Privacy clause for candidates

Privacy information clause

DATA CONTROLLER: The data provided will be processed by ORBIK Cybersecurity, S. Coop.
Tax ID No. (CIF): B44835858
Registered address: Calle José María Arizmendiarrieta, 2, 20500 Arrasate-Mondragón (Gipuzkoa), Spain.
Email: info@orbik-cybersecurity.com.

In compliance with personal data protection regulations, we hereby inform you about the processing of the data you provide when submitting your application.

  1. Purpose

Your personal data will be processed to manage your application and enable you to apply for the position for which you have applied. If you give your consent, your data will also be processed for inclusion in our talent pool and to send you informational communications regarding ORBIK’s activities. If your application reaches the interview stage, your data will also be retained in our historical recruitment-process record.

  1. Legal Basis

The processing of your application is based on taking pre-contractual steps at your request (Article 6.1.b GDPR). The talent pool and informational communications are based on your consent (Article 6.1.a GDPR), which you may withdraw at any time. The historical record is based on ORBIK’s legitimate interest in improving the efficiency of its recruitment processes (Article 6.1.f GDPR).

  1. Retention Period

The data will be retained for the duration of the selection process. If no employment relationship is established, your data will be deleted once the process has concluded, unless you have consented to be added to the talent pool. In that case, the data will be retained for 24 months from the date it is received, or until you withdraw your consent. If your application reached the interview stage, your data will be retained in the historical record for 2 years. After these periods have elapsed, the data will remain blocked for the statute of limitations periods applicable to any liabilities arising from the processing.

  1. Recipients

Your data may be disclosed to Public Authorities, Courts and Tribunals in order to comply with legal obligations.

  1. International Transfers

No international transfers of personal data outside the European Economic Area are carried out in connection with this processing.

  1. Rights

You may exercise your rights of access, rectification, erasure, restriction of processing, objection, portability, and the right not to be subject to automated decision-making at any time and free of charge by writing to info@orbik-cybersecurity.com or to the registered address provided. Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

If you believe that your data have not been processed in accordance with the regulations, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan no. 6, 28001 Madrid, Spain, www.aepd.es.

  1. Automated Decisions

The assessment of applications and recruitment decisions are always made by ORBIK personnel. No decisions are made solely on the basis of automated processing of your data, including profiling.

  1. Candidate Obligations

The candidate agrees to ensure that the data provided are true and accurate, to keep them up to date, and to notify ORBIK of any changes.

The candidate is responsible for the personal data of third parties that may be included in the application. In this regard, the candidate must have previously informed them of the terms contained in this clause and obtained their authorization when legally required.