Fulfilling the obligations according to the art. 13 sec. 1 and 2 or art. 14 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter be referred to as “GDPR” the data controller informs that:
1. PricewaterhouseCoopers Bulgaria EOOD, EIK 831364383, or PwC Legal Bulgaria Partnership, EIK 180758232, or PricewaterhouseCoopers Audit OOD, EIK 121499387, with its seat and registered address in 9-11 Maria Louisa Blvd., Sofia 1301, Bulgaria, („PwC”, “we”) will be the controller of your personal data.
2. If you have any questions or complaints regarding your personal data being processed by PwC, and/or the rights you possess, please contact Data Protection Officer:
via e-mail: bg_privacy@pwc.com;
via phone: +359 2 9355 200
3. PwC processes your personal data for the following purposes and on the following legal bases:
A legal basis | A purpose of the processing |
Art. 6 sec. 1 let. b) of the GDPR – taking steps at the request of the data subject prior to entering into a contract Art. 6 sec. 1 let. c) of the GDPR – legal obligation with “under the Law on Labour Migration and Labour Mobility (in case of recruitment of foreign citizens) Art. 6 sec. 1 let. of the GDPR – consent applies if candidate points out another data than in Labor Code (e.g. photo in resume) Art. 9 sec. 2 let. a) of the GDPR – consent applies if special categories of personal data (sensitive data) are contained in application Art. 10 of the GDPR - processing is authorised by Union or Member State law applies if a job position requires collecting personal data relating to criminal convictions and offences or related security measures |
|
Art. 6 sec. 1 let. a) of the GDPR - consent |
|
Art. 6 sec. 1 let. f) of the GDPR - legitimate interest pursued by PwC | Exercising legal claims. |
4. Your personal data will not be disclosed to third parties except the following recipients:
5. Your personal data may be transferred to countries outside the European Economic Area (EEA) – third countries, based on:
art. 46 sec. 2 let. c) of the GDPR - standard data protection clauses adopted by the European Commission.
6. Your personal data will be retained for a term of the recruitment process and 6 months after that. If you provide us consent for further recruitment processes your personal data will be retained until you withdraw the consent, but no longer than 2 years.
7. In accordance with processing your personal data you have the following rights:
right of access, to rectification (updating), to erasure, to restriction of processing, to data portability and to object;
to withdraw a consent, it is possible by sending an email
bg_privacy@pwc.com. Withdrawal of the consent does not affect the legality of processing based on consent prior to its withdrawal;
to lodge a complaint with a data protection authority (Commission for Personal Data Protection).
8. The provision of personal data is mandatory in the field of personal data specified in labour law. For the rest of the categories of personal data, its provision is voluntary.
9. In some recruitment processes PwC uses recruitment agencies for candidates and in at that cases:
recruitment agency are sources of candidate’s personal data;
categories of personal data concerned: name, surname, contact data provided by a candidate and other categories of personal data which are contained in applications provided voluntary by a candidate.