GDPR NOTICE- SIGMA

 The Company SC Sigma Services International SRL, based in Pitești, Argeș County, hereinafter referred to as “We” has provided services recognized by competence and reliability, accumulating a vast experience in quality control over the years.

Sigma Services International SRL has become one of the most active companies on the market, standing out for the undeniable quality of the services offered. It is a company employing personnel with specialized training in the field of quality control. It can be said about us that we offer a variety of services, focusing on a flexible and prompt collaboration.

We collect and process several categories of personal data from our applicants (hereinafter referred to as “You”) which, in accordance with European Union data protection legislation, qualifies us as a controller of such personal data.

We know that issues relating to your personal life are particularly important and we take these issues seriously. This Information Notice describes our policies and practices regarding our collection and use of your personal data when you express an interest in participating in one of Sigma Services International SRL’s existing or future recruitment projects and describes your rights.

You will find below:

  • What data we collect about you;
  • How we use and process this data;
  • The basis we have in this processing;
  • To whom we communicate this data;
  • Data storage mode.

Consent to the recruitment and placement process

SC Sigma Services International SRL is responsible for the processing of personal data of applicants participating in the Company’s recruitment processes and of applicants for current or future positions. If you wish to remain in our database and have access to job opportunities presented by our company, we need your consent.

 Personal data we collect and how we use (process) it

 *What is personal data?

 Personal data means any information that directly or indirectly identifies you as an individual. “Directly” means, for example, your name and address. “Indirectly” means combined with other information.

*What types of personal data are collected during the recruitment process?

 Generally speaking, we collect and process personal information about you, which is made public in your CVs: surname and given name(s), mailing address, e-mail address, telephone number (mobile or landline), date of birth, gender, professional experience. SC Sigma Services International SRL collects and uses any of the following data about you, and we refer to this as “personal data” throughout this document: CV/biography information: information included in your job application and CV/biography/cover letter or information otherwise provided to us by you, such as: full name, address, email address, telephone number, previous employers, professional qualifications, recommendations, career development and skills analysis, training, department changes, performance details and adaptation to requirements.

We use the above data in our legitimate interest to assess candidate suitability, confirm information in CVs, biographies and cover letters, obtain letters of recommendation and to conduct background performance checks. We also have an interest in ensuring the honour and good reputation of prospective employees.

Therefore, we consider it important to check a job applicant’s image in the press and on social media, the tone and direction of public posts on social media (e.g. we do not tolerate hate speech, discrimination and racism), whether the candidate is involved in any litigation that may affect the reputation of Sigma Services International SRL, or whether the candidate is involved in any competing business, etc.

We do not process sensitive data (such as health-related data) in these checks, but we may unintentionally find information about criminal convictions if this information is public (such as those listed on the court portal).

*How does the company use the personal data you provide when you register as a candidate in a recruitment process?

We will use your personal data to communicate with you during the recruitment process: your name, address, email address, telephone number and other contact information, resume or cover letter, previous and/or relevant work experience or other experience, education, information from telephone interviews you may have, if applicable, details of the type of job you are seeking or are interested in, current and/or desired salary and other terms relating to compensation and benefits packages, relocation desire or other job-related preferences, details of how you heard about the position for which you are applying, any sensitive and/or demographic information obtained during the application or recruitment process, such as gender, your citizenship and/or nationality information, medical or health information and/or racial or ethnic origin.

  *Personal data collection sources

 Some of the personal data processed is provided directly by you, while other information is obtained indirectly from third parties, such as job portals, professional forums and public sources (e.g. LinkedIn, Olx, Ejobs, BestJobs, Publi 24, Indeed, Jobzz, La Jumate.ro, Facebook, Trade Register Office, court portal, etc.).

*To whom we disclose personal data

 We also share contact details with Sigma Services International SRL partners for the recruitment process. Partners include: medical clinics, occupational health and safety companies, accounting companies and all other companies that contribute to the completion of the recruitment process.

We do not disclose personal data of applicants in recruitment processes to third parties, unless participants have given their explicit prior consent for the specific purpose.
Restrictions on use of personal data by recipients

Third parties to whom we make your personal information available under the above are restricted (by law and by contract) on how they may use your personal data for the specific purposes we have identified.

We will always ensure that any third parties to whom we voluntarily disclose your personal information are subject to confidentiality and security obligations in accordance with this notice and applicable law (for the avoidance of doubt, this may not apply where disclosure is not our decision).

Except as detailed above, we will never disclose, trade or lend any of your personal data to any third party without notifying you, or, if applicable, obtaining your prior consent.

*Legal obligations and legal defence 

We may be required to use and retain personal information for legal and compliance reasons, such as the prevention, detection, or investigation of a crime, loss prevention, fraud, or any other abuse of our services and information systems. We may also use your personal information for internal and external audits, for information security purposes, or to protect our rights, privacy, safety, property, or the rights of others.
*External service providers

Where necessary, we will commission other companies and individuals to perform certain tasks contributing to our services on our behalf under data processing agreements. We may, for example, provide personal data to authorised agents, contractors or partners to host our databases, for data processing services, or to send you information you have requested from us.
We will share or allow access to such information ONLY to outside service providers as necessary to provide our services. Such information may not be used by external service providers for any other purposes. Sigma Services International SRL’s external service providers are contractually bound to respect the confidentiality of personal data.

*Business transfers

 In connection with any reorganization, restructuring, merger or sale or other transfer of assets (collectively, “Business Transfer”), we will transfer information, including personal information, on a reasonable scale as necessary for the Business Transfer and provided that the receiving party agrees to respect your personal data in a manner that is consistent with applicable data protection laws.

*Public bodies

 We will only disclose your personal data to public bodies where required by law. For example, Sigma Services International SRL will respond to requests from courts, law enforcement agencies, regulatory agencies and other public and government authorities, which may include such authorities outside of your country of residence.

*Sensitive data handling

 We will collect special categories of personal data about you (“sensitive data”) in order to complete the recruitment process, if the candidate is accepted by the employer. Sensitive Data refers to personal data disclosing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying an individual, his or her health status or sexual orientation.

We process your sensitive data with your freely given, prior, express and separate consent in the context of your participation in the recruitment process.

*Personal data protection of children

 Sigma Services International SRL does not collect data from minors (persons under the age of 18) in the collection process.

*Data management and security

 SC Sigma Services International SRL takes data security seriously and is driven to protect personal information against any loss, misuse, disclosure, alteration, unavailability, unauthorized access and destruction, takes all reasonable steps to ensure the confidentiality of personal information, including the use of appropriate organizational and technical measures. Among the organisational measures, we consider the storage of physical files in locked cabinets. Technical measures include the use of encryption, password-protected access to our systems and the use of anti-virus software.

In the process of providing personal data to us, your personal information may be transferred over the Internet. Although we make every effort to protect the personal information you provide to us, the exchange of information between us and you over an internet connection is not 100% secure. Therefore, we cannot guarantee the security of your personal information sent over the Internet, and any such transmission is at your own risk.

Once we have received your personal information, we use strict procedures and security methods to prevent unauthorized access to that information. In the event of a personal data breach, Sigma Services International SRL will comply with all applicable data breach notification laws.

In general, we will delete your personal data if it is no longer needed to fulfil the purposes for which it was originally collected. However, we may be required to retain personal data for a longer period due to legal requirements. We will store Recruitment Data for a minimum of 12 months and a maximum of 36 months. We will store the data of individuals processed for marketing and promotional purposes for a minimum of 12 months.

*Your legal rights

As a data subject, you have specific legal rights regarding the personal data we collect from you. SC Sigma Services International SRL will respect your individual rights and address your concerns accordingly.

The following list contains information on your legal rights under applicable data protection laws:

The right to withdraw consent: You may withdraw your consent at any time by emailing rh@sigmaautomotive.eu and office@sigmaautomotive.eu.  Please note that by withdrawing your consent you are terminating your participation in recruitment activities and will no longer be eligible for employment opportunities that the Company presents to applicants.

Right to rectification: you can obtain from us the rectification of personal data concerning you.

Right to restriction: you can obtain from us the restriction of the processing of personal data if: you contest the accuracy of the personal data for the period during which we need to verify the accuracy, the processing is unlawful and you request the restriction of the processing rather than the deletion of the personal data, we no longer need your personal data but you request it for the establishment, exercise or defence of a right, or you object to the processing during the period during which we verify whether our legitimate reasons prevail over yours.

Right of access: you can ask us for information about the personal data we hold about you, including information about what categories of personal data we hold or control, what it is used for, where we collected it from, etc.

Right to portability: Upon request, we will transfer personal data to another controller, where technically feasible, provided that the processing is based on your consent or is necessary for the performance of a contract.

Right to erasure: you can obtain the deletion of personal data from us if:

your personal data is no longer necessary for the purposes for which it was collected or is otherwise processed; your personal data has been unlawfully processed (unless the processing is necessary for the fulfilment of a legal obligation that requires processing by us).

Right to object: you can object to the processing of personal data at any time. If you object to the processing, please specify whether you want your personal data to be deleted or whether you want us to restrict its processing.

Right to lodge a complaint: In the event of an alleged breach of applicable privacy legislation, you may lodge a complaint with the data protection supervisory authority in the country where you live or where the alleged breach occurred.

Restriction of access: In certain situations, we may not be able to grant you access to all or part of your personal data due to legal provisions. If we refuse your access request, we will inform you of the reason for the refusal.

Unable to identify: In some cases, we may not be able to search your personal data because of the identifiers provided in your request. Two examples of personal data that we cannot search for you when you provide us with your name and email address are: data collected from public social media sites, provided you have posted a comment under a pseudonym that is not known to us.

In such cases, where we are unable to identify you as the data subject, we are unable to comply with your request to enforce your legal rights as described in this section unless you provide additional information that allows us to identify you.

 Information on your legal rights and contact details for further questions

If you have any questions about privacy protection or wish to exercise any of your legal rights as outlined above, please contact us by email at office@sigmaautomotive.eu or rh@sigmaautomotive.eu.