Job Applicant Privacy Notice
1. 引言
This Job Applicant Privacy Notice (“Notice”) describes the steps that AIRTECH GROUP, its subsidiaries, affiliates and Business Units (“BU” or “BUs”) around the world (collectively, “the Company” or “AIRTECH GROUP”), takes to protect the Personal Data that we Process about job applicants. The Company is committed to the protection of the Personal Data that we Process about you consistent with the data protection principles set out in all applicable Data Protection Law. This Notice informs you how we Process your Personal Data if you apply for a position with AIRTECH GROUP.
In regard to the Processing of Personal Data of website users, please see our Website Privacy Statement. Please note that in the course of the application process data may also be processed by the respective operator of the network or platform through which you came across one of our job postings, such as LinkedIn. For such Processing, the respective operator of the network or platform is the Data Controller. Please consult the privacy policy of the respective operator of the respective network or platform for details.
This Notice may be amended from time to time. We will post any change to this Notice a reasonable period of time in advance of the effective date of the change.
2. 定义
本通知中使用的下列术语定义如下:
| 术语 | 定义 |
|---|---|
| 同意 | 数据主体通过声明或明确的肯定性行为,自由、具体、知情且明确地表达其意愿,以此表示同意对其个人数据进行特定处理。这必须是一种明确的肯定性行为(“主动同意”)。 沉默或不作为均不足以构成同意。同意可随时撤回,且撤回自撤回之日起生效。 |
| 数据控制者 | The natural or legal person or other body which alone, or jointly with others, determines the purposes and means of the Data Processing. |
| 数据处理 | 对个人数据或个人数据集进行的任何操作或一系列操作,无论是否通过自动化手段进行,例如收集、记录、整理、结构化、存储、改编或修改、检索、查阅、使用、通过传输、传播或其他方式披露、对齐或合并、限制、删除或销毁。 |
| 数据处理者 | 代表数据控制者处理个人数据的自然人或法人、公共机构、机关或其他组织(《通用数据保护条例》(GDPR)第28条)。 |
| 《数据保护法》 | 所有与数据保护相关的适用州、地方及联邦/国家法律,包括但不限于《通用数据保护条例》(GDPR)。 |
| Data Protecdtion Officer (“DPO”) | 公司指定的人员(仅在法律要求的情况下),其职责是保护数据主体的权利,并作为公司与您之间的联络人,以确保公司遵守所有适用的数据保护法律。 |
| 数据主体 | 个人数据所指的任何个人。 |
| European Economic Area (“EEA”) | The Member States of the European Union, plus Norway, Iceland and Lichtenstein. |
| GDPR | The EU General Data Protection Regulation 2016/679. |
| 个人数据 | 与已识别或可识别的自然人有关的任何信息(《通用数据保护条例》(GDPR)第4条)。 |
| Sensitive Data | Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation (Article 9 GDPR). |
| Supervisory Authority | An independent public authority, which is established by a European Union Member State (Article 51 GDPR) or any other public authority which is responsible for monitoring the application of Data Protection Law. |
3. 数据控制者的身份及联系方式
本公司负责处理您的个人数据,并作为数据控制者。如果您对本声明有任何疑问,请通过以下方式联系我们: airtech@idexcorp.com
4. 所处理的个人数据的类别及来源
The Company Processes different categories of Personal Data that is provided to us through your application and during your application process. These may include:
- Contact and identity details, including name; marital status; gender; nationality; date of birth; home address; and contact details.
- Your application documents and any information contained therein, including your CV, cover letter and certificates; other documentation about your previous work experience, education or similar; and pictures.
- Information about your employment history and work related experiences and abilities, including hire date; termination date and reason; employment status; current level of re-numeration; any other supporting data submitted by candidates or employees; information obtained during reference checks; previous job applications; evidence of skills/qualifications; and relocation information.
- Information relating to character and job interests, including work-related and personal interests; knowledge or skills; and awards or memberships.
- Other personal data you provide during the recruitment process, including our notes from interviews with you or with other about you; and all correspondence you have with us or a recruitment agency during the application process.
- Information on your work authorization status.
- Sensitive Data, in certain circumstance, including your racial or ethnic origin; trade union membership; religious beliefs; or information concerning your health, such as information about a disability for which the Company needs to make reasonable adjustments during the recruitment process.
We may also obtain the above data about you from other sources, including recruitment agencies, the references you provide, websites and other publicly available information on the Internet. This includes, for example, Personal Data that you have made public in the context of an online profile. We may also receive information that you submit to us through third-party websites, such as LinkedIn.
5. Purposes for Data Processing
The Company Processes Personal Data of job applicants for various business purposes that are necessary:
- For carrying out your recruitment process, including to process your application; to evaluate your aptitude for the job opening in regard to capabilities and qualifications; to conduct reference checks as allowed or demanded by local laws; to respond to your inquiries; and to communicate with you and to structure the recruitment process based on your needs, e.g. in regard to possible health issues.
- To carry out the employment relationship, including in regard to HR and performance management upon hire.
- For the purposes of business process execution and internal management, including for equal opportunity monitoring and ensuring a disabled-accessible workplace.
- For IT security and data breach procedures;
- For compliance with legal obligations including tax regulation; and in relation to obligations addressed to employers in relation to the work relationship such as confirming the applicant´s eligibility to work in the respective country of the Company;
- 在业务流程优化方面, including to improve our application process or to optimize other recruitment processes or diversity programs.
- For the assertion and defense of legal claims.
6. Legal Basis for Processing Personal Data
The Company Processes Personal Data of its job applicants based on multiple different legal bases:
- Once you have been informed about the intended Processing of your Personal Data and you have provided your consent This may include foremost your consent to the Processing of your Personal Data by us for future recruitment activities, such as your inclusion in our internal Talent Pool. The scope of Processing is then determined by the content of the respective consent. You may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on your consent before the withdrawal. Article 6 GDPR.
- If the Processing of your Personal Data is necessary in order to carry out the contractual relationship between you and us, which might include a pre-contractual employment relationship. Article 6 GDPR.
- If the Processing is necessary for the Company to comply with a legal obligation. (例如,法院下令披露某些信息以供法律程序之用)。 《通用数据保护条例》(GDPR)第6条。
- If the Processing is necessary for purposes of the legitimate interests pursued by the Company or by a third party, except where overridden by your interests or fundamental rights and freedoms which require protection of Personal Data. These legitimate interests can include:
- Management of the recruitment process, including to enable the recruitment process; assessment and confirmation of suitable candidates for employment; and towards the procurement of a suitable recruitment strategy and corresponding implementation.
- Administrative and management optimization purposes, including business process execution; internal management optimization; aggregate management reporting or internal training; working climate and equal opportunities monitoring.
- The procurement of evidence for legal proceedings, including the defense against legal claims asserted against us; the assertion of our legal claims; and prevention of compliance or other legal violations.
- In accordance with Article 9 paragraphs 2 or 4 GDPR regarding Sensitive Data.
7. 您的权利
《通用数据保护条例》(GDPR)赋予您与个人数据处理相关的权利。这些权利包括:
- Request access to Personal Data about you (commonly known as a “data subject access re-quest”). This enables you to receive information about the Personal Data we hold about you and to check that we are lawfully Processing it.
- 要求我们更正、修正或更新我们持有的关于您的个人数据。这使您能够更正任何不完整或不准确的信息。
- 要求以机器可读格式转移个人数据(“数据可携权”),但仅限于该权利在雇佣关系中适用时。
- 请求删除个人数据。这使您能够在我们没有正当理由继续处理个人数据的情况下,要求删除或移除该个人数据。此外,当您行使了反对处理的权利(见下文)时,您也有权要求我们删除或移除个人数据。
- 要求限制对您个人数据的处理。如果您希望我们核实个人数据的准确性或处理该数据的理由,您可以通过此方式要求我们暂停对您个人数据的处理。
- 您可以随时撤回已给予的同意,且此举不会影响在撤回前基于该同意所进行的处理的合法性。
在某些情况下,您可以反对对您的个人数据进行处理。
当您的个人数据处理基于附件1所述的公司合法利益时,或者当针对您的决策完全基于自动化处理(包括画像分析)时,您可能享有此项权利。
尽管如此,您有权随时反对为直接营销目的而对您的个人数据进行的处理。
These rights are not absolute and are subject to various conditions under Data Protection Law and any other applicable laws and regulations. You may exercise these rights by contacting your Privacy Lead (see Section 3). You also have the right to lodge a complaint with a Supervisory Authority.
8. 数据共享与国际数据传输:集团内部及外部第三方
集团内部转移
作为一家采用分散式管理结构运营的跨国企业成员,本公司 可能 share Personal Data of job applicants with other AIRTECH GROUP affiliates/BUs listed 这里,用于本通知中所述的目的。 Please note that the Company only shares Personal Data of job applicants with those companies where this is covered by a lawful basis for such Processing.
These transfers are protected by the obligations set out in intra-group agreements that we have entered into between the various AIRTECH GROUP legal entities. International transfers within the AIRTECH GROUP are governed by EU Commission-approved Standard Contractual Clauses for Data Controllers and, where relevant, for Data Processors. You may receive a copy of these Standard Contractual Clauses used in our intra-group agreements by contacting and requesting same from the Company.
外部第三方
The Company may share Personal Data with external vendors whom we engage to perform services or functions on our behalf and under our instructions. Where applicable, their Processing of your Personal Data will be subject to the GDPR requirements. The Company will also ensure that its contracts with these parties ensure they only Process Personal Data in accordance with our instructions and in order to provide the agreed services and protect the integrity and confidentiality of the Personal Data entrusted to them, in line with the GDPR requirements.
出于本《通知》所述目的,我们还可能向我们的IT服务提供商、审计师、律师、顾问、执法机构、法院和仲裁机构以及其他公共机构(如税务和社会保障机构)披露您的个人数据。 其中部分接收方有责任自行确定处理的目的和方式,并对其自身的处理合法性负责。必要时,我们将确保采取适当的合同措施,以保障您的个人数据得到保护。
Some of the third parties we engage to Process your Personal Data are located outside the European Economic Area. We will ensure that these transfers are either:
- To countries, which fall under an adequacy decision by the EU Commission and is deemed to provide an adequate level of protection, currently including Switzerland, Uruguay, Argentina, Japan, Israel, Isle of Man, New Zealand, Guernsey, Canada, Andorra, Faroe Islands and Jersey; or are
- Governed by one of the following safeguards: EU Commission-approved Standard Contractual Clauses, GDPR-compliant Data Processor clauses where the US vendor is certified under the EU-US Privacy Shield Framework or Binding Corporate Rules approved by an EU data protection authority. You may receive a copy of these data protection safeguards by contacting us at the contact details given in Section 3 above.
9. 个人数据的保留
The Company will keep and Process your Personal Data only for as long as is necessary for the purposes for which it was collected or for legal obligations. Such legal obligations may arise particularly under tax and commercial law. If your data is no longer necessary for the fulfillment of contractual or legal obligations, it will be deleted; unless it is needed to secure, assert or enforce legal claims. In this case, we will retain the date in accordance with the regular limitation period. During this period, this data is blocked and is no longer available for any other use.
In general, application data will be deleted three months after the application proceeding has ended at the latest.
10. 法定/合同要求
You may choose to not provide us with your Personal Data and/or provide incomplete Personal Data. However, please be aware that, in certain cases, we may not be able to proceed with your application process as your Personal Data may be required for administrative purposes and/or to fulfill statutory requirements.
11. 自动化决策与用户画像
您的个人数据不会用于自动化决策和/或用户画像。