigned to us.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on art. 6 (1) (e) or (f) GDPR, including profiling based on those provisions.
We no longer process the personal data concerning you, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of the personal data concerning you for such marketing, which includes profiling to the extent that it is related with such direct marketing.
You have the possibility to exercise your right of object in the context with the use of in-formation society services, and notwithstanding Directive 2002/58/EC, by automated means using technical specifications.
However, these decisions may not be based on special categories of personal data pursuant to art. 9 (1) GDPR, unless art. 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
In the cases referred to in points a) and c), we implement suitable measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
We may use Crelate’s technology to select appropriate candidates for Us to consider based on criteria we have identified. The process of finding suitable candidates is automatic, however, any decision as to who We will engage to fill the job opening will be made by Our team.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
Please contact us at support@talent-outpost.com or Tiffany Feeney Talent Outpost, Neunbrunnenstrasse 38, 8050 Zurich, Switzerland to exercise any of your rights under section “Your Rights” or if you have any questions in respect of this policy.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us by contacting us via the contact details at the top of this Privacy Notice.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 22
 art. 46
 art. 21
 art. 8
 art. 17
 art. 6
 art. 9
 art. 9