Privacy Policy & Legal Notices

PRIVACY NOTICE FOR JOB APPLICANTS

Effective as of 1 of November 2022

Huvepharma EOOD is dedicated to process your personal data with due care. As part of any recruitment process, we collect and process personal data relating to job applicants. Please read this privacy notice carefully to learn why and how we process your personal information.

Who is responsible for data processing

For the purpose of the applicable EU Data Protection law, including but not limited to Regulation (EU) 2016/679 or the General Data Protection Regulation (GDPR), the company responsible for your personal data as a data controller is: Huvepharma EOOD, having its seat and registered address at 3a, Nikolay Haytov Str., 5th floor, 1113 Sofia, Bulgaria.

Personal data we collect

• In the context of the evaluation of your job candidacy, we may collect and further process the following personal data of yours:
• Identification information, such as: name, citizenship, date, and place of birth, photo
• Contact details, such as: e-mail address, phone number
• Details of your education, professional experience, foreign language proficiency, skills and any certifications or other professional qualifications you have
• Specific data collected in the context of evaluating your suitability for working with us: notes taken by the interviewer, test results and results of personality assessment questionnaires with focus on behavior, aptitudes, personality traits and skills carried out as a part of the recruitment process
• Other information about you, that you have voluntarily provided to us in your CV, cover letter or shared during the interviews (current or desired salary, professional memberships, general interests, hobbies, etc.)

Why we collect your personal data

• To perform a preliminary selection, review, and evaluation of your suitability for a role at Huvepharma EOOD
• To communicate with you during the recruitment process
• To manage the recruitment procedure and to make hiring decisions
• To prepare a proposal for concluding an employment contract with us, in case you are assessed as a suitable candidate for the relevant position
• In addition, we may be required to share information with competent state authorities to comply with the law.

What is the legal basis for the data processing

We need to process your data to take steps at your request prior to entering an employment contract with you.

We may also rely on our legitimate interest to recruit suitable and capable candidates for open positions in our organization.

In some cases, we need to process data from job applicants to respond to and defend against legal claims.

Based on your consent, we might keep your data to contact you for further job opportunities within the organization or future job openings.

With whom we share personal data

For the purposes of the recruitment procedure your personal data may be shared internally with members of the HR team, interviewers involved in the recruitment process and hiring managers in the department with a job opening.

We may share your personal data with trusted third parties such as companies that support our IT infrastructure, providers of hosting services or cloud-based software services who sometimes need to access personal data for the provision of their services. These third parties process personal data on our behalf and based on our instructions after signing a written agreement which provides for appropriate organizational and technical measures and safeguards to ensure security of persona data.

We don’t transfer your personal data outside of the European Economic Area.

For how long we retain your data

In case your job candidacy is unsuccessful, we will retain your personal data for a period of 6 months upon completion of the recruitment procedure.

The internal documents created by Huvepharma EOOD in the recruitment procedure for a specific role that may contain your personal data will be stored for a period of 3 (three) years upon completion of the respective procedure to defend our legal interests under the applicable national anti-discrimination law.

Based on your explicit consent, we will keep your personal data for consideration for future employment opportunities for a period of 1 (one) year upon completion of the recruitment procedure. After this period expires or once you withdraw your consent, your data will be erased from our records.

How do we collect personal data and do you have an obligation to provide it to us

We usually collect most of the personal data processed in the recruitment process directly from you. We may also collect personal data about you from third parties, such as current or former employers and point of references if you have provided us with your consent to contact such parties.

The provision of personal data is voluntary but necessary in the recruitment process. You are not obliged under applicable legislation to provide us your personal data. However, in the event you don’t provide us with sufficient information, we may not be able to proceed with your job candidacy.

What are your rights

As a data subject and in the context of the recruitment procedure, you have and can exercise the following rights:

• the right to access your personal data, as well as to receive information about their processing;
• the right to request the correction of any inaccurate or completion of any incomplete personal data;
• the right to deletion ("right to be forgotten");
• the right to restrict the processing of your personal data;
• the right to data portability in a structured, commonly used, and machine-readable format;
• the right to withdraw any consent you have previously given at any time and free of charge. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

You also have the right to lodge a complaint about the way we handle your data with the Commission for Personal Data Protection of Bulgaria at postal address 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, website: www.cpdp.bg .

For further questions or suggestions concerning data protection and for making use of your individual rights as data subject please contact the Data protection officer of Huvepharma EOOD by sending an e-mail to dpocorporate@huvepharma.com. You can expect a response to such a request within one (1) month following reception thereof and, in any case, within two (2) additional months, if this is required by the complexity of the request or the total number of requests received.

Automated decision-making

Recruitment processes at Huvepharma EOOD are not based on automated decision-making.

How do we protect your personal data

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused, or disclosed, and is not accessed except by our employees in the proper performance of their duties.

Updates of this Privacy Notice

To apply the most up-to-date measures for protection and with a view to comply with the effective legislation, we will update this Privacy Notice on a regular basis. Should the changes we introduce are significant, we can publish a notice of the changes made on our website or inform you in any other suitable manner.