Privacy Notice for Candidates
Introduction
This Candidate Privacy Notice stipulates the rules for personal data protection adopted by Sympower B.V. (“Sympower”) when you apply for a position at Sympower or one of its affiliates.
For personal data collected under this Candidate Privacy Notice, Sympower B.V. business nr 65605543, with registered address at Prins Hendrikkade 183, 1011TD, Amsterdam, The Netherlands, is the data controller.
If you are offered and you accept a role at Sympower, the personal data collected and processed under this Candidate Privacy Notice will become part of your employee file and will be governed by the Sympower Privacy Policy, a copy of which you will be provided when you are on-boarded as an employee.
How do we collect your information?
The personal data that Sympower collects and processes comes from different sources, but mainly directly from you. You will usually provide your information during the application and recruitment processes, via your application, through your CV or motivation letter, interviews and potential other forms of assessment.
We may also obtain some personal data from third parties, only in accordance with applicable law or if you have given your permission for it. The third parties consist mainly of recruitment agencies, internal or external referrals, previous employer reference, and potential background check services.
What type of personal data do we process?
Depending on the applicable laws and relevant circumstances Sympower may collect some of the personal data listed below:
First and last name.
Address and place of residence.
Personal email address and phone number.
CV and resume, including educational and professional qualifications, and any other relevant information.
Salary expectation.
Motivation letter.
Any notes on you produced during or after an interview, including any assessment you may have to produce.
Information about your right to work in the country where the position is located.
IP address.
In some cases, Sympower might also collect special categories of data (sensitive information) which may include background checks, criminal records and information regarding criminal offences or proceedings, in each case only where required or permitted by, and in compliance with, applicable laws.
Purposes for processing your personal data
You can find below the different purposes for which we can process your personal data during the application and recruitment processes:
Assessing your skills, qualifications, and suitability for the position you are applyin for.
To check your eligibility to work in the country where the position is located before employment starts.
To conduct screening and employment background checks.
To send you a formal employment offer if we consider you are a suitable candidate for the job position for which you have applied.
For the defence of legal claims.
To keep your personal data on file in case your application is not successful, but you are interested in future employment opportunities at Sympower.
Legal Bases
We can only process your personal data for the purposes defined earlier, if we have a legal basis to do so.
We rely on the following legal bases when processing your personal data:
Legitimate Interest: Sympower processes your personal data under the legitimate interest legal basis to carry out the application and recruitment processes (to consider your suitability to work for us in the role you have applied for, comparing you to other candidates, making recruitment decisions); for the defence of a legal claim, you have brought against us; to conduct screening or background checks, only if required or permitted by applicable laws, and based on legitimate interest for that specific position.
Consent: Sympower only processes your personal data based on your explicit consent to keep your personal data on file in case your application is not successful, but you are interested in other employment opportunities at Sympower. In this case, your personal data will only be processed to keep you informed of new, interesting vacancies that match your profile.
How do we secure your data?
At Sympower, we take appropriate measures to protect your data that are consistent with applicable data protection and data security laws and regulations. Your data is safely stored in our systems and is password-protected. Only authorised persons within our teams can access your personal data, based on their business needs.
With whom do we share your data?
We want to highlight that your personal data will never be rented out or sold. We may share some specific personal data with third parties but only where this is legitimate or necessary.
We may share some personal data with third parties in the following situation:
Another Sympower legal entity: The access to your data is restricted on a need-to-know basis and is only granted to fulfil the purposes for which the data is being processed.
With law enforcement or national authorities: we will share your personal data in case we are obliged to do so if we are required by law to provide them with certain information about our job applicants, or under our legitimate interest for the defence of legal claims.
Service providers/suppliers: we may share your personal data with third parties that may assist us during the recruitment process, such as IT and cloud service provider, legal advisors, employment background check providers, travel agency, EOR providers (Employer of Records). In this case we always ensure that these third parties are subject to contractual obligations of confidentiality and compliance with relevant laws.
How long do we keep your data?
We will never keep your data longer than necessary.
The personal data obtained during the application and recruitment processes will be kept for 30 days. If you have consented to it, we can also keep your personal data for 1 (one) year. We will only use this data if a suitable position becomes available at a later stage that matches your profile. You are completely free to choose whether you want to give permission for this. You have the right to withdraw consent at any time, without giving us any reasons, by contacting us at privacy@sympower.net. This has no further consequences for you or the application procedure.
Automated decision making
No automated decisions are made in any way without any human intervention.
What are your rights and choices?
For any questions, or if you wish to exercise your rights described below, you can contact us at privacy@sympower.net.
Right to access and obtain a copy of your personal information: You have the right to request access to the personal data we process about you, as well as a copy of the personal data in our records.
Right to correct your personal information: If your personal information is incorrect, you have the right to ask your information to be updated or corrected.
Right to be forgotten or to delete personal information: you may make such a request at any time, however, this right is subject to any legal obligations where we may have to retain data. For situations where in accordance with the law, we determine that your request to have your personal information deleted must be granted, we will do so without undue delay.
Right to restrict or object to the processing of your personal information: In certain circumstances, you have the right to obtain restriction of the processing of your personal information or to object to certain processing thereof on grounds relating to your particular situation.
Right to withdraw consent: You have the right to withdraw consent at any time where we are relying on consent to process your personal information. To withdraw your consent, please contact privacy@sympower.net. The withdrawn consent will not affect the lawfulness of the processing before its withdrawal. You will never be penalised for refusing to consent to any processing activities, nor will you be penalised for withdrawing your consent at a later point.
Right to lodge a complaint: If you believe that your personal data is not processed in accordance with the applicable privacy law, you have the right to lodge a complaint with the supervisory authority of your residence, place of work or place of the alleged infringement.
