MSXI Data Privacy Consent Statement
General Privacy Policy
This disclaimer is addressed to candidates registering in MSX International, affiliates or subsidiaries, hereinafter referred as MSXI, toparticipate in recruitment and selection process, we would like to provide you with information on the processing of your personal data asdefined by General Data Privacy Regulation (GDPR) OR established in your country, region, and state data protection laws.
Who is responsible for data processing?
The company you are directly registering as a candidate with (MSXI, RNS, GRI, Impetus, and Sewell’s Group, affiliates or subsidiaries)process your personal data for SAP SuccessFactors in accordance with established country, region, and state data protection laws.
What data is processed by us? And for what purposes?
MSXI informs that the candidate’s data are acquired for the purpose of selecting professionals meeting the company’s interest and that theyare acquired through the candidate’s profile, resume and the completion of the information questionnaire necessary to submit thecandidacy, as well as any other information that could be requested during the selection phase. The data will be processed for the solepurpose of:
a) Following up your expression of interest and evaluation request regarding employment opportunities at MSXI;
b) Carrying out activities connected to qualified personnel search and selection for MSXI.
To this effect, the personal data will be processed in written form and/or on magnetic, electronic or telematic support and with automatedtools, with logic strictly related to the purposes indicated and in order to guarantee the data’s safety and confidentiality.
Lawfulness of the processing and conditions for consent
In accordance with articles 6,7, 9 of EU regulation 2016/679, the data supply does not require the acquisition of the data subject’s consentfor the processing related to the fulfilment of legal and contractual obligations. The acquisition and processing of your data for the purposeof personnel selection, whereas it is not being due to the fulfilment of legal and/or contractual obligations, requires your specific consent.Failing to give consent, even partially, means the selection process cannot be carried out.
Any further purpose will be subject to a dedicated information as well as to a specific and separate consent. The processed data will onlybe personal information; you may specify the possible belonging to a protected category, information necessary to access any prospectivejob positions.
Processing of special categories of personal data
MSX will be able to access, and therefore process, data defined by the Regulation as “special”. In accordance with Article 9 of EURegulation 2016/679, these are personal data that can reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, ortrade union membership and concern the health or sexual orientation of the person.
In this case the acquired data will be processed in compliance with EU Regulation 2016/679. Pursuant to art. 9 of EU Regulation 2016/679data suitable to reveal your state of health will not be disseminated in any way.
Data conservation period
All of the above-mentioned data will be processed throughout the selection phase and, at the end of it, will be immediately destroyed, ifdeemed not to be of interest, or stored for a maximum period of 2 years in order to be available for future selections.
At the end of this period, the above-mentioned data will be destroyed.
Where is the data processed?
The data is processed exclusively in SAP SuccessFactors datacenters. In addition to system administrators, only specific roles within theHR department and MSXI management have access to SAP SuccessFactors.
Your rights as “concerned”
MSXI also informs that – should the conditions apply – the candidate can exercise the following rights, such as:
a) The right to access to personal data;
b) The right to receive a copy of the personal data provided to us (so-called “data transferability”);
c) The right to rectify or update the data held by MSXI;
d) The right to cancel any data for which there is no longer any legal prerequisite for processing;
e) The right to withdraw his/her consent in the event that the processing is based on consent or is related to direct marketing activities;
f) The right of restriction of processing of your personal data, during the investigation of a complaint;
g) The right to object in the event that the processing is based on legitimate interest or is necessary for the performance of a task carriedout for reasons of public interest or connected to the exercise of public authority.
You are entitled to obtain information about the (your) personal data we process on your behalf. In order to review this, please visit thislink and follow instructions:
https://www.msxi.com/privacy-policy/gdpr-data-subject-requests-dsrs/
Additionally, you have the right to data rectification, deletion, or a restriction of processing, as far as you are legally entitled. Employeesalso have the right to object to the processing within the scope of the statutory provisions. The same applies to the right of data portability.
For any complaints or reports on how we process your personal information, we will make every effort to respond to your concerns.
Communication and dissemination
Without prejudice to communications made to comply with legal obligations, in the management of your personal data the followingcategories of authorized third parties and/or internal and external managers may learn about them:
a) Persons appointed as external managers of MSXI, as well as MSXI’s duly instructed personnel (i.e. the personnel belonging to theAdministrative Offices);
b) Internal structures that require personnel with the personal and professional characteristics for which the candidate has been selected;
c) Owner and employees of the payroll processing company, as agents or external managers;
d) Professionals or service companies for administration and business management that operate on behalf of our company;
e) Consultants of MSXI in tax, labor, administrative and legal matters.
Data transfer abroad
Your Data may be transferred abroad, within the European Union, to affiliated or controlled companies, and in general to the MSXInternational group. If this need arises, the transfer will take place in accordance to articles 45, 46, 49 of the 2016/679 EU Regulation withadequate security measures and guarantees.
Controls in Place
a) Data is encrypted in transit and at rest
b) SAP SuccessFactors is ISO27001 compliant and has declared themselves GDPR compliant
For transfers to non-approved third countries, guarantees for the protection of personal data in the third country are otherwise agreed andcan be found in this document under this link, should they have been agreed to.
– Approved third country -> agreed – EU standard contract C/C -> in place for SAP SuccessFactors datacenters
– Contract approved by a supervisory authority -> none so far
– Binding Corporate Rules (BCR) -> none so far
Our data protection officer
We have assigned a data protection officer for our company.
Datenschutzbeauftragter der MSX
MSX International GmbH
Hugo-Eckener-Str. 20
50829 Köln
E-Mail: Datenschutz@msxi-euro.com
Right of appeal
If you believe that your data have been treated illegitimately, you have the right to contact the Supervisory Authority to submit acomplaint.
Automated decision-making processes
MSXI does not use automated decision-making processes regarding your personal data.
The processing of information collected by third parties is governed by the relevant notices, which you may refer to the attention of MSXI.
IN COMPLIANCE TO ART. 13 OF THE EUROPEAN REGULATION 2016/679 (GDPR), having acknowledged all of the above, inparticular the rights recognized to me by the EU Regulation n. 2016/679.